Премини към съдържанието
v3cko

Имам опасения че компютъра ми е заразен..!!!

Препоръчан отговор


Съмнения за вирус/и - курсорът на мишката на моменти прави странни движения без да съм местил мишката , няколко пъти като съм в хром и ми се отваря интернет експлорър без да съм кликал на него

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-09-2017
Ran by BECKO (administrator) on BECKO-PC (25-09-2017 12:22:36)
Running from C:\Users\BECKO\Downloads
Loaded Profiles: BECKO (Available Profiles: BECKO)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: Български (България)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
() C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe
(Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1314816 2009-05-18] (Analog Devices, Inc.)
HKLM\...\Run: [TrackPointSrv] => C:\Program Files\Lenovo\TrackPoint\tp4serv.exe [93032 2009-11-24] (Lenovo Group Limited)
HKU\S-1-5-21-773789430-497128755-430906800-1000\...\Run: [Win32Svc] => C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe [280064 2017-09-02] ()
HKU\S-1-5-21-773789430-497128755-430906800-1000\...\MountPoints2: E - E:\Lenovo_Suite.exe
HKU\S-1-5-21-773789430-497128755-430906800-1000\...\MountPoints2: {a8400ed0-8faa-11e7-863f-000000f01d00} - E:\Lenovo_Suite.exe
Startup: C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MemSet.exe.lnk [2017-09-22]
ShortcutTarget: MemSet.exe.lnk -> C:\Windows\MemSave\MemSet.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{DAAE74CA-6078-43E6-B668-40201FAFD495}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} hxxps://www.dskdirect.bg/com/capicom.cab

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-09-01] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-09-01] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.bg/
CHR StartupUrls: Default -> "hxxps://www.google.bg/"
CHR Profile: C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default [2017-09-25]
CHR Extension: (Google Презентации) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-09-01]
CHR Extension: (Google Документи) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-09-01]
CHR Extension: (Google Диск) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-01]
CHR Extension: (YouTube) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-01]
CHR Extension: (Електронни таблици от Google) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-09-01]
CHR Extension: (Google Документи офлайн) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-01]
CHR Extension: (The Great Suspender) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg [2017-09-01]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-01]
CHR Extension: (Gmail) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-01]
CHR Extension: (Chrome Media Router) - C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-01]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [258104 2016-10-07] (Intel Corporation)
R2 LPlatSvc; C:\Windows\system32\LPlatSvc.exe [694352 2017-02-20] (Lenovo.)
S3 VSStandardCollectorService150; C:\Program Files\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [100984 2017-08-17] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1express; C:\Windows\System32\DRIVERS\e1e6232.sys [232312 2012-10-30] (Intel Corporation)
S3 monectdevices; C:\Windows\System32\DRIVERS\monectdevices.sys [14104 2013-12-03] ()
S3 NAL; C:\Windows\system32\Drivers\iqvw32.sys [44496 2016-09-02] (Intel Corporation )
R3 pimoukbd; C:\Windows\System32\DRIVERS\pimoukbd.sys [32664 2017-09-24] (Christian Gulden)
R3 Tp4Track; C:\Windows\System32\DRIVERS\tp4track.sys [23152 2009-11-24] (Lenovo Group Limited)
R3 vjoy; C:\Windows\System32\DRIVERS\vjoy.sys [50224 2016-02-03] (Shaul Eizikovich)
R3 vmulti; C:\Windows\System32\DRIVERS\vmulti.sys [7168 2013-07-21] (Windows (R) Win 7 DDK provider) [File not signed]
R3 WmBEnum; C:\Windows\System32\drivers\WmBEnum.sys [22856 2010-04-27] (Logitech Inc.)
R3 WmVirHid; C:\Windows\System32\drivers\WmVirHid.sys [15048 2010-04-27] (Logitech Inc.)
R3 WmXlCore; C:\Windows\System32\drivers\WmXlCore.sys [66632 2010-04-27] (Logitech Inc.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-25 12:22 - 2017-09-25 12:23 - 000010653 _____ C:\Users\BECKO\Downloads\FRST.txt
2017-09-25 12:20 - 2017-09-25 12:22 - 000000000 ____D C:\FRST
2017-09-25 12:19 - 2017-09-25 12:20 - 001796096 _____ (Farbar) C:\Users\BECKO\Downloads\FRST.exe
2017-09-25 09:40 - 2017-09-25 09:41 - 055555872 _____ (Microsoft Corporation) C:\Users\BECKO\Downloads\MouseKeyboardCenter_32bit_ENG_3.0.337.exe
2017-09-25 09:30 - 2017-09-25 09:52 - 000000000 ____D C:\Program Files\Common Files\Logitech
2017-09-25 09:30 - 2017-09-25 09:30 - 000000000 ____D C:\Program Files\Logitech
2017-09-25 09:28 - 2017-09-25 09:28 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Logitech
2017-09-25 09:28 - 2017-09-25 09:28 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Logishrd
2017-09-25 09:27 - 2017-09-25 09:28 - 015087456 _____ (Logitech Inc.) C:\Users\BECKO\Downloads\lgs510.exe
2017-09-25 08:15 - 2017-09-25 08:15 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\NuGet
2017-09-25 08:15 - 2017-09-25 08:15 - 000000000 ____D C:\Users\BECKO\AppData\LocalLow\Temp
2017-09-24 19:11 - 2017-09-24 19:11 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_pimoukbd_01009.Wdf
2017-09-24 19:09 - 2017-09-24 19:09 - 000000000 ____D C:\Users\BECKO\AppData\Local\IsolatedStorage
2017-09-24 19:08 - 2017-09-24 19:37 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pluralinput
2017-09-24 19:08 - 2017-09-24 19:37 - 000000000 ____D C:\Users\BECKO\AppData\Local\Pluralinput
2017-09-24 19:08 - 2017-09-24 19:08 - 000032664 _____ (Christian Gulden) C:\Windows\system32\Drivers\pimoukbd.sys
2017-09-24 19:07 - 2017-09-24 19:08 - 006547544 _____ (Pluralinput) C:\Users\BECKO\Downloads\PluralinputSetup.exe
2017-09-24 18:53 - 2017-09-24 18:54 - 000000395 _____ C:\Users\BECKO\Downloads\316DAvitescfg.rar
2017-09-24 13:16 - 2017-09-24 13:18 - 000051056 _____ C:\Users\BECKO\Downloads\NotepadMemoryWriter.zip
2017-09-24 12:45 - 2017-09-24 12:45 - 000000000 ____D C:\Users\BECKO\source
2017-09-24 12:44 - 2017-09-24 12:44 - 000000000 ____D C:\Users\BECKO\AppData\Local\.IdentityService
2017-09-24 12:40 - 2017-09-24 12:56 - 000000000 ____D C:\Users\BECKO\Documents\Visual Studio 2017
2017-09-24 12:39 - 2017-09-24 12:39 - 000000000 ____D C:\Program Files\Entity Framework Tools
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\3082
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\2052
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1055
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1049
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1046
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1045
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1042
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1041
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1040
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1036
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1033
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1031
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1029
2017-09-24 12:37 - 2017-09-24 12:37 - 000000000 ____D C:\Windows\system32\1028
2017-09-24 12:34 - 2017-09-24 12:34 - 000000000 ____D C:\Program Files\NuGet
2017-09-24 12:25 - 2017-09-24 12:25 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2017-09-24 12:21 - 2017-09-24 12:21 - 000000000 ____D C:\Program Files\Common Files\Designer
2017-09-24 12:20 - 2017-09-24 12:36 - 000000000 ____D C:\Program Files\Microsoft SDKs
2017-09-24 12:20 - 2017-09-24 12:24 - 000000000 ____D C:\Program Files\Windows Kits
2017-09-24 12:20 - 2017-09-24 12:20 - 000004291 _____ C:\Users\BECKO\Downloads\ProcessMemoryReader.cs
2017-09-24 12:18 - 2017-09-24 12:18 - 000001665 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2017.lnk
2017-09-24 12:18 - 2017-09-24 12:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017
2017-09-24 12:07 - 2017-09-24 12:07 - 000001421 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017.lnk
2017-09-24 11:58 - 2017-09-24 11:58 - 000001236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2017-09-24 11:55 - 2017-09-24 11:55 - 000000000 ____D C:\Users\BECKO\AppData\Local\ServiceHub
2017-09-24 11:54 - 2017-09-24 12:59 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Visual Studio Setup
2017-09-24 11:54 - 2017-09-24 12:35 - 000000000 ____D C:\Program Files\Microsoft Visual Studio
2017-09-24 11:54 - 2017-09-24 11:56 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\vstelemetry
2017-09-24 11:50 - 2017-09-24 11:51 - 001071352 _____ (Microsoft Corporation) C:\Users\BECKO\Downloads\vs_Community.exe
2017-09-23 18:21 - 2017-09-23 18:21 - 000001588 _____ C:\Users\BECKO\Downloads\setups at.zip
2017-09-23 17:40 - 2017-09-23 17:40 - 000001057 _____ C:\Users\BECKO\Desktop\LFSShifterV6.0 test - Пряк път.lnk
2017-09-23 14:07 - 2017-09-23 14:10 - 000000000 ____D C:\LFS Shifter
2017-09-23 14:01 - 2017-09-23 14:01 - 000867295 _____ C:\Users\BECKO\Downloads\LFS Shifter v6 test.zip
2017-09-23 13:19 - 2017-09-23 13:19 - 000032166 _____ C:\Users\BECKO\Downloads\XRG_default.zip
2017-09-23 13:00 - 2017-09-23 13:00 - 000009477 _____ C:\Users\BECKO\Downloads\Mufflord's Setup Pack.RAR
2017-09-23 13:00 - 2016-10-09 14:24 - 000000132 _____ C:\Users\BECKO\Downloads\XRT_Muff Allround 5.set
2017-09-23 13:00 - 2016-10-09 13:44 - 000000132 _____ C:\Users\BECKO\Downloads\XFR_Allround.set
2017-09-23 13:00 - 2016-08-25 18:11 - 000000132 _____ C:\Users\BECKO\Downloads\XRT_Muff old update.set
2017-09-23 12:34 - 2017-09-23 12:35 - 000000132 _____ C:\Users\BECKO\Downloads\XFG_205 Rallye.set
2017-09-23 09:13 - 2017-09-23 09:19 - 001669949 _____ C:\Users\BECKO\Downloads\crsctrl.zip
2017-09-23 09:02 - 2017-09-23 09:03 - 000000000 ____D C:\Users\BECKO\Downloads\setup
2017-09-23 09:02 - 2017-09-23 09:02 - 000019711 _____ C:\Users\BECKO\Downloads\Real car setups.zip
2017-09-23 08:25 - 2017-09-23 08:25 - 002996135 _____ C:\Users\BECKO\Downloads\WhelenEpsilonWhelenGamma2.rar
2017-09-22 19:17 - 2017-09-24 19:09 - 000000000 ____D C:\Users\BECKO\AppData\Local\SquirrelTemp
2017-09-22 19:17 - 2017-09-22 20:34 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\discord
2017-09-22 19:17 - 2017-09-22 19:17 - 000002156 _____ C:\Users\BECKO\Desktop\Discord.lnk
2017-09-22 19:17 - 2017-09-22 19:17 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2017-09-22 19:17 - 2017-09-22 19:17 - 000000000 ____D C:\Users\BECKO\AppData\Local\Discord
2017-09-22 19:15 - 2017-09-22 19:16 - 054332920 _____ (Discord Inc.) C:\Users\BECKO\Downloads\DiscordSetup.exe
2017-09-22 09:13 - 2017-09-22 09:13 - 000000000 ____D C:\Windows\MemSave
2017-09-22 09:02 - 2017-09-22 09:13 - 000000000 ____D C:\Users\BECKO\Downloads\memset
2017-09-22 09:01 - 2017-09-22 09:01 - 000409147 _____ C:\Users\BECKO\Downloads\MemSet41.zip
2017-09-22 08:59 - 2017-09-22 08:59 - 000445630 _____ C:\Users\BECKO\Downloads\CPU-Tweaker.zip
2017-09-22 08:47 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2017-09-22 08:47 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-09-22 08:47 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-09-22 08:46 - 2017-09-22 08:46 - 002353288 _____ C:\Users\BECKO\Downloads\d3dx43.exe
2017-09-22 08:42 - 2017-09-22 08:42 - 004665640 _____ (techPowerUp (www.techpowerup.com)) C:\Users\BECKO\Downloads\GPU-Z.2.4.0.exe
2017-09-21 19:00 - 2017-09-21 19:00 - 000000824 _____ C:\Users\BECKO\Desktop\Mary - Пряк път.lnk
2017-09-21 17:50 - 2017-09-21 17:50 - 000095196 _____ C:\Users\BECKO\Downloads\Mary.zip
2017-09-21 12:17 - 2012-03-09 19:10 - 000699192 _____ C:\Users\BECKO\Documents\testalloy4.dds
2017-09-21 12:14 - 2017-09-21 12:18 - 001525785 _____ C:\Users\BECKO\Downloads\20150706193019.rar
2017-09-21 12:09 - 2017-09-21 12:09 - 000008866 _____ C:\Users\BECKO\Downloads\rims.rar
2017-09-21 12:07 - 2017-09-21 12:07 - 003503545 _____ C:\Users\BECKO\Downloads\Styling 7.zip
2017-09-21 08:57 - 2017-09-21 09:00 - 072828153 _____ C:\Users\BECKO\Downloads\TC Stock Car Skins Thread Pack.rar
2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\Users\BECKO\My Drivers
2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Innovative Solutions
2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\Users\BECKO\AppData\Local\Innovative Solutions
2017-09-20 15:54 - 2017-09-20 15:54 - 000000000 ____D C:\My Drivers
2017-09-20 15:53 - 2017-09-20 15:53 - 003108432 _____ (Innovative Solutions) C:\Users\BECKO\Downloads\Intel-R-ICH7-M-Family-Serial-ATA-Storage-Controller---27C4-Intel-Intel-32-bits.exe
2017-09-20 15:33 - 2017-09-20 15:55 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\DriverAgentPlus
2017-09-20 14:59 - 2017-09-20 15:02 - 001724680 _____ ( ) C:\Users\BECKO\Downloads\cpu-z_1.80-en.exe
2017-09-20 14:38 - 2017-09-20 14:39 - 000329753 _____ C:\Users\BECKO\Downloads\ClockGen.zip
2017-09-20 11:30 - 2017-09-20 11:30 - 007320888 _____ C:\Users\BECKO\Downloads\200000239_93d3ef34bb13b42983099062e5adff03602d7e8b.cab
2017-09-20 11:26 - 2017-09-20 11:47 - 000000000 ____D C:\Program Files\DriverToolkit
2017-09-20 11:26 - 2017-09-20 11:26 - 000000000 ____D C:\Users\BECKO\AppData\Local\DriverToolkit
2017-09-20 10:14 - 2017-09-20 10:14 - 000001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BIOS FINDER.LNK
2017-09-20 10:14 - 2000-05-22 00:00 - 000608448 _____ (Microsoft Corporation) C:\Windows\system32\COMCTL32.OCX
2017-09-20 10:14 - 2000-05-22 00:00 - 000115920 _____ (Microsoft Corporation) C:\Windows\system32\MSINET.OCX
2017-09-20 10:14 - 1999-08-03 20:33 - 000205824 _____ (xyz) C:\Windows\system32\CRESIZE5.OCX
2017-09-20 10:14 - 1997-12-16 04:00 - 000143872 _____ (Info-ZIP) C:\Windows\system32\unzip32.dll
2017-09-20 10:14 - 1997-06-23 19:06 - 000123664 _____ (Microsoft Corporation) C:\Windows\system32\MSJInt35.dll
2017-09-20 10:14 - 1997-06-23 19:06 - 000024848 _____ (Microsoft Corporation) C:\Windows\system32\MSJtEr35.dll
2017-09-20 10:14 - 1995-07-25 23:00 - 000089600 _____ (Microsoft Corporation) C:\Windows\system32\GRID32.OCX
2017-09-20 10:11 - 1998-10-15 12:04 - 001355776 _____ (Microsoft Corporation) C:\Windows\system32\MSVBVM50.dll
2017-09-20 10:11 - 1997-01-16 01:00 - 000071680 _____ (Microsoft Corporation) C:\Windows\ST5UNST.EXE
2017-09-20 10:11 - 1997-01-16 01:00 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\VB5StKit.dll
2017-09-20 10:03 - 2017-09-20 10:03 - 003646301 _____ C:\Users\BECKO\Downloads\biosfind.zip
2017-09-19 14:56 - 2017-09-19 14:56 - 000243989 _____ C:\Users\BECKO\Downloads\bmw-rins.rar
2017-09-19 10:45 - 2010-06-17 12:02 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\system32\CSVer.dll
2017-09-19 10:44 - 2017-09-19 10:44 - 002865688 _____ (Intel Corporation) C:\Users\BECKO\Downloads\INF_allOS_9.1.2.1008_PV.exe
2017-09-19 10:31 - 2017-09-19 10:32 - 015647865 _____ C:\Users\BECKO\Downloads\UBU_v1_69_5.rar
2017-09-19 10:20 - 2017-09-19 10:20 - 000000000 ____D C:\Program Files\VulkanRT
2017-09-19 10:12 - 2017-09-19 10:15 - 257123639 _____ C:\Users\BECKO\Downloads\win64_154519.4678.zip
2017-09-19 09:43 - 2017-09-19 09:46 - 255391032 _____ (Intel Corporation) C:\Users\BECKO\Downloads\win64_154519.4678.exe
2017-09-19 09:39 - 2017-09-19 09:39 - 001127996 _____ C:\Users\BECKO\Downloads\Intel_Integrator_Toolkit_6.1.6.zip
2017-09-19 09:34 - 2017-09-19 09:34 - 000099434 _____ C:\Users\BECKO\Downloads\KeplerBiosTweaker_1.27.zip
2017-09-18 18:21 - 2017-09-18 18:22 - 000000000 ___HD C:\Windows\AxInstSV
2017-09-18 18:14 - 2017-09-18 18:14 - 000183559 _____ C:\Users\BECKO\Downloads\capicom.cab
2017-09-18 18:14 - 2017-09-18 18:14 - 000011073 _____ C:\Users\BECKO\Downloads\xenroll.cab
2017-09-17 13:57 - 2017-09-17 13:57 - 001015296 _____ C:\Users\BECKO\Downloads\LAGG SWITCH_[unknowncheats.me]_.exe
2017-09-17 13:45 - 2017-09-17 13:46 - 005251125 _____ C:\Users\BECKO\Downloads\pics.zip
2017-09-17 11:35 - 2017-09-17 11:35 - 001546533 _____ C:\Users\BECKO\Downloads\XRT_skins.zip
2017-09-17 10:28 - 2017-09-17 10:32 - 040811322 _____ C:\Users\BECKO\Downloads\Skins.zip
2017-09-16 16:27 - 2017-09-16 16:27 - 000406668 _____ C:\Users\BECKO\Downloads\XRG_IDS_FAT_FLAME.pdn
2017-09-15 17:54 - 2017-09-15 17:54 - 003889529 _____ C:\Users\BECKO\Downloads\ZenKiT By tadydrift.rar
2017-09-15 17:53 - 2017-09-15 17:53 - 005464453 _____ C:\Users\BECKO\Downloads\Team Gripenemy pics.rar
2017-09-15 17:53 - 2017-09-15 17:53 - 000275230 _____ C:\Users\BECKO\Downloads\Team GripEnemy.rar
2017-09-15 17:52 - 2017-09-15 17:52 - 000246991 _____ C:\Users\BECKO\Downloads\RFactory EVOLUTION.zip
2017-09-15 17:20 - 2017-09-15 17:20 - 004713929 _____ C:\Users\BECKO\Downloads\RFactory D1 2010 SkinPack.rar
2017-09-15 17:10 - 2017-09-15 17:11 - 013464202 _____ C:\Users\BECKO\Downloads\RF XRT-FC kit By TaDy(update).rar
2017-09-15 17:06 - 2017-09-15 17:06 - 000455977 _____ C:\Users\BECKO\Downloads\MEGA-texture-PACK.rar
2017-09-15 17:04 - 2017-09-15 17:04 - 002635166 _____ C:\Users\BECKO\Downloads\XRT_Anilator_Kit_update.zip
2017-09-15 17:03 - 2017-09-15 17:04 - 000574966 _____ C:\Users\BECKO\Downloads\ProStreet Pack 2.rar
2017-09-12 20:42 - 2017-09-12 20:42 - 000470016 _____ C:\Users\BECKO\Downloads\Tutorial 5.5.exe
2017-09-12 18:01 - 2017-09-12 18:01 - 000000000 ____D C:\Program Files\Microsoft Synchronization Services
2017-09-12 18:01 - 2017-09-12 18:01 - 000000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2017-09-12 17:58 - 2017-09-12 17:58 - 039888608 _____ (Intel Corporation) C:\Users\BECKO\Downloads\Intel Extreme Tuning Utility (Intel XTU)-Version 6.3.0.56.exe
2017-09-12 17:12 - 2017-09-12 17:15 - 000000000 ____D C:\ProgramData\Intel
2017-09-12 17:10 - 2017-09-12 17:11 - 010461728 _____ (Intel) C:\Users\BECKO\Downloads\Intel Driver Update Utility Installer.exe
2017-09-10 17:34 - 2017-09-10 17:34 - 000001314 _____ C:\Users\BECKO\Downloads\Trainer LUA.zip
2017-09-10 17:32 - 2017-09-10 17:32 - 000000000 ____D C:\Users\BECKO\Downloads\LUA
2017-09-10 17:31 - 2017-09-10 17:31 - 000001715 _____ C:\Users\BECKO\Downloads\Trainer LUA (UPDATED).zip
2017-09-10 11:49 - 2017-09-10 11:50 - 001258570 _____ C:\Users\BECKO\Downloads\xfg_complete_interior.zip
2017-09-10 08:42 - 2017-09-10 08:42 - 001065704 _____ C:\Users\BECKO\Downloads\XF_Interior1.rar
2017-09-10 08:37 - 2017-09-10 08:37 - 004499750 _____ C:\Users\BECKO\Downloads\Retextured XRT interior.rar
2017-09-10 07:57 - 2017-09-10 08:25 - 000935389 _____ C:\Users\BECKO\Downloads\Hub.rar
2017-09-10 07:57 - 2017-09-10 07:57 - 001921131 _____ C:\Users\BECKO\Downloads\Grip.rar
2017-09-10 07:38 - 2017-09-10 07:38 - 000864710 _____ C:\Users\BECKO\Downloads\LFS_S1_DECALS.rar
2017-09-10 07:38 - 2017-09-10 07:38 - 000022769 _____ C:\Users\BECKO\Downloads\MSz_logos.rar
2017-09-10 07:37 - 2017-09-10 07:37 - 000082377 _____ C:\Users\BECKO\Downloads\SUPER_CF.rar
2017-09-10 07:36 - 2017-09-10 07:36 - 000414511 _____ C:\Users\BECKO\Downloads\scooppack1.zip
2017-09-10 07:35 - 2017-09-10 07:35 - 001038380 _____ C:\Users\BECKO\Downloads\RF SKYLINES LIGHTS pack.rar
2017-09-10 07:34 - 2017-09-10 07:34 - 000458826 _____ C:\Users\BECKO\Downloads\xfrhireslight.zip
2017-09-09 19:59 - 2017-09-09 19:59 - 000033190 _____ C:\Users\BECKO\Downloads\Derby-decals-firebird-big.jpeg
2017-09-09 14:43 - 2017-09-09 14:43 - 000276289 _____ C:\Users\BECKO\Downloads\TCLights2.zip
2017-09-09 07:17 - 2017-09-09 07:17 - 000736920 _____ C:\Users\BECKO\Downloads\XRG_Cruise151.pdn
2017-09-09 06:34 - 2017-09-09 06:34 - 000000000 ____D C:\Users\BECKO\.thumbnails
2017-09-09 06:33 - 2017-09-09 06:34 - 000000000 ____D C:\Users\BECKO\Downloads\Blender
2017-09-09 06:29 - 2017-09-09 06:30 - 016372630 _____ C:\Users\BECKO\Downloads\LFS_cars_ready_to_render_BLENDER.rar
2017-09-09 06:28 - 2017-09-09 06:30 - 104647991 _____ C:\Users\BECKO\Downloads\blender-2.79-rc2-windows32.zip
2017-09-07 21:15 - 2017-09-07 21:15 - 000902749 _____ C:\Users\BECKO\Downloads\ds-autos_lfs_maxpax-xfr.exe
2017-09-07 21:15 - 2017-09-07 21:15 - 000000000 ____D C:\Users\BECKO\Downloads\scenes
2017-09-07 21:15 - 2017-09-07 21:15 - 000000000 ____D C:\Users\BECKO\Downloads\images
2017-09-07 19:09 - 2017-09-07 19:09 - 000544670 _____ C:\Users\BECKO\Downloads\XFG_interior.zip
2017-09-07 19:09 - 2017-09-07 19:09 - 000116050 _____ C:\Users\BECKO\Downloads\XRG_interior.zip
2017-09-07 19:06 - 2017-09-07 19:06 - 000515238 _____ C:\Users\BECKO\Downloads\XFG. XFR leather interior.rar
2017-09-07 19:01 - 2017-09-07 19:01 - 000325761 _____ C:\Users\BECKO\Downloads\XR_LED_lights_by_Kancel.rar
2017-09-07 18:11 - 2017-09-25 09:52 - 000000000 ____D C:\Windows\system32\appmgmt
2017-09-07 05:05 - 2017-09-07 05:05 - 000933207 _____ C:\Users\BECKO\Downloads\Ford_Sierra_Cosworth_Texturepack.rar
2017-09-06 20:45 - 2017-09-06 20:45 - 000013841 _____ C:\Users\BECKO\Downloads\shaders-20170906T174421Z-001.zip
2017-09-06 20:43 - 2017-09-06 20:43 - 016777344 _____ C:\Users\BECKO\Downloads\s_window_ALP.dds
2017-09-06 17:57 - 2017-09-06 17:58 - 001305367 _____ C:\Users\BECKO\Downloads\Autoruns.zip
2017-09-05 18:48 - 2017-09-05 18:48 - 000000000 ____D C:\ProgramData\Force Dynamics
2017-09-05 18:45 - 2017-09-19 10:45 - 000000000 ____D C:\Program Files\Intel
2017-09-05 18:45 - 2016-10-08 02:29 - 000002291 ____N C:\Windows\system32\SetupBD.din
2017-09-05 18:41 - 2016-10-08 02:29 - 000370752 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe
2017-09-05 18:24 - 2017-09-05 18:24 - 000014200 _____ C:\Windows\system32\results.xml
2017-09-05 18:20 - 2017-09-05 18:20 - 000000000 ____D C:\Windows\system32\Lang
2017-09-05 18:20 - 2009-10-19 15:57 - 001002008 _____ (Intel Corporation) C:\Windows\system32\igxpun.exe
2017-09-05 18:19 - 2017-09-05 18:19 - 023812912 _____ (Intel Corporation) C:\Users\BECKO\Downloads\win7_1512754.exe
2017-09-04 19:39 - 2017-09-04 19:46 - 550935208 _____ (Live for Speed) C:\Users\BECKO\Downloads\LFS_S3_6R_setup (1).exe
2017-09-04 18:54 - 2012-02-11 08:37 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2017-09-04 18:52 - 2014-07-09 04:29 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2017-09-04 18:52 - 2014-07-09 04:29 - 000005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2017-09-04 18:49 - 2017-03-07 18:06 - 002746880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-09-04 18:49 - 2017-03-07 18:06 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-09-04 18:49 - 2017-03-07 18:06 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2017-09-04 18:49 - 2016-08-16 23:27 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-09-04 18:49 - 2016-08-16 23:27 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-09-04 18:49 - 2016-08-16 23:26 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-09-04 18:49 - 2016-08-16 23:26 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-09-04 18:49 - 2016-08-16 23:26 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-09-04 18:49 - 2016-08-16 23:26 - 000020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-09-04 18:49 - 2016-08-16 23:26 - 000006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-09-04 03:21 - 2015-07-16 22:12 - 006131200 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-09-04 03:21 - 2015-07-16 22:12 - 000856064 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2017-09-04 03:21 - 2015-07-16 22:12 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2017-09-04 03:21 - 2015-07-16 18:14 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2017-09-04 03:21 - 2014-12-11 20:47 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2017-09-03 19:56 - 2017-09-03 19:57 - 000000000 ____D C:\Program Files\vJoy
2017-09-03 19:56 - 2017-09-03 19:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\vJoy
2017-09-03 19:43 - 2016-02-03 12:23 - 000050224 _____ (Shaul Eizikovich) C:\Windows\system32\Drivers\vjoy.sys
2017-09-03 19:42 - 2017-09-03 19:42 - 007126695 _____ C:\Users\BECKO\Downloads\Receiver2017 EditorVersion.rar
2017-09-03 16:51 - 2017-09-04 20:02 - 000000534 _____ C:\Users\BECKO\Desktop\LFS.lnk
2017-09-03 16:51 - 2017-09-03 16:51 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed
2017-09-03 16:41 - 2017-09-25 11:46 - 000000000 ____D C:\LFS
2017-09-03 16:29 - 2017-01-29 07:43 - 550935208 _____ (Live for Speed) C:\Users\BECKO\Downloads\LFS_S3_6R_setup.exe
2017-09-03 15:11 - 2017-09-03 15:11 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsigndfefe19eac837ef9
2017-09-03 15:08 - 2017-09-03 15:08 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign453dc60071486f6d
2017-09-03 15:03 - 2017-09-03 15:03 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign9f0a8a46786c1d6c
2017-09-03 15:03 - 2017-09-03 15:03 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign6074fc35e5b4c48d
2017-09-03 13:33 - 2017-09-03 13:33 - 000001410 _____ C:\Users\BECKO\Desktop\PaintDotNet - Пряк път.lnk
2017-09-03 13:32 - 2017-09-03 14:17 - 000000000 ____D C:\Users\BECKO\AppData\Local\paint.net
2017-09-03 13:24 - 2017-09-03 13:24 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign6b42f544879c7727
2017-09-03 13:23 - 2017-09-03 13:23 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsignf781ccea0b6f3d93
2017-09-03 13:23 - 2017-09-03 13:23 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign1e69207d3443abe6
2017-09-03 12:49 - 2017-09-03 13:21 - 000001498 _____ C:\Users\BECKO\Desktop\Cheat Engine - Пряк път.lnk
2017-09-03 11:29 - 2017-09-23 13:12 - 000000579 _____ C:\Users\BECKO\Documents\shiftercfg.ini
2017-09-03 10:13 - 2017-09-03 10:13 - 000119081 _____ C:\Users\BECKO\Downloads\[LCS] Lights.zip
2017-09-03 08:28 - 2017-09-03 08:28 - 046428288 _____ C:\Users\BECKO\Downloads\Spot Healing Brush.psd
2017-09-03 08:23 - 2017-09-03 08:23 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign64eab49f8c2e8f70
2017-09-03 08:07 - 2017-09-03 08:07 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign8451f807890aeee4
2017-09-03 08:01 - 2017-09-03 08:01 - 000000000 ____D C:\Users\BECKO\AppData\LocalLow\Adobe
2017-09-03 07:57 - 2017-09-03 07:57 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign632ee564d36a89a5
2017-09-03 07:56 - 2017-09-03 07:56 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign09a43f07e233face
2017-09-03 07:55 - 2017-09-03 07:55 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign8b9b2ea2429d6807
2017-09-03 07:55 - 2017-09-03 07:55 - 000000000 ____D C:\Users\BECKO\AppData\Local\Tempzxpsign84c5d6b8cab802da
2017-09-03 07:54 - 2017-09-03 07:54 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-09-03 07:52 - 2017-09-03 07:52 - 000000000 ____D C:\Users\BECKO\Documents\Adobe
2017-09-03 07:37 - 2017-09-03 17:21 - 000000000 ___RD C:\Users\BECKO\Creative Cloud Files
2017-09-03 07:28 - 2017-09-03 07:28 - 000000000 ____D C:\Users\BECKO\AppData\Local\CEF
2017-09-03 03:29 - 2017-09-03 03:30 - 000000000 ___SD C:\Windows\system32\CompatTel
2017-09-03 03:29 - 2017-09-03 03:29 - 000000000 ____D C:\Windows\system32\appraiser
2017-09-02 23:43 - 2012-08-23 17:46 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\terminpt.sys
2017-09-02 23:43 - 2012-08-23 17:44 - 000014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2017-09-02 23:43 - 2012-08-23 14:12 - 000192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2017-09-02 23:23 - 2013-10-02 02:45 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2017-09-02 23:22 - 2013-10-02 03:42 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2017-09-02 23:22 - 2013-10-02 03:32 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2017-09-02 23:22 - 2013-10-02 03:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2017-09-02 23:22 - 2013-10-02 03:14 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2017-09-02 23:22 - 2013-10-02 03:14 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2017-09-02 23:22 - 2013-10-02 01:34 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-09-02 23:14 - 2017-09-02 23:18 - 000000000 ____D C:\Windows\system32\MRT
2017-09-02 23:14 - 2017-09-02 23:14 - 137505280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-09-02 23:02 - 2017-09-02 23:02 - 000000000 ____D C:\Program Files\CONEXANT
2017-09-02 22:50 - 2017-09-02 22:50 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_tp4track_01009.Wdf
2017-09-02 22:50 - 2017-09-02 22:50 - 000000000 ____D C:\Program Files\Lenovo
2017-09-02 22:42 - 2012-07-26 06:21 - 000196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2017-09-02 22:42 - 2012-07-26 06:20 - 000613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2017-09-02 22:42 - 2012-07-26 06:20 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2017-09-02 22:42 - 2012-07-26 06:20 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2017-09-02 22:42 - 2012-07-26 06:20 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2017-09-02 22:42 - 2012-07-26 05:33 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2017-09-02 22:42 - 2012-07-26 05:32 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2017-09-02 22:42 - 2012-06-02 17:57 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2017-09-02 22:30 - 2017-04-28 01:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-09-02 22:19 - 2015-12-16 21:43 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2017-09-02 22:19 - 2015-12-16 21:43 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2017-09-02 22:19 - 2015-12-16 21:43 - 000006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2017-09-02 22:18 - 2016-03-16 21:28 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2017-09-02 22:18 - 2016-03-16 21:28 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2017-09-02 22:18 - 2015-08-05 20:40 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2017-09-02 22:18 - 2015-08-05 19:58 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2017-09-02 22:18 - 2015-07-22 20:53 - 000635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-09-02 22:18 - 2015-05-25 21:01 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2017-09-02 22:18 - 2015-05-25 21:00 - 000364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2017-09-02 22:18 - 2015-05-25 21:00 - 000082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2017-09-02 22:18 - 2015-05-25 21:00 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2017-09-02 22:18 - 2015-05-25 21:00 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2017-09-02 22:18 - 2015-05-25 21:00 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2017-09-02 22:18 - 2015-01-09 05:48 - 000635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2017-09-02 22:18 - 2015-01-09 05:48 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2017-09-02 22:18 - 2015-01-09 05:48 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2017-09-02 22:18 - 2012-12-07 15:26 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2017-09-02 22:18 - 2012-12-07 15:20 - 002576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2017-09-02 22:18 - 2012-12-07 13:46 - 000055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2017-09-02 22:18 - 2012-12-07 13:46 - 000015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2017-09-02 22:17 - 2016-08-29 17:55 - 002972672 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-09-02 22:17 - 2012-10-03 19:42 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2017-09-02 22:17 - 2012-10-03 19:42 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2017-09-02 22:17 - 2012-10-03 19:40 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-09-02 22:17 - 2012-08-21 23:12 - 000245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2017-09-02 22:17 - 2011-03-11 08:39 - 000143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2017-09-02 22:17 - 2011-03-11 08:39 - 000117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2017-09-02 22:17 - 2011-03-11 08:38 - 000332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2017-09-02 22:17 - 2011-03-11 08:38 - 000080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2017-09-02 22:17 - 2011-03-11 08:38 - 000022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2017-09-02 22:17 - 2011-03-11 08:33 - 001699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2017-09-02 22:17 - 2011-03-11 08:31 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2017-09-02 22:16 - 2016-07-07 17:57 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-09-02 22:16 - 2016-03-09 21:40 - 000316416 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2017-09-02 22:16 - 2016-03-09 21:34 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2017-09-02 22:16 - 2016-02-05 21:44 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2017-09-02 22:16 - 2016-02-05 20:33 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2017-09-02 22:16 - 2015-10-29 20:50 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2017-09-02 22:16 - 2015-10-29 20:49 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2017-09-02 22:16 - 2015-10-29 20:49 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2017-09-02 22:16 - 2015-10-29 20:49 - 000020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2017-09-02 22:16 - 2015-08-27 20:58 - 001391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-09-02 22:16 - 2015-08-27 20:51 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2017-09-02 22:16 - 2015-07-09 20:42 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-09-02 22:16 - 2015-07-09 20:42 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2017-09-02 22:16 - 2015-06-03 23:22 - 000355456 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-09-02 22:16 - 2015-01-29 06:02 - 002311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2017-09-02 22:16 - 2014-08-01 14:35 - 000793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-09-02 22:16 - 2014-02-04 05:07 - 000234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-09-02 22:16 - 2014-02-04 05:07 - 000149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-09-02 22:16 - 2014-02-04 05:07 - 000027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2017-09-02 22:16 - 2014-02-04 05:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2017-09-02 22:16 - 2014-01-28 05:07 - 000185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2017-09-02 22:16 - 2013-10-30 05:19 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2017-09-02 22:16 - 2013-10-04 04:58 - 000152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2017-09-02 22:16 - 2013-10-04 04:56 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2017-09-02 22:16 - 2013-05-10 06:20 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2017-09-02 22:16 - 2013-03-19 06:33 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2017-09-02 22:16 - 2013-01-24 07:47 - 000196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2017-09-02 22:16 - 2012-07-04 22:45 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2017-09-02 22:16 - 2011-02-18 08:39 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2017-09-02 22:15 - 2017-07-21 17:26 - 000518144 _____ C:\Windows\system32\msjetoledb40.dll
2017-09-02 22:15 - 2017-07-21 17:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2017-09-02 22:15 - 2017-07-15 20:52 - 000346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-02 22:15 - 2017-07-14 06:01 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-02 22:15 - 2017-07-14 06:00 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-02 22:15 - 2017-07-14 05:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-02 22:15 - 2017-07-14 05:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-02 22:15 - 2017-07-14 05:48 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-02 22:15 - 2017-07-14 05:48 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-02 22:15 - 2017-07-14 05:48 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-02 22:15 - 2017-07-14 05:47 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-02 22:15 - 2017-07-14 05:44 - 002290176 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-02 22:15 - 2017-07-14 05:42 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-02 22:15 - 2017-07-14 05:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-02 22:15 - 2017-07-14 05:39 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-02 22:15 - 2017-07-14 05:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-02 22:15 - 2017-07-14 05:38 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-02 22:15 - 2017-07-14 05:38 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-02 22:15 - 2017-07-14 05:38 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-02 22:15 - 2017-07-14 05:33 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-02 22:15 - 2017-07-14 05:30 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-02 22:15 - 2017-07-14 05:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-02 22:15 - 2017-07-14 05:25 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-02 22:15 - 2017-07-14 05:25 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-02 22:15 - 2017-07-14 05:23 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-02 22:15 - 2017-07-14 05:22 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-02 22:15 - 2017-07-14 05:21 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-02 22:15 - 2017-07-14 05:20 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-02 22:15 - 2017-07-14 05:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-02 22:15 - 2017-07-14 05:13 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-02 22:15 - 2017-07-14 05:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-02 22:15 - 2017-07-14 05:12 - 000689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-02 22:15 - 2017-07-14 05:11 - 002057216 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-02 22:15 - 2017-07-14 05:11 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-02 22:15 - 2017-07-14 05:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-02 22:15 - 2017-07-14 04:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-02 22:15 - 2017-07-14 04:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-02 22:15 - 2017-07-14 04:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-02 22:15 - 2017-07-01 16:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2017-09-02 22:15 - 2017-07-01 16:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2017-09-02 22:15 - 2017-07-01 16:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2017-09-02 22:15 - 2017-07-01 16:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2017-09-02 22:15 - 2017-05-12 19:25 - 001251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-09-02 22:15 - 2017-05-12 19:25 - 000909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-09-02 22:15 - 2017-05-10 18:12 - 012880896 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-02 22:15 - 2017-05-10 18:12 - 002953216 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-09-02 22:15 - 2017-05-10 18:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-09-02 22:15 - 2017-05-10 18:10 - 000073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-09-02 22:15 - 2017-05-10 18:01 - 002092032 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-09-02 22:15 - 2017-05-10 18:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-09-02 22:15 - 2017-05-10 18:00 - 000136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-09-02 22:15 - 2017-05-10 18:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-09-02 22:15 - 2017-05-10 18:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-09-02 22:15 - 2017-01-18 18:35 - 000922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-09-02 22:15 - 2017-01-18 18:35 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-09-02 22:15 - 2016-11-09 19:17 - 002365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2017-09-02 22:15 - 2016-09-15 17:51 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2017-09-02 22:15 - 2016-08-21 16:05 - 000935424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-09-02 22:15 - 2016-08-12 19:47 - 011410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-09-02 22:15 - 2016-06-14 18:21 - 003209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-09-02 22:15 - 2016-06-14 18:21 - 000988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2017-09-02 22:15 - 2016-06-14 18:21 - 000744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2017-09-02 22:15 - 2016-01-21 03:51 - 000057280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2017-09-02 22:15 - 2015-04-11 06:07 - 000054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2017-09-02 22:15 - 2014-10-30 04:45 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2017-09-02 22:15 - 2013-08-05 04:56 - 000133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2017-09-02 22:15 - 2012-01-04 11:58 - 000442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2017-09-02 22:15 - 2011-12-30 08:27 - 000478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2017-09-02 22:15 - 2011-06-16 07:33 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2017-09-02 22:14 - 2017-08-01 18:16 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-02 22:14 - 2017-07-29 17:50 - 000074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-09-02 22:14 - 2017-07-21 17:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2017-09-02 22:14 - 2017-07-21 17:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-09-02 22:14 - 2017-07-14 18:10 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-09-02 22:14 - 2017-07-14 18:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-09-02 22:14 - 2017-07-14 18:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-09-02 22:14 - 2017-07-14 17:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-09-02 22:14 - 2017-07-14 17:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-09-02 22:14 - 2017-07-14 17:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-09-02 22:14 - 2017-07-14 17:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2017-09-02 22:14 - 2017-07-08 18:19 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-09-02 22:14 - 2017-07-08 17:51 - 002402816 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-02 22:14 - 2017-07-07 18:15 - 004001000 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-09-02 22:14 - 2017-07-07 18:15 - 003945192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-02 22:14 - 2017-07-07 18:15 - 000296680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2017-09-02 22:14 - 2017-07-07 18:15 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-02 22:14 - 2017-07-07 18:15 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-02 22:14 - 2017-07-07 18:13 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-02 22:14 - 2017-07-07 18:11 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-02 22:14 - 2017-07-07 18:10 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-02 22:14 - 2017-07-07 17:52 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-02 22:14 - 2017-07-07 17:52 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-02 22:14 - 2017-07-07 17:52 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-02 22:14 - 2017-07-07 17:52 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-02 22:14 - 2017-07-07 17:51 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-02 22:14 - 2017-07-07 17:50 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-02 22:14 - 2017-07-07 17:48 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-02 22:14 - 2017-07-07 17:48 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-02 22:14 - 2017-07-07 17:48 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-02 22:14 - 2017-07-07 17:47 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-02 22:14 - 2017-07-07 17:47 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-02 22:14 - 2017-07-07 17:47 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-02 22:14 - 2017-07-07 17:47 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000641536 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2017-09-02 22:14 - 2017-07-01 16:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2017-09-02 22:14 - 2017-06-15 23:18 - 000514048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-09-02 22:14 - 2017-06-13 01:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-09-02 22:14 - 2017-06-13 01:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-09-02 22:14 - 2017-06-13 01:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-09-02 22:14 - 2017-06-13 01:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2017-09-02 22:14 - 2017-06-13 01:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-09-02 22:14 - 2017-06-13 01:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-09-02 22:14 - 2017-06-13 01:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2017-09-02 22:14 - 2017-06-10 18:39 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-02 22:14 - 2017-06-09 18:17 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-09-02 22:14 - 2017-06-06 18:12 - 001499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-02 22:14 - 2017-06-02 10:57 - 000497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-09-02 22:14 - 2017-05-30 07:39 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-09-02 22:14 - 2017-05-30 07:39 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-09-02 22:14 - 2017-05-30 07:39 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-09-02 22:14 - 2017-05-21 07:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-09-02 22:14 - 2017-05-16 18:16 - 000730856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-09-02 22:14 - 2017-05-16 18:16 - 000218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-09-02 22:14 - 2017-05-16 18:12 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-09-02 22:14 - 2017-05-12 21:07 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-09-02 22:14 - 2017-05-12 21:03 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-02 22:14 - 2017-05-12 21:03 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-09-02 22:14 - 2017-05-12 21:03 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-09-02 22:14 - 2017-05-12 21:03 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-09-02 22:14 - 2017-05-12 21:03 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-09-02 22:14 - 2017-05-12 20:43 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-09-02 22:14 - 2017-05-10 18:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-09-02 22:14 - 2017-05-10 18:00 - 000035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-09-02 22:14 - 2017-05-10 18:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-09-02 22:14 - 2017-05-10 18:00 - 000011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-09-02 22:14 - 2017-05-09 18:11 - 000779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-02 22:14 - 2017-05-09 18:01 - 000066048 _____ C:\Windows\system32\PrintBrmUi.exe
2017-09-02 22:14 - 2017-05-07 18:14 - 000078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-09-02 22:14 - 2017-05-07 17:53 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-09-02 22:14 - 2017-04-21 18:15 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 001417728 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000377344 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 18:12 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 17:54 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-02 22:14 - 2017-04-17 17:51 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-02 22:14 - 2017-04-17 17:48 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 17:48 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 17:48 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-02 22:14 - 2017-04-17 17:48 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-02 22:14 - 2017-04-12 18:26 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-09-02 22:14 - 2017-04-12 18:25 - 001176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-09-02 22:14 - 2017-04-12 18:25 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2017-09-02 22:14 - 2017-04-12 18:25 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2017-09-02 22:14 - 2017-04-05 18:00 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-02 22:14 - 2017-04-05 18:00 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-02 22:14 - 2017-04-05 18:00 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-02 22:14 - 2017-04-04 17:52 - 000338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-09-02 22:14 - 2017-03-30 17:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-09-02 22:14 - 2017-03-10 19:20 - 001508352 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2017-09-02 22:14 - 2017-03-10 19:20 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2017-09-02 22:14 - 2017-03-10 18:52 - 000007680 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2017-09-02 22:14 - 2017-03-10 18:51 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-09-02 22:14 - 2017-03-10 18:51 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2017-09-02 22:14 - 2017-03-07 19:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-09-02 22:14 - 2017-03-04 04:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-09-02 22:14 - 2017-03-04 04:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-09-02 22:14 - 2017-02-09 19:14 - 000575488 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-09-02 22:14 - 2017-02-09 19:14 - 000481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-09-02 22:14 - 2017-02-09 19:14 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-09-02 22:14 - 2017-02-09 19:14 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-09-02 22:14 - 2017-02-09 18:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-09-02 22:14 - 2017-01-13 20:45 - 000741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-09-02 22:14 - 2017-01-13 20:45 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-09-02 22:14 - 2017-01-11 20:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-09-02 22:14 - 2017-01-11 20:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-09-02 22:14 - 2016-11-20 19:19 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2017-09-02 22:14 - 2016-11-20 17:07 - 000373896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-09-02 22:14 - 2016-11-10 19:19 - 000811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2017-09-02 22:14 - 2016-11-09 19:24 - 000105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2017-09-02 22:14 - 2016-11-09 19:17 - 001806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-09-02 22:14 - 2016-11-09 19:17 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2017-09-02 22:14 - 2016-11-09 19:17 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2017-09-02 22:14 - 2016-11-09 19:17 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2017-09-02 22:14 - 2016-11-09 18:55 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2017-09-02 22:14 - 2016-10-11 18:18 - 001027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2017-09-02 22:14 - 2016-10-11 18:18 - 000829952 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-09-02 22:14 - 2016-10-11 18:18 - 000701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2017-09-02 22:14 - 2016-10-11 18:18 - 000430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2017-09-02 22:14 - 2016-10-11 18:18 - 000126976 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2017-09-02 22:14 - 2016-10-11 18:18 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2017-09-02 22:14 - 2016-10-11 17:51 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-09-02 22:14 - 2016-10-11 16:33 - 000187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2017-09-02 22:14 - 2016-10-11 16:18 - 000419648 _____ C:\Windows\system32\locale.nls
2017-09-02 22:14 - 2016-10-08 16:05 - 000534600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-09-02 22:14 - 2016-10-07 18:12 - 002291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2017-09-02 22:14 - 2016-10-07 18:12 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2017-09-02 22:14 - 2016-10-05 17:50 - 000068608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2017-09-02 22:14 - 2016-09-12 23:49 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2017-09-02 22:14 - 2016-09-08 23:34 - 000208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2017-09-02 22:14 - 2016-09-08 23:34 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2017-09-02 22:14 - 2016-09-08 17:49 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2017-09-02 22:14 - 2016-09-08 17:49 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-09-02 22:14 - 2016-08-12 19:47 - 012574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-09-02 22:14 - 2016-08-12 19:31 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-09-02 22:14 - 2016-08-12 19:31 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-09-02 22:14 - 2016-08-12 19:31 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-09-02 22:14 - 2016-08-12 19:21 - 000437248 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2017-09-02 22:14 - 2016-08-06 18:15 - 001178112 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2017-09-02 22:14 - 2016-08-06 18:15 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2017-09-02 22:14 - 2016-08-06 18:15 - 000214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2017-09-02 22:14 - 2016-08-06 18:15 - 000146944 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2017-09-02 22:14 - 2016-08-06 18:15 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2017-09-02 22:14 - 2016-08-06 17:53 - 000199168 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2017-09-02 22:14 - 2016-08-06 17:53 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2017-09-02 22:14 - 2016-08-06 17:53 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 001005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000474624 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000442368 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000195072 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2017-09-02 22:14 - 2016-06-14 18:21 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2017-09-02 22:14 - 2016-06-14 18:17 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2017-09-02 22:14 - 2016-06-14 18:05 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2017-09-02 22:14 - 2016-06-14 18:05 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2017-09-02 22:14 - 2016-06-14 18:05 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-09-02 22:14 - 2016-06-14 17:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2017-09-02 22:14 - 2016-06-14 17:55 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2017-09-02 22:14 - 2016-06-14 17:54 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2017-09-02 22:14 - 2016-05-12 16:04 - 000249352 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2017-09-02 22:14 - 2016-03-24 01:42 - 000409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-09-02 22:14 - 2016-03-24 01:39 - 000470704 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-09-02 22:13 - 2012-10-09 20:40 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2017-09-02 22:13 - 2012-10-09 20:40 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2017-09-02 22:01 - 2017-05-03 18:15 - 000081640 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-09-02 22:01 - 2017-05-03 18:10 - 000987648 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 001327616 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 000505856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 000446464 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 000275456 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-09-02 22:01 - 2017-05-03 16:05 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-09-02 22:01 - 2017-03-23 05:06 - 001602048 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-09-02 21:24 - 2013-12-04 05:03 - 000428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2017-09-02 21:24 - 2013-12-04 05:03 - 000423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2017-09-02 21:24 - 2013-12-04 05:03 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2017-09-02 21:24 - 2013-12-04 05:03 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2017-09-02 21:24 - 2013-12-04 05:02 - 000390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2017-09-02 21:24 - 2013-12-04 04:54 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2017-09-02 21:24 - 2013-12-04 04:54 - 000572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2017-09-02 21:24 - 2013-12-04 04:54 - 000510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2017-09-02 21:24 - 2013-12-04 04:54 - 000508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2017-09-02 18:47 - 2017-09-02 18:47 - 000386758 _____ C:\Users\BECKO\Downloads\XR_Interior1(yeni)(2).rar
2017-09-02 18:41 - 2017-09-03 17:28 - 000000000 ____D C:\ProgramData\Adobe
2017-09-02 18:40 - 2017-09-03 17:28 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-09-02 18:37 - 2017-09-03 17:21 - 000000000 ____D C:\Users\BECKO\AppData\Local\Adobe
2017-09-02 18:36 - 2017-09-02 18:36 - 000814168 _____ (Adobe Systems Incorporated) C:\Users\BECKO\Downloads\CreativeCloudSet-Up.exe
2017-09-02 18:34 - 2017-09-03 15:54 - 048763957 _____ C:\Users\BECKO\Downloads\XRT_Publicpack.psd
2017-09-02 17:36 - 2013-11-26 11:16 - 003419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-09-02 10:43 - 2017-09-02 10:43 - 000001689 _____ C:\Users\BECKO\Desktop\jpg2dds - Пряк път.lnk
2017-09-02 10:41 - 2017-09-02 10:41 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Easy2Convert
2017-09-02 10:34 - 2017-09-02 10:34 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\WinRAR
2017-09-02 10:34 - 2017-09-02 10:34 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-09-02 10:34 - 2017-09-02 10:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-09-02 10:32 - 2017-09-02 10:32 - 000933207 _____ C:\Users\BECKO\Downloads\Ford Sierra Cosworth Texturepack.rar
2017-09-02 10:29 - 2016-04-14 16:49 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2017-09-02 10:29 - 2016-04-09 07:20 - 001230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-09-02 10:10 - 2015-07-30 20:57 - 001987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2017-09-02 10:07 - 2015-12-09 00:54 - 002285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2017-09-02 10:06 - 2015-02-04 05:54 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2017-09-02 09:50 - 2017-09-02 09:50 - 000280064 _____ () C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe
2017-09-02 08:06 - 2017-09-02 08:06 - 000000032 ___SH C:\Windows\system32\build.conf
2017-09-02 08:06 - 2017-09-02 08:06 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\WindowsLoader
2017-09-02 08:04 - 2017-09-02 08:04 - 002883863 _____ C:\Users\BECKO\Downloads\Windows_7_Loader.zip
2017-09-02 07:06 - 2017-09-02 07:06 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\monect
2017-09-02 07:05 - 2017-09-25 10:00 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-02 07:04 - 2017-09-02 07:04 - 032690791 _____ C:\Users\BECKO\Downloads\PCRemoteReceiverSetup_5_6_0_1.zip
2017-09-02 04:16 - 2014-07-01 01:14 - 000008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2017-09-02 04:16 - 2014-03-10 00:47 - 000099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2017-09-02 04:15 - 2014-06-06 09:16 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-09-02 04:15 - 2014-03-10 00:47 - 000619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2017-09-02 04:14 - 2012-03-01 08:46 - 000019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2017-09-02 04:14 - 2012-03-01 08:29 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2017-09-02 03:23 - 2017-09-02 03:23 - 000645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2017-09-02 03:23 - 2017-09-02 03:23 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2017-09-02 03:23 - 2017-09-02 03:23 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2017-09-02 03:23 - 2017-09-02 03:23 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2017-09-02 03:22 - 2017-09-02 03:23 - 000616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2017-09-02 03:22 - 2017-09-02 03:22 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2017-09-02 03:22 - 2017-09-02 03:22 - 000139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2017-09-02 03:22 - 2017-09-02 03:22 - 000116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2017-09-02 03:22 - 2017-09-02 03:22 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2017-09-02 03:22 - 2017-09-02 03:22 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2017-09-02 03:22 - 2017-09-02 03:22 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2017-09-02 03:19 - 2017-09-02 03:19 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2017-09-02 03:14 - 2017-09-02 03:14 - 001158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 001080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2017-09-02 03:14 - 2017-09-02 03:14 - 000002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2017-09-02 03:10 - 2017-09-02 03:10 - 001505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2017-09-02 03:07 - 2015-07-30 16:13 - 000103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-09-01 23:07 - 2016-05-11 18:19 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2017-09-01 23:07 - 2016-02-09 12:50 - 000021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2017-09-01 23:07 - 2016-02-03 20:59 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2017-09-01 23:07 - 2013-07-03 06:36 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2017-09-01 23:07 - 2013-07-03 06:36 - 000025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2017-09-01 23:07 - 2013-02-12 06:32 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2017-09-01 23:06 - 2016-06-25 22:53 - 000297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-01 23:06 - 2016-06-25 22:53 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-09-01 23:06 - 2016-06-25 22:42 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-09-01 23:06 - 2016-06-25 22:41 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-01 23:06 - 2016-06-25 22:41 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-09-01 23:06 - 2016-02-04 21:41 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2017-09-01 23:06 - 2015-11-11 21:39 - 001242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-09-01 23:06 - 2015-11-11 21:39 - 000487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2017-09-01 23:06 - 2015-08-05 20:41 - 000751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2017-09-01 23:06 - 2015-07-09 20:42 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2017-09-01 23:06 - 2015-07-09 20:42 - 000179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2017-09-01 23:06 - 2014-11-11 05:44 - 000186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2017-09-01 23:06 - 2012-11-02 08:11 - 000376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2017-09-01 23:06 - 2011-03-03 08:38 - 000270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-09-01 23:06 - 2011-03-03 08:38 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-09-01 23:06 - 2011-03-03 08:36 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2017-09-01 23:05 - 2016-05-12 18:18 - 000606720 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2017-09-01 23:05 - 2016-05-12 18:18 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2017-09-01 23:05 - 2016-05-12 18:18 - 000351744 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2017-09-01 23:05 - 2016-05-12 18:18 - 000274944 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2017-09-01 23:05 - 2016-05-12 18:18 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2017-09-01 23:05 - 2016-05-12 18:18 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2017-09-01 23:05 - 2016-05-12 18:18 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2017-09-01 23:05 - 2016-05-12 17:57 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2017-09-01 23:05 - 2016-05-12 17:57 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2017-09-01 23:05 - 2015-07-15 20:55 - 001159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2017-09-01 23:05 - 2014-03-04 12:17 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2017-09-01 23:05 - 2013-10-19 04:36 - 000159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2017-09-01 23:05 - 2013-10-12 05:04 - 000121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2017-09-01 23:05 - 2013-10-12 05:03 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2017-09-01 23:05 - 2013-10-12 04:15 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2017-09-01 23:05 - 2013-10-12 04:15 - 000126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2017-09-01 23:05 - 2011-08-17 07:24 - 000465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2017-09-01 23:05 - 2011-08-17 07:19 - 000075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2017-09-01 23:03 - 2015-10-13 07:50 - 000712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-09-01 23:03 - 2014-09-04 08:04 - 000372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-09-01 23:02 - 2016-07-22 17:51 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2017-09-01 23:02 - 2016-01-22 09:04 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-09-01 23:02 - 2016-01-22 09:04 - 000535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2017-09-01 23:02 - 2015-11-03 21:55 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2017-09-01 23:02 - 2015-04-18 05:56 - 000342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-01 23:02 - 2015-03-04 07:10 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2017-09-01 23:02 - 2014-06-18 04:51 - 000646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2017-09-01 23:02 - 2013-05-13 06:08 - 000903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-09-01 23:02 - 2013-05-13 06:08 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2017-09-01 23:02 - 2012-07-05 00:16 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2017-09-01 23:02 - 2012-07-05 00:14 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2017-09-01 23:02 - 2012-07-05 00:14 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2017-09-01 23:01 - 2015-12-09 00:53 - 000509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-09-01 23:01 - 2015-04-13 06:19 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2017-09-01 23:01 - 2014-06-19 01:23 - 001131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2017-09-01 23:01 - 2014-06-19 01:23 - 000156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2017-09-01 23:01 - 2014-06-19 01:23 - 000081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2017-09-01 23:01 - 2011-08-27 07:26 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-09-01 23:01 - 2011-05-24 13:44 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2017-09-01 23:01 - 2011-02-12 08:35 - 000191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2017-09-01 23:01 - 2010-12-23 08:54 - 000850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-09-01 23:01 - 2010-12-23 08:50 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2017-09-01 23:00 - 2015-11-14 01:50 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2017-09-01 23:00 - 2015-11-14 01:50 - 000076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2017-09-01 23:00 - 2015-11-14 01:49 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2017-09-01 23:00 - 2015-11-05 22:02 - 000014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2017-09-01 23:00 - 2015-11-05 12:48 - 000117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2017-09-01 23:00 - 2015-07-15 05:55 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2017-09-01 23:00 - 2015-02-03 06:12 - 000171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2017-09-01 23:00 - 2014-12-19 05:43 - 000164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2017-09-01 23:00 - 2014-10-25 04:32 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2017-09-01 23:00 - 2014-07-17 04:40 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2017-09-01 23:00 - 2014-07-17 04:39 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-09-01 23:00 - 2014-07-17 04:39 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2017-09-01 23:00 - 2014-07-17 04:03 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2017-09-01 23:00 - 2013-10-12 05:03 - 000656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2017-09-01 23:00 - 2013-10-12 05:01 - 000679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-09-01 23:00 - 2013-10-12 05:01 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2017-09-01 23:00 - 2013-07-26 04:55 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-01 23:00 - 2013-07-12 13:07 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2017-09-01 23:00 - 2012-09-26 01:47 - 000078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2017-09-01 23:00 - 2012-04-26 07:45 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2017-09-01 23:00 - 2012-04-26 07:41 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2017-09-01 23:00 - 2012-03-17 10:27 - 000056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2017-09-01 23:00 - 2011-12-16 10:52 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2017-09-01 23:00 - 2011-06-15 11:55 - 000319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2017-09-01 23:00 - 2011-06-15 11:55 - 000163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2017-09-01 23:00 - 2011-06-15 11:55 - 000122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2017-09-01 23:00 - 2011-06-15 11:55 - 000086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2017-09-01 23:00 - 2011-06-15 11:55 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2017-09-01 22:59 - 2016-05-11 18:19 - 000351744 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-09-01 22:59 - 2016-05-11 18:19 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2017-09-01 22:59 - 2016-05-11 18:19 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2017-09-01 22:59 - 2016-05-11 18:01 - 000026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-01 22:59 - 2016-05-11 17:52 - 000188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-01 22:59 - 2015-12-09 00:54 - 001620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 001568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 001325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2017-09-01 22:59 - 2015-12-09 00:54 - 000739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2017-09-01 22:59 - 2015-12-09 00:54 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2017-09-01 22:59 - 2015-12-09 00:53 - 000829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2017-09-01 22:59 - 2015-12-09 00:53 - 000609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2017-09-01 22:59 - 2015-12-09 00:53 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2017-09-01 22:59 - 2015-12-09 00:53 - 000153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2017-09-01 22:59 - 2015-12-09 00:53 - 000067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2017-09-01 22:59 - 2015-12-09 00:53 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2017-09-01 22:59 - 2015-12-09 00:53 - 000004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2017-09-01 22:59 - 2015-12-09 00:43 - 000081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2017-09-01 22:59 - 2015-12-09 00:11 - 000177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2017-09-01 22:59 - 2015-12-09 00:11 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2017-09-01 22:59 - 2015-06-02 02:47 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2017-09-01 22:59 - 2015-04-24 20:56 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-09-01 22:59 - 2014-12-08 05:46 - 000308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2017-09-01 22:59 - 2014-12-06 06:50 - 000242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2017-09-01 22:59 - 2014-10-14 04:50 - 000523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2017-09-01 22:59 - 2013-06-26 01:56 - 000527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2017-09-01 22:59 - 2012-11-29 01:57 - 000047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2017-09-01 22:59 - 2012-11-29 01:57 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2017-09-01 22:59 - 2012-11-29 01:57 - 000000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2017-09-01 22:59 - 2012-10-03 19:42 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2017-09-01 22:59 - 2012-10-03 19:42 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2017-09-01 22:59 - 2011-03-11 08:33 - 001164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2017-09-01 22:59 - 2011-03-11 08:33 - 001137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2017-09-01 22:16 - 2012-02-17 08:34 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2017-09-01 22:16 - 2012-02-17 07:13 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2017-09-01 20:37 - 2017-09-01 20:37 - 000000000 ____D C:\Program Files\Analog Devices
2017-09-01 20:36 - 2017-09-01 20:36 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2017-09-01 20:36 - 2009-05-18 13:32 - 000381440 _____ (Analog Devices, Inc.) C:\Windows\system32\Drivers\ADIHdAud.sys
2017-09-01 20:36 - 2009-05-18 13:27 - 000032768 _____ (Analog Devices) C:\Windows\system32\adidrm.dll
2017-09-01 20:36 - 2009-01-27 16:08 - 000139264 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADIAPO.dll
2017-09-01 20:36 - 2008-07-15 13:09 - 000090112 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADISRV.EXE
2017-09-01 20:36 - 2008-02-28 16:17 - 000034304 _____ (Analog Devices, Inc.) C:\Windows\system32\SmaxCo.dll
2017-09-01 20:36 - 2007-12-05 07:56 - 000364544 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADIExt.dll
2017-09-01 20:36 - 2007-01-10 14:40 - 000050176 _____ (Andrea Electronics Corporation) C:\Windows\system32\AEADIAPR.dll
2017-09-01 20:35 - 2017-09-01 20:35 - 004695672 _____ (Lenovo Group Limited ) C:\Users\BECKO\Downloads\7ka216ww.exe
2017-09-01 20:29 - 2017-09-01 20:30 - 000000000 ____D C:\ProgramData\dllescort
2017-09-01 20:18 - 2017-09-01 20:18 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Google
2017-09-01 20:15 - 2017-09-01 20:15 - 000002207 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-01 20:15 - 2017-09-01 20:15 - 000002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-09-01 20:14 - 2017-09-03 07:24 - 000058016 _____ C:\Users\BECKO\AppData\Local\GDIPFONTCACHEV1.DAT
2017-09-01 20:14 - 2017-09-01 20:38 - 000000000 ____D C:\Users\BECKO\AppData\Local\Google
2017-09-01 20:14 - 2017-09-01 20:15 - 000000000 ____D C:\Program Files\Google
2017-09-01 20:14 - 2017-09-01 20:14 - 000000000 ____D C:\Users\BECKO\AppData\Local\Deployment
2017-09-01 20:14 - 2017-09-01 20:14 - 000000000 ____D C:\Users\BECKO\AppData\Local\Apps\2.0
2017-09-01 20:11 - 2017-09-03 17:27 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Adobe
2017-09-01 20:11 - 2017-09-01 20:11 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Macromedia
2017-09-01 20:10 - 2017-09-01 20:10 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-09-01 20:10 - 2017-09-01 20:10 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-09-01 20:09 - 2017-09-01 20:10 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-01 19:51 - 2017-09-01 19:18 - 000000000 ____D C:\Windows\Panther
2017-09-01 19:37 - 2017-09-01 19:37 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2017-09-01 19:19 - 2017-09-01 19:19 - 000001393 _____ C:\Users\BECKO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-09-01 19:18 - 2017-09-24 12:45 - 000000000 ____D C:\Users\BECKO
2017-09-01 19:18 - 2017-09-20 11:03 - 000000000 ____D C:\Users\BECKO\AppData\Local\VirtualStore
2017-09-01 19:18 - 2017-09-01 19:18 - 000000020 ___SH C:\Users\BECKO\ntuser.ini
2017-09-01 19:18 - 2011-04-12 04:36 - 000000000 ____D C:\Users\BECKO\AppData\Roaming\Media Center Programs
2017-09-01 18:59 - 2017-09-01 18:59 - 000001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-09-01 18:58 - 2017-09-01 18:58 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-09-01 18:57 - 2017-09-01 18:57 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2017-08-30 17:29 - 2017-08-31 17:45 - 000000000 ____D C:\3590F75ABA9E485486C100C1A9D4FF06Z.Z...ZZZ...Z.ZZ

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-25 09:55 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\inf
2017-09-25 03:28 - 2009-07-14 07:34 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-25 03:28 - 2009-07-14 07:34 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-24 18:44 - 2017-08-01 08:22 - 000000000 ____D C:\Program Files\Cheat Engine 6.7
2017-09-24 12:21 - 2009-07-14 05:37 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-09-24 12:17 - 2009-07-14 07:52 - 000000000 ____D C:\Program Files\MSBuild
2017-09-22 13:27 - 2009-07-14 07:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-22 09:46 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\NDF
2017-09-18 18:22 - 2009-07-14 07:52 - 000000000 ____D C:\Windows\Downloaded Program Files
2017-09-05 19:48 - 2016-09-16 12:58 - 000000000 ____D C:\Intel
2017-09-05 18:17 - 2010-11-21 00:01 - 000765700 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-04 23:26 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\rescache
2017-09-04 03:39 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\AppCompat
2017-09-03 17:33 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-09-03 03:34 - 2009-07-14 07:33 - 000267016 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-03 03:30 - 2009-07-14 07:52 - 000000000 ____D C:\Program Files\DVD Maker
2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\tracing
2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\migwiz
2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\Dism
2017-09-03 03:30 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2017-09-02 09:42 - 2009-07-14 05:37 - 000000000 ____D C:\Program Files\Common Files\System
2017-09-02 09:41 - 2009-07-14 07:52 - 000000000 ____D C:\Program Files\Windows Defender
2017-09-01 19:56 - 2009-07-14 05:37 - 000000000 __RHD C:\Users\Public\Libraries
2017-09-01 19:51 - 2009-07-14 07:52 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2017-09-01 18:58 - 2009-07-14 07:52 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-09-01 18:58 - 2009-07-14 05:37 - 000000000 ____D C:\Windows\system32\sysprep
2017-09-01 18:53 - 2011-04-12 04:37 - 000000000 ____D C:\Windows\CSC

==================== Files in the root of some directories =======

2017-09-02 09:50 - 2017-09-02 09:50 - 000280064 _____ () C:\Users\BECKO\AppData\Roaming\8b5a5cb069b1cfec65bffb9aafc26fad.exe

Some files in TEMP:
====================
2017-09-20 15:53 - 2017-09-20 15:54 - 006087840 _____ (Innovative Solutions                                        ) C:\Users\BECKO\AppData\Local\Temp\tmp-drivermax9399034.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-09-20 03:59

==================== End of FRST.txt ============================

 

Addition_25-09-2017 12.25.58.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Здравейте...! Системата ви е заразена...!

Преди да започнем, моля, прочетете и искрено се надявам да следвате тези важни насоки, така че нещата да преминат  плавно и безпроблемно.

  • Инструкциите които ще Ви  давам, ще са само за вашия компютър и само за вашата система! Използването на тези инструкции на друг компютър могат да доведат до увреждане на този компютър и евентуално да го направи неизползваем !
  • Моля да следвате инструкциите ми в реда в който ги давам.
  • Трябва да имате права на администратор за този компютър,инструментите които ще използваме се стартират единствено от името на администратор.
  • Не стартирайте никакви други инструменти за премахване на зловреден софтуер, освен ако не сте инструктирани!
  • Не инсталирайте  софтуер (или хардуер) по време на процеса на почистване,както и не сваляйте или сканирай те с нищо  вашата система, защото към нея се  добавят повече елементи.Това прави анализа по-труден.
  • Вашите програми за сигурност могат да дават предупреждения за някои от инструментите които използваме.  Бъдете сигурни, всички връзки които давам за изтегляне на инструментите както и самите те, са безопасни.
  •  Моля,по възможност да отговаряте в темата  докато не ви потвърдя че тя е  " Чиста !"
  • Липсата на симптоми не означава, че всичко е чисто.

Моля, имайте предвид, че премахването на зловреден софтуер е непредвидим процес.. Аз ще се погрижа да ви  предложа начини на действие, които не могат да повредят вашия компютър. Въпреки това, за мен е невъзможно да  предвидя всички взаимодействия, които могат да се случат между софтуера на компютъра ви и инструментите които ще използваме , за да ви изчистим от инфекции, и в някои случаи аз не мога да  гарантирам целостта на вашата система. Възможно е, да възникнат ситуации, в които единственото решение е системата ви да се  форматира и да се преинсталира операционната система.Поради тази причина аз ви съветвам  да направите резервно копие на всички ваши лични файлове и папки, преди да започнем с почистването.

 

  • И последно и аз съм човек и  не съм всезнаещ. Има неща, които дори не мога да предвидя. Но това, което знам, отне години, за да науча и усъвършенствам . Аз и екипът ни напълно доброволно помагаме на хората в нужда използвайки собственото си свободно време. Бих искал да уважавате това и да бъдете търпеливи, тъй като понякога реалният живот изисква нашето време и отговорите ви могат да бъдат забавени. Благодаря..!

 

 

Фикс с Farbar Recovery Scan Tool
 
icon13.gif Изтеглете прикачения файл fixlist.txt и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Press%20the%20FIX%20button_zpsdd5zi3mt.p


Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

pfNZP4A.png  Дневници
 
В следващия си отговор, моля да включите следните дневници:

  • FixLog.txt

 

  • Харесва ми 2

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

До тук добре..! 

 

Сканиране с TDSSKiller
 
kaspersky.gif  Моля, изтеглете последната версия на TDSSKiller оттук и я запазете на вашиядекстоп (задължително).
 

  • Кликнете на TDSSKiller.exe за да стартирате приложението
  • Натиснете бутона Start Scan.
  •  Не използвайте компютъра по време на сканирането
  •  Ако сканирането завърши с нищо не е намерено, щракнете върху Затвори, за да излезете.
  • Проверката не би трябвало да отмене повече от 2 минути.
  • Ако подозрителен обект бъде засечен, действието по подразбиране ще бъде Skip, кликнете върху Continue.
  • Ако зловредни обекти бъдат намерени, тогава от падащото меню ще имате три възможности.
    Бъдете сигурни, че избраното действие е Cure и натиснете върху Continue >Рестартирайте за да бъде завършена поправката.

    Забележка: Ако Cure бутона не е наличен от възможностите, тогава моля изберете Skip бутона, не избирайте Delete освен ако не сте инструктирани затова.

Лог файл ще бъде създаден в свободната директория на дял C: . Потърсете за лог с името "TDSSKiller.[Version]_[Date]_[Time]_log.txt" и копирайте съдържанието му в следващия си пост.
 

 

GfiJrQ9.png&key=c8330b952021a3c1e5ae3771  Сканиране с Malwarebytes Anti-Malware (MBAM)

Моля изтеглете Malwarebytes Anti-Malware 3.2.2.2018 Final и я запазете на вашиядесктоп.

  • Стартирайте файла mb3-setup-consumer-3.2.2.2018.exe и следвайте указанията за да инсталирате програмата.
  • След като инсталацията приключи програмата ще стартира автоматично.
  • Отидете до табът Settings => Protection > и под категорията Scan Options включете опцията "Scan for rootkits" като преместите плъзгача надясно.

xTvORSF.png

  • Отидете до табът Scan, и изберете Threat Scan и след това натиснете бутона Start Scan.

RUSrqgW.png

  • Ще започне проверка за зловреден софтуер.

4CJ90KI.png

  • При някои инфекции можете да видите съобщението:
  • "Could not load DDA driver"
  • Натиснете "Yes" на това съобщение за да позволите драйвера да се зареди след рестарт.
  • Разрешете на компютъра да се рестартира и след това продължете с останалите инструкции.
  • След като проверката приключи ще се появи списъка с резултатите (ако има намерени обекти). Ако програмата е минимизирана докато сканира ще се появи следното съобщение ако има открити заплахи. Натиснете бутона View Scan Results.

37b.png

  • . Натиснете бутона Quarantine Selected.

2CfXEk1.png

  • Изчакайте да се появи прозореца подканващ ви да рестартирате и след това натиснете бутона Yes.

8Jc9dl9.png

  • След рестарта, стартирайте отново Malwarebytes Anti-Malware.
  • Отидете то табът Reports и отворете лог файла с името Scan Report.

X0ha4sd.png

  • Натиснете бутона Export и след това =>  "Copy to Clipboard"

fE9qzai.png

  • Сега вече поставете съдържанието на лог файла с клавишната комбинация Ctrl + Vи го публикувайте в следващия си коментар.

 

 

Моля, изтеглете  Zemana AntiMalware и го запишете на вашия работен плот.

  • Инсталирайте програмата и след като инсталацията приключи, тя ще се стартира автоматично.
  • Без да промените каквито и опции, натиснете Scan, за да започне проверката
  • След кратко сканирането приключи, ако са открити заплахи натиснете Nextза да ги премахнете.

Забележка: Ако се изиска рестартиране, за да завършите процеса на почистване, трябва да щракнете върху Reboot . Ако не се изисква рестартиране, моля рестартирайте компютъра ръчно.

  • Отворете  Zemana AntiMalware отново.
  • Кликнете върху  икона 4zu6vb.jpg%26hash=75480eb893db9c3a1688f7 и кликнете два пъти върху последния доклад.
  • Сега кликнете File > Save As  и изберете своя Desktop преди да натиснете Save.
  • Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

BY4dvz9.png&key=992d36375b1cf5804f0d930b Сканиране с AdwCleaner

 Моля, изтеглете и стартирайте програмата Malwarebytes AdwCleaner (by Xplode):

  • Затворете всички стартирани програми и браузъри
  • Кликнете два пъти върху adwcleaner.exe за да стартирате инструмента.
  • Натиснете OK, за да потвърдите, че всички стартирани програми ще бъдат затворени.
  • Маркирайте A49sxPr.png&key=7d42c944db3a9dc7816ca2d4 Scan (провери).
  • След завършване, кликнете на Logfile (дневник).Ще се отвори прозорец в който се намира дневника (AdwCleaner [S0] .txt).Кликнете два пъти върх реда и ще се отвори съдържанието на дневника.Публикувайте го в следващия си пост
  • Върнете се към основния прозорец на AdwCleaner .маркирайте MqHawIb.png&key=91dc06ab9c0f7f240b663fd5Clean (Почисти)
  • Следвайте указанията и разрешете на компютъра да се рестартира.
  • След рестарта ще се отвори дневник AdwCleaner[C0].txt . Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

E3feWj5.png&key=eafed70e5e279c4af1b45a99  Сканиране с Junkware Removal Tool 

 

Моля, изтеглете Junkware Removal Tool (by Thisisu ) и запазете на вашия десктоп.

  • Спрете временно работата на защитните програми.
  • Стартирайте инструмента JRT.exe
  • Ще се отвори ДОС прозорец. Натиснете което и да е копче от клавиатурата.
  • Затворете излишните приложения и всички браузъри и изчакайте проверката да завърши.
  • Ще се появи лог файл (който можете да намерите и ръчно на десктопа с името JRT.txt).
  • Моля копирайте съдържанието на лог файла в следващия си пост.

 

 

pfNZP4A.png&key=0a487e0a7cff89c690a32d13  Дневници 

В следващия си отговор, моля да включите (като копирате целите съдържания ) следните дневници:

  • TDSSKiller.[Version]_[Date]_[Time]_log
  • Дневник от Zemana AntiMalware
  • Дневник от Malwarebytes Anti -Malware
  • AdwCleaner.txt
  • JRT.txt
     
  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Ето ги

 10:10:46.0779 0x0e20  TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02
10:10:52.0886 0x0e20  ============================================================
10:10:52.0886 0x0e20  Current date / time: 2017/09/26 10:10:52.0886
10:10:52.0886 0x0e20  SystemInfo:
10:10:52.0886 0x0e20  
10:10:52.0886 0x0e20  OS Version: 6.1.7601 ServicePack: 1.0
10:10:52.0886 0x0e20  Product type: Workstation
10:10:52.0886 0x0e20  ComputerName: BECKO-PC
10:10:52.0887 0x0e20  UserName: BECKO
10:10:52.0887 0x0e20  Windows directory: C:\Windows
10:10:52.0887 0x0e20  System windows directory: C:\Windows
10:10:52.0887 0x0e20  Processor architecture: Intel x86
10:10:52.0887 0x0e20  Number of processors: 1
10:10:52.0887 0x0e20  Page size: 0x1000
10:10:52.0887 0x0e20  Boot type: Normal boot
10:10:52.0887 0x0e20  CodeIntegrityOptions = 0x00000000
10:10:52.0888 0x0e20  ============================================================
10:10:55.0987 0x0e20  KLMD registered as C:\Windows\system32\drivers\11837509.sys
10:10:55.0988 0x0e20  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23864, osProperties = 0x0
10:10:56.0270 0x0e20  System UUID: {9956C584-438C-0120-47DF-9D64FFD71016}
10:10:57.0432 0x0e20  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xFC59, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
10:10:57.0473 0x0e20  ============================================================
10:10:57.0473 0x0e20  \Device\Harddisk0\DR0:
10:10:57.0474 0x0e20  MBR partitions:
10:10:57.0474 0x0e20  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
10:10:57.0474 0x0e20  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xC834000
10:10:57.0474 0x0e20  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC866800, BlocksNum 0x2DA3E000
10:10:57.0474 0x0e20  ============================================================
10:10:57.0509 0x0e20  C: <-> \Device\Harddisk0\DR0\Partition3
10:10:57.0545 0x0e20  D: <-> \Device\Harddisk0\DR0\Partition2
10:10:57.0565 0x0e20  F: <-> \Device\Harddisk0\DR0\Partition1
10:10:57.0565 0x0e20  ============================================================
10:10:57.0565 0x0e20  Initialize success
10:10:57.0565 0x0e20  ============================================================
10:11:21.0536 0x0708  ============================================================
10:11:21.0536 0x0708  Scan started
10:11:21.0536 0x0708  Mode: Manual; 
10:11:21.0537 0x0708  ============================================================
10:11:21.0537 0x0708  KSN ping started
10:11:21.0891 0x0708  KSN ping finished: true
10:11:24.0652 0x0708  ================ Scan system memory ========================
10:11:24.0652 0x0708  System memory - ok
10:11:24.0657 0x0708  ================ Scan services =============================
10:11:24.0870 0x0708  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
10:11:24.0883 0x0708  1394ohci - ok
10:11:24.0942 0x0708  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
10:11:24.0963 0x0708  ACPI - ok
10:11:25.0003 0x0708  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
10:11:25.0006 0x0708  AcpiPmi - ok
10:11:25.0083 0x0708  [ 6C61BCEB60C2C187E6F96001FD69493E, AB8752E7DCCE134CA63D2E660D3E2688086426167B9E8E2C24E0D45B87497774 ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
10:11:25.0117 0x0708  ADIHdAudAddService - ok
10:11:25.0176 0x0708  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
10:11:25.0206 0x0708  adp94xx - ok
10:11:25.0260 0x0708  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\drivers\adpahci.sys
10:11:25.0282 0x0708  adpahci - ok
10:11:25.0315 0x0708  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\drivers\adpu320.sys
10:11:25.0327 0x0708  adpu320 - ok
10:11:25.0393 0x0708  [ 4DC6B0772D1698F04FC79053A21C8260, 010D4660DB9F7BC49C72691B5D9936EAB6F4A0799374B4019B97343B517D86F4 ] AEADIFilters    C:\Windows\system32\AEADISRV.EXE
10:11:25.0401 0x0708  AEADIFilters - ok
10:11:25.0441 0x0708  [ 39AEAECE9F42407F176FE130D790BFBE, 19010DF87BDC1884268098CC04B4B15ECB710C94054A57157C0F9B7A795BDB28 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
10:11:25.0447 0x0708  AeLookupSvc - ok
10:11:25.0532 0x0708  [ F582FC7976F1248AC5FBD6875C626B41, E65532B4E9924ECFF892C0A62312CBC070BFF7B1C4737E6CF8C4ED638BCD030F ] AFD             C:\Windows\system32\drivers\afd.sys
10:11:25.0557 0x0708  AFD - ok
10:11:25.0605 0x0708  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
10:11:25.0610 0x0708  agp440 - ok
10:11:26.0009 0x0708  [ 078B785A7533B7059A236017B3B060A4, 43B3E716009136A5A5A86BF8546DE6C416CA3B7F8EEC242D9D44EF12111B7A6E ] AGSService      C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
10:11:26.0205 0x0708  AGSService - ok
10:11:26.0288 0x0708  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\drivers\djsvs.sys
10:11:26.0295 0x0708  aic78xx - ok
10:11:26.0351 0x0708  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
10:11:26.0357 0x0708  ALG - ok
10:11:26.0417 0x0708  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
10:11:26.0421 0x0708  aliide - ok
10:11:26.0450 0x0708  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
10:11:26.0456 0x0708  amdagp - ok
10:11:26.0481 0x0708  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
10:11:26.0484 0x0708  amdide - ok
10:11:26.0520 0x0708  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
10:11:26.0526 0x0708  AmdK8 - ok
10:11:26.0560 0x0708  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
10:11:26.0566 0x0708  AmdPPM - ok
10:11:26.0609 0x0708  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
10:11:26.0617 0x0708  amdsata - ok
10:11:26.0694 0x0708  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
10:11:26.0707 0x0708  amdsbs - ok
10:11:26.0731 0x0708  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
10:11:26.0736 0x0708  amdxata - ok
10:11:26.0787 0x0708  [ 619005EB05113331F0081369C4488F9A, CAACE2655ECE0A40DE4FE38DB81E756D679B9C20CC8C74BE4690C3749BE5EB93 ] AppID           C:\Windows\system32\drivers\appid.sys
10:11:26.0793 0x0708  AppID - ok
10:11:26.0836 0x0708  [ D9E60A9B4C9C673CFBAB4389282AF44B, 329181A930EAF9E6ECE274D0A095B9BE346AE1A401EDF987FA0B2C73CC1D29D2 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
10:11:26.0843 0x0708  AppIDSvc - ok
10:11:26.0882 0x0708  [ 5EDA6BA186D1B05D5EF4E96F81F3F3EF, B815998ED90E4AC8F4394992082E1F05076CA07C868A15E616C291DCAAF8A000 ] Appinfo         C:\Windows\System32\appinfo.dll
10:11:26.0888 0x0708  Appinfo - ok
10:11:26.0955 0x0708  [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt         C:\Windows\System32\appmgmts.dll
10:11:26.0970 0x0708  AppMgmt - ok
10:11:27.0014 0x0708  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\drivers\arc.sys
10:11:27.0021 0x0708  arc - ok
10:11:27.0057 0x0708  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\drivers\arcsas.sys
10:11:27.0065 0x0708  arcsas - ok
10:11:27.0192 0x0708  [ 03FD2243A539C7153EF62CE10D1816F1, BE72DD2CB62B27F6BF0CEC03AE23A7D63876D6442A781E2E595EE3E64C18EBD4 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
10:11:27.0223 0x0708  aspnet_state - ok
10:11:27.0265 0x0708  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
10:11:27.0269 0x0708  AsyncMac - ok
10:11:27.0304 0x0708  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys
10:11:27.0307 0x0708  atapi - ok
10:11:27.0427 0x0708  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
10:11:27.0470 0x0708  AudioEndpointBuilder - ok
10:11:27.0523 0x0708  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] Audiosrv        C:\Windows\System32\Audiosrv.dll
10:11:27.0551 0x0708  Audiosrv - ok
10:11:27.0614 0x0708  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
10:11:27.0622 0x0708  AxInstSV - ok
10:11:27.0687 0x0708  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\drivers\bxvbdx.sys
10:11:27.0726 0x0708  b06bdrv - ok
10:11:27.0792 0x0708  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
10:11:27.0809 0x0708  b57nd60x - ok
10:11:27.0866 0x0708  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
10:11:27.0873 0x0708  BDESVC - ok
10:11:27.0906 0x0708  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
10:11:27.0909 0x0708  Beep - ok
10:11:27.0979 0x0708  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll
10:11:28.0014 0x0708  BFE - ok
10:11:28.0097 0x0708  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
10:11:28.0143 0x0708  BITS - ok
10:11:28.0170 0x0708  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
10:11:28.0176 0x0708  blbdrive - ok
10:11:28.0223 0x0708  [ 28AF7D4427868B7CE4C00CAB1864C7F6, AAE5303878AF0F7AA18069A8FCD99639EBC34622B456AF86C5E4F27858196E06 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
10:11:28.0230 0x0708  bowser - ok
10:11:28.0264 0x0708  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
10:11:28.0267 0x0708  BrFiltLo - ok
10:11:28.0292 0x0708  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
10:11:28.0295 0x0708  BrFiltUp - ok
10:11:28.0357 0x0708  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll
10:11:28.0367 0x0708  Browser - ok
10:11:28.0415 0x0708  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
10:11:28.0435 0x0708  Brserid - ok
10:11:28.0462 0x0708  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
10:11:28.0475 0x0708  BrSerWdm - ok
10:11:28.0505 0x0708  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
10:11:28.0508 0x0708  BrUsbMdm - ok
10:11:28.0531 0x0708  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
10:11:28.0533 0x0708  BrUsbSer - ok
10:11:28.0557 0x0708  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
10:11:28.0562 0x0708  BTHMODEM - ok
10:11:28.0622 0x0708  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
10:11:28.0629 0x0708  bthserv - ok
10:11:28.0673 0x0708  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
10:11:28.0680 0x0708  cdfs - ok
10:11:28.0715 0x0708  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
10:11:28.0731 0x0708  cdrom - ok
10:11:28.0792 0x0708  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll
10:11:28.0799 0x0708  CertPropSvc - ok
10:11:28.0829 0x0708  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\drivers\circlass.sys
10:11:28.0835 0x0708  circlass - ok
10:11:28.0892 0x0708  [ 000B58009E5D0962C0A71D6477029A3F, 2696398A42B399AEE9F9F0FB26610BB9F50F9EC784EC80F78FF6DD3D6E892ADA ] CLFS            C:\Windows\system32\CLFS.sys
10:11:28.0910 0x0708  CLFS - ok
10:11:28.0989 0x0708  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:11:28.0997 0x0708  clr_optimization_v2.0.50727_32 - ok
10:11:29.0061 0x0708  [ 2BA609641FA64BAB02ACD3C0095672F5, FD1FE403864F0564CA4A2F1D7415649B8FFE16F8ED33C4B44ACB21767118AD5F ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
10:11:29.0291 0x0708  clr_optimization_v4.0.30319_32 - ok
10:11:29.0336 0x0708  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
10:11:29.0339 0x0708  CmBatt - ok
10:11:29.0371 0x0708  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
10:11:29.0373 0x0708  cmdide - ok
10:11:29.0441 0x0708  [ 7F7D4B16389CEF932950F6B2604D2601, E7C32734DAA75A00866A0F961C945BF7CC7A29D3A9806041D0046BC9FD3ACC5A ] CNG             C:\Windows\system32\Drivers\cng.sys
10:11:29.0468 0x0708  CNG - ok
10:11:29.0509 0x0708  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
10:11:29.0513 0x0708  Compbatt - ok
10:11:29.0567 0x0708  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
10:11:29.0572 0x0708  CompositeBus - ok
10:11:29.0597 0x0708  COMSysApp - ok
10:11:29.0629 0x0708  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
10:11:29.0633 0x0708  crcdisk - ok
10:11:29.0709 0x0708  [ AAE96A2A48C7332310C1C28A1D466761, 7279E23A46353BC3D8A1B949B14F11DA689E73D033CD24C8E82613CCFD76E4EA ] CryptSvc        C:\Windows\system32\cryptsvc.dll
10:11:29.0721 0x0708  CryptSvc - ok
10:11:29.0802 0x0708  [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC             C:\Windows\system32\drivers\csc.sys
10:11:29.0830 0x0708  CSC - ok
10:11:29.0900 0x0708  [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService      C:\Windows\System32\cscsvc.dll
10:11:29.0943 0x0708  CscService - ok
10:11:30.0022 0x0708  [ 18E8C40C3C2AB0D315331677823555C0, F7BEF402CCAAF6B372199BF12507FAC22FF04DFE2E54DDD59E6E02E4981C9190 ] DcomLaunch      C:\Windows\system32\rpcss.dll
10:11:30.0054 0x0708  DcomLaunch - ok
10:11:30.0116 0x0708  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
10:11:30.0134 0x0708  defragsvc - ok
10:11:30.0200 0x0708  [ EA9DBD76CE9254C77BAAB4339DD4C4FB, ECEE6EB8CFE1BD20BC7B6ED29A1624DDC3E22A37A56BA43B9B14E37D4003B72D ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
10:11:30.0208 0x0708  DfsC - ok
10:11:30.0259 0x0708  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
10:11:30.0287 0x0708  Dhcp - ok
10:11:30.0421 0x0708  [ 58F9BFBAE3C25D1A349DF0C6ECE8F9DF, FF1CFC9B323BCE2CFC06F9B2A98A29396832134FD61A570C1971A7240899E526 ] DiagTrack       C:\Windows\system32\diagtrack.dll
10:11:30.0503 0x0708  DiagTrack - ok
10:11:30.0562 0x0708  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
10:11:30.0567 0x0708  discache - ok
10:11:30.0640 0x0708  [ B7B470F163002A0D0E381EE45834BF6B, 5B5E204341A6B1689C3F8717C41782B1A077A026F8B19DA3DE08CA44AB1D95B2 ] Disk            C:\Windows\system32\drivers\disk.sys
10:11:30.0645 0x0708  Disk - ok
10:11:30.0691 0x0708  [ 2A958EF85DB1B61FFCA65044FA4BCE9E, C83511685EE1CE85A5ADF9B5BE96C375A521601F66024BDC3EE044C0B6E85D69 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
10:11:30.0712 0x0708  dmvsc - ok
10:11:30.0778 0x0708  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
10:11:30.0790 0x0708  Dnscache - ok
10:11:30.0840 0x0708  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll
10:11:30.0857 0x0708  dot3svc - ok
10:11:30.0919 0x0708  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll
10:11:30.0931 0x0708  DPS - ok
10:11:30.0989 0x0708  [ A3F684B866A7D89AE396276CE7AFD416, 1E4C034B7B106FA403B13842A199D88A33B492A577B58CDDAE0B4706266B9565 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
10:11:30.0993 0x0708  drmkaud - ok
10:11:31.0103 0x0708  [ 897AE9430D037B056CF76A49CF588542, 02767A3CF7AFF9ECF251808DF2B3B4CABFBDF3EF59E15498B0985298991D8B91 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
10:11:31.0156 0x0708  DXGKrnl - ok
10:11:31.0222 0x0708  [ 377AD53E4154477339290B4212E69D53, CFB201699CBB9416963973DB2E45810760BEBABAE684EC06E35495601A8A10AF ] e1express       C:\Windows\system32\DRIVERS\e1e6232.sys
10:11:31.0239 0x0708  e1express - ok
10:11:31.0296 0x0708  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
10:11:31.0306 0x0708  EapHost - ok
10:11:31.0623 0x0708  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\drivers\evbdx.sys
10:11:31.0882 0x0708  ebdrv - ok
10:11:31.0946 0x0708  [ 478D434C9E51F7DB665817A23994A5E8, 4E3B06EF30DDF401B457BB856AD7B4A6A1BCF56ECA6B224AB69F0061C8F4CFC4 ] EFS             C:\Windows\System32\lsass.exe
10:11:31.0953 0x0708  EFS - ok
10:11:32.0049 0x0708  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
10:11:32.0098 0x0708  ehRecvr - ok
10:11:32.0131 0x0708  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
10:11:32.0140 0x0708  ehSched - ok
10:11:32.0210 0x0708  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
10:11:32.0249 0x0708  elxstor - ok
10:11:32.0283 0x0708  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
10:11:32.0286 0x0708  ErrDev - ok
10:11:32.0365 0x0708  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
10:11:32.0387 0x0708  EventSystem - ok
10:11:32.0440 0x0708  [ 53E8732CC70CC0991839DF9FC8996E4A, D14F6CAAF1F71647F12C6BDF1CD3EE7ADFAB0B292760AC197B876F0868853A72 ] exfat           C:\Windows\system32\drivers\exfat.sys
10:11:32.0452 0x0708  exfat - ok
10:11:32.0496 0x0708  [ 24F422E5D7517FEBDA2324116F1A7BE6, 3D54FFB59F7E4F9CC1189D8808B1F17EE7C4A6DE2A13C74CA5B6A47D5E759C53 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
10:11:32.0508 0x0708  fastfat - ok
10:11:32.0584 0x0708  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe
10:11:32.0625 0x0708  Fax - ok
10:11:32.0690 0x0708  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\drivers\fdc.sys
10:11:32.0694 0x0708  fdc - ok
10:11:32.0727 0x0708  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
10:11:32.0733 0x0708  fdPHost - ok
10:11:32.0758 0x0708  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
10:11:32.0764 0x0708  FDResPub - ok
10:11:32.0793 0x0708  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
10:11:32.0799 0x0708  FileInfo - ok
10:11:32.0830 0x0708  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
10:11:32.0835 0x0708  Filetrace - ok
10:11:32.0859 0x0708  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
10:11:32.0862 0x0708  flpydisk - ok
10:11:32.0901 0x0708  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
10:11:32.0916 0x0708  FltMgr - ok
10:11:33.0046 0x0708  [ B5259B75BFDE00A5CDFD8D70444C8E3C, 3526602AA212B43351644AFB91E0D9CEFB778461BAAD2331B6BBF76FB14EEE86 ] FontCache       C:\Windows\system32\FntCache.dll
10:11:33.0119 0x0708  FontCache - ok
10:11:33.0217 0x0708  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
10:11:33.0224 0x0708  FontCache3.0.0.0 - ok
10:11:33.0268 0x0708  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
10:11:33.0274 0x0708  FsDepends - ok
10:11:33.0326 0x0708  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
10:11:33.0329 0x0708  Fs_Rec - ok
10:11:33.0398 0x0708  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
10:11:33.0413 0x0708  fvevol - ok
10:11:33.0474 0x0708  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
10:11:33.0481 0x0708  gagp30kx - ok
10:11:33.0591 0x0708  [ 8DA745095F6B73BB5B8266BF773DA1FA, 3EA614A9B8D4F61704A8754B014C8F6AC60551435BC4D9F2E761955905DA89F3 ] gpsvc           C:\Windows\System32\gpsvc.dll
10:11:33.0644 0x0708  gpsvc - ok
10:11:33.0713 0x0708  [ 0545A3EB959CFA4790D267BFB8C1ACA4, 69061E33ACB7587D773D05000390F9101F71DFD6EED7973B551594EAF3F04193 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
10:11:33.0725 0x0708  gupdate - ok
10:11:33.0751 0x0708  [ 0545A3EB959CFA4790D267BFB8C1ACA4, 69061E33ACB7587D773D05000390F9101F71DFD6EED7973B551594EAF3F04193 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
10:11:33.0763 0x0708  gupdatem - ok
10:11:33.0833 0x0708  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
10:11:33.0837 0x0708  hcw85cir - ok
10:11:33.0924 0x0708  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
10:11:33.0947 0x0708  HdAudAddService - ok
10:11:33.0986 0x0708  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
10:11:33.0995 0x0708  HDAudBus - ok
10:11:34.0038 0x0708  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
10:11:34.0042 0x0708  HidBatt - ok
10:11:34.0073 0x0708  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\drivers\hidbth.sys
10:11:34.0081 0x0708  HidBth - ok
10:11:34.0158 0x0708  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\drivers\hidir.sys
10:11:34.0162 0x0708  HidIr - ok
10:11:34.0211 0x0708  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\system32\hidserv.dll
10:11:34.0219 0x0708  hidserv - ok
10:11:34.0278 0x0708  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
10:11:34.0281 0x0708  HidUsb - ok
10:11:34.0322 0x0708  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
10:11:34.0331 0x0708  hkmsvc - ok
10:11:34.0375 0x0708  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
10:11:34.0394 0x0708  HomeGroupListener - ok
10:11:34.0451 0x0708  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
10:11:34.0469 0x0708  HomeGroupProvider - ok
10:11:34.0519 0x0708  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
10:11:34.0526 0x0708  HpSAMD - ok
10:11:34.0657 0x0708  [ 7BC42C65B5C6281777C1A7605B253BA8, 71885EB4E8625450ECA4623466FB3D5437DAABE739A5DC3B5F4CF982A65F8A86 ] HSF_DPV         C:\Windows\system32\DRIVERS\HSX_DPV.sys
10:11:34.0733 0x0708  HSF_DPV - ok
10:11:34.0778 0x0708  [ 9EBF2D102CCBB6BCDFBF1B7922F8BA2E, A11CE324DD8E8BDFFDF513429C32D3C16EC79DC9A7517048587759B26BF38583 ] HSXHWAZL        C:\Windows\system32\DRIVERS\HSXHWAZL.sys
10:11:34.0794 0x0708  HSXHWAZL - ok
10:11:34.0891 0x0708  [ 2F50E2780F16E00369F1311B086C3E42, F3FAE2D965D055810775B7AAE7BF1C4C39961A64E42B345FC604D32F3AC7E7DA ] HTTP            C:\Windows\system32\drivers\HTTP.sys
10:11:34.0930 0x0708  HTTP - ok
10:11:34.0968 0x0708  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
10:11:34.0971 0x0708  hwpolicy - ok
10:11:35.0034 0x0708  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
10:11:35.0042 0x0708  i8042prt - ok
10:11:35.0152 0x0708  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
10:11:35.0178 0x0708  iaStorV - ok
10:11:35.0238 0x0708  [ 6794C9AD8B6EC476D528EE154B281D3B, 679000B0C3BDD60D82D5B805317397EF3897E3CA42C73D5132E95A3DB9F98079 ] IBMPMDRV        C:\Windows\system32\DRIVERS\ibmpmdrv.sys
10:11:35.0245 0x0708  IBMPMDRV - ok
10:11:35.0282 0x0708  [ 0D95FF6AB4FFD942FDA73D59C019459F, 5EC3E3EE9C93F5CE3D275494356850BF686219591B22B1934792E72D831A2E1A ] IBMPMSVC        C:\Windows\system32\ibmpmsvc.exe
10:11:35.0298 0x0708  IBMPMSVC - ok
10:11:35.0417 0x0708  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:11:35.0480 0x0708  idsvc - ok
10:11:35.0505 0x0708  IEEtwCollectorService - ok
10:11:35.0955 0x0708  [ 9467514EA189475A6E7FDC5D7BDE9D3F, E6F5B99BF6B614832770F9310B06334A8174C7660DDEC7589433640527A14683 ] igfx            C:\Windows\system32\DRIVERS\igdkmd32.sys
10:11:36.0340 0x0708  igfx - ok
10:11:36.0419 0x0708  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\drivers\iirsp.sys
10:11:36.0424 0x0708  iirsp - ok
10:11:36.0515 0x0708  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
10:11:36.0564 0x0708  IKEEXT - ok
10:11:36.0645 0x0708  [ 297E469EF9B9774A888345CEFE6E726B, 1A591131A823EFA7C0BA64B81F88751E7D68B9CE74E28A8AED023DA05E8DAAE0 ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
10:11:36.0665 0x0708  Intel(R) PROSet Monitoring Service - ok
10:11:36.0709 0x0708  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
10:11:36.0711 0x0708  intelide - ok
10:11:36.0764 0x0708  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
10:11:36.0778 0x0708  intelppm - ok
10:11:36.0816 0x0708  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
10:11:36.0826 0x0708  IPBusEnum - ok
10:11:36.0863 0x0708  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
10:11:36.0870 0x0708  IpFilterDriver - ok
10:11:36.0974 0x0708  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
10:11:37.0029 0x0708  iphlpsvc - ok
10:11:37.0081 0x0708  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
10:11:37.0087 0x0708  IPMIDRV - ok
10:11:37.0112 0x0708  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
10:11:37.0122 0x0708  IPNAT - ok
10:11:37.0195 0x0708  [ 9F7E491FB0BA0F9E370163834FC1FE31, 313D81BEBEC8C3F370FD1C9CC49931F0F178E6BA0581E6594EE1C64275FC157D ] irda            C:\Windows\system32\DRIVERS\irda.sys
10:11:37.0206 0x0708  irda - ok
10:11:37.0257 0x0708  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
10:11:37.0260 0x0708  IRENUM - ok
10:11:37.0309 0x0708  [ 4220D2F03D5C4226D0A1AA4B84025E45, 9002F4CB026CB0D71FFF4CC420C0F3573DA9F70B574A18AE7EF84D5B0A64D472 ] Irmon           C:\Windows\System32\irmon.dll
10:11:37.0314 0x0708  Irmon - ok
10:11:37.0336 0x0708  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
10:11:37.0340 0x0708  isapnp - ok
10:11:37.0385 0x0708  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
10:11:37.0402 0x0708  iScsiPrt - ok
10:11:37.0440 0x0708  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
10:11:37.0453 0x0708  kbdclass - ok
10:11:37.0494 0x0708  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
10:11:37.0498 0x0708  kbdhid - ok
10:11:37.0527 0x0708  [ 478D434C9E51F7DB665817A23994A5E8, 4E3B06EF30DDF401B457BB856AD7B4A6A1BCF56ECA6B224AB69F0061C8F4CFC4 ] KeyIso          C:\Windows\system32\lsass.exe
10:11:37.0532 0x0708  KeyIso - ok
10:11:37.0553 0x0708  [ 888EF30D8048546A3E80885838B67172, B1CA86D970B29B52FF86F541FBE71A01EC857B5F9A970D52B5E0C0339EFF2718 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
10:11:37.0560 0x0708  KSecDD - ok
10:11:37.0614 0x0708  [ F4774FD8CC540090B330658AD68A8C22, 736C2763DC5EE8AE509070C550A1C8210CC9577465A0A6BD9046790D6772D024 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
10:11:37.0626 0x0708  KSecPkg - ok
10:11:37.0686 0x0708  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
10:11:37.0720 0x0708  KtmRm - ok
10:11:37.0786 0x0708  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
10:11:37.0804 0x0708  LanmanServer - ok
10:11:37.0846 0x0708  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
10:11:37.0860 0x0708  LanmanWorkstation - ok
10:11:37.0963 0x0708  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
10:11:37.0970 0x0708  lltdio - ok
10:11:38.0035 0x0708  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
10:11:38.0053 0x0708  lltdsvc - ok
10:11:38.0081 0x0708  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
10:11:38.0086 0x0708  lmhosts - ok
10:11:38.0186 0x0708  [ 0FD9D780D03DA10CBC3CA3144EFA4D11, 9D30C717D44E50E1809A4DAF4A46522B7FFB068568454F21447152FC182CB436 ] LPlatSvc        C:\Windows\system32\LPlatSvc.exe
10:11:38.0247 0x0708  LPlatSvc - ok
10:11:38.0302 0x0708  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
10:11:38.0311 0x0708  LSI_FC - ok
10:11:38.0364 0x0708  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
10:11:38.0374 0x0708  LSI_SAS - ok
10:11:38.0402 0x0708  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
10:11:38.0408 0x0708  LSI_SAS2 - ok
10:11:38.0437 0x0708  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
10:11:38.0446 0x0708  LSI_SCSI - ok
10:11:38.0493 0x0708  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
10:11:38.0501 0x0708  luafv - ok
10:11:38.0549 0x0708  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
10:11:38.0559 0x0708  Mcx2Svc - ok
10:11:38.0594 0x0708  [ 0CEA2D0D3FA284B85ED5B68365114F76, E6FF0EC98FDC3F628438B613C356C237E68686E3B5B17A58A60C16F4B9A2B968 ] mdmxsdk         C:\Windows\system32\DRIVERS\mdmxsdk.sys
10:11:38.0597 0x0708  mdmxsdk - ok
10:11:38.0645 0x0708  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\drivers\megasas.sys
10:11:38.0650 0x0708  megasas - ok
10:11:38.0687 0x0708  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
10:11:38.0705 0x0708  MegaSR - ok
10:11:38.0760 0x0708  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
10:11:38.0772 0x0708  MMCSS - ok
10:11:38.0795 0x0708  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
10:11:38.0798 0x0708  Modem - ok
10:11:38.0855 0x0708  [ 02AD778516057639E21782008FDC44CC, 6AE9EC6CCB446AC32E651FD5064B5D8ADBEC94D0C12BB0CBA4723573E832F7BA ] monectdevices   C:\Windows\system32\DRIVERS\monectdevices.sys
10:11:38.0858 0x0708  monectdevices - ok
10:11:38.0894 0x0708  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
10:11:38.0898 0x0708  monitor - ok
10:11:38.0944 0x0708  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
10:11:38.0949 0x0708  mouclass - ok
10:11:39.0030 0x0708  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
10:11:39.0034 0x0708  mouhid - ok
10:11:39.0063 0x0708  [ 9664F55623B43FD85D5642A202976AEE, 9349DADF639BBF7478EFA2398696FEC416554865AD4DEA91BD9A5E7D9F0C3D49 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
10:11:39.0070 0x0708  mountmgr - ok
10:11:39.0106 0x0708  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
10:11:39.0118 0x0708  mpio - ok
10:11:39.0161 0x0708  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
10:11:39.0168 0x0708  mpsdrv - ok
10:11:39.0271 0x0708  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
10:11:39.0323 0x0708  MpsSvc - ok
10:11:39.0373 0x0708  [ 06AC0310138E4B2C35AF7344D18BC686, FCDB6CC851EC47F92FFF764717A44FF5D5D0E179C215B3C6E77FB9BEA4DE1908 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
10:11:39.0382 0x0708  MRxDAV - ok
10:11:39.0423 0x0708  [ F99E3FCA0184ADBFF3DD323911BC9A96, F4B366AAF1B407BF42B16917C20697E519C7BE47A60BE92D797CFF267A02EC64 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
10:11:39.0435 0x0708  mrxsmb - ok
10:11:39.0477 0x0708  [ 3BC83F9EBE675E40E3C62995A9A01F82, F4BAC3A12406B3D8373A47DCB93F7343C5ECDBB8D1FF02F8265609ADD781034E ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:11:39.0496 0x0708  mrxsmb10 - ok
10:11:39.0539 0x0708  [ 11448B7D9A4848B6BA88849D03B87332, D06DFEBF607763EF56C18CF710D26AF44B6691AF6B1428238297A1ABAE176A0F ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:11:39.0548 0x0708  mrxsmb20 - ok
10:11:39.0577 0x0708  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
10:11:39.0581 0x0708  msahci - ok
10:11:39.0632 0x0708  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
10:11:39.0642 0x0708  msdsm - ok
10:11:39.0693 0x0708  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
10:11:39.0707 0x0708  MSDTC - ok
10:11:39.0782 0x0708  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
10:11:39.0785 0x0708  Msfs - ok
10:11:39.0815 0x0708  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
10:11:39.0818 0x0708  mshidkmdf - ok
10:11:39.0846 0x0708  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
10:11:39.0850 0x0708  msisadrv - ok
10:11:39.0907 0x0708  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
10:11:39.0934 0x0708  MSiSCSI - ok
10:11:39.0953 0x0708  msiserver - ok
10:11:40.0003 0x0708  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
10:11:40.0005 0x0708  MSKSSRV - ok
10:11:40.0042 0x0708  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
10:11:40.0047 0x0708  MSPCLOCK - ok
10:11:40.0073 0x0708  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
10:11:40.0075 0x0708  MSPQM - ok
10:11:40.0119 0x0708  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
10:11:40.0132 0x0708  MsRPC - ok
10:11:40.0172 0x0708  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
10:11:40.0177 0x0708  mssmbios - ok
10:11:40.0201 0x0708  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
10:11:40.0204 0x0708  MSTEE - ok
10:11:40.0231 0x0708  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
10:11:40.0235 0x0708  MTConfig - ok
10:11:40.0265 0x0708  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
10:11:40.0285 0x0708  Mup - ok
10:11:40.0360 0x0708  [ A06050C840E29DA4E8AE8E9187AA0BE3, 462913CDF2AF4989E58D7691A5DB7372A4BD8E5C32A7E404F6B17366187FE4F9 ] NAL             C:\Windows\system32\Drivers\iqvw32.sys
10:11:40.0366 0x0708  NAL - ok
10:11:40.0425 0x0708  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
10:11:40.0454 0x0708  napagent - ok
10:11:40.0523 0x0708  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
10:11:40.0548 0x0708  NativeWifiP - ok
10:11:40.0655 0x0708  [ 9804FB2E46077F2977552347DFCA7E05, A34B703462C6998AB2B3EA6389F4B89616CDC257D44C400C92663E6FB4A8F196 ] NDIS            C:\Windows\system32\drivers\ndis.sys
10:11:40.0715 0x0708  NDIS - ok
10:11:40.0766 0x0708  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
10:11:40.0779 0x0708  NdisCap - ok
10:11:40.0830 0x0708  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
10:11:40.0835 0x0708  NdisTapi - ok
10:11:40.0899 0x0708  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
10:11:40.0904 0x0708  Ndisuio - ok
10:11:40.0943 0x0708  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
10:11:40.0953 0x0708  NdisWan - ok
10:11:40.0988 0x0708  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
10:11:40.0993 0x0708  NDProxy - ok
10:11:41.0020 0x0708  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
10:11:41.0025 0x0708  NetBIOS - ok
10:11:41.0095 0x0708  [ A00996C9BFEF29A93B9F21DBE1DC502D, A97982CBBC2E240B0CD884ED3ED5D11B207DA8E7BEF73DCEA44E16E1CD84222F ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
10:11:41.0109 0x0708  NetBT - ok
10:11:41.0134 0x0708  [ 478D434C9E51F7DB665817A23994A5E8, 4E3B06EF30DDF401B457BB856AD7B4A6A1BCF56ECA6B224AB69F0061C8F4CFC4 ] Netlogon        C:\Windows\system32\lsass.exe
10:11:41.0141 0x0708  Netlogon - ok
10:11:41.0209 0x0708  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
10:11:41.0234 0x0708  Netman - ok
10:11:41.0282 0x0708  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:11:41.0337 0x0708  NetMsmqActivator - ok
10:11:41.0362 0x0708  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:11:41.0373 0x0708  NetPipeActivator - ok
10:11:41.0429 0x0708  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
10:11:41.0460 0x0708  netprofm - ok
10:11:41.0488 0x0708  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:11:41.0497 0x0708  NetTcpActivator - ok
10:11:41.0522 0x0708  [ 10D5997E2F5F16FE3BC3BD1A4BF31EA8, 0DDC4855C00A581A35AB2A11D2AAACC844C460F13F524DD9B92B8F00C31173A7 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
10:11:41.0540 0x0708  NetTcpPortSharing - ok
10:11:41.0912 0x0708  [ 58218EC6B61B1169CF54AAB0D00F5FE2, B76ABB2AD78CE68D30F0F08563B0593D658298CDCF1B138B6E9FB0D64CBCC3C2 ] netw5v32        C:\Windows\system32\DRIVERS\netw5v32.sys
10:11:42.0253 0x0708  netw5v32 - ok
10:11:42.0334 0x0708  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
10:11:42.0339 0x0708  nfrd960 - ok
10:11:42.0398 0x0708  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll
10:11:42.0420 0x0708  NlaSvc - ok
10:11:42.0442 0x0708  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
10:11:42.0448 0x0708  Npfs - ok
10:11:42.0493 0x0708  [ 6D8D2E5652FC2442C810C5D8BE784148, 013FF4FA03CA2E066B1946CC09889616B243068BA0FB2E58D4C1435BF66FBC87 ] NSCIRDA         C:\Windows\system32\DRIVERS\nscirda.sys
10:11:42.0498 0x0708  NSCIRDA - ok
10:11:42.0548 0x0708  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
10:11:42.0555 0x0708  nsi - ok
10:11:42.0592 0x0708  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
10:11:42.0612 0x0708  nsiproxy - ok
10:11:42.0803 0x0708  [ 28B64D3792D4F692E45ECB0C3F98C19B, 5EBB28001E2A9523B8A8846E6E029C8A95A1AF63A4813AAABF39EBD80977E85A ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
10:11:42.0916 0x0708  Ntfs - ok
10:11:42.0976 0x0708  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
10:11:42.0979 0x0708  Null - ok
10:11:43.0036 0x0708  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
10:11:43.0155 0x0708  nvraid - ok
10:11:43.0190 0x0708  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
10:11:43.0202 0x0708  nvstor - ok
10:11:43.0244 0x0708  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
10:11:43.0252 0x0708  nv_agp - ok
10:11:43.0276 0x0708  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
10:11:43.0282 0x0708  ohci1394 - ok
10:11:43.0341 0x0708  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
10:11:43.0412 0x0708  p2pimsvc - ok
10:11:43.0480 0x0708  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
10:11:43.0510 0x0708  p2psvc - ok
10:11:43.0542 0x0708  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\drivers\parport.sys
10:11:43.0550 0x0708  Parport - ok
10:11:43.0594 0x0708  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
10:11:43.0600 0x0708  partmgr - ok
10:11:43.0640 0x0708  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys
10:11:43.0643 0x0708  Parvdm - ok
10:11:43.0784 0x0708  [ 84752B402BF64CCDDF11816FEDF12DB4, 184DDFCEEE8C5B492415270FC640B8D584B3D79E7BADCE4DE7CDD74CC8C60130 ] PcaSvc          C:\Windows\System32\pcasvc.dll
10:11:43.0823 0x0708  PcaSvc - ok
10:11:43.0934 0x0708  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys
10:11:43.0953 0x0708  pci - ok
10:11:44.0038 0x0708  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
10:11:44.0046 0x0708  pciide - ok
10:11:44.0117 0x0708  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
10:11:44.0143 0x0708  pcmcia - ok
10:11:44.0174 0x0708  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
10:11:44.0179 0x0708  pcw - ok
10:11:44.0315 0x0708  [ 0C941A3F148B4228867908F98F394461, 6D5F575F2E796C5EA8F9F3F96F9ACD935E274210A105C9365102B448E9AE2031 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
10:11:44.0363 0x0708  PEAUTH - ok
10:11:44.0552 0x0708  [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
10:11:44.0655 0x0708  PeerDistSvc - ok
10:11:44.0821 0x0708  [ C32A7D92A3791127AE737928D973DC89, A56072096BC8DD993AD57AE17CA004859F11C638F922B87FE84EFFAA2117D377 ] pimoukbd        C:\Windows\system32\DRIVERS\pimoukbd.sys
10:11:44.0826 0x0708  pimoukbd - ok
10:11:45.0040 0x0708  [ 09B61B4894B05723BACE59F46EF892D4, 1BEA7E4A38935C2F1DF4AF503704E4B3A19B0E5658D83F5C36013DF0D6F3BC6D ] pla             C:\Windows\system32\pla.dll
10:11:45.0167 0x0708  pla - ok
10:11:45.0274 0x0708  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
10:11:45.0302 0x0708  PlugPlay - ok
10:11:45.0349 0x0708  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
10:11:45.0358 0x0708  PNRPAutoReg - ok
10:11:45.0412 0x0708  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
10:11:45.0459 0x0708  PNRPsvc - ok
10:11:45.0539 0x0708  [ A2FEA7E16D8D056D2FF1EE93F9C73FB1, 6BC8C1B37274B50573F3DAC043DBD9B29B93F527290392842CD94910014D0C74 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
10:11:45.0567 0x0708  PolicyAgent - ok
10:11:45.0636 0x0708  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll
10:11:45.0657 0x0708  Power - ok
10:11:45.0789 0x0708  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
10:11:46.0086 0x0708  PptpMiniport - ok
10:11:46.0363 0x0708  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\drivers\processr.sys
10:11:46.0531 0x0708  Processor - ok
10:11:46.0779 0x0708  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll
10:11:46.0857 0x0708  ProfSvc - ok
10:11:46.0972 0x0708  [ 478D434C9E51F7DB665817A23994A5E8, 4E3B06EF30DDF401B457BB856AD7B4A6A1BCF56ECA6B224AB69F0061C8F4CFC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
10:11:47.0051 0x0708  ProtectedStorage - ok
10:11:47.0427 0x0708  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
10:11:47.0501 0x0708  Psched - ok
10:11:47.0863 0x0708  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\drivers\ql2300.sys
10:11:48.0001 0x0708  ql2300 - ok
10:11:48.0075 0x0708  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
10:11:48.0112 0x0708  ql40xx - ok
10:11:48.0214 0x0708  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
10:11:48.0235 0x0708  QWAVE - ok
10:11:48.0269 0x0708  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
10:11:48.0273 0x0708  QWAVEdrv - ok
10:11:48.0309 0x0708  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
10:11:48.0312 0x0708  RasAcd - ok
10:11:48.0349 0x0708  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
10:11:48.0354 0x0708  RasAgileVpn - ok
10:11:48.0392 0x0708  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
10:11:48.0405 0x0708  RasAuto - ok
10:11:48.0660 0x0708  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
10:11:48.0728 0x0708  Rasl2tp - ok
10:11:48.0869 0x0708  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
10:11:48.0930 0x0708  RasMan - ok
10:11:49.0015 0x0708  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
10:11:49.0031 0x0708  RasPppoe - ok
10:11:49.0060 0x0708  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
10:11:49.0067 0x0708  RasSstp - ok
10:11:49.0187 0x0708  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
10:11:49.0206 0x0708  rdbss - ok
10:11:49.0236 0x0708  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
10:11:49.0239 0x0708  rdpbus - ok
10:11:49.0267 0x0708  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
10:11:49.0270 0x0708  RDPCDD - ok
10:11:49.0366 0x0708  [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
10:11:49.0377 0x0708  RDPDR - ok
10:11:49.0418 0x0708  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
10:11:49.0421 0x0708  RDPENCDD - ok
10:11:49.0461 0x0708  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
10:11:49.0464 0x0708  RDPREFMP - ok
10:11:49.0540 0x0708  [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
10:11:49.0570 0x0708  RdpVideoMiniport - ok
10:11:49.0625 0x0708  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
10:11:49.0640 0x0708  RDPWD - ok
10:11:49.0717 0x0708  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
10:11:49.0731 0x0708  rdyboost - ok
10:11:49.0773 0x0708  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
10:11:49.0784 0x0708  RemoteAccess - ok
10:11:49.0830 0x0708  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
10:11:49.0860 0x0708  RemoteRegistry - ok
10:11:49.0896 0x0708  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
10:11:49.0907 0x0708  RpcEptMapper - ok
10:11:49.0945 0x0708  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
10:11:49.0950 0x0708  RpcLocator - ok
10:11:50.0008 0x0708  [ 18E8C40C3C2AB0D315331677823555C0, F7BEF402CCAAF6B372199BF12507FAC22FF04DFE2E54DDD59E6E02E4981C9190 ] RpcSs           C:\Windows\system32\rpcss.dll
10:11:50.0038 0x0708  RpcSs - ok
10:11:50.0151 0x0708  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
10:11:50.0157 0x0708  rspndr - ok
10:11:50.0207 0x0708  [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
10:11:50.0210 0x0708  s3cap - ok
10:11:50.0243 0x0708  [ 478D434C9E51F7DB665817A23994A5E8, 4E3B06EF30DDF401B457BB856AD7B4A6A1BCF56ECA6B224AB69F0061C8F4CFC4 ] SamSs           C:\Windows\system32\lsass.exe
10:11:50.0249 0x0708  SamSs - ok
10:11:50.0282 0x0708  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
10:11:50.0291 0x0708  sbp2port - ok
10:11:50.0360 0x0708  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
10:11:50.0376 0x0708  SCardSvr - ok
10:11:50.0404 0x0708  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
10:11:50.0409 0x0708  scfilter - ok
10:11:50.0541 0x0708  [ 9060B8D5BCD5F2B019249F85E3D811F3, 7FB32AB7FE118462988321B9230074DAA960B587417EB463187539C3215445AE ] Schedule        C:\Windows\system32\schedsvc.dll
10:11:50.0608 0x0708  Schedule - ok
10:11:50.0683 0x0708  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll
10:11:50.0688 0x0708  SCPolicySvc - ok
10:11:50.0744 0x0708  [ 0328BE1C7F1CBA23848179F8762E391C, EA80853F04BAE6F46F658B3EFED34BFDDE20E6F2BDA349EBC17EC75DFF19855D ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys
10:11:50.0752 0x0708  sdbus - ok
10:11:50.0820 0x0708  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
10:11:50.0844 0x0708  SDRSVC - ok
10:11:50.0897 0x0708  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
10:11:50.0901 0x0708  secdrv - ok
10:11:50.0954 0x0708  [ 38CBFFED5FC39CDFE6B4014401ED2629, 7BA730E2EDB8387190E45DA2F475BFE42AB3B12319DE088BD8E9F59227EDA4DD ] seclogon        C:\Windows\system32\seclogon.dll
10:11:50.0966 0x0708  seclogon - ok
10:11:50.0999 0x0708  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
10:11:51.0011 0x0708  SENS - ok
10:11:51.0091 0x0708  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
10:11:51.0104 0x0708  SensrSvc - ok
10:11:51.0135 0x0708  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\drivers\serenum.sys
10:11:51.0139 0x0708  Serenum - ok
10:11:51.0177 0x0708  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\drivers\serial.sys
10:11:51.0185 0x0708  Serial - ok
10:11:51.0210 0x0708  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\drivers\sermouse.sys
10:11:51.0214 0x0708  sermouse - ok
10:11:51.0287 0x0708  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
10:11:51.0301 0x0708  SessionEnv - ok
10:11:51.0333 0x0708  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
10:11:51.0343 0x0708  sffdisk - ok
10:11:51.0369 0x0708  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
10:11:51.0388 0x0708  sffp_mmc - ok
10:11:51.0420 0x0708  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
10:11:51.0424 0x0708  sffp_sd - ok
10:11:51.0445 0x0708  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
10:11:51.0448 0x0708  sfloppy - ok
10:11:51.0524 0x0708  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
10:11:51.0549 0x0708  SharedAccess - ok
10:11:51.0618 0x0708  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
10:11:51.0647 0x0708  ShellHWDetection - ok
10:11:51.0677 0x0708  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
10:11:51.0684 0x0708  sisagp - ok
10:11:51.0760 0x0708  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
10:11:51.0765 0x0708  SiSRaid2 - ok
10:11:51.0798 0x0708  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
10:11:51.0806 0x0708  SiSRaid4 - ok
10:11:51.0845 0x0708  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
10:11:51.0858 0x0708  Smb - ok
10:11:51.0930 0x0708  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
10:11:52.0017 0x0708  SNMPTRAP - ok
10:11:52.0083 0x0708  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
10:11:52.0087 0x0708  spldr - ok
10:11:52.0166 0x0708  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe
10:11:52.0197 0x0708  Spooler - ok
10:11:52.0508 0x0708  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
10:11:52.0775 0x0708  sppsvc - ok
10:11:52.0833 0x0708  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll
10:11:52.0886 0x0708  sppuinotify - ok
10:11:52.0950 0x0708  [ EE337A0E80C2554D42487E29C4E41E24, CE49119F2E97D7436296B4B9AE30E1E5A77D2F69BFB302CDD3FF7DB51F84CC5C ] srv             C:\Windows\system32\DRIVERS\srv.sys
10:11:52.0976 0x0708  srv - ok
10:11:53.0059 0x0708  [ 722EDCF256AFD35538E69A933A908CA2, EE3299ECE58EDDBA7536E0A24C34F3081FA0762383406FF944F8FC895AA8AFDC ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
10:11:53.0083 0x0708  srv2 - ok
10:11:53.0157 0x0708  [ E00FDFAFF025E94F9821153750C35A6D, 6ECDC5F314A29B859B0DCB7FF114CACE0718612556299B16412C21F9539DC9B5 ] SrvHsfHDA       C:\Windows\system32\DRIVERS\VSTAZL3.SYS
10:11:53.0173 0x0708  SrvHsfHDA - ok
10:11:53.0278 0x0708  [ CEB4E3B6890E1E42DCA6694D9E59E1A0, 00D841690A88F1051A238F67AACCE905E8A59C86070F215A8D31FA3E68C6BF35 ] SrvHsfV92       C:\Windows\system32\DRIVERS\VSTDPV3.SYS
10:11:53.0368 0x0708  SrvHsfV92 - ok
10:11:53.0458 0x0708  [ BC0C7EA89194C299F051C24119000E17, F5FB21F7AD7370F3D5DF7C23F33118ECF19865B995AF12E9A8A8D893E7E6264F ] SrvHsfWinac     C:\Windows\system32\DRIVERS\VSTCNXT3.SYS
10:11:53.0506 0x0708  SrvHsfWinac - ok
10:11:53.0579 0x0708  [ BDF998A504EED01787CCA371980EAEDE, 8EA7CFF0898716887F20998082BD4AD695BE84D6C988F7E8CFB400B98266A6BA ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
10:11:53.0589 0x0708  srvnet - ok
10:11:53.0637 0x0708  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
10:11:53.0669 0x0708  SSDPSRV - ok
10:11:53.0705 0x0708  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
10:11:53.0718 0x0708  SstpSvc - ok
10:11:53.0757 0x0708  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\drivers\stexstor.sys
10:11:53.0761 0x0708  stexstor - ok
10:11:53.0831 0x0708  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
10:11:53.0870 0x0708  StiSvc - ok
10:11:53.0913 0x0708  [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
10:11:53.0918 0x0708  storflt - ok
10:11:53.0947 0x0708  [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
10:11:53.0951 0x0708  storvsc - ok
10:11:53.0984 0x0708  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
10:11:53.0987 0x0708  swenum - ok
10:11:54.0053 0x0708  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
10:11:54.0107 0x0708  swprv - ok
10:11:54.0165 0x0708  [ F2AD8960812FD111E20E84659EF19D43, FAC91E940D3735738908447E58792C32E6F86427612114A624041B7213831105 ] Synth3dVsc      C:\Windows\system32\drivers\synth3dvsc.sys
10:11:54.0234 0x0708  Synth3dVsc - ok
10:11:54.0360 0x0708  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain         C:\Windows\system32\sysmain.dll
10:11:54.0459 0x0708  SysMain - ok
10:11:54.0493 0x0708  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
10:11:54.0507 0x0708  TabletInputService - ok
10:11:54.0557 0x0708  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll
10:11:54.0581 0x0708  TapiSrv - ok
10:11:54.0715 0x0708  [ C25848DB4A86839A7EDD1077F62AD980, C0C6AADA83BD21DF1243B2BEBA83AC295F49B5C02B2639EF473BBDD3A31AF4C5 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
10:11:54.0812 0x0708  Tcpip - ok
10:11:54.0958 0x0708  [ C25848DB4A86839A7EDD1077F62AD980, C0C6AADA83BD21DF1243B2BEBA83AC295F49B5C02B2639EF473BBDD3A31AF4C5 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
10:11:55.0052 0x0708  TCPIP6 - ok
10:11:55.0167 0x0708  [ A4BF8BE9D1F7D563C7868AC7B2561545, E3C2FFE53373E5255DC388E0C81CCE965E432EFAF52C85B5B3B3918815114073 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
10:11:55.0172 0x0708  tcpipreg - ok
10:11:55.0262 0x0708  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
10:11:55.0266 0x0708  TDPIPE - ok
10:11:55.0315 0x0708  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
10:11:55.0320 0x0708  TDTCP - ok
10:11:55.0358 0x0708  [ 8F143F86FDD8CF4F7BD25973C5983F9D, D3ECB70C5ACAFB6C07CB2104FBEA3FA965299F1BE84D33334DB0FAAA88F738A5 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
10:11:55.0366 0x0708  tdx - ok
10:11:55.0401 0x0708  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
10:11:55.0406 0x0708  TermDD - ok
10:11:55.0459 0x0708  [ E951866BAC5A23403F62A349EDBB6EEB, BE6FB3C09D1CF8952B4D041F45B4DEE53D78EE7D27A5135012BC92B2F7CFBEA3 ] terminpt        C:\Windows\system32\drivers\terminpt.sys
10:11:55.0463 0x0708  terminpt - ok
10:11:55.0561 0x0708  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll
10:11:55.0604 0x0708  TermService - ok
10:11:55.0656 0x0708  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
10:11:55.0666 0x0708  Themes - ok
10:11:55.0708 0x0708  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
10:11:55.0716 0x0708  THREADORDER - ok
10:11:55.0768 0x0708  [ 1C950AE9C09904C229525F22EEFC15DB, D84BEB4CE95EE33D70F46EF1D67B4903E3F5E70E4B3381CE3C8C15DF8C6E6BA2 ] Tp4Track        C:\Windows\system32\DRIVERS\tp4track.sys
10:11:55.0772 0x0708  Tp4Track - ok
10:11:55.0836 0x0708  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
10:11:55.0849 0x0708  TrkWks - ok
10:11:55.0946 0x0708  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
10:11:55.0971 0x0708  TrustedInstaller - ok
10:11:56.0024 0x0708  [ B89F89A2308E9569A1022A50F78C5506, 375C4A11F78A1335269657012DC57093C6E1A7B1460094B0C265179409F01554 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
10:11:56.0029 0x0708  tssecsrv - ok
10:11:56.0081 0x0708  [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
10:11:56.0088 0x0708  TsUsbFlt - ok
10:11:56.0135 0x0708  [ 01246F0BAAD7B68EC0F472AA41E33282, 51F975AF029AD015576FFFA3E88F5DBB8B40C7CD30ECDEDE8AFABCB08C954199 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
10:11:56.0139 0x0708  TsUsbGD - ok
10:11:56.0198 0x0708  [ 045ACB987C650D8186C6B4A692223860, C1CDDF7DABAE531C53290C7C70F35DD65751B399D269711865AD65F9E4E43B0B ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
10:11:56.0220 0x0708  tsusbhub - ok
10:11:56.0268 0x0708  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
10:11:56.0279 0x0708  tunnel - ok
10:11:56.0317 0x0708  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
10:11:56.0323 0x0708  uagp35 - ok
10:11:56.0371 0x0708  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
10:11:56.0390 0x0708  udfs - ok
10:11:56.0452 0x0708  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
10:11:56.0467 0x0708  UI0Detect - ok
10:11:56.0508 0x0708  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
10:11:56.0514 0x0708  uliagpkx - ok
10:11:56.0552 0x0708  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
10:11:56.0557 0x0708  umbus - ok
10:11:56.0586 0x0708  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\drivers\umpass.sys
10:11:56.0589 0x0708  UmPass - ok
10:11:56.0653 0x0708  [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService    C:\Windows\System32\umrdp.dll
10:11:56.0672 0x0708  UmRdpService - ok
10:11:56.0742 0x0708  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
10:11:56.0832 0x0708  upnphost - ok
10:11:56.0888 0x0708  [ 325A69967CC7B4BFB170F5636143A94A, E0341360827B9B3E244F24D0BC01D3B3C0CC97E232A361960849F799A16AD540 ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys
10:11:56.0895 0x0708  usbccgp - ok
10:11:56.0949 0x0708  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
10:11:56.0974 0x0708  usbcir - ok
10:11:57.0017 0x0708  [ 5D57798CAE5A0DD0B8F61C52B8E7C3D1, 5097997508E1406AD5B018C5006D82F8BFC7B157C6CAF1B4D80C7D6DB722A77A ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
10:11:57.0023 0x0708  usbehci - ok
10:11:57.0077 0x0708  [ 3835ECC1E928042F92D7AA1963D40523, 60237CB8C3F935544006621255FFD53C9E09C0AF4741D0C50968CB4D647336D5 ] usbhub          C:\Windows\system32\drivers\usbhub.sys
10:11:57.0101 0x0708  usbhub - ok
10:11:57.0130 0x0708  [ 81E1E90305A4C7A13BADC5DFA22ABA37, 9EF3F5CD2FCF22A5BCC668778C8340D8C80719E9B43FB6C4484BFC98280B8BD9 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
10:11:57.0133 0x0708  usbohci - ok
10:11:57.0196 0x0708  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\drivers\usbprint.sys
10:11:57.0205 0x0708  usbprint - ok
10:11:57.0253 0x0708  [ 144DA53294922A84FFAA3D90B1453745, A8DC6B534E4526E2226CF6C9D53A4B6B251D2F23728E41737063D24024C5266F ] USBSTOR         C:\Windows\system32\drivers\USBSTOR.SYS
10:11:57.0261 0x0708  USBSTOR - ok
10:11:57.0300 0x0708  [ B4A1789BE90403D9549EF9DBAD37A429, 1F590F8DE0081953B944A076FFEB5FF3BCF7E2BEE4ABD97236A29C00B9242163 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
10:11:57.0304 0x0708  usbuhci - ok
10:11:57.0353 0x0708  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
10:11:57.0363 0x0708  UxSms - ok
10:11:57.0400 0x0708  [ 478D434C9E51F7DB665817A23994A5E8, 4E3B06EF30DDF401B457BB856AD7B4A6A1BCF56ECA6B224AB69F0061C8F4CFC4 ] VaultSvc        C:\Windows\system32\lsass.exe
10:11:57.0407 0x0708  VaultSvc - ok
10:11:57.0489 0x0708  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
10:11:57.0501 0x0708  vdrvroot - ok
10:11:57.0602 0x0708  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe
10:11:57.0640 0x0708  vds - ok
10:11:57.0672 0x0708  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
10:11:57.0677 0x0708  vga - ok
10:11:57.0712 0x0708  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
10:11:57.0716 0x0708  VgaSave - ok
10:11:57.0736 0x0708  VGPU - ok
10:11:57.0880 0x0708  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
10:11:57.0893 0x0708  vhdmp - ok
10:11:57.0941 0x0708  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
10:11:57.0947 0x0708  viaagp - ok
10:11:57.0971 0x0708  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\drivers\viac7.sys
10:11:57.0977 0x0708  ViaC7 - ok
10:11:58.0021 0x0708  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
10:11:58.0026 0x0708  viaide - ok
10:11:58.0079 0x0708  [ ABD2B54F7DB666367084F25ACC489743, 20C4BA537EA39CA634494FA2BC0840D1E32AC0D568CE1BCAD2E57940662BA56F ] vjoy            C:\Windows\system32\DRIVERS\vjoy.sys
10:11:58.0085 0x0708  vjoy - ok
10:11:58.0138 0x0708  [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus           C:\Windows\system32\drivers\vmbus.sys
10:11:58.0206 0x0708  vmbus - ok
10:11:58.0252 0x0708  [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
10:11:58.0256 0x0708  VMBusHID - ok
10:11:58.0289 0x0708  [ 4D2FC9D1FA2550681444C9643C79E945, C4E6532283EC014819A3ABCA82F385E5E56BEC6B113DE33A8C7626FE0FE2A649 ] vmulti          C:\Windows\system32\DRIVERS\vmulti.sys
10:11:58.0294 0x0708  vmulti - ok
10:11:58.0346 0x0708  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
10:11:58.0352 0x0708  volmgr - ok
10:11:58.0426 0x0708  [ 21D83DD717E8D681364A5E44A5459717, 2D938D07132A2D37FB164CA322A93951729D6AF65BA8BAF8493D02B203F13243 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
10:11:58.0457 0x0708  volmgrx - ok
10:11:58.0532 0x0708  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
10:11:58.0553 0x0708  volsnap - ok
10:11:58.0602 0x0708  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
10:11:58.0614 0x0708  vsmraid - ok
10:11:58.0808 0x0708  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe
10:11:58.0904 0x0708  VSS - ok
10:11:59.0107 0x0708  [ E53E06232DCCAF3053A2336BBB678034, DEBCF652C37F66F922570C803186F14E9BA0ACB8419204913DB3E6C7FB6E5879 ] VSStandardCollectorService150 C:\Program Files\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe
10:11:59.0127 0x0708  VSStandardCollectorService150 - ok
10:11:59.0160 0x0708  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
10:11:59.0166 0x0708  vwifibus - ok
10:11:59.0250 0x0708  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
10:11:59.0325 0x0708  W32Time - ok
10:11:59.0416 0x0708  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
10:11:59.0475 0x0708  WacomPen - ok
10:11:59.0523 0x0708  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
10:11:59.0530 0x0708  WANARP - ok
10:11:59.0599 0x0708  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
10:11:59.0603 0x0708  Wanarpv6 - ok
10:11:59.0905 0x0708  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
10:12:00.0125 0x0708  wbengine - ok
10:12:00.0180 0x0708  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
10:12:00.0232 0x0708  WbioSrvc - ok
10:12:00.0275 0x0708  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll
10:12:00.0301 0x0708  wcncsvc - ok
10:12:00.0356 0x0708  [ D9DF5C53DFE502D88A726DD6EFB3CCC3, 2804FA28CEF1A15C1E1BAAB440F7546A497C3B894313521750380F789678BC0C ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
10:12:00.0368 0x0708  WcsPlugInService - ok
10:12:00.0415 0x0708  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\drivers\wd.sys
10:12:00.0419 0x0708  Wd - ok
10:12:00.0495 0x0708  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
10:12:00.0533 0x0708  Wdf01000 - ok
10:12:00.0602 0x0708  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll
10:12:00.0617 0x0708  WdiServiceHost - ok
10:12:00.0638 0x0708  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll
10:12:00.0651 0x0708  WdiSystemHost - ok
10:12:00.0718 0x0708  [ DC54D7A40B6E18E5C7F592F836D163FF, 436AF3B94EAE6CBD2516A63235AE1D6EC4F1FCAA0F974A9672BB5AB2A846BB2C ] WebClient       C:\Windows\System32\webclnt.dll
10:12:00.0741 0x0708  WebClient - ok
10:12:00.0800 0x0708  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
10:12:00.0818 0x0708  Wecsvc - ok
10:12:00.0862 0x0708  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
10:12:00.0875 0x0708  wercplsupport - ok
10:12:00.0948 0x0708  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
10:12:00.0962 0x0708  WerSvc - ok
10:12:00.0995 0x0708  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
10:12:00.0998 0x0708  WfpLwf - ok
10:12:01.0052 0x0708  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
10:12:01.0056 0x0708  WIMMount - ok
10:12:01.0144 0x0708  [ 5A77AC34A0FFB70CE8B35B524FEDE9BA, 711DD957AF98F1B835ECE0FEBCCF8FCC7763F1DAA232F1C9E80DE6DA123C7F33 ] winachsf        C:\Windows\system32\DRIVERS\HSX_CNXT.sys
10:12:01.0244 0x0708  winachsf - ok
10:12:01.0353 0x0708  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
10:12:01.0424 0x0708  WinDefend - ok
10:12:01.0457 0x0708  WinHttpAutoProxySvc - ok
10:12:01.0544 0x0708  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
10:12:01.0561 0x0708  Winmgmt - ok
10:12:01.0776 0x0708  [ 8949A93520F7008C3B7AD320A0EEA267, F77C6BF73B300347FEB3D02C7A1F98807546D95E10E499D385B7F00D1366CC59 ] WinRM           C:\Windows\system32\WsmSvc.dll
10:12:01.0867 0x0708  WinRM - ok
10:12:02.0032 0x0708  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
10:12:02.0036 0x0708  WinUsb - ok
10:12:02.0166 0x0708  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
10:12:02.0317 0x0708  Wlansvc - ok
10:12:02.0375 0x0708  [ 5D410936831F7FB58EFF941EAC3F6D3D, 5A1E769F75562802CC0EAA44215501925EA4C260AD7A975CEE4AB8DCA2BB82C9 ] WmBEnum         C:\Windows\system32\drivers\WmBEnum.sys
10:12:02.0380 0x0708  WmBEnum - ok
10:12:02.0427 0x0708  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
10:12:02.0430 0x0708  WmiAcpi - ok
10:12:02.0483 0x0708  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
10:12:02.0494 0x0708  wmiApSrv - ok
10:12:02.0918 0x0708  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
10:12:03.0102 0x0708  WMPNetworkSvc - ok
10:12:03.0142 0x0708  [ 6F04646BC690F8BBFC344BE32A60796D, DE2B4BE88CE38D6297F58BE2C643A3838C0470E2E3AB6289755E39B5E59061D7 ] WmVirHid        C:\Windows\system32\drivers\WmVirHid.sys
10:12:03.0146 0x0708  WmVirHid - ok
10:12:03.0185 0x0708  [ 1D6CA43D562333F4DFB40BCEF2453F3A, BEEC5587ACE8ABF1DB0B9B68E43B29082AA2F4A6415CEC8536086944D506A704 ] WmXlCore        C:\Windows\system32\drivers\WmXlCore.sys
10:12:03.0192 0x0708  WmXlCore - ok
10:12:03.0259 0x0708  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
10:12:03.0269 0x0708  WPCSvc - ok
10:12:03.0322 0x0708  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
10:12:03.0336 0x0708  WPDBusEnum - ok
10:12:03.0374 0x0708  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
10:12:03.0392 0x0708  ws2ifsl - ok
10:12:03.0524 0x0708  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
10:12:03.0537 0x0708  wscsvc - ok
10:12:03.0555 0x0708  WSearch - ok
10:12:03.0801 0x0708  [ 8E6E93DFE1C8C1732E4B2C843CE4ABA5, 354C2BC424D92AE09EADBCAD92299C392C57AFB543EAC1B0F7675A907E9BCEE5 ] wuauserv        C:\Windows\system32\wuaueng.dll
10:12:04.0065 0x0708  wuauserv - ok
10:12:04.0119 0x0708  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
10:12:04.0126 0x0708  WudfPf - ok
10:12:04.0272 0x0708  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys
10:12:04.0284 0x0708  WUDFRd - ok
10:12:04.0327 0x0708  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
10:12:04.0341 0x0708  wudfsvc - ok
10:12:04.0401 0x0708  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll
10:12:04.0422 0x0708  WwanSvc - ok
10:12:04.0456 0x0708  [ 88AF537264F2B818DA15479CEEAF5D7C, E0F95D6448FFB77351BB63ED444238F891B16748FD09F8BCCA23BEC4E341A96B ] XAudio          C:\Windows\system32\DRIVERS\xaudio.sys
10:12:04.0460 0x0708  XAudio - ok
10:12:04.0745 0x0708  [ 15A317674A08DF26BE65164D959E9203, 6EEE0D1711F37936D157651E265A65137BCBFBDA17F066C844BAA0D53558F86A ] XAudioService   C:\Windows\system32\DRIVERS\xaudio.exe
10:12:04.0799 0x0708  XAudioService - ok
10:12:04.0904 0x0708  ================ Scan global ===============================
10:12:05.0028 0x0708  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll
10:12:05.0080 0x0708  [ 9BCD9DAB612602A063A2A32ED8E133E1, 62F97A1B4BD42B3CC38BB649BA3AFA66785C757B19886B338613E76F021E39D2 ] C:\Windows\system32\winsrv.dll
10:12:05.0301 0x0708  [ 9BCD9DAB612602A063A2A32ED8E133E1, 62F97A1B4BD42B3CC38BB649BA3AFA66785C757B19886B338613E76F021E39D2 ] C:\Windows\system32\winsrv.dll
10:12:05.0425 0x0708  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
10:12:05.0515 0x0708  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
10:12:05.0539 0x0708  [ Global ] - ok
10:12:05.0545 0x0708  ================ Scan MBR ==================================
10:12:05.0568 0x0708  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:12:07.0950 0x0708  \Device\Harddisk0\DR0 - ok
10:12:07.0957 0x0708  ================ Scan VBR ==================================
10:12:07.0996 0x0708  [ 080A89392B471D47882D58248B3CB892 ] \Device\Harddisk0\DR0\Partition1
10:12:07.0999 0x0708  \Device\Harddisk0\DR0\Partition1 - ok
10:12:08.0020 0x0708  [ 4AA3FFE90E2DDB136751BA470540FD44 ] \Device\Harddisk0\DR0\Partition2
10:12:08.0024 0x0708  \Device\Harddisk0\DR0\Partition2 - ok
10:12:08.0048 0x0708  [ 38A5DD394AB14888AD93D013D919244F ] \Device\Harddisk0\DR0\Partition3
10:12:08.0052 0x0708  \Device\Harddisk0\DR0\Partition3 - ok
10:12:08.0058 0x0708  ================ Scan generic autorun ======================
10:12:08.0178 0x0708  [ AFD15F701B550037FFDDE6B18171479D, 38C049529611653832944B9A624BA9E336E0AFE668CEDD95BDAF550A9605ADF5 ] C:\Program Files\Analog Devices\Core\smax4pnp.exe
10:12:08.0305 0x0708  SoundMAXPnP - ok
10:12:08.0368 0x0708  [ EBB1B7BFAD67421C8E110CEBF4D61F19, 47450AFBF33324115D2DEC738D00F3B6EE85675559D5734594253E1485AC163F ] C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
10:12:08.0378 0x0708  TrackPointSrv - ok
10:12:08.0424 0x0708  [ 68239842340DDFF8993DFD9127553EDA, 9FEC34A35D5A91FEF1C4859AFD0C2538C5CD3E1792FB118487368CFDF66CBCA0 ] C:\Windows\system32\igfxtray.exe
10:12:08.0437 0x0708  IgfxTray - ok
10:12:08.0475 0x0708  [ 004763BDF8E48244DBB9FDFDE3065EBC, AA88911C51D73C501C67F62A907425EF91D1820D3ED581F0952619EBB6216F14 ] C:\Windows\system32\hkcmd.exe
10:12:08.0490 0x0708  HotKeysCmds - ok
10:12:08.0528 0x0708  [ CD1102E5D340216138C7F56FA8D26998, 805BE128B6A52E304A91AD44B6A7322BAD5F72CD400DB5E74D8EF47424894266 ] C:\Windows\system32\igfxpers.exe
10:12:08.0541 0x0708  Persistence - ok
10:12:08.0696 0x0708  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
10:12:08.0827 0x0708  Sidebar - ok
10:12:08.0874 0x0708  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
10:12:08.0887 0x0708  mctadmin - ok
10:12:08.0995 0x0708  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
10:12:09.0091 0x0708  Sidebar - ok
10:12:09.0117 0x0708  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
10:12:09.0126 0x0708  mctadmin - ok
10:12:09.0429 0x0708  Win FW state via NFP2: enabled ( trusted )
10:12:09.0431 0x0708  ============================================================
10:12:09.0431 0x0708  Scan finished
10:12:09.0431 0x0708  ============================================================
10:12:09.0456 0x0738  Detected object count: 0
10:12:09.0456 0x0738  Actual detected object count: 0
10:13:40.0463 0x0f34  Deinitialize success

 

 

Zemana AntiMalware 2.74.2.150 (инсталираната версия)

-------------------------------------------------------
Scan Result            : Завършено
Scan Date              : 2017.9.26
Operating System       : Windows 7 32-bit
Processor              : 1X Genuine Intel(R) CPU   T1300 @ 1.66GHz
BIOS Mode              : Legacy
CUID                   : 12634BBFF39CE646D28FEB
Scan Type              : Проверка на системата
Duration               : 11m 33s
Scanned Objects        : 46801
Detected Objects       : 0
Excluded Objects       : 0
Read Level             : SCSI
Auto Upload            : Включен
Detect All Extensions  : Изключен
Scan Documents         : Изключен
Domain Info            : WORKGROUP,0,2

Detected Objects
-------------------------------------------------------

Няма намерени заплахи

Malwarebytes
www.malwarebytes.com

-Детайли за регистъра-
Дата на сканиране: 26.09.17 г.
Час на сканиране: 10:18
Файл на регистъра: eefd66b4-a28a-11e7-90c5-0016d320fe33.json
Администратор: Да

-Информация за софтуера-
Версия: 3.2.2.2018
Версия на компонентите: 1.0.188
Актуализирай версията на пакета: 1.0.2652
Лиценз: Пробен период

-Системна информация-
OS: Windows 7 Service Pack 1
CPU: x86
Файлова система: NTFS
Потребител: BECKO-PC\BECKO

-Резюме на сканирането-
Тип сканиране: Threat Scan
Резултат: Завършено
Сканирани обекти: 229656
Открити заплахи: 12
Заплахи под карантина: 12
Изтекло време: 38 мин, 5 сек

-Опции за сканиране-
Памет: Разрешено
Стартиране: Разрешено
Файлова система: Разрешено
Архиви: Разрешено
руткитове: Разрешено
Евристика: Разрешено
PUP: Открий
PUM: Открий

-Детайли за сканирането-
Процес: 0
(Не бяха открити зловредни елементи)

Модул: 0
(Не бяха открити зловредни елементи)

Ключ на регистъра: 4
PUP.Optional.DriverAssist, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverAssist-Setup_RASAPI32, Под карантина, [1549], [345024],1.0.2652
PUP.Optional.DriverAssist, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverAssist-Setup_RASMANCS, Под карантина, [1549], [345024],1.0.2652
PUP.Optional.DriverAssist, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverAssist_RASAPI32, Под карантина, [1549], [345024],1.0.2652
PUP.Optional.DriverAssist, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverAssist_RASMANCS, Под карантина, [1549], [345024],1.0.2652

Стойност на регистъра: 0
(Не бяха открити зловредни елементи)

Данни на регистъра: 0
(Не бяха открити зловредни елементи)

Поток данни: 0
(Не бяха открити зловредни елементи)

Папка: 1
PUP.Optional.DriverAgentPlus, C:\USERS\BECKO\APPDATA\ROAMING\DRIVERAGENTPLUS, Под карантина, [2209], [182329],1.0.2652

Файл: 7
PUP.Optional.DriverAgentPlus, C:\Users\BECKO\AppData\Roaming\DriverAgentPlus\DriverAgentPlus.downloads, Под карантина, [2209], [182329],1.0.2652
PUP.Optional.DriverAgentPlus, C:\Users\BECKO\AppData\Roaming\DriverAgentPlus\DriverAgentPlus.history, Под карантина, [2209], [182329],1.0.2652
PUP.Optional.DriverAgentPlus, C:\Users\BECKO\AppData\Roaming\DriverAgentPlus\DriverAgentPlus.settings, Под карантина, [2209], [182329],1.0.2652
PUP.Optional.DriverAgentPlus, C:\Users\BECKO\AppData\Roaming\DriverAgentPlus\scandata.bin, Под карантина, [2209], [182329],1.0.2652
PUP.Optional.DriverAgentPlus, C:\Users\BECKO\AppData\Roaming\DriverAgentPlus\sysinfo.bin, Под карантина, [2209], [182329],1.0.2652
PUP.Optional.GameHack, C:\PROGRAM FILES\CHEAT ENGINE 6.7\STANDALONEPHASE1.DAT, Под карантина, [681], [393793],1.0.2652
HackTool.WinActivator, C:\USERS\BECKO\APPDATA\ROAMING\WINDOWSLOADER\WINDOWS 7 LOADER.EXE, Под карантина, [1873], [352889],1.0.2652

Физически сектор: 0
(Не бяха открити зловредни елементи)


(end)

 

# AdwCleaner 7.0.2.1 - Logfile created on Tue Sep 26 08:28:15 2017
# Updated on 2017/29/08 by Malwarebytes 
# Running on Windows 7 Ultimate (X86)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Program Files\DriverToolkit
Deleted: C:\Users\BECKO\AppData\Local\DriverToolkit


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKU\S-1-5-21-773789430-497128755-430906800-1000\Software\DriverToolkit
Deleted: [Key] - HKCU\Software\DriverToolkit


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0

*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1162 B] - [2017/9/26 8:24:11]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

 

Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 7 Ultimate x86 
Ran by BECKO (Administrator) on ўв 26.09.2017 Ј. at 11:36:48,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


File System: 1 

Successfully deleted: C:\Users\BECKO\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg (Folder) 

Registry: 0 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ўв 26.09.2017 Ј. at 11:41:12,83
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 


Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Чудесно...! Всичко  изглежда в норми..! Наблюдавате ли първоначалните проблеми или други нередности..? Как се държи системата ви след всички процедури..?

  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Oще след фиксът се забеляза подобрение ,а сега вече определено е добре

Сподели този отговор


Линк към този отговор
Сподели в други сайтове
преди 20 минути, v3cko написа:

Oще след фиксът се забеляза подобрение ,а сега вече определено е добре

Радвам се ..Точно това беше целта..! Да премахнем програмите които използвахме: и приключваме ако няма друго: 

Изтеглете DelFix и го стартирайте. Сложете отметка пред:

  • Remove disinfection tools <----- това ще премахне инструментите които сме използвали
  • Create registry backup <----- тази опция ще създадете резервно копие от регистъра на Windows
  • Purge system restore <---  това ще премахне всички предишни точки за възстановяване, ще бъде създадена нова точка  на състоянието на системата в момента.
  • Reset system settings <--- това ще нулира всички настройки на системата и по подразбиране, които са били променени или от нас по време на почистването или от зловреден софтуер / инфекция

DelFix.png

..и след това натиснете бутона Run

  • След като операцията е завърши,ще се създаде дневник
  • Копирате го и го поставите в следващия си отговор

Инструмента ще се самоизтрие след като приключи своята задача!

Ако има нещо което използвахме в лечението до тук и не се е премахнало след последните инструкции го премахнете ръчно ,по стандартните методи..!

i_arrow-r.gif&key=65f9fbaa716d42178fcd1e  Препоръчвам програмата Malwarebytes' Anti-Malware да остане на вашия компютър и периодично да сканирате системата си с нея (поне един -два пъти в седмицата),като не забравяйте да обновите дефинициите и преди всяко сканиране..както и да изключите защитата в реално време на програмата. Напомням че това не е антивирусна програма а едно изключително добро допълнение към нея.

 

i_arrow-r.gif&key=65f9fbaa716d42178fcd1e  Деинсталирайте Zemana AntiMalware по стандартния метод...!

 

 pfNZP4A.png&key=0a487e0a7cff89c690a32d13  Дневници :

В следващия си отговор, моля да включите следните дневници:

  • DelFix
  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

# DelFix v1.013 - Logfile created 26/09/2017 at 12:59:02
# Updated 17/04/2016 by Xplode
# Username : BECKO - BECKO-PC
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\BECKO\Downloads\FRST-OlderVersion
Deleted : C:\TDSSKiller.3.1.0.15_26.09.2017_10.10.46_log.txt
Deleted : C:\Users\BECKO\Desktop\FRST - Пряк път.lnk
Deleted : C:\Users\BECKO\Desktop\JRT.txt
Deleted : C:\Users\BECKO\Desktop\tdsskiller - Пряк път.lnk
Deleted : C:\Users\BECKO\Downloads\Addition.txt
Deleted : C:\Users\BECKO\Downloads\adwcleaner_7.0.2.1.exe
Deleted : C:\Users\BECKO\Downloads\Fixlog.txt
Deleted : C:\Users\BECKO\Downloads\FRST.exe
Deleted : C:\Users\BECKO\Downloads\FRST.txt
Deleted : C:\Users\BECKO\Downloads\FRST_25-09-2017 12.25.59.txt
Deleted : C:\Users\BECKO\Downloads\JRT.exe
Deleted : C:\Users\BECKO\Downloads\tdsskiller.exe

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #29 [Installed DeployMSI | 09/18/2017 15:22:51]
Deleted : RP #30 [Windows Update | 09/18/2017 17:29:33]
Deleted : RP #32 [Installed DirectX | 09/22/2017 05:47:13]
Deleted : RP #33 [Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 | 09/24/2017 09:26:25]
Deleted : RP #34 [Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 | 09/24/2017 09:27:49]
Deleted : RP #35 [Програма за инсталиране на модули за Windows | 09/24/2017 09:29:09]
Deleted : RP #36 [Програма за инсталиране на модули за Windows | 09/24/2017 09:29:58]
Deleted : RP #37 [Инсталиране на драйверен пакет за устройство: Pluralinput Мишки и други посочващи устройства | 09/24/2017 16:10:20]
Deleted : RP #38 [Инсталиране на драйверен пакет за устройство: Pluralinput Клавиатури | 09/24/2017 16:12:34]
Deleted : RP #40 [DCInstallRestorePoint | 09/25/2017 06:45:47]
Deleted : RP #41 [Removed Logitech Gaming Software 5.10. | 09/25/2017 06:51:41]
Deleted : RP #42 [Intel® Driver Update Utility | 09/25/2017 06:59:49]
Deleted : RP #43 [Точка на възстановяване на HitmanPro | 09/25/2017 14:53:38]
Deleted : RP #44 [Точка на възстановяване на HitmanPro | 09/25/2017 14:56:30]
Deleted : RP #45 [Архивиране в Windows | 09/25/2017 19:45:21]
Deleted : RP #47 [Restore Point Created by FRST | 09/25/2017 23:39:30]
Deleted : RP #48 [JRT Pre-Junkware Removal | 09/26/2017 08:36:56]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########
 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Ами това е от мен...! Ако нямате други проблеми да приключваме...Маркирам случая за "Решен"...! Пожелавам лек ден и безопасен интернет..!    :)

  • Харесва ми 1

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Регистрирайте се или влезете в профила си за да коментирате

Трябва да имате регистрация за да може да коментирате това

Регистрирайте се

Създайте нова регистрация в нашия форум. Лесно е!

Нова регистрация

Вход

Имате регистрация? Влезте от тук.

Вход

  • Разглеждащи това в момента   0 потребители

    Няма регистрирани потребители разглеждащи тази страница.

  • Горещи теми в момента

  • Подобни теми

    • от Plamen_ruse
      От известно време ми се появи този проблем. Докато браузвам (независимо от браузера) ми се отварят допълнителни прозорци с реклами. Нямам усещане, че компютъра работи по-бавно от преди. 
       
       
      can result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09.01.2019 01
      Ran by User (administrator) on DESKTOP-9A6KV1O (10-01-2019 21:03:43)
      Running from D:\Downloads
      Loaded Profiles: User (Available Profiles: User)
      Platform: Windows 10 Pro Version 1803 17134.523 (X64) Language: Български (България)
      Internet Explorer Version 11 (Default browser: Chrome)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
      (AMD) C:\Windows\System32\atiesrxx.exe
      (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\71.0.3578.15\remoting_host.exe
      (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\71.0.3578.15\remoting_host.exe
      (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
      (Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
      (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
      (AMD) C:\Windows\System32\atieclxx.exe
      (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeApp.exe
      () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
      () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (ESET) C:\Program Files\ESET\ESET Security\egui.exe
      (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
      (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
      (Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181.0_x86__zpdnekdrzrea0\Spotify.exe
      (Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181.0_x86__zpdnekdrzrea0\Spotify.exe
      (Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181.0_x86__zpdnekdrzrea0\Spotify.exe
      (Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181.0_x86__zpdnekdrzrea0\Spotify.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
      () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18112.17430.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
      HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
      HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [177928 2018-10-12] (ESET)
      HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2015-09-24] (Adobe Systems Incorporated)
      HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
      HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
      HKU\S-1-5-21-619769886-4034110463-2982145271-1001\...\RunOnce: [Application Restart #0] => C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.96.181.0_x86__zpdnekdrzrea0\Spotify.exe [25972968 2018-12-22] (Spotify Ltd)
      HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2018-12-13] (Google Inc.)
      GroupPolicy: Restriction ? <==== ATTENTION
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
      Tcpip\Parameters: [DhcpNameServer] 89.207.131.8 8.8.8.8
      Tcpip\..\Interfaces\{d4f7e68d-b074-4387-bb66-200a4cfcbb5d}: [DhcpNameServer] 89.207.131.8 8.8.8.8
      Tcpip\..\Interfaces\{dd5152f7-fb4e-44ba-b531-9721fa95320d}: [DhcpNameServer] 10.0.0.1
      Internet Explorer:
      ==================
      BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-12-16] (Microsoft Corporation)
      BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_141\bin\ssv.dll [2017-07-19] (Oracle Corporation)
      BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-19] (Oracle Corporation)
      BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-19] (Oracle Corporation)
      BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-19] (Oracle Corporation)
      BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated)
      Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated)
      Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-01] (Microsoft Corporation)
      Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-01] (Microsoft Corporation)
      Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-01] (Microsoft Corporation)
      Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-12-01] (Microsoft Corporation)
      FireFox:
      ========
      FF DefaultProfile: 5zp7ongo.default
      FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5zp7ongo.default [2019-01-06]
      FF Homepage: Mozilla\Firefox\Profiles\5zp7ongo.default -> www.google.bg
      FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5zp7ongo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-08-17]
      FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
      FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2017-07-28] [Legacy] [not signed]
      FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
      FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_114.dll [2019-01-08] ()
      FF Plugin: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-19] (Oracle Corporation)
      FF Plugin: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-19] (Oracle Corporation)
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
      FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_114.dll [2019-01-08] ()
      FF Plugin-x32: @huawei.com/NPPlugin -> C:\Program Files (x86)\Web_TV\WebTVPlugin\NPPlugin.dll [2015-07-02] ()
      FF Plugin-x32: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-19] (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-19] (Oracle Corporation)
      FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-09-11] (Microsoft Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)
      FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
      FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems Inc.)
      FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
      Chrome: 
      =======
      CHR DefaultProfile: Default
      CHR HomePage: Default -> hxxp://www.google.com/
      CHR StartupUrls: Default -> "hxxp://www.google.com/"
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2019-01-10]
      CHR Extension: (Презентации) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
      CHR Extension: (Theme Creator) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\akpelnjfckgfiplcikojhomllgombffc [2017-07-21]
      CHR Extension: (Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
      CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-21]
      CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-21]
      CHR Extension: (Таблици) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
      CHR Extension: (Отдалечен работен плот на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2018-10-10]
      CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-21]
      CHR Extension: (Floating for YouTube™) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2018-12-23]
      CHR Extension: (Video DownloadHelper) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2018-08-01]
      CHR Extension: (IP домейн флаг) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlpapfcfoakknnhkfpencomejbcecdfp [2017-12-29]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
      CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-21]
      CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-16]
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-12-13]
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1 [2019-01-06]
      CHR Extension: (ProxFlow) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aakchaleigkohafkfjfjbblobjifikek [2018-09-13]
      CHR Extension: (Презентации) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
      CHR Extension: (Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
      CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-24]
      CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-24]
      CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-12-08]
      CHR Extension: (Таблици) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
      CHR Extension: (Отдалечен работен плот на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2018-11-01]
      CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-01]
      CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-12-16]
      CHR Extension: (Google Hangouts) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2018-12-16]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-05]
      CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-24]
      CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-16]
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2 [2019-01-10]
      CHR Extension: (Презентации) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
      CHR Extension: (Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
      CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-13]
      CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-13]
      CHR Extension: (Таблици) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
      CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-21]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
      CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-13]
      CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-17]
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3 [2019-01-09]
      CHR Extension: (Презентации) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-11]
      CHR Extension: (Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-11]
      CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-16]
      CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-16]
      CHR Extension: (Таблици) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-11]
      CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-26]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-13]
      CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-16]
      CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-18]
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4 [2018-06-20]
      CHR Extension: (Презентации) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-10]
      CHR Extension: (Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-10]
      CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-11-10]
      CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-10]
      CHR Extension: (Таблици) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-10]
      CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-11-10]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-06-20]
      CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-11-10]
      CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-20]
      CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2018-08-12]
      CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx <not found>
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\71.0.3578.15\remoting_host.exe [73048 2018-10-18] (Google Inc.)
      R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9646240 2018-12-07] (Microsoft Corporation)
      R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2302152 2018-10-12] (ESET)
      R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2302152 2018-10-12] (ESET)
      S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-09-16] (Microsoft Corporation)
      R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [740544 2015-11-01] (@ByELDI) [File not signed]
      S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
      R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10885360 2017-05-31] (TeamViewer GmbH)
      S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
      S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107136 2018-09-21] (Microsoft Corporation)
      S3 Disc Soft Lite Bus Service; "C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe" [X]
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-07-21] (Disc Soft Ltd)
      R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [143448 2018-10-09] (ESET)
      R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [107896 2018-10-09] (ESET)
      S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15872 2018-08-27] (ESET)
      R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [188832 2018-08-27] (ESET)
      R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [50144 2018-08-27] (ESET)
      R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [82304 2018-08-27] (ESET)
      R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [109864 2018-08-27] (ESET)
      R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
      R3 pelmouse; C:\WINDOWS\system32\DRIVERS\pelmouse.sys [26880 2016-07-11] (TPMX Electronics Ltd.)
      R3 pelusblf; C:\WINDOWS\system32\DRIVERS\pelusblf.sys [33048 2016-07-11] ()
      R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Realtek )
      R3 RTL8023x64; C:\WINDOWS\System32\drivers\Rtnic64.sys [51712 2018-04-12] (Realtek Semiconductor Corporation )
      S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
      S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
      S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ==================== One Month Created files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2019-01-10 21:03 - 2019-01-10 21:03 - 000000000 ____D C:\FRST
      2019-01-08 20:52 - 2019-01-01 15:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
      2019-01-08 20:52 - 2019-01-01 15:47 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
      2019-01-08 20:52 - 2019-01-01 15:46 - 012710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
      2019-01-08 20:52 - 2019-01-01 15:45 - 000714752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
      2019-01-08 20:52 - 2019-01-01 15:45 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
      2019-01-08 20:52 - 2019-01-01 15:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
      2019-01-08 20:52 - 2019-01-01 15:20 - 011902976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
      2019-01-08 20:52 - 2019-01-01 15:20 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll
      2019-01-08 20:52 - 2019-01-01 15:18 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
      2019-01-08 20:52 - 2019-01-01 15:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
      2019-01-08 20:52 - 2019-01-01 09:14 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
      2019-01-08 20:52 - 2019-01-01 09:14 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
      2019-01-08 20:52 - 2019-01-01 09:14 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
      2019-01-08 20:52 - 2019-01-01 09:14 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
      2019-01-08 20:52 - 2019-01-01 09:14 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
      2019-01-08 20:52 - 2019-01-01 09:14 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
      2019-01-08 20:52 - 2019-01-01 09:13 - 003292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
      2019-01-08 20:52 - 2019-01-01 09:13 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
      2019-01-08 20:52 - 2019-01-01 09:13 - 000709728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
      2019-01-08 20:52 - 2019-01-01 09:13 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
      2019-01-08 20:52 - 2019-01-01 09:13 - 000170808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
      2019-01-08 20:52 - 2019-01-01 09:12 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
      2019-01-08 20:52 - 2019-01-01 09:12 - 007520104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
      2019-01-08 20:52 - 2019-01-01 09:12 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
      2019-01-08 20:52 - 2019-01-01 09:12 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
      2019-01-08 20:52 - 2019-01-01 09:12 - 002421288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
      2019-01-08 20:52 - 2019-01-01 09:12 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
      2019-01-08 20:52 - 2019-01-01 09:12 - 000268304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
      2019-01-08 20:52 - 2019-01-01 09:12 - 000128824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
      2019-01-08 20:52 - 2019-01-01 09:12 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
      2019-01-08 20:52 - 2019-01-01 08:55 - 025856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
      2019-01-08 20:52 - 2019-01-01 08:50 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
      2019-01-08 20:52 - 2019-01-01 08:50 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
      2019-01-08 20:52 - 2019-01-01 08:48 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
      2019-01-08 20:52 - 2019-01-01 08:48 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
      2019-01-08 20:52 - 2019-01-01 08:48 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll
      2019-01-08 20:52 - 2019-01-01 08:47 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
      2019-01-08 20:52 - 2019-01-01 08:47 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
      2019-01-08 20:52 - 2019-01-01 08:46 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
      2019-01-08 20:52 - 2019-01-01 08:46 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
      2019-01-08 20:52 - 2019-01-01 08:46 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
      2019-01-08 20:52 - 2019-01-01 08:45 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
      2019-01-08 20:52 - 2019-01-01 08:45 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
      2019-01-08 20:52 - 2019-01-01 08:45 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
      2019-01-08 20:52 - 2019-01-01 08:44 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
      2019-01-08 20:52 - 2019-01-01 08:44 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
      2019-01-08 20:52 - 2019-01-01 08:44 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
      2019-01-08 20:52 - 2019-01-01 08:44 - 000662528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
      2019-01-08 20:52 - 2019-01-01 08:44 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
      2019-01-08 20:52 - 2019-01-01 08:43 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
      2019-01-08 20:52 - 2019-01-01 08:42 - 004939776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
      2019-01-08 20:52 - 2019-01-01 08:42 - 002247680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
      2019-01-08 20:52 - 2019-01-01 08:42 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
      2019-01-08 20:52 - 2019-01-01 08:42 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
      2019-01-08 20:52 - 2019-01-01 08:41 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
      2019-01-08 20:52 - 2019-01-01 08:41 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
      2019-01-08 20:52 - 2019-01-01 08:41 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
      2019-01-08 20:52 - 2019-01-01 08:41 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 006571584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 002478664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 002253696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 000880048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 000581808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
      2019-01-08 20:52 - 2019-01-01 08:37 - 000381240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
      2019-01-08 20:52 - 2019-01-01 08:29 - 022016512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
      2019-01-08 20:52 - 2019-01-01 08:22 - 019405312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
      2019-01-08 20:52 - 2019-01-01 08:17 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
      2019-01-08 20:52 - 2019-01-01 08:16 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
      2019-01-08 20:52 - 2019-01-01 08:16 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
      2019-01-08 20:52 - 2019-01-01 08:16 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
      2019-01-08 20:52 - 2019-01-01 08:15 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
      2019-01-08 20:52 - 2019-01-01 08:15 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
      2019-01-08 20:52 - 2019-01-01 08:15 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
      2019-01-08 20:52 - 2019-01-01 08:15 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
      2019-01-08 20:52 - 2019-01-01 08:14 - 004514816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
      2019-01-08 20:52 - 2019-01-01 08:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
      2019-01-08 20:52 - 2019-01-01 08:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
      2019-01-08 20:52 - 2019-01-01 08:13 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
      2019-01-08 20:52 - 2019-01-01 08:13 - 000594432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
      2019-01-08 20:52 - 2019-01-01 08:13 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
      2019-01-08 20:52 - 2019-01-01 08:12 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
      2019-01-08 20:52 - 2019-01-01 08:12 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
      2019-01-08 20:52 - 2019-01-01 08:12 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
      2019-01-08 20:52 - 2019-01-01 08:12 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
      2019-01-08 20:52 - 2019-01-01 07:23 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
      2019-01-08 20:52 - 2018-12-19 06:49 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
      2019-01-06 00:59 - 2019-01-06 00:59 - 000141434 _____ C:\TDSSKiller.3.1.0.25_06.01.2019_00.59.11_log.txt
      2019-01-06 00:47 - 2019-01-06 00:47 - 000000000 ____D C:\Users\User\AppData\Local\mbamtray
      2019-01-06 00:47 - 2019-01-06 00:47 - 000000000 ____D C:\Users\User\AppData\Local\mbam
      2018-12-19 20:41 - 2018-12-14 09:29 - 001130760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
      2018-12-19 20:41 - 2018-12-14 09:25 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
      2018-12-19 20:41 - 2018-12-14 09:21 - 001457240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
      2018-12-19 20:41 - 2018-12-14 09:21 - 001257672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
      2018-12-19 20:41 - 2018-12-14 09:21 - 001140480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
      2018-12-19 20:41 - 2018-12-14 09:21 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
      2018-12-19 20:41 - 2018-12-14 09:21 - 000982912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
      2018-12-19 20:41 - 2018-12-14 09:10 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
      2018-12-19 20:41 - 2018-12-14 09:07 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
      2018-12-19 20:41 - 2018-12-14 08:55 - 003396608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
      2018-12-19 20:41 - 2018-12-14 08:55 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
      2018-12-19 20:41 - 2018-12-14 08:54 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
      2018-12-19 20:41 - 2018-12-14 08:54 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
      2018-12-19 20:41 - 2018-12-14 08:52 - 002173440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
      2018-12-19 20:41 - 2018-12-14 08:52 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
      2018-12-19 20:41 - 2018-12-14 08:51 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
      2018-12-19 20:41 - 2018-12-14 08:50 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002527 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002490 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000002439 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
      2018-12-16 16:30 - 2018-12-16 16:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Инструменти на Microsoft Office
      2018-12-13 23:56 - 2018-12-13 23:56 - 000002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2018-12-13 23:56 - 2018-12-13 23:56 - 000002330 _____ C:\Users\Public\Desktop\Google Chrome.lnk
      2018-12-13 18:52 - 2018-09-05 00:36 - 001476904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
      2018-12-12 21:25 - 2018-12-08 14:47 - 001786896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
      2018-12-12 21:25 - 2018-12-08 14:42 - 004527800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
      2018-12-12 21:25 - 2018-12-08 14:42 - 001616824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
      2018-12-12 21:25 - 2018-12-08 14:41 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
      2018-12-12 21:25 - 2018-12-08 14:40 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
      2018-12-12 21:25 - 2018-12-08 14:29 - 013572608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
      2018-12-12 21:25 - 2018-12-08 14:28 - 006586880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
      2018-12-12 21:25 - 2018-12-08 14:28 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
      2018-12-12 21:25 - 2018-12-08 14:27 - 005657600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
      2018-12-12 21:25 - 2018-12-08 14:25 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
      2018-12-12 21:25 - 2018-12-08 14:23 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
      2018-12-12 21:25 - 2018-12-08 14:23 - 002892288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
      2018-12-12 21:25 - 2018-12-08 10:07 - 005625352 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
      2018-12-12 21:25 - 2018-12-08 10:06 - 001017168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
      2018-12-12 21:25 - 2018-12-08 10:05 - 007436216 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
      2018-12-12 21:25 - 2018-12-08 10:05 - 002822656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
      2018-12-12 21:25 - 2018-12-08 10:04 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
      2018-12-12 21:25 - 2018-12-08 10:04 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
      2018-12-12 21:25 - 2018-12-08 10:04 - 001943328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
      2018-12-12 21:25 - 2018-12-08 10:04 - 001188512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
      2018-12-12 21:25 - 2018-12-08 10:04 - 000416024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
      2018-12-12 21:25 - 2018-12-08 09:47 - 000861744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
      2018-12-12 21:25 - 2018-12-08 09:46 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
      2018-12-12 21:25 - 2018-12-08 09:46 - 000457056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
      2018-12-12 21:25 - 2018-12-08 09:45 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
      2018-12-12 21:25 - 2018-12-08 09:45 - 004789952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
      2018-12-12 21:25 - 2018-12-08 09:45 - 002307240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
      2018-12-12 21:25 - 2018-12-08 09:45 - 001620472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
      2018-12-12 21:25 - 2018-12-08 09:45 - 001379816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
      2018-12-12 21:25 - 2018-12-08 09:42 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
      2018-12-12 21:25 - 2018-12-08 09:41 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
      2018-12-12 21:25 - 2018-12-08 09:40 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
      2018-12-12 21:25 - 2018-12-08 09:38 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
      2018-12-12 21:25 - 2018-12-08 09:38 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
      2018-12-12 21:25 - 2018-12-08 09:37 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
      2018-12-12 21:25 - 2018-12-08 09:36 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
      2018-12-12 21:25 - 2018-12-08 09:36 - 003090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
      2018-12-12 21:25 - 2018-12-08 09:36 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
      2018-12-12 21:25 - 2018-12-08 09:36 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
      2018-12-12 21:25 - 2018-12-08 09:35 - 002126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
      2018-12-12 21:25 - 2018-12-08 09:33 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
      2018-12-12 21:25 - 2018-12-08 09:33 - 001457152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
      2018-12-12 21:25 - 2018-12-08 09:33 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
      2018-12-12 21:25 - 2018-12-08 09:32 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
      2018-12-12 21:25 - 2018-12-08 09:30 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
      2018-12-12 21:25 - 2018-12-08 09:29 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
      2018-12-12 21:25 - 2018-12-08 09:29 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
      2018-12-12 21:25 - 2018-12-08 09:28 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
      2018-12-12 21:25 - 2018-11-09 08:15 - 021388752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
      2018-12-12 21:25 - 2018-11-09 07:59 - 008623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
      2018-12-12 21:25 - 2018-11-09 07:57 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
      2018-12-12 21:25 - 2018-11-09 07:55 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
      2018-12-12 21:25 - 2018-11-09 07:55 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
      2018-12-12 21:25 - 2018-11-09 07:32 - 020383832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
      2018-12-12 21:25 - 2018-11-09 07:17 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
      2018-12-12 21:25 - 2018-11-09 04:56 - 001213472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
      2018-12-12 21:25 - 2018-11-09 04:48 - 003179760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
      2018-12-12 21:25 - 2018-11-09 04:48 - 001613288 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
      2018-12-12 21:25 - 2018-11-09 04:47 - 002571128 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
      2018-12-12 21:25 - 2018-11-09 04:21 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
      2018-12-12 21:25 - 2018-11-09 04:21 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
      2018-12-12 21:25 - 2018-11-09 04:18 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
      2018-12-12 21:25 - 2018-11-09 04:18 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
      2018-12-12 21:25 - 2018-11-09 04:16 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
      2018-12-12 21:25 - 2018-11-09 04:16 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
      2018-12-12 21:25 - 2018-11-09 04:15 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
      2018-12-12 21:25 - 2018-11-09 04:07 - 002417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
      2018-12-12 21:25 - 2018-11-09 03:46 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
      2018-12-12 21:25 - 2018-11-09 03:29 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
      2018-12-12 21:25 - 2018-11-09 03:28 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
      2018-12-12 21:24 - 2018-12-08 14:48 - 000034104 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.exe
      2018-12-12 21:24 - 2018-12-08 14:47 - 001627656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 001422864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 001048712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 001038352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000954384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000830480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000825352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000750096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000670224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000652296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000645320 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000495632 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000399880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000258064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000231440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
      2018-12-12 21:24 - 2018-12-08 14:47 - 000228368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000201744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
      2018-12-12 21:24 - 2018-12-08 14:47 - 000180752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
      2018-12-12 21:24 - 2018-12-08 14:47 - 000173072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
      2018-12-12 21:24 - 2018-12-08 14:46 - 000549760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
      2018-12-12 21:24 - 2018-12-08 14:43 - 000304144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys
      2018-12-12 21:24 - 2018-12-08 14:42 - 001634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
      2018-12-12 21:24 - 2018-12-08 14:41 - 000481880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
      2018-12-12 21:24 - 2018-12-08 14:39 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
      2018-12-12 21:24 - 2018-12-08 14:27 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.SecureAssessment.dll
      2018-12-12 21:24 - 2018-12-08 14:27 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
      2018-12-12 21:24 - 2018-12-08 14:27 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
      2018-12-12 21:24 - 2018-12-08 14:27 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
      2018-12-12 21:24 - 2018-12-08 14:23 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
      2018-12-12 21:24 - 2018-12-08 14:23 - 001661440 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
      2018-12-12 21:24 - 2018-12-08 14:23 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
      2018-12-12 21:24 - 2018-12-08 14:23 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
      2018-12-12 21:24 - 2018-12-08 14:22 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
      2018-12-12 21:24 - 2018-12-08 14:22 - 001469952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
      2018-12-12 21:24 - 2018-12-08 14:22 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
      2018-12-12 21:24 - 2018-12-08 10:12 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
      2018-12-12 21:24 - 2018-12-08 10:12 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
      2018-12-12 21:24 - 2018-12-08 10:12 - 000092688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
      2018-12-12 21:24 - 2018-12-08 10:07 - 001328632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
      2018-12-12 21:24 - 2018-12-08 10:06 - 000777512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
      2018-12-12 21:24 - 2018-12-08 10:06 - 000491416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
      2018-12-12 21:24 - 2018-12-08 10:06 - 000433168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
      2018-12-12 21:24 - 2018-12-08 10:06 - 000249088 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
      2018-12-12 21:24 - 2018-12-08 10:05 - 001935008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
      2018-12-12 21:24 - 2018-12-08 10:05 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
      2018-12-12 21:24 - 2018-12-08 10:05 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
      2018-12-12 21:24 - 2018-12-08 10:05 - 000793592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
      2018-12-12 21:24 - 2018-12-08 10:05 - 000706040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
      2018-12-12 21:24 - 2018-12-08 10:05 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
      2018-12-12 21:24 - 2018-12-08 10:05 - 000421176 _____ (Microsoft Corporation) C:\WINDOWS\system32\xbgmengine.dll
      2018-12-12 21:24 - 2018-12-08 10:05 - 000413920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
      2018-12-12 21:24 - 2018-12-08 10:05 - 000130312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
      2018-12-12 21:24 - 2018-12-08 10:05 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
      2018-12-12 21:24 - 2018-12-08 10:04 - 002590296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
      2018-12-12 21:24 - 2018-12-08 10:04 - 001150312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
      2018-12-12 21:24 - 2018-12-08 10:04 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
      2018-12-12 21:24 - 2018-12-08 10:04 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
      2018-12-12 21:24 - 2018-12-08 10:04 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
      2018-12-12 21:24 - 2018-12-08 10:04 - 000413176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
      2018-12-12 21:24 - 2018-12-08 10:04 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
      2018-12-12 21:24 - 2018-12-08 10:04 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
      2018-12-12 21:24 - 2018-12-08 10:04 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
      2018-12-12 21:24 - 2018-12-08 10:04 - 000158624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
      2018-12-12 21:24 - 2018-12-08 10:04 - 000058168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
      2018-12-12 21:24 - 2018-12-08 09:47 - 000785760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
      2018-12-12 21:24 - 2018-12-08 09:46 - 001397104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
      2018-12-12 21:24 - 2018-12-08 09:46 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
      2018-12-12 21:24 - 2018-12-08 09:46 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
      2018-12-12 21:24 - 2018-12-08 09:45 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
      2018-12-12 21:24 - 2018-12-08 09:45 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
      2018-12-12 21:24 - 2018-12-08 09:45 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
      2018-12-12 21:24 - 2018-12-08 09:45 - 000356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
      2018-12-12 21:24 - 2018-12-08 09:45 - 000129296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
      2018-12-12 21:24 - 2018-12-08 09:39 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
      2018-12-12 21:24 - 2018-12-08 09:38 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
      2018-12-12 21:24 - 2018-12-08 09:38 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
      2018-12-12 21:24 - 2018-12-08 09:38 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
      2018-12-12 21:24 - 2018-12-08 09:38 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
      2018-12-12 21:24 - 2018-12-08 09:38 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
      2018-12-12 21:24 - 2018-12-08 09:38 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
      2018-12-12 21:24 - 2018-12-08 09:37 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
      2018-12-12 21:24 - 2018-12-08 09:36 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
      2018-12-12 21:24 - 2018-12-08 09:36 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
      2018-12-12 21:24 - 2018-12-08 09:36 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
      2018-12-12 21:24 - 2018-12-08 09:36 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
      2018-12-12 21:24 - 2018-12-08 09:36 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
      2018-12-12 21:24 - 2018-12-08 09:36 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
      2018-12-12 21:24 - 2018-12-08 09:35 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
      2018-12-12 21:24 - 2018-12-08 09:34 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
      2018-12-12 21:24 - 2018-12-08 09:34 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
      2018-12-12 21:24 - 2018-12-08 09:34 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
      2018-12-12 21:24 - 2018-12-08 09:34 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
      2018-12-12 21:24 - 2018-12-08 09:34 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
      2018-12-12 21:24 - 2018-12-08 09:33 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
      2018-12-12 21:24 - 2018-12-08 09:33 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
      2018-12-12 21:24 - 2018-12-08 09:33 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
      2018-12-12 21:24 - 2018-12-08 09:33 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
      2018-12-12 21:24 - 2018-12-08 09:32 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
      2018-12-12 21:24 - 2018-12-08 09:32 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
      2018-12-12 21:24 - 2018-12-08 09:32 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
      2018-12-12 21:24 - 2018-12-08 09:30 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
      2018-12-12 21:24 - 2018-12-08 09:30 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
      2018-12-12 21:24 - 2018-12-08 09:29 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
      2018-12-12 21:24 - 2018-12-08 09:29 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
      2018-12-12 21:24 - 2018-12-08 09:28 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
      2018-12-12 21:24 - 2018-12-08 09:28 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
      2018-12-12 21:24 - 2018-12-08 09:27 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
      2018-12-12 21:24 - 2018-12-08 09:27 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
      2018-12-12 21:24 - 2018-12-08 09:27 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
      2018-12-12 21:24 - 2018-12-08 09:27 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
      2018-12-12 21:24 - 2018-12-08 09:26 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
      2018-12-12 21:24 - 2018-12-08 09:26 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
      2018-12-12 21:24 - 2018-12-08 09:25 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
      2018-12-12 21:24 - 2018-12-08 09:25 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
      2018-12-12 21:24 - 2018-12-08 09:25 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
      2018-12-12 21:24 - 2018-12-08 09:25 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
      2018-12-12 21:24 - 2018-12-08 09:25 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
      2018-12-12 21:24 - 2018-12-08 09:24 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
      2018-12-12 21:24 - 2018-12-08 09:24 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
      2018-12-12 21:24 - 2018-12-08 09:24 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
      2018-12-12 21:24 - 2018-11-09 08:00 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
      2018-12-12 21:24 - 2018-11-09 07:58 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
      2018-12-12 21:24 - 2018-11-09 07:57 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll
      2018-12-12 21:24 - 2018-11-09 07:56 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
      2018-12-12 21:24 - 2018-11-09 07:56 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
      2018-12-12 21:24 - 2018-11-09 07:56 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
      2018-12-12 21:24 - 2018-11-09 07:54 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
      2018-12-12 21:24 - 2018-11-09 07:22 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
      2018-12-12 21:24 - 2018-11-09 07:20 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
      2018-12-12 21:24 - 2018-11-09 07:20 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
      2018-12-12 21:24 - 2018-11-09 07:19 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
      2018-12-12 21:24 - 2018-11-09 07:18 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
      2018-12-12 21:24 - 2018-11-09 07:18 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
      2018-12-12 21:24 - 2018-11-09 04:49 - 000723416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
      2018-12-12 21:24 - 2018-11-09 04:49 - 000565048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
      2018-12-12 21:24 - 2018-11-09 04:49 - 000368656 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
      2018-12-12 21:24 - 2018-11-09 04:48 - 002719736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
      2018-12-12 21:24 - 2018-11-09 04:48 - 000899920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
      2018-12-12 21:24 - 2018-11-09 04:48 - 000766704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
      2018-12-12 21:24 - 2018-11-09 04:48 - 000745472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
      2018-12-12 21:24 - 2018-11-09 04:48 - 000375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
      2018-12-12 21:24 - 2018-11-09 04:47 - 002062392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
      2018-12-12 21:24 - 2018-11-09 04:47 - 001285432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
      2018-12-12 21:24 - 2018-11-09 04:47 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
      2018-12-12 21:24 - 2018-11-09 04:47 - 000537912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
      2018-12-12 21:24 - 2018-11-09 04:22 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
      2018-12-12 21:24 - 2018-11-09 04:22 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
      2018-12-12 21:24 - 2018-11-09 04:21 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
      2018-12-12 21:24 - 2018-11-09 04:21 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
      2018-12-12 21:24 - 2018-11-09 04:21 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
      2018-12-12 21:24 - 2018-11-09 04:20 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
      2018-12-12 21:24 - 2018-11-09 04:20 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll
      2018-12-12 21:24 - 2018-11-09 04:20 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
      2018-12-12 21:24 - 2018-11-09 04:20 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
      2018-12-12 21:24 - 2018-11-09 04:19 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
      2018-12-12 21:24 - 2018-11-09 04:19 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
      2018-12-12 21:24 - 2018-11-09 04:18 - 000573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
      2018-12-12 21:24 - 2018-11-09 04:18 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
      2018-12-12 21:24 - 2018-11-09 04:18 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
      2018-12-12 21:24 - 2018-11-09 04:17 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
      2018-12-12 21:24 - 2018-11-09 04:17 - 001069568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
      2018-12-12 21:24 - 2018-11-09 04:16 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
      2018-12-12 21:24 - 2018-11-09 04:16 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
      2018-12-12 21:24 - 2018-11-09 04:15 - 000933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
      2018-12-12 21:24 - 2018-11-09 04:15 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
      2018-12-12 21:24 - 2018-11-09 04:07 - 001299704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
      2018-12-12 21:24 - 2018-11-09 03:48 - 000550728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
      2018-12-12 21:24 - 2018-11-09 03:47 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
      2018-12-12 21:24 - 2018-11-09 03:46 - 002161008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
      2018-12-12 21:24 - 2018-11-09 03:46 - 000829960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
      2018-12-12 21:24 - 2018-11-09 03:46 - 000721024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
      2018-12-12 21:24 - 2018-11-09 03:46 - 000573504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
      2018-12-12 21:24 - 2018-11-09 03:31 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
      2018-12-12 21:24 - 2018-11-09 03:31 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
      2018-12-12 21:24 - 2018-11-09 03:30 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
      2018-12-12 21:24 - 2018-11-09 03:30 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
      2018-12-12 21:24 - 2018-11-09 03:29 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
      2018-12-12 21:24 - 2018-11-09 03:29 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
      2018-12-12 21:24 - 2018-11-09 03:27 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
      2018-12-12 21:24 - 2018-11-09 03:26 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
      2018-12-12 21:24 - 2018-11-09 03:26 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
      2018-12-12 21:24 - 2018-11-09 03:25 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
      2018-12-12 21:24 - 2018-11-09 03:25 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
      ==================== One Month Modified files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2019-01-10 20:59 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
      2019-01-10 19:30 - 2018-09-16 16:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
      2019-01-09 18:35 - 2018-09-16 16:27 - 001532434 _____ C:\WINDOWS\system32\PerfStringBackup.INI
      2019-01-09 18:35 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
      2019-01-09 18:35 - 2017-07-30 15:50 - 000536072 _____ C:\WINDOWS\system32\perfh002.dat
      2019-01-09 18:35 - 2017-07-30 15:50 - 000162902 _____ C:\WINDOWS\system32\perfc002.dat
      2019-01-09 18:29 - 2018-09-16 16:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
      2019-01-08 23:43 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
      2019-01-08 23:42 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
      2019-01-08 23:42 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
      2019-01-08 21:01 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
      2019-01-08 20:25 - 2018-09-16 16:31 - 000004550 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
      2019-01-08 20:25 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
      2019-01-08 20:25 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
      2019-01-08 20:21 - 2018-09-16 16:31 - 000004586 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
      2019-01-07 22:18 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
      2019-01-06 23:41 - 2017-12-25 22:05 - 000000000 ____D C:\Users\User\Desktop\1
      2019-01-06 00:54 - 2017-07-19 15:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
      2019-01-06 00:54 - 2017-07-19 15:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
      2019-01-06 00:39 - 2017-07-19 16:04 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
      2019-01-06 00:39 - 2017-07-19 15:57 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
      2019-01-05 19:20 - 2017-07-19 16:01 - 000000000 ____D C:\Users\User\AppData\Roaming\TeamViewer
      2019-01-05 18:45 - 2017-07-20 10:24 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
      2019-01-04 19:10 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
      2019-01-03 22:12 - 2017-08-09 19:30 - 000001456 _____ C:\Users\User\AppData\Local\Adobe Save for Web 13.0 Prefs
      2019-01-02 21:41 - 2018-04-12 01:41 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
      2019-01-02 21:41 - 2018-04-12 01:41 - 000179600 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
      2019-01-01 20:39 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
      2018-12-25 00:42 - 2017-07-21 09:01 - 000000000 ____D C:\Users\User\AppData\Roaming\qBittorrent
      2018-12-23 23:24 - 2018-02-23 22:15 - 000000000 ____D C:\Users\User\AppData\Local\Packages
      2018-12-23 10:06 - 2017-07-21 21:21 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приложения в Chrome
      2018-12-20 20:04 - 2018-09-16 16:31 - 000003518 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
      2018-12-20 20:04 - 2018-09-16 16:31 - 000003394 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
      2018-12-20 19:17 - 2018-09-16 16:31 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-619769886-4034110463-2982145271-1001
      2018-12-20 19:17 - 2018-09-16 16:16 - 000002388 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
      2018-12-20 19:17 - 2017-07-19 09:25 - 000000000 ___RD C:\Users\User\OneDrive
      2018-12-16 17:01 - 2017-07-21 09:02 - 000000000 ____D C:\ProgramData\TEMP
      2018-12-16 16:29 - 2017-07-20 10:33 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
      2018-12-14 00:22 - 2017-09-16 08:33 - 000000000 ____D C:\Program Files (x86)\Audacity
      2018-12-13 23:56 - 2017-07-19 15:57 - 000000000 ____D C:\Program Files (x86)\Google
      2018-12-13 23:54 - 2018-09-09 15:45 - 000000000 ___DC C:\WINDOWS\Panther
      2018-12-13 18:42 - 2018-02-23 22:31 - 000000000 ___RD C:\Users\User\3D Objects
      2018-12-13 18:42 - 2016-11-21 09:30 - 000000000 __RHD C:\Users\Public\AccountPictures
      2018-12-13 18:40 - 2018-09-16 16:13 - 000401856 _____ C:\WINDOWS\system32\FNTCACHE.DAT
      2018-12-12 22:57 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
      2018-12-12 22:57 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
      2018-12-12 22:57 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellComponents
      ==================== Files in the root of some directories =======
      2017-12-25 22:02 - 2017-12-25 22:02 - 000000128 ____H () C:\Users\User\AppData\Roaming\ecf00c38dc807e105d881c433a6b455dd2c606b6
      2017-08-09 19:30 - 2019-01-03 22:12 - 000001456 _____ () C:\Users\User\AppData\Local\Adobe Save for Web 13.0 Prefs
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\wininit.exe => File is digitally signed
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => File is digitally signed
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => File is digitally signed
      C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
      LastRegBack: 2018-09-16 16:12
      ==================== End of FRST.txt ============================
      Addition.txt
    • от B0rn T0 P0rN (Forest*)
      Нещо не схванах каква е цялата схема на раздела, но моето не е чак толкова голям проблем. Изтеглих си Bandicam от "някакъв" сайт, но когато тръгнах да го инсталирам ми изкара прозорче, в което искаше да му дам достъп като админ, за да продължи инсталацията. Направи ми впечатление, че искаше да инсталира някакъв друг software и направо му цъкнах Cancel, след това компютъра заби за около 1-2 секунди, отворих Task manager-a, поне над 6-7 процеса (непознати) работеха, както и да е, инсталира ми някакви програмки, премахнах ги, всичко ток ама без жицата. Остана един друг проблееем.. Сега от цялата история остана един AD който не намирам начин да го премахна.. Гледах, суках, струвах, изтеглих Junkware Removal Tool-a дето уж щял да помогне но уви, не помогна. Ето ей таз глупост не успявам да я премахна > ЦЪК < На антивирустни изобщо не се доверявам, хем компютъра цикли повече от тях, хем двойно повече вируси се бъкат.. Абе като дъвка са за вирусите. Ето и log-a след края на JRT; 
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.4 (07.09.2017) Operating System: Windows 7 Ultimate x64 Ran by idk (Administrator) on ўв 15.01.2019 Ј. at 3:38:08,89 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 17 Failed to delete: C:\Program Files (x86)\proxygate (Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F68ZGOQX (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FIQK8NQU (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HML355FN (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) Successfully deleted: C:\Users\idk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R1LRYOEA (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F68ZGOQX (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FIQK8NQU (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HML355FN (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R1LRYOEA (Temporary Internet Files Folder) Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on ўв 15.01.2019 Ј. at 3:40:09,86 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Само ми направи впечатление ей това > "Failed to delete: C:\Program Files (x86)\proxygate (Folder)", нещо ми е много мерак да го изтрия ръчно?
    • от legolas69
      Здравейте, въпросният лаптоп се използва от майка ми за ежедневни дейности и то рядко. При стартирането на системата ESET засича PUP.Optional.Reimage, позволих си да сканирам с Malwarebytes, БЕЗ да предприемам действия. Каква е тази папка и има ли нещо притеснително ? Благодаря предварително. 
      Addition.txt
      FRST.txt
      malwarebytes.txt
    • от v3cko
      Здравейте и за много години,моят проблем хром бавно отваря забива и се срива- отварят се по няколко страници . В момента съм safe mode иначе забива
      Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-01-2019
      Ran by ВЕС (administrator) on WIN-SKFJ6HLGST2 (03-01-2019 20:43:32)
      Running from C:\Users\ВЕС\Downloads
      Loaded Profiles: ВЕС (Available Profiles: ВЕС)
      Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
      Internet Explorer Version 8 (Default browser: Chrome)
      Boot Mode: Safe Mode (with Networking)
      Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
      ==================== Processes (Whitelisted) =================
      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
      ==================== Registry (Whitelisted) ===========================
      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
      HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
      HKU\S-1-5-21-3512987231-521144983-709920193-1000\...\Run: [DHY0GM3ATCSFE7M] => "C:\Program Files\x0h1djdcnoe\3OQCH.exe"
      HKU\S-1-5-21-3512987231-521144983-709920193-1000\...\Run: [Web Companion] => C:\Program Files\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize 
      HKU\S-1-5-21-3512987231-521144983-709920193-1000\...\MountPoints2: {41be252d-0f82-11e9-a624-002713343a56} - F:\Lenovo_Suite.exe
      HKLM\...\Drivers32: [MSVideo8] => C:\Windows\system32\VfWWDM32.dll [56832 2010-11-20] (Microsoft Corporation)
      HKLM\Software\Microsoft\Active Setup\Installed Components: [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] -> C:\Windows\System32\iedkcs32.dll [2010-11-20] (Microsoft Corporation)
      HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2019-01-03] (Google Inc.)
      CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
      ==================== Internet (Whitelisted) ====================
      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
      Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
      Tcpip\..\Interfaces\{840DEA2A-8553-4D25-A5FB-7DB86C5BFBE5}: [DhcpNameServer] 192.168.0.1
      Tcpip\..\Interfaces\{EE11610E-0BCC-42A7-A0AC-89B4A3B92BF1}: [DhcpNameServer] 192.168.0.1
      Internet Explorer:
      ==================
      HKU\S-1-5-21-3512987231-521144983-709920193-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-xl/?ocid=iehp
      SearchScopes: HKU\S-1-5-21-3512987231-521144983-709920193-1000 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10477_754_190103&q={searchTerms}
      BHO: YoutubeAdBlock -> {984AFA40-4BEC-457F-AEDE-FE3404A646FA} -> C:\Program Files\VKkhWVSisIE\kwTiXoR.dll => No File
      FireFox:
      ========
      FF ProfilePath: C:\Users\ВЕС\AppData\Roaming\K-Meleon\oytl87x0.default [2019-01-03]
      FF user.js: detected! => C:\Users\ВЕС\AppData\Roaming\K-Meleon\oytl87x0.default\user.js [2006-04-06]
      FF Extension: (NewsFox) - C:\Users\ВЕС\Downloads\k-meleon\browser\extensions\{899DF1F8-2F43-4394-8315-37F6744E6319}.xpi [2016-01-04] [Legacy] [not signed]
      FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
      FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [No File]
      Chrome: 
      =======
      CHR HomePage: Default -> hxxp://google.bg/
      CHR Profile: C:\Users\ВЕС\AppData\Local\Google\Chrome\User Data\Default [2019-01-03]
      CHR Extension: (Lightshot (скрииншот инструмент)) - C:\Users\ВЕС\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbniclmhobmnbdlbpiphghaielnnpgdp [2019-01-03]
      CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\ВЕС\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-01-03]
      CHR Extension: (Chrome Media Router) - C:\Users\ВЕС\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-01-03]
      ==================== Services (Whitelisted) ====================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      "qamplvkj" => service was unlocked. <==== ATTENTION
      S3 GoogleChromeElevationService; C:\Program Files\Google\Chrome\Application\71.0.3578.98\elevation_service.exe [375776 2018-12-12] (Google Inc.)
      R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [5073376 2018-09-19] (Malwarebytes)
      S2 qamplvkj; C:\Windows\system32\qamplvkj\dfaricjc.exe [0 ] () <==== ATTENTION (zero byte File/Folder)
      S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
      S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]
      ===================== Drivers (Whitelisted) ======================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
      R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [172280 2019-01-03] (Malwarebytes)
      S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [106144 2019-01-03] (Malwarebytes)
      S3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [63760 2019-01-03] (Malwarebytes)
      R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [230120 2019-01-03] (Malwarebytes)
      S3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [83648 2019-01-03] (Malwarebytes)
      U3 TrueSight; \??\C:\Windows\System32\drivers\truesight.sys [X]
      S3 VGPU; System32\drivers\rdvgkmd.sys [X]
      ==================== NetSvcs (Whitelisted) ===================
      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ==================== One Month Created files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2019-01-04 03:15 - 2019-01-04 03:15 - 000001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
      2019-01-04 03:15 - 2019-01-04 03:15 - 000001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
      2019-01-04 03:14 - 2019-01-04 03:14 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
      2019-01-04 03:10 - 2019-01-03 18:31 - 000000000 ____D C:\Windows\Panther
      2019-01-04 03:03 - 2019-01-04 03:03 - 000000000 ____D C:\Windows.old
      2019-01-03 20:43 - 2019-01-03 20:43 - 001783808 _____ (Farbar) C:\Users\ВЕС\Downloads\FRST.exe
      2019-01-03 20:43 - 2019-01-03 20:43 - 000007564 _____ C:\Users\ВЕС\Downloads\FRST.txt
      2019-01-03 20:43 - 2019-01-03 20:43 - 000000000 ____D C:\FRST
      2019-01-03 20:18 - 2019-01-03 20:18 - 000106144 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
      2019-01-03 20:18 - 2019-01-03 20:18 - 000083648 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
      2019-01-03 20:18 - 2019-01-03 20:18 - 000063760 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
      2019-01-03 20:03 - 2019-01-03 20:03 - 000000000 ____D C:\Users\ВЕС\AppData\Local\mbam
      2019-01-03 20:02 - 2019-01-03 20:42 - 000172280 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
      2019-01-03 20:02 - 2019-01-03 20:02 - 000230120 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
      2019-01-03 20:02 - 2019-01-03 20:02 - 000002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
      2019-01-03 20:02 - 2019-01-03 20:02 - 000000000 ____D C:\Users\ВЕС\AppData\Local\mbamtray
      2019-01-03 20:02 - 2019-01-03 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
      2019-01-03 20:02 - 2019-01-03 20:02 - 000000000 ____D C:\ProgramData\Malwarebytes
      2019-01-03 20:02 - 2019-01-03 20:02 - 000000000 ____D C:\Program Files\Malwarebytes
      2019-01-03 20:02 - 2018-12-04 08:09 - 000129248 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys
      2019-01-03 20:00 - 2019-01-03 20:01 - 081227760 _____ (Malwarebytes ) C:\Users\ВЕС\Downloads\mb3-setup-consumer-3.6.1.2711-1.0.508-1.0.8211.exe
      2019-01-03 19:40 - 2019-01-03 20:03 - 000000000 ____D C:\ProgramData\RogueKiller
      2019-01-03 19:40 - 2019-01-03 19:40 - 029162424 _____ (Adlice Software ) C:\Users\ВЕС\Downloads\RogueKiller_setup.exe
      2019-01-03 19:40 - 2019-01-03 19:40 - 000001001 _____ C:\Users\Public\Desktop\RogueKiller.lnk
      2019-01-03 19:40 - 2019-01-03 19:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
      2019-01-03 19:40 - 2019-01-03 19:40 - 000000000 ____D C:\Program Files\RogueKiller
      2019-01-03 19:34 - 2019-01-03 20:42 - 000265284 _____ C:\Windows\ntbtlog.txt
      2019-01-03 19:30 - 2019-01-03 19:30 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
      2019-01-03 19:10 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\teiqv2gvtfm
      2019-01-03 19:10 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\imgn0qmwmwh
      2019-01-03 19:10 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\acysy1vaoki
      2019-01-03 19:10 - 2019-01-03 19:10 - 006161408 _____ C:\Users\ВЕС\AppData\Local\dump007.dat
      2019-01-03 19:09 - 2019-01-03 19:09 - 000000009 _____ C:\Users\ВЕС\rstr1.ini
      2019-01-03 19:08 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\3zxuksmazmq
      2019-01-03 19:07 - 2019-01-03 19:07 - 000000258 __RSH C:\Users\ВЕС\ntuser.pol
      2019-01-03 19:04 - 2019-01-03 19:04 - 000000000 ____D C:\Windows\system32\qamplvkj
      2019-01-03 19:02 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\vi5lm2mflim
      2019-01-03 19:02 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\sq0zlve2tqj
      2019-01-03 19:02 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\qc1oa2vrskn
      2019-01-03 19:02 - 2019-01-03 19:02 - 000000000 ____D C:\Users\ВЕС\AppData\LocalLow\yHNPHHIzKpsCK
      2019-01-03 19:01 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\423viiu5lfu
      2019-01-03 19:01 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Local\Michael
      2019-01-03 19:01 - 2019-01-03 19:19 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\ShopMore
      2019-01-03 19:01 - 2019-01-03 19:07 - 000002964 __RSH C:\ProgramData\ntuser.pol
      2019-01-03 19:01 - 2019-01-03 19:01 - 000493800 _____ (VideoDriver) C:\Windows\D04DE5140B2D.sys
      2019-01-03 19:01 - 2019-01-03 19:01 - 000140800 _____ C:\Users\ВЕС\AppData\Local\installer.dat
      2019-01-03 19:01 - 2019-01-03 19:01 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\Python
      2019-01-03 19:00 - 2019-01-03 20:05 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\ezc3lfxnx4j
      2019-01-03 19:00 - 2019-01-03 19:00 - 000000003 _____ C:\Users\ВЕС\AppData\Local\wbem.ini
      2019-01-03 19:00 - 2019-01-03 19:00 - 000000000 ____D C:\ProgramData\{AC10FE2E-1A46-0496-3E07-15883EE04CD9}
      2019-01-03 19:00 - 2019-01-03 19:00 - 000000000 ____D C:\ProgramData\{59403C6F-D807-F1C6-7FC5-457D7F221C2C}
      2019-01-03 18:57 - 2019-01-03 18:57 - 000008906 _____ C:\Users\NYBMYXMIG-DECRYPT.txt
      2019-01-03 18:57 - 2019-01-03 18:57 - 000008906 _____ C:\NYBMYXMIG-DECRYPT.txt
      2019-01-03 18:57 - 2019-01-03 18:57 - 000000000 ____H C:\d85105b2d85102533b.lock
      2019-01-03 18:56 - 2019-01-03 18:56 - 000000000 ____D C:\ProgramData\HCRGWPOIZH4OHCKX91M2
      2019-01-03 18:56 - 2015-08-03 08:53 - 000384000 _____ (SafeIP) C:\Windows\system32\SafeIPs.dll
      2019-01-03 18:55 - 2019-01-03 20:05 - 000000000 ____D C:\Program Files\KMSPico 10.2.1 Final
      2019-01-03 18:53 - 2018-12-10 23:04 - 000499424 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
      2019-01-03 18:48 - 2019-01-03 18:48 - 001259736 _____ (Plarium) C:\Users\ВЕС\Downloads\PlariumPlaySetup (1).exe
      2019-01-03 18:46 - 2019-01-03 18:46 - 000000000 ____D C:\Users\ВЕС\AppData\Local\Package Cache
      2019-01-03 18:45 - 2019-01-03 19:03 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\Mozilla
      2019-01-03 18:45 - 2019-01-03 18:45 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\K-Meleon
      2019-01-03 18:45 - 2019-01-03 18:45 - 000000000 ____D C:\Users\ВЕС\AppData\Local\K-Meleon
      2019-01-03 18:44 - 2019-01-03 18:44 - 000000000 ____D C:\Users\ВЕС\AppData\Local\Plarium
      2019-01-03 18:44 - 2019-01-03 18:44 - 000000000 ____D C:\Users\ВЕС\AppData\Local\CEF
      2019-01-03 18:39 - 2019-01-03 18:39 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\Google
      2019-01-03 18:38 - 2019-01-03 19:53 - 000002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2019-01-03 18:38 - 2019-01-03 19:53 - 000002161 _____ C:\Users\Public\Desktop\Google Chrome.lnk
      2019-01-03 18:37 - 2019-01-03 19:02 - 000000000 ____D C:\Program Files\Google
      2019-01-03 18:37 - 2019-01-03 19:00 - 000000000 ____D C:\Users\ВЕС\AppData\Local\Google
      2019-01-03 18:37 - 2019-01-03 18:37 - 000057560 _____ C:\Users\ВЕС\AppData\Local\GDIPFONTCACHEV1.DAT
      2019-01-03 18:37 - 2019-01-03 18:37 - 000000000 ____D C:\Users\ВЕС\AppData\Local\Deployment
      2019-01-03 18:37 - 2019-01-03 18:37 - 000000000 ____D C:\Users\ВЕС\AppData\Local\Apps\2.0
      2019-01-03 18:36 - 2014-05-14 17:23 - 001973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
      2019-01-03 18:36 - 2014-05-14 17:23 - 000054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
      2019-01-03 18:36 - 2014-05-14 17:23 - 000045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
      2019-01-03 18:36 - 2014-05-14 17:17 - 002425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
      2019-01-03 18:36 - 2014-05-14 09:23 - 000179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
      2019-01-03 18:36 - 2014-05-14 09:17 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
      2019-01-03 18:33 - 2019-01-03 19:53 - 000001335 _____ C:\Users\ВЕС\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
      2019-01-03 18:33 - 2019-01-03 19:09 - 000000000 ____D C:\Users\ВЕС
      2019-01-03 18:33 - 2019-01-03 18:33 - 000000020 ___SH C:\Users\ВЕС\ntuser.ini
      2019-01-03 18:33 - 2019-01-03 18:33 - 000000000 ____D C:\Users\ВЕС\AppData\Local\VirtualStore
      2019-01-03 18:33 - 2010-11-21 01:46 - 000000000 ____D C:\Users\ВЕС\AppData\Roaming\Media Center Programs
      2019-01-03 16:27 - 2019-01-03 16:27 - 000000000 ____D C:\My Drivers
      2018-12-30 08:50 - 2018-12-30 08:50 - 005183296 _____ (Marcin Szeniak ) C:\Users\ВЕС\Downloads\BCUninstaller_4.12.1_setup.exe
      2018-12-29 13:35 - 2018-12-29 13:35 - 000000000 ____D C:\SWSetup
      ==================== One Month Modified files and folders ========
      (If an entry is included in the fixlist, the file/folder will be moved.)
      2019-01-04 03:15 - 2009-07-14 05:52 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
      2019-01-04 03:15 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\system32\sysprep
      2019-01-04 03:12 - 2010-11-21 01:46 - 000000000 ____D C:\Windows\CSC
      2019-01-04 03:10 - 2009-07-14 05:52 - 000028672 _____ C:\Windows\system32\config\BCD-Template
      2019-01-03 20:30 - 2010-11-20 22:01 - 000713888 _____ C:\Windows\system32\PerfStringBackup.INI
      2019-01-03 20:30 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
      2019-01-03 20:18 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
      2019-01-03 20:17 - 2009-07-14 05:34 - 000016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      2019-01-03 20:17 - 2009-07-14 05:34 - 000016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      2019-01-03 19:01 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\system32\GroupPolicy
      2019-01-03 18:57 - 2018-08-11 19:54 - 000000000 ____D C:\Intel
      2019-01-03 18:57 - 2017-10-21 13:53 - 000000000 ____D C:\LFS
      2019-01-03 18:57 - 2017-09-25 20:50 - 000000000 ___RD C:\BECKO-PC
      2019-01-03 18:57 - 2017-04-14 15:10 - 000036892 ____H C:\iCS Source.suo.nybmyxmig
      2019-01-03 18:33 - 2009-07-14 05:33 - 000266808 _____ C:\Windows\system32\FNTCACHE.DAT
      2019-01-03 18:31 - 2009-07-14 03:37 - 000000000 __RHD C:\Users\Public\Libraries
      2019-01-03 17:30 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache
      2019-01-03 15:34 - 2018-08-11 14:17 - 000000000 ____D C:\Users\ВЕС\Downloads\k-meleon
      2019-01-01 13:09 - 2018-09-02 13:32 - 000000000 ____D C:\Users\ВЕС\Documents\TalkHelper
      ==================== Files in the root of some directories =======
      1601-01-03 21:26 - 1601-01-03 21:26 - 000186368 ____N (Microsoft Corporation) C:\Users\ВЕС\AppData\Local\aIQEonJ.exe
      2019-01-03 19:10 - 2019-01-03 19:10 - 006161408 _____ () C:\Users\ВЕС\AppData\Local\dump007.dat
      2019-01-03 19:01 - 2019-01-03 19:01 - 000140800 _____ () C:\Users\ВЕС\AppData\Local\installer.dat
      2019-01-03 19:00 - 2019-01-03 19:00 - 000000003 _____ () C:\Users\ВЕС\AppData\Local\wbem.ini
      Some files in TEMP:
      ====================
      2019-01-03 18:56 - 2019-01-03 18:56 - 000710464 _____ () C:\Users\ВЕС\AppData\Local\Temp\3.exe
      2019-01-03 19:00 - 2019-01-03 19:00 - 001312696 _____ (                                                            ) C:\Users\ВЕС\AppData\Local\Temp\fastdatax.exe
      2019-01-03 19:09 - 2019-01-03 20:19 - 000000000 ____D () C:\Users\ВЕС\AppData\Local\Temp\IEShims.dll
      2019-01-03 19:00 - 2019-01-03 19:00 - 003520512 _____ () C:\Users\ВЕС\AppData\Local\Temp\installer_mi.exe
      2019-01-03 18:56 - 2019-01-03 18:56 - 002715792 _____ (SafeIP, LLC.                                                ) C:\Users\ВЕС\AppData\Local\Temp\update.exe
      ==================== Bamital & volsnap ======================
      (There is no automatic fix for files that do not pass verification.)
      C:\Windows\explorer.exe => File is digitally signed
      C:\Windows\system32\winlogon.exe => File is digitally signed
      C:\Windows\system32\wininit.exe => File is digitally signed
      C:\Windows\system32\svchost.exe => File is digitally signed
      C:\Windows\system32\services.exe => File is digitally signed
      C:\Windows\system32\User32.dll => File is digitally signed
      C:\Windows\system32\userinit.exe => File is digitally signed
      C:\Windows\system32\rpcss.dll => File is digitally signed
      C:\Windows\system32\dnsapi.dll => File is digitally signed
      C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
      LastRegBack: 2019-01-04 03:11
      ==================== End of FRST.txt ===========================
      Addition.txt

    • от Шабан Талипов
      Някой може ли дами помогне, тази грешка забранява достъпа на обновление на windows-a и не позволява включването на защитната стена. Пробвах с антивирусна програма bitdefender без успех
  • Дарение

×

Информация

Поставихме бисквитки на устройството ви за най-добро потребителско изживяване. Можете да промените настройките си за бисквитки, или в противен случай приемаме, че сте съгласни с нашите условия за ползване.