Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-04-2014 01 Ran by JOHN (administrator) on JANMATUSZ on 14-04-2014 14:15:14 Running from C:\Users\JOHN\Desktop\Bezpieczeństwo\Diagnostyka Windows 8.1 Pro with Media Center (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Microsoft Corporation) C:\Windows\system32\SppExtComObj.exe (DT Soft Ltd) C:\Program Files (x86)\Daemon Tools Pro\DTShellHlp.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIHOE.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated) HKLM\...\Run: [ACPW06EN] - C:\Program Files\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe [1231992 2012-11-14] (ACD Systems) HKLM\...\Run: [Classic Start Menu] - C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [495616 2011-03-09] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [856064 2011-03-09] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [SDTray] - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation) HKLM-x32\...\Run: [AdobeCEPServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039240 2013-12-26] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-11] (AVAST Software) HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2012-06-14] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe [234000 2012-06-14] (CyberLink Corp.) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\...\Run: [EPSON PX830 Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE [232448 2011-01-21] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\...\CurrentVersion\Windows: [Load] C:\ProgramData\NTKernel\nt32.exe <===== ATTENTION HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\...\MountPoints2: {c5aba00d-5a7f-11e3-825c-806e6f6e6963} - "P:\startuj.exe" HKU\S-1-5-21-3324180727-1194246938-4127817598-1001\...\Winlogon: [Shell] explorer.exe,"C:\ProgramData\load32.exe" [6673920 2014-02-07] () <==== ATTENTION Startup: C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBAEA73AD060BCF01 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft) BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\JOHN\AppData\Roaming\Mozilla\Firefox\Profiles\q9l9zueg.default FF Homepage: hxxp://www.google.com FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Extension: Extension_Protected - C:\Users\JOHN\AppData\Roaming\Mozilla\Firefox\Profiles\q9l9zueg.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack [2014-01-27] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-11-22] Chrome: ======= CHR Extension: (Dokumenty Google) - C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-15] CHR Extension: (Dysk Google) - C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-15] CHR Extension: (YouTube) - C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-15] CHR Extension: (Szukaj w Google) - C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-15] CHR Extension: (Google Wallet) - C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15] CHR Extension: (Gmail) - C:\Users\JOHN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-15] ==================== Services (Whitelisted) ================= R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY) R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-11] (AVAST Software) S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-11-15] () S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1069248 2014-02-06] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation) S2 SDScannerService; "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" [X] S2 SDUpdateService; "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" [X] S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [X] S2 Util Surftastic; "C:\Program Files (x86)\Surftastic\bin\utilSurftastic.exe" [X] ==================== Drivers (Whitelisted) ==================== S3 3xHybr64; C:\Windows\system32\DRIVERS\3xHybr64.sys [1413592 2006-12-11] (Philips Semiconductors GmbH) S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-20] (Advanced Micro Devices) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-11] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-11] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-11] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-11] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-11] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-11] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-11] () R3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.) U3 axscsidrv; C:\Windows\System32\Drivers\axscsidrv.sys [293888 2013-11-15] (Alcohol Soft Development Team) R3 azvusb; C:\Windows\System32\drivers\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-11-15] (DT Soft Ltd) S3 esgiguard; C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] () S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 Ph3xIB64; C:\Windows\system32\DRIVERS\Ph3xIB64.sys [1627520 2011-05-31] (NXP Semiconductors) R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-11-15] (Duplex Secure Ltd.) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102664 2013-11-15] () R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25992 2013-11-15] () R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [700680 2013-11-15] () U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () <===== ATTENTION Necurs Rootkit? S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation) R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157528 2014-02-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-14 14:12 - 2014-04-14 14:15 - 00000000 ____D () C:\FRST 2014-04-14 11:37 - 2014-04-14 11:37 - 00000000 ____D () C:\Program Files\Classic Shell 2014-04-14 06:05 - 2014-04-14 06:05 - 00000000 ____D () C:\Windows\system32\appmgmt 2014-04-13 20:42 - 2014-04-13 20:42 - 00000000 ____D () C:\Users\JOHN\Documents\Notesy programu OneNote 2014-04-13 20:21 - 2014-04-13 20:46 - 00004608 ___SH () C:\Users\JOHN\Downloads\Thumbs.db 2014-04-13 19:57 - 2014-04-13 19:57 - 00000000 ____D () C:\Program Files\CCleaner 2014-04-13 12:44 - 2014-04-13 12:44 - 05194807 _____ (Swearware) C:\Users\JOHN\Downloads\ComboFix.exe 2014-04-11 19:27 - 2014-04-11 19:27 - 01426178 _____ () C:\Users\JOHN\Downloads\adwcleaner.exe 2014-04-11 19:20 - 2014-04-11 19:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-04-11 19:02 - 2014-04-13 12:33 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-11 19:02 - 2014-04-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-04-11 19:02 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-11 19:02 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-11 19:01 - 2014-04-11 19:02 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-11 19:01 - 2014-04-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-04-11 16:52 - 2014-04-11 16:55 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\Dropbox 2014-04-11 16:46 - 2014-04-11 16:46 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-11 16:46 - 2014-04-11 16:46 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf5594d19f1ce4.job 2014-04-11 16:46 - 2014-04-11 16:46 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job 2014-04-05 11:47 - 2014-04-05 11:48 - 00000000 ____D () C:\MyAudio 2014-04-03 22:45 - 2014-04-03 22:46 - 00000000 ____D () C:\Program Files\Unlocker 2014-04-03 22:45 - 2014-04-03 22:45 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2014-04-03 22:44 - 2014-04-03 22:44 - 01078591 _____ () C:\Users\JOHN\Downloads\Unlocker1.9.2.exe 2014-04-03 22:34 - 2014-04-03 22:34 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz 2014-04-03 22:33 - 2014-04-03 22:33 - 03842617 _____ (FranmoSoftware ) C:\Users\JOHN\Downloads\odk13.3.0.1584.exe 2014-04-03 21:36 - 2014-04-03 21:36 - 00000000 __SHD () C:\Users\JOHN\AppData\Local\EmieUserList 2014-04-03 21:36 - 2014-04-03 21:36 - 00000000 __SHD () C:\Users\JOHN\AppData\Local\EmieSiteList 2014-04-03 21:34 - 2014-04-03 21:34 - 00000332 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{A9940739-9971-4EF3-9F03-2F8197CA0BA2}.job 2014-04-03 21:30 - 2014-04-03 21:30 - 00000000 ____D () C:\Users\JOHN\AppData\Local\GHISLER 2014-04-03 21:28 - 2014-04-03 21:37 - 00000000 ____D () C:\Program Files (x86)\Unlocker 2014-04-03 21:24 - 2014-04-03 21:25 - 00297072 __RSH () C:\NTLDR 2014-04-03 21:24 - 2014-04-03 21:25 - 00047772 __RSH () C:\ntdetect.com 2014-04-03 21:24 - 2014-04-03 21:25 - 00000345 __RSH () C:\Boot.ini 2014-04-03 21:24 - 2014-04-03 20:39 - 00000000 ____D () C:\NST 2014-03-29 17:17 - 2014-03-02 12:20 - 23549952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-29 17:17 - 2014-03-02 11:33 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-29 17:17 - 2014-02-26 10:48 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2014-03-29 17:17 - 2014-02-26 10:07 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll 2014-03-29 17:17 - 2014-02-26 08:59 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2014-03-29 17:17 - 2014-02-26 08:46 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2014-03-29 17:17 - 2014-02-26 08:29 - 02678784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll 2014-03-29 16:12 - 2014-02-22 10:43 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2014-03-29 16:12 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2014-03-29 16:11 - 2014-02-22 18:15 - 00531128 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2014-03-29 16:11 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SSShim.dll 2014-03-29 16:11 - 2014-02-22 13:16 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2014-03-29 16:11 - 2014-02-22 13:14 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe 2014-03-29 16:11 - 2014-02-22 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll 2014-03-29 16:11 - 2014-02-22 12:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2014-03-29 16:11 - 2014-02-22 12:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-03-29 16:11 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll 2014-03-29 16:11 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe 2014-03-29 16:11 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll 2014-03-29 16:11 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll 2014-03-29 16:11 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-03-29 16:11 - 2014-02-22 10:51 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2014-03-29 16:11 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll 2014-03-29 16:11 - 2014-02-22 10:30 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll 2014-03-29 16:11 - 2014-02-22 10:20 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll 2014-03-29 16:11 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll 2014-03-29 16:11 - 2014-02-22 10:01 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe 2014-03-29 16:11 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe 2014-03-29 16:11 - 2014-01-17 19:24 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll 2014-03-29 16:11 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll 2014-03-29 16:10 - 2014-02-22 17:59 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe 2014-03-29 16:10 - 2014-02-22 17:44 - 00424280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2014-03-29 16:10 - 2014-02-22 14:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll 2014-03-29 16:10 - 2014-02-22 14:14 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2014-03-29 16:10 - 2014-02-22 14:11 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-03-29 16:10 - 2014-02-22 14:07 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\WofUtil.dll 2014-03-29 16:10 - 2014-02-22 13:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll 2014-03-29 16:10 - 2014-02-22 13:42 - 00038680 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe 2014-03-29 16:10 - 2014-02-22 13:37 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2014-03-29 16:10 - 2014-02-22 13:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-29 16:10 - 2014-02-22 13:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\f3ahvoas.dll 2014-03-29 16:10 - 2014-02-22 13:05 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentHost.dll 2014-03-29 16:10 - 2014-02-22 12:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2014-03-29 16:10 - 2014-02-22 12:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2014-03-29 16:10 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll 2014-03-29 16:10 - 2014-02-22 11:37 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe 2014-03-29 16:10 - 2014-02-22 11:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-03-29 16:10 - 2014-02-22 11:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2014-03-29 16:10 - 2014-02-22 11:19 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2014-03-29 16:10 - 2014-02-22 10:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll 2014-03-29 16:10 - 2014-02-22 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll 2014-03-29 16:10 - 2014-02-22 10:44 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-03-29 16:10 - 2014-02-22 10:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll 2014-03-29 16:10 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-03-29 16:10 - 2014-02-22 10:32 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-03-29 16:10 - 2014-02-22 10:23 - 00839168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2014-03-29 16:10 - 2014-02-08 03:08 - 00139600 _____ () C:\Windows\system32\systemsf.ebd 2014-03-29 16:10 - 2014-02-08 03:08 - 00100197 _____ () C:\Windows\system32\RacRules.xml 2014-03-29 16:09 - 2014-02-22 18:58 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-03-29 16:09 - 2014-02-22 18:15 - 00275312 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll 2014-03-29 16:09 - 2014-02-22 18:00 - 00249688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2014-03-29 16:09 - 2014-02-22 18:00 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys 2014-03-29 16:09 - 2014-02-22 17:59 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll 2014-03-29 16:09 - 2014-02-22 17:49 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys 2014-03-29 16:09 - 2014-02-22 17:41 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2014-03-29 16:09 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powrprof.dll 2014-03-29 16:09 - 2014-02-22 16:04 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2014-03-29 16:09 - 2014-02-22 14:14 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys 2014-03-29 16:09 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2014-03-29 16:09 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2014-03-29 16:09 - 2014-02-22 13:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2014-03-29 16:09 - 2014-02-22 13:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fhevents.dll 2014-03-29 16:09 - 2014-02-22 13:39 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\fhsvcctl.dll 2014-03-29 16:09 - 2014-02-22 13:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll 2014-03-29 16:09 - 2014-02-22 13:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-03-29 16:09 - 2014-02-22 13:17 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-29 16:09 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll 2014-03-29 16:09 - 2014-02-22 13:05 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll 2014-03-29 16:09 - 2014-02-22 13:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll 2014-03-29 16:09 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe 2014-03-29 16:09 - 2014-02-22 12:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\dfp.exe 2014-03-29 16:09 - 2014-02-22 12:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2014-03-29 16:09 - 2014-02-22 12:09 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-29 16:09 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll 2014-03-29 16:09 - 2014-02-22 11:52 - 01132032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll 2014-03-29 16:09 - 2014-02-22 11:51 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll 2014-03-29 16:09 - 2014-02-22 11:45 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2014-03-29 16:09 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-29 16:09 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll 2014-03-29 16:09 - 2014-02-22 11:25 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll 2014-03-29 16:09 - 2014-02-22 11:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2014-03-29 16:09 - 2014-02-22 11:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll 2014-03-29 16:09 - 2014-02-22 10:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2014-03-29 16:09 - 2014-02-22 10:51 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-03-29 16:09 - 2014-02-22 10:44 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2014-03-29 16:09 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-03-29 16:09 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll 2014-03-29 16:09 - 2014-02-22 10:36 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll 2014-03-29 16:09 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll 2014-03-29 16:09 - 2014-02-08 03:08 - 00100197 _____ () C:\Windows\SysWOW64\RacRules.xml 2014-03-29 16:09 - 2014-02-01 08:00 - 00011109 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms 2014-03-29 16:09 - 2014-02-01 08:00 - 00011109 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms 2014-03-29 16:09 - 2014-02-01 08:00 - 00007762 _____ () C:\Windows\SysWOW64\connectedsearch-suggestions.searchconnector-ms 2014-03-29 16:09 - 2014-02-01 08:00 - 00007762 _____ () C:\Windows\system32\connectedsearch-suggestions.searchconnector-ms 2014-03-29 16:09 - 2014-02-01 08:00 - 00007130 _____ () C:\Windows\SysWOW64\connectedsearch-zeroinput.searchconnector-ms 2014-03-29 16:09 - 2014-02-01 08:00 - 00007130 _____ () C:\Windows\system32\connectedsearch-zeroinput.searchconnector-ms 2014-03-29 16:09 - 2014-01-31 11:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-03-29 16:09 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll 2014-03-29 16:08 - 2014-02-22 18:58 - 00036200 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2014-03-29 16:08 - 2014-02-22 18:15 - 00188464 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe 2014-03-29 16:08 - 2014-02-22 18:02 - 00170952 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2014-03-29 16:08 - 2014-02-22 18:00 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2014-03-29 16:08 - 2014-02-22 18:00 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2014-03-29 16:08 - 2014-02-22 17:55 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2014-03-29 16:08 - 2014-02-22 17:54 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-03-29 16:08 - 2014-02-22 17:50 - 00761792 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll 2014-03-29 16:08 - 2014-02-22 17:49 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-03-29 16:08 - 2014-02-22 17:49 - 00280920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-03-29 16:08 - 2014-02-22 17:49 - 00148824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-03-29 16:08 - 2014-02-22 17:48 - 01791752 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll 2014-03-29 16:08 - 2014-02-22 17:46 - 01445616 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2014-03-29 16:08 - 2014-02-22 17:43 - 00142576 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-03-29 16:08 - 2014-02-22 17:41 - 00467504 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-03-29 16:08 - 2014-02-22 17:41 - 00463264 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2014-03-29 16:08 - 2014-02-22 17:41 - 00391008 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2014-03-29 16:08 - 2014-02-22 17:41 - 00244888 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2014-03-29 16:08 - 2014-02-22 17:41 - 00028416 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-03-29 16:08 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll 2014-03-29 16:08 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll 2014-03-29 16:08 - 2014-02-22 16:04 - 00406512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2014-03-29 16:08 - 2014-02-22 16:04 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-03-29 16:08 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll 2014-03-29 16:08 - 2014-02-22 14:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys 2014-03-29 16:08 - 2014-02-22 14:08 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2014-03-29 16:08 - 2014-02-22 14:08 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll 2014-03-29 16:08 - 2014-02-22 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2014-03-29 16:08 - 2014-02-22 14:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\clrhost.dll 2014-03-29 16:08 - 2014-02-22 14:06 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-03-29 16:08 - 2014-02-22 14:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll 2014-03-29 16:08 - 2014-02-22 14:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2014-03-29 16:08 - 2014-02-22 13:47 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll 2014-03-29 16:08 - 2014-02-22 13:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll 2014-03-29 16:08 - 2014-02-22 13:34 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll 2014-03-29 16:08 - 2014-02-22 13:32 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2014-03-29 16:08 - 2014-02-22 13:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe 2014-03-29 16:08 - 2014-02-22 13:17 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe 2014-03-29 16:08 - 2014-02-22 13:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-03-29 16:08 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe 2014-03-29 16:08 - 2014-02-22 13:02 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll 2014-03-29 16:08 - 2014-02-22 13:02 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2014-03-29 16:08 - 2014-02-22 13:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-03-29 16:08 - 2014-02-22 12:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DAConn.dll 2014-03-29 16:08 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll 2014-03-29 16:08 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmdskmgr.dll 2014-03-29 16:08 - 2014-02-22 12:46 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe 2014-03-29 16:08 - 2014-02-22 12:38 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\DfpCommon.dll 2014-03-29 16:08 - 2014-02-22 12:36 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-03-29 16:08 - 2014-02-22 12:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-03-29 16:08 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-29 16:08 - 2014-02-22 12:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-03-29 16:08 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll 2014-03-29 16:08 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-03-29 16:08 - 2014-02-22 12:14 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2014-03-29 16:08 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-03-29 16:08 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-03-29 16:08 - 2014-02-22 11:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-03-29 16:08 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-03-29 16:08 - 2014-02-22 11:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll 2014-03-29 16:08 - 2014-02-22 11:50 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll 2014-03-29 16:08 - 2014-02-22 11:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll 2014-03-29 16:08 - 2014-02-22 11:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll 2014-03-29 16:08 - 2014-02-22 11:35 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll 2014-03-29 16:08 - 2014-02-22 11:34 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll 2014-03-29 16:08 - 2014-02-22 11:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2014-03-29 16:08 - 2014-02-22 11:29 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll 2014-03-29 16:08 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll 2014-03-29 16:08 - 2014-02-22 11:25 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2014-03-29 16:08 - 2014-02-22 11:25 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll 2014-03-29 16:08 - 2014-02-22 11:25 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll 2014-03-29 16:08 - 2014-02-22 11:25 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll 2014-03-29 16:08 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll 2014-03-29 16:08 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\korwbrkr.dll 2014-03-29 16:08 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll 2014-03-29 16:08 - 2014-02-22 11:14 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2014-03-29 16:08 - 2014-02-22 11:10 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll 2014-03-29 16:08 - 2014-02-22 11:09 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe 2014-03-29 16:08 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll 2014-03-29 16:08 - 2014-02-22 11:04 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll 2014-03-29 16:08 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll 2014-03-29 16:08 - 2014-02-22 10:55 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll 2014-03-29 16:08 - 2014-02-22 10:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll 2014-03-29 16:08 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll 2014-03-29 16:08 - 2014-02-22 10:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AepRoam.dll 2014-03-29 16:08 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll 2014-03-29 16:08 - 2014-02-22 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2014-03-29 16:08 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll 2014-03-29 16:08 - 2014-02-22 10:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2014-03-29 16:08 - 2014-02-22 10:40 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-03-29 16:08 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll 2014-03-29 16:08 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll 2014-03-29 16:08 - 2014-02-22 10:33 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2014-03-29 16:08 - 2014-02-22 10:31 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-03-29 16:08 - 2014-02-22 10:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll 2014-03-29 16:08 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll 2014-03-29 16:08 - 2014-02-22 10:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll 2014-03-29 16:08 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll 2014-03-29 16:08 - 2014-02-02 14:19 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-03-29 16:08 - 2014-01-31 13:59 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-03-29 16:08 - 2014-01-31 13:25 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-03-29 16:08 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2014-03-29 16:08 - 2014-01-29 02:17 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll 2014-03-29 16:08 - 2014-01-27 21:55 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll 2014-03-29 16:08 - 2014-01-27 21:04 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll 2014-03-29 16:08 - 2014-01-27 18:59 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2014-03-29 16:08 - 2014-01-27 18:48 - 00229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll 2014-03-29 16:08 - 2014-01-16 09:32 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-03-29 16:08 - 2014-01-14 01:48 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-03-29 16:08 - 2013-11-27 11:10 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2014-03-29 16:08 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll 2014-03-29 16:07 - 2014-02-22 18:59 - 00123448 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll 2014-03-29 16:07 - 2014-02-22 18:15 - 00071888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys 2014-03-29 16:07 - 2014-02-22 18:02 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-03-29 16:07 - 2014-02-22 18:02 - 00080048 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe 2014-03-29 16:07 - 2014-02-22 18:00 - 00157528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys 2014-03-29 16:07 - 2014-02-22 17:55 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-03-29 16:07 - 2014-02-22 17:55 - 00388408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2014-03-29 16:07 - 2014-02-22 17:55 - 00162176 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe 2014-03-29 16:07 - 2014-02-22 17:55 - 00105864 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll 2014-03-29 16:07 - 2014-02-22 17:53 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2014-03-29 16:07 - 2014-02-22 17:50 - 01466864 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-03-29 16:07 - 2014-02-22 17:50 - 00054816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys 2014-03-29 16:07 - 2014-02-22 17:50 - 00032544 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe 2014-03-29 16:07 - 2014-02-22 17:49 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2014-03-29 16:07 - 2014-02-22 17:44 - 00539992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2014-03-29 16:07 - 2014-02-22 17:44 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys 2014-03-29 16:07 - 2014-02-22 17:44 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-03-29 16:07 - 2014-02-22 17:43 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-03-29 16:07 - 2014-02-22 17:41 - 00490176 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2014-03-29 16:07 - 2014-02-22 17:41 - 00372360 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll 2014-03-29 16:07 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll 2014-03-29 16:07 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll 2014-03-29 16:07 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll 2014-03-29 16:07 - 2014-02-22 16:18 - 01200296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2014-03-29 16:07 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-03-29 16:07 - 2014-02-22 16:14 - 00389464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2014-03-29 16:07 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll 2014-03-29 16:07 - 2014-02-22 14:24 - 02825216 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-03-29 16:07 - 2014-02-22 14:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-03-29 16:07 - 2014-02-22 14:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2014-03-29 16:07 - 2014-02-22 14:20 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll 2014-03-29 16:07 - 2014-02-22 14:17 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-session-winsta-l1-1-0.dll 2014-03-29 16:07 - 2014-02-22 14:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys 2014-03-29 16:07 - 2014-02-22 14:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys 2014-03-29 16:07 - 2014-02-22 14:08 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll 2014-03-29 16:07 - 2014-02-22 14:00 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-03-29 16:07 - 2014-02-22 14:00 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll 2014-03-29 16:07 - 2014-02-22 13:57 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-03-29 16:07 - 2014-02-22 13:54 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2014-03-29 16:07 - 2014-02-22 13:50 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2014-03-29 16:07 - 2014-02-22 13:48 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll 2014-03-29 16:07 - 2014-02-22 13:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2014-03-29 16:07 - 2014-02-22 13:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-03-29 16:07 - 2014-02-22 13:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-03-29 16:07 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2014-03-29 16:07 - 2014-02-22 13:25 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2014-03-29 16:07 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-session-winsta-l1-1-0.dll 2014-03-29 16:07 - 2014-02-22 13:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll 2014-03-29 16:07 - 2014-02-22 13:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-03-29 16:07 - 2014-02-22 13:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-03-29 16:07 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clrhost.dll 2014-03-29 16:07 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll 2014-03-29 16:07 - 2014-02-22 13:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll 2014-03-29 16:07 - 2014-02-22 13:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-03-29 16:07 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-03-29 16:07 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll 2014-03-29 16:07 - 2014-02-22 13:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-29 16:07 - 2014-02-22 13:00 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-29 16:07 - 2014-02-22 12:59 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2014-03-29 16:07 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-29 16:07 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-03-29 16:07 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-03-29 16:07 - 2014-02-22 12:56 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2014-03-29 16:07 - 2014-02-22 12:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll 2014-03-29 16:07 - 2014-02-22 12:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-29 16:07 - 2014-02-22 12:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll 2014-03-29 16:07 - 2014-02-22 12:50 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll 2014-03-29 16:07 - 2014-02-22 12:41 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-03-29 16:07 - 2014-02-22 12:39 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-03-29 16:07 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-29 16:07 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-03-29 16:07 - 2014-02-22 12:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-03-29 16:07 - 2014-02-22 12:22 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-03-29 16:07 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-29 16:07 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll 2014-03-29 16:07 - 2014-02-22 12:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2014-03-29 16:07 - 2014-02-22 12:13 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll 2014-03-29 16:07 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll 2014-03-29 16:07 - 2014-02-22 12:04 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll 2014-03-29 16:07 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-03-29 16:07 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-03-29 16:07 - 2014-02-22 11:59 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe 2014-03-29 16:07 - 2014-02-22 11:59 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll 2014-03-29 16:07 - 2014-02-22 11:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2014-03-29 16:07 - 2014-02-22 11:56 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2014-03-29 16:07 - 2014-02-22 11:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll 2014-03-29 16:07 - 2014-02-22 11:53 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2014-03-29 16:07 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-03-29 16:07 - 2014-02-22 11:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll 2014-03-29 16:07 - 2014-02-22 11:48 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-03-29 16:07 - 2014-02-22 11:48 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll 2014-03-29 16:07 - 2014-02-22 11:47 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2014-03-29 16:07 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2014-03-29 16:07 - 2014-02-22 11:45 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll 2014-03-29 16:07 - 2014-02-22 11:43 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll 2014-03-29 16:07 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll 2014-03-29 16:07 - 2014-02-22 11:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe 2014-03-29 16:07 - 2014-02-22 11:38 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2014-03-29 16:07 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WLanConn.dll 2014-03-29 16:07 - 2014-02-22 11:34 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2014-03-29 16:07 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll 2014-03-29 16:07 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2014-03-29 16:07 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll 2014-03-29 16:07 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2014-03-29 16:07 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-03-29 16:07 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll 2014-03-29 16:07 - 2014-02-22 11:23 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2014-03-29 16:07 - 2014-02-22 11:22 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll 2014-03-29 16:07 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll 2014-03-29 16:07 - 2014-02-22 11:05 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-03-29 16:07 - 2014-02-22 11:02 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2014-03-29 16:07 - 2014-02-22 10:59 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-03-29 16:07 - 2014-02-22 10:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2014-03-29 16:07 - 2014-02-22 10:55 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2014-03-29 16:07 - 2014-02-22 10:55 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll 2014-03-29 16:07 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll 2014-03-29 16:07 - 2014-02-22 10:54 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2014-03-29 16:07 - 2014-02-22 10:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-03-29 16:07 - 2014-02-22 10:53 - 00876544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-03-29 16:07 - 2014-02-22 10:52 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll 2014-03-29 16:07 - 2014-02-22 10:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2014-03-29 16:07 - 2014-02-22 10:49 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll 2014-03-29 16:07 - 2014-02-22 10:49 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll 2014-03-29 16:07 - 2014-02-22 10:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2014-03-29 16:07 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll 2014-03-29 16:07 - 2014-02-22 10:47 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2014-03-29 16:07 - 2014-02-22 10:45 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-03-29 16:07 - 2014-02-22 10:45 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll 2014-03-29 16:07 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll 2014-03-29 16:07 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-03-29 16:07 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll 2014-03-29 16:07 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll 2014-03-29 16:07 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll 2014-03-29 16:07 - 2014-02-22 10:41 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-03-29 16:07 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl 2014-03-29 16:07 - 2014-02-22 10:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-29 16:07 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-03-29 16:07 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-29 16:07 - 2014-02-22 10:35 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll 2014-03-29 16:07 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll 2014-03-29 16:07 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-03-29 16:07 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-03-29 16:07 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-03-29 16:07 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-03-29 16:07 - 2014-02-22 06:33 - 00262335 _____ () C:\Windows\system32\dfpinc.dat 2014-03-29 16:07 - 2014-02-01 08:00 - 00002255 _____ () C:\Windows\SysWOW64\WimBootCompress.ini 2014-03-29 16:07 - 2014-02-01 08:00 - 00002255 _____ () C:\Windows\system32\WimBootCompress.ini 2014-03-29 16:07 - 2014-01-31 12:42 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-03-29 16:07 - 2014-01-31 11:19 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll 2014-03-29 16:07 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll 2014-03-29 16:07 - 2014-01-31 10:18 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-03-29 16:07 - 2014-01-27 21:53 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-03-29 16:07 - 2014-01-27 21:46 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2014-03-29 16:07 - 2014-01-27 19:04 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-03-29 16:07 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll 2014-03-29 16:07 - 2014-01-08 03:30 - 00745328 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-03-29 16:07 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-03-29 16:07 - 2013-11-27 11:47 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe 2014-03-29 16:07 - 2013-11-11 01:41 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll 2014-03-29 16:07 - 2013-11-08 06:04 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2014-03-29 16:07 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2014-03-29 16:06 - 2014-02-22 18:59 - 01339248 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-03-29 16:06 - 2014-02-22 18:59 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2014-03-29 16:06 - 2014-02-22 18:59 - 00526304 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-29 16:06 - 2014-02-22 18:59 - 00356856 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll 2014-03-29 16:06 - 2014-02-22 18:59 - 00209160 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2014-03-29 16:06 - 2014-02-22 17:55 - 00244848 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2014-03-29 16:06 - 2014-02-22 17:55 - 00131168 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe 2014-03-29 16:06 - 2014-02-22 17:53 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-03-29 16:06 - 2014-02-22 17:50 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-03-29 16:06 - 2014-02-22 17:50 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll 2014-03-29 16:06 - 2014-02-22 17:50 - 00258784 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe 2014-03-29 16:06 - 2014-02-22 17:50 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe 2014-03-29 16:06 - 2014-02-22 17:50 - 00043408 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe 2014-03-29 16:06 - 2014-02-22 17:49 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2014-03-29 16:06 - 2014-02-22 17:49 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2014-03-29 16:06 - 2014-02-22 17:49 - 00189784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS 2014-03-29 16:06 - 2014-02-22 17:49 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2014-03-29 16:06 - 2014-02-22 17:48 - 00210736 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2014-03-29 16:06 - 2014-02-22 17:46 - 00669896 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-03-29 16:06 - 2014-02-22 17:43 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll 2014-03-29 16:06 - 2014-02-22 17:41 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2014-03-29 16:06 - 2014-02-22 17:41 - 00360000 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2014-03-29 16:06 - 2014-02-22 17:41 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll 2014-03-29 16:06 - 2014-02-22 17:40 - 01118552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-03-29 16:06 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2014-03-29 16:06 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-29 16:06 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll 2014-03-29 16:06 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2014-03-29 16:06 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll 2014-03-29 16:06 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe 2014-03-29 16:06 - 2014-02-22 16:18 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-03-29 16:06 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe 2014-03-29 16:06 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe 2014-03-29 16:06 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-03-29 16:06 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll 2014-03-29 16:06 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2014-03-29 16:06 - 2014-02-22 16:04 - 00386360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2014-03-29 16:06 - 2014-02-22 16:04 - 00354808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll 2014-03-29 16:06 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll 2014-03-29 16:06 - 2014-02-22 14:17 - 00008192 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-1.dll 2014-03-29 16:06 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-0.dll 2014-03-29 16:06 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-kernel32-package-l1-1-1.dll 2014-03-29 16:06 - 2014-02-22 14:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2014-03-29 16:06 - 2014-02-22 14:03 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2014-03-29 16:06 - 2014-02-22 14:03 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2014-03-29 16:06 - 2014-02-22 13:50 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-03-29 16:06 - 2014-02-22 13:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe 2014-03-29 16:06 - 2014-02-22 13:25 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE 2014-03-29 16:06 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-1.dll 2014-03-29 16:06 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-0.dll 2014-03-29 16:06 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll 2014-03-29 16:06 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-kernel32-package-l1-1-1.dll 2014-03-29 16:06 - 2014-02-22 13:22 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll 2014-03-29 16:06 - 2014-02-22 13:20 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2014-03-29 16:06 - 2014-02-22 13:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll 2014-03-29 16:06 - 2014-02-22 13:15 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll 2014-03-29 16:06 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll 2014-03-29 16:06 - 2014-02-22 13:08 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2014-03-29 16:06 - 2014-02-22 13:05 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll 2014-03-29 16:06 - 2014-02-22 13:04 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2014-03-29 16:06 - 2014-02-22 13:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2014-03-29 16:06 - 2014-02-22 12:56 - 02862592 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2014-03-29 16:06 - 2014-02-22 12:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-03-29 16:06 - 2014-02-22 12:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2014-03-29 16:06 - 2014-02-22 12:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe 2014-03-29 16:06 - 2014-02-22 12:51 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2014-03-29 16:06 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe 2014-03-29 16:06 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE 2014-03-29 16:06 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll 2014-03-29 16:06 - 2014-02-22 12:36 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-03-29 16:06 - 2014-02-22 12:36 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll 2014-03-29 16:06 - 2014-02-22 12:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2014-03-29 16:06 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe 2014-03-29 16:06 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-03-29 16:06 - 2014-02-22 12:18 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-03-29 16:06 - 2014-02-22 12:17 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll 2014-03-29 16:06 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll 2014-03-29 16:06 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll 2014-03-29 16:06 - 2014-02-22 12:13 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2014-03-29 16:06 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll 2014-03-29 16:06 - 2014-02-22 11:57 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2014-03-29 16:06 - 2014-02-22 11:55 - 01416192 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-03-29 16:06 - 2014-02-22 11:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll 2014-03-29 16:06 - 2014-02-22 11:53 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2014-03-29 16:06 - 2014-02-22 11:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe 2014-03-29 16:06 - 2014-02-22 11:48 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll 2014-03-29 16:06 - 2014-02-22 11:45 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-03-29 16:06 - 2014-02-22 11:45 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2014-03-29 16:06 - 2014-02-22 11:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-03-29 16:06 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-03-29 16:06 - 2014-02-22 11:44 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-03-29 16:06 - 2014-02-22 11:43 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll 2014-03-29 16:06 - 2014-02-22 11:35 - 01066496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-03-29 16:06 - 2014-02-22 11:35 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2014-03-29 16:06 - 2014-02-22 11:29 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2014-03-29 16:06 - 2014-02-22 11:29 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll 2014-03-29 16:06 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll 2014-03-29 16:06 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe 2014-03-29 16:06 - 2014-02-22 11:21 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll 2014-03-29 16:06 - 2014-02-22 11:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll 2014-03-29 16:06 - 2014-02-22 11:16 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll 2014-03-29 16:06 - 2014-02-22 11:15 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2014-03-29 16:06 - 2014-02-22 11:11 - 02395136 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll 2014-03-29 16:06 - 2014-02-22 11:07 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll 2014-03-29 16:06 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2014-03-29 16:06 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll 2014-03-29 16:06 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll 2014-03-29 16:06 - 2014-02-22 11:03 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2014-03-29 16:06 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll 2014-03-29 16:06 - 2014-02-22 10:59 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2014-03-29 16:06 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll 2014-03-29 16:06 - 2014-02-22 10:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-03-29 16:06 - 2014-02-22 10:52 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll 2014-03-29 16:06 - 2014-02-22 10:49 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-29 16:06 - 2014-02-22 10:49 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-03-29 16:06 - 2014-02-22 10:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-03-29 16:06 - 2014-02-22 10:48 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2014-03-29 16:06 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll 2014-03-29 16:06 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll 2014-03-29 16:06 - 2014-02-22 10:47 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll 2014-03-29 16:06 - 2014-02-22 10:43 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-03-29 16:06 - 2014-02-22 10:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Renewal.dll 2014-03-29 16:06 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll 2014-03-29 16:06 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingMonitor.dll 2014-03-29 16:06 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-29 16:06 - 2014-02-22 10:24 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll 2014-03-29 16:06 - 2014-02-22 10:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll 2014-03-29 16:06 - 2014-02-22 10:22 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-03-29 16:06 - 2014-02-22 10:21 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-03-29 16:06 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll 2014-03-29 16:06 - 2014-02-22 10:19 - 00698880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-03-29 16:06 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2014-03-29 16:06 - 2014-02-22 10:17 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe 2014-03-29 16:06 - 2014-02-02 16:48 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-03-29 16:06 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-03-29 16:06 - 2014-01-31 11:09 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll 2014-03-29 16:06 - 2014-01-31 11:03 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll 2014-03-29 16:06 - 2014-01-29 10:53 - 01653352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-29 16:06 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-29 16:06 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll 2014-03-29 16:06 - 2014-01-29 02:18 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2014-03-29 16:06 - 2014-01-29 02:17 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll 2014-03-29 16:06 - 2014-01-27 19:24 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2014-03-29 16:06 - 2014-01-27 18:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-03-29 16:06 - 2014-01-27 18:40 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll 2014-03-29 16:06 - 2014-01-27 13:45 - 00050053 _____ () C:\Windows\system32\srms.dat 2014-03-29 16:06 - 2014-01-22 08:21 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll 2014-03-29 16:06 - 2013-12-10 09:35 - 00530944 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll 2014-03-29 16:06 - 2013-12-04 17:16 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2014-03-29 16:06 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2014-03-29 16:05 - 2014-02-22 18:59 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-03-29 16:05 - 2014-02-22 18:59 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-03-29 16:05 - 2014-02-22 18:59 - 00461176 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2014-03-29 16:05 - 2014-02-22 18:59 - 00407536 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2014-03-29 16:05 - 2014-02-22 18:59 - 00289752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2014-03-29 16:05 - 2014-02-22 18:59 - 00139464 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2014-03-29 16:05 - 2014-02-22 18:58 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-03-29 16:05 - 2014-02-22 18:15 - 01929608 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2014-03-29 16:05 - 2014-02-22 18:15 - 01206000 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe 2014-03-29 16:05 - 2014-02-22 18:00 - 00590168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-03-29 16:05 - 2014-02-22 17:55 - 01435304 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2014-03-29 16:05 - 2014-02-22 17:53 - 03394384 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2014-03-29 16:05 - 2014-02-22 17:50 - 21230744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-03-29 16:05 - 2014-02-22 17:50 - 02588168 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe 2014-03-29 16:05 - 2014-02-22 17:50 - 00645104 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-03-29 16:05 - 2014-02-22 17:48 - 02574240 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-03-29 16:05 - 2014-02-22 17:46 - 01927600 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll 2014-03-29 16:05 - 2014-02-22 17:46 - 01542776 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2014-03-29 16:05 - 2014-02-22 17:46 - 01000424 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll 2014-03-29 16:05 - 2014-02-22 17:44 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-03-29 16:05 - 2014-02-22 17:44 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-03-29 16:05 - 2014-02-22 17:44 - 00924504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys 2014-03-29 16:05 - 2014-02-22 17:43 - 01727760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-03-29 16:05 - 2014-02-22 17:43 - 01659056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2014-03-29 16:05 - 2014-02-22 17:43 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2014-03-29 16:05 - 2014-02-22 17:43 - 01487520 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2014-03-29 16:05 - 2014-02-22 17:43 - 01356360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2014-03-29 16:05 - 2014-02-22 17:41 - 02142976 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll 2014-03-29 16:05 - 2014-02-22 17:41 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll 2014-03-29 16:05 - 2014-02-22 17:41 - 01396072 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2014-03-29 16:05 - 2014-02-22 17:41 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-03-29 16:05 - 2014-02-22 17:41 - 01215832 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll 2014-03-29 16:05 - 2014-02-22 17:41 - 00800552 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll 2014-03-29 16:05 - 2014-02-22 17:41 - 00609456 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-03-29 16:05 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll 2014-03-29 16:05 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe 2014-03-29 16:05 - 2014-02-22 16:42 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-03-29 16:05 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2014-03-29 16:05 - 2014-02-22 16:42 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-03-29 16:05 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2014-03-29 16:05 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2014-03-29 16:05 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll 2014-03-29 16:05 - 2014-02-22 16:38 - 01095496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2014-03-29 16:05 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-03-29 16:05 - 2014-02-22 16:18 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll 2014-03-29 16:05 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe 2014-03-29 16:05 - 2014-02-22 16:08 - 01474104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-03-29 16:05 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll 2014-03-29 16:05 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll 2014-03-29 16:05 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll 2014-03-29 16:05 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll 2014-03-29 16:05 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-03-29 16:05 - 2014-02-22 14:17 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2014-03-29 16:05 - 2014-02-22 14:17 - 00890880 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2014-03-29 16:05 - 2014-02-22 14:17 - 00874496 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2014-03-29 16:05 - 2014-02-22 14:15 - 04192768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-29 16:05 - 2014-02-22 14:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2014-03-29 16:05 - 2014-02-22 13:48 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2014-03-29 16:05 - 2014-02-22 13:41 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2014-03-29 16:05 - 2014-02-22 13:25 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-03-29 16:05 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe 2014-03-29 16:05 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe 2014-03-29 16:05 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe 2014-03-29 16:05 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll 2014-03-29 16:05 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2014-03-29 16:05 - 2014-02-22 12:59 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll 2014-03-29 16:05 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll 2014-03-29 16:05 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe 2014-03-29 16:05 - 2014-02-22 12:44 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll 2014-03-29 16:05 - 2014-02-22 12:41 - 02566656 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2014-03-29 16:05 - 2014-02-22 12:41 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2014-03-29 16:05 - 2014-02-22 12:40 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe 2014-03-29 16:05 - 2014-02-22 12:37 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll 2014-03-29 16:05 - 2014-02-22 12:35 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll 2014-03-29 16:05 - 2014-02-22 12:34 - 11742720 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll 2014-03-29 16:05 - 2014-02-22 12:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe 2014-03-29 16:05 - 2014-02-22 12:28 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-03-29 16:05 - 2014-02-22 12:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2014-03-29 16:05 - 2014-02-22 12:25 - 01428480 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe 2014-03-29 16:05 - 2014-02-22 12:20 - 01152512 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl 2014-03-29 16:05 - 2014-02-22 12:20 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2014-03-29 16:05 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll 2014-03-29 16:05 - 2014-02-22 12:12 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\PurchaseWindowsLicense.dll 2014-03-29 16:05 - 2014-02-22 12:09 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2014-03-29 16:05 - 2014-02-22 12:08 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll 2014-03-29 16:05 - 2014-02-22 12:07 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll 2014-03-29 16:05 - 2014-02-22 12:06 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-03-29 16:05 - 2014-02-22 12:05 - 01757184 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe 2014-03-29 16:05 - 2014-02-22 12:04 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll 2014-03-29 16:05 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll 2014-03-29 16:05 - 2014-02-22 12:02 - 16881152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2014-03-29 16:05 - 2014-02-22 12:02 - 12736000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2014-03-29 16:05 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll 2014-03-29 16:05 - 2014-02-22 12:01 - 02648064 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll 2014-03-29 16:05 - 2014-02-22 12:01 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-03-29 16:05 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll 2014-03-29 16:05 - 2014-02-22 12:00 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-29 16:05 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-03-29 16:05 - 2014-02-22 11:49 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll 2014-03-29 16:05 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl 2014-03-29 16:05 - 2014-02-22 11:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll 2014-03-29 16:05 - 2014-02-22 11:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\winsku.dll 2014-03-29 16:05 - 2014-02-22 11:45 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll 2014-03-29 16:05 - 2014-02-22 11:39 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-03-29 16:05 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-03-29 16:05 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe 2014-03-29 16:05 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll 2014-03-29 16:05 - 2014-02-22 11:36 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe 2014-03-29 16:05 - 2014-02-22 11:35 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-03-29 16:05 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-29 16:05 - 2014-02-22 11:33 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll 2014-03-29 16:05 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2014-03-29 16:05 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-03-29 16:05 - 2014-02-22 11:26 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll 2014-03-29 16:05 - 2014-02-22 11:25 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\das.dll 2014-03-29 16:05 - 2014-02-22 11:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll 2014-03-29 16:05 - 2014-02-22 11:24 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2014-03-29 16:05 - 2014-02-22 11:23 - 03494912 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-03-29 16:05 - 2014-02-22 11:23 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-03-29 16:05 - 2014-02-22 11:23 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll 2014-03-29 16:05 - 2014-02-22 11:23 - 00628224 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll 2014-03-29 16:05 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll 2014-03-29 16:05 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsku.dll 2014-03-29 16:05 - 2014-02-22 11:21 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll 2014-03-29 16:05 - 2014-02-22 11:16 - 02270720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2014-03-29 16:05 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe 2014-03-29 16:05 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-03-29 16:05 - 2014-02-22 11:13 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll 2014-03-29 16:05 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll 2014-03-29 16:05 - 2014-02-22 11:11 - 02262016 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-29 16:05 - 2014-02-22 11:11 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll 2014-03-29 16:05 - 2014-02-22 11:10 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll 2014-03-29 16:05 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2014-03-29 16:05 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2014-03-29 16:05 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll 2014-03-29 16:05 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll 2014-03-29 16:05 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2014-03-29 16:05 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll 2014-03-29 16:05 - 2014-02-22 10:55 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-03-29 16:05 - 2014-02-22 10:55 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-03-29 16:05 - 2014-02-22 10:54 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe 2014-03-29 16:05 - 2014-02-22 10:54 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll 2014-03-29 16:05 - 2014-02-22 10:53 - 12027904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2014-03-29 16:05 - 2014-02-22 10:53 - 01229312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2014-03-29 16:05 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2014-03-29 16:05 - 2014-02-22 10:49 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-03-29 16:05 - 2014-02-22 10:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll 2014-03-29 16:05 - 2014-02-22 10:48 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-03-29 16:05 - 2014-02-22 10:48 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-03-29 16:05 - 2014-02-22 10:47 - 00887808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2014-03-29 16:05 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe 2014-03-29 16:05 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll 2014-03-29 16:05 - 2014-02-22 10:46 - 00824832 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-03-29 16:05 - 2014-02-22 10:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2014-03-29 16:05 - 2014-02-22 10:43 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-03-29 16:05 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll 2014-03-29 16:05 - 2014-02-22 10:42 - 03408384 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-03-29 16:05 - 2014-02-22 10:41 - 00662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-03-29 16:05 - 2014-02-22 10:40 - 02368512 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-03-29 16:05 - 2014-02-22 10:40 - 01705984 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-03-29 16:05 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe 2014-03-29 16:05 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-03-29 16:05 - 2014-02-22 10:34 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll 2014-03-29 16:05 - 2014-02-22 10:32 - 04268544 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2014-03-29 16:05 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-29 16:05 - 2014-02-22 10:32 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2014-03-29 16:05 - 2014-02-22 10:24 - 02760704 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2014-03-29 16:05 - 2014-02-22 10:23 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll 2014-03-29 16:05 - 2014-02-22 10:22 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll 2014-03-29 16:05 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll 2014-03-29 16:05 - 2014-02-22 10:19 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2014-03-29 16:05 - 2014-02-22 10:18 - 05834240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2014-03-29 16:05 - 2014-02-22 10:18 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2014-03-29 16:05 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe 2014-03-29 16:05 - 2014-02-22 10:15 - 08654336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2014-03-29 16:05 - 2014-02-22 10:12 - 02639872 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-03-29 16:05 - 2014-02-22 10:06 - 01640960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll 2014-03-29 16:05 - 2014-02-22 10:04 - 02315264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-03-29 16:05 - 2014-02-22 10:04 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll 2014-03-29 16:05 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2014-03-29 16:05 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll 2014-03-29 16:05 - 2014-02-22 10:01 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll 2014-03-29 16:05 - 2014-01-31 12:34 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-03-29 16:05 - 2014-01-31 12:05 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2014-03-29 16:05 - 2014-01-31 11:55 - 03596800 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-03-29 16:05 - 2014-01-31 11:35 - 03085824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-03-29 16:05 - 2014-01-31 11:10 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll 2014-03-29 16:05 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll 2014-03-29 16:05 - 2014-01-31 10:25 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-03-29 16:05 - 2014-01-29 10:52 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2014-03-29 16:05 - 2014-01-29 10:40 - 00994136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2014-03-29 16:05 - 2014-01-27 19:54 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll 2014-03-29 16:05 - 2014-01-27 18:42 - 01526272 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2014-03-29 16:05 - 2014-01-27 17:38 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2014-03-29 16:05 - 2013-12-04 17:54 - 00660480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll 2014-03-29 16:05 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll 2014-03-29 16:05 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe 2014-03-29 16:04 - 2014-02-22 18:59 - 01519520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-03-29 16:04 - 2014-02-22 18:15 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-03-29 16:04 - 2014-02-22 17:37 - 01116664 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-03-29 16:04 - 2014-02-22 16:18 - 18682288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-03-29 16:04 - 2014-02-22 14:07 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2014-03-29 16:04 - 2014-02-22 14:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2014-03-29 16:04 - 2014-02-22 14:01 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\spcompat.dll 2014-03-29 16:04 - 2014-02-22 13:44 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-29 16:04 - 2014-02-22 13:22 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-03-29 16:04 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2014-03-29 16:04 - 2014-02-22 13:16 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-03-29 16:04 - 2014-02-22 13:13 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-03-29 16:04 - 2014-02-22 12:52 - 02288640 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2014-03-29 16:04 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-29 16:04 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll 2014-03-29 16:04 - 2014-02-22 12:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-03-29 16:04 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-03-29 16:04 - 2014-02-22 11:39 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-29 16:04 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-29 16:04 - 2014-02-22 11:26 - 11790848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-03-29 16:04 - 2014-02-22 11:25 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2014-03-29 16:04 - 2014-02-22 11:16 - 13286912 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-03-29 16:04 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-03-29 16:04 - 2014-02-22 11:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2014-03-29 16:04 - 2014-02-22 11:01 - 13933568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-03-29 16:04 - 2014-02-22 10:59 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2014-03-29 16:04 - 2014-02-22 10:46 - 03312128 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll 2014-03-29 16:04 - 2014-02-22 10:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll 2014-03-29 16:04 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll 2014-03-29 16:04 - 2014-01-31 10:11 - 06640640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-03-29 15:43 - 2014-03-04 12:35 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2014-03-29 15:42 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-03-29 15:42 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-03-29 14:23 - 2014-03-30 21:02 - 00000000 ____D () C:\Users\JOHN\Downloads\WINDOWS 8.1 UPDATE 1 2014-03-27 21:19 - 2014-03-30 18:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-27 21:03 - 2014-03-30 17:44 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\evkFv 2014-03-27 21:03 - 2014-03-27 21:13 - 00000000 __SHD () C:\ProgramData\Windows Manager 2014-03-27 21:03 - 2014-01-04 17:54 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll 2014-03-27 21:03 - 2014-01-04 17:08 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll 2014-03-27 21:03 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-03-27 21:03 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-03-27 21:03 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-03-27 21:03 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll 2014-03-27 21:03 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll 2014-03-27 21:03 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll 2014-03-27 21:03 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll 2014-03-27 21:03 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll 2014-03-27 21:03 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2014-03-27 21:01 - 2014-03-30 17:44 - 00000000 ___HD () C:\ProgramData\NTKernel 2014-03-27 21:01 - 2014-03-30 17:44 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\uZNiY 2014-03-27 21:01 - 2014-03-27 21:04 - 00000000 _RSHD () C:\Users\JOHN\a819wyi7i9 2014-03-27 21:01 - 2014-03-27 21:01 - 00003702 _____ () C:\Windows\System32\Tasks\AutoPico Daily Restart 2014-03-27 21:01 - 2014-02-07 15:50 - 06673920 __RSH () C:\ProgramData\load32.exe 2014-03-27 21:01 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-03-27 21:01 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll 2014-03-27 21:01 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2014-03-27 21:01 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2014-03-27 21:01 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2014-03-27 21:01 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2014-03-27 21:01 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll 2014-03-27 21:01 - 2014-01-27 13:45 - 00386722 _____ () C:\Windows\system32\ApnDatabase.xml 2014-03-27 21:01 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll 2014-03-27 21:01 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll 2014-03-27 21:01 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2014-03-27 21:01 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2014-03-27 21:01 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2014-03-27 21:01 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2014-03-27 21:01 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys ==================== One Month Modified Files and Folders ======= 2014-04-14 14:15 - 2014-04-14 14:12 - 00000000 ____D () C:\FRST 2014-04-14 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2014-04-14 13:38 - 2013-11-15 17:36 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\ClassicShell 2014-04-14 12:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-04-14 11:37 - 2014-04-14 11:37 - 00000000 ____D () C:\Program Files\Classic Shell 2014-04-14 06:05 - 2014-04-14 06:05 - 00000000 ____D () C:\Windows\system32\appmgmt 2014-04-13 20:47 - 2013-11-15 19:20 - 00000000 ____D () C:\Users\JOHN\AppData\Local\Microsoft Help 2014-04-13 20:46 - 2014-04-13 20:21 - 00004608 ___SH () C:\Users\JOHN\Downloads\Thumbs.db 2014-04-13 20:43 - 2013-11-12 22:36 - 00000000 ___RD () C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-13 20:42 - 2014-04-13 20:42 - 00000000 ____D () C:\Users\JOHN\Documents\Notesy programu OneNote 2014-04-13 20:18 - 2013-11-16 12:30 - 00000000 ____D () C:\Users\JOHN\AppData\Local\Adobe 2014-04-13 19:59 - 2013-11-15 18:34 - 00000000 ____D () C:\Users\JOHN\Desktop\Tuning 2014-04-13 19:58 - 2013-11-15 20:53 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\DAEMON Tools Pro 2014-04-13 19:57 - 2014-04-13 19:57 - 00000000 ____D () C:\Program Files\CCleaner 2014-04-13 12:44 - 2014-04-13 12:44 - 05194807 _____ (Swearware) C:\Users\JOHN\Downloads\ComboFix.exe 2014-04-13 12:44 - 2013-11-15 18:39 - 00000000 ____D () C:\Users\JOHN\Desktop\Bezpieczeństwo 2014-04-13 12:33 - 2014-04-11 19:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-13 12:04 - 2014-03-03 16:11 - 00000000 ____D () C:\AdwCleaner 2014-04-11 19:27 - 2014-04-11 19:27 - 01426178 _____ () C:\Users\JOHN\Downloads\adwcleaner.exe 2014-04-11 19:20 - 2014-04-11 19:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-04-11 19:16 - 2013-11-15 19:23 - 00000000 ____D () C:\Windows\PCHEALTH 2014-04-11 19:02 - 2014-04-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-04-11 19:02 - 2014-04-11 19:01 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-11 19:02 - 2014-04-11 19:01 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-04-11 19:02 - 2013-11-15 20:26 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\Malwarebytes 2014-04-11 18:29 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-04-11 17:41 - 2013-11-15 19:20 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-11 17:40 - 2013-11-15 17:39 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-11 17:38 - 2013-11-15 17:39 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-11 17:32 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-04-11 16:55 - 2014-04-11 16:52 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\Dropbox 2014-04-11 16:54 - 2013-11-12 22:39 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-11 16:54 - 2013-08-23 01:12 - 00805918 _____ () C:\Windows\system32\perfh015.dat 2014-04-11 16:54 - 2013-08-23 01:12 - 00163272 _____ () C:\Windows\system32\perfc015.dat 2014-04-11 16:46 - 2014-04-11 16:46 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-11 16:46 - 2014-04-11 16:46 - 00001072 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf5594d19f1ce4.job 2014-04-11 16:46 - 2014-04-11 16:46 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job 2014-04-11 16:46 - 2014-02-26 12:03 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-11 16:46 - 2013-11-22 22:32 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-04-11 16:46 - 2013-11-22 22:32 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-04-11 16:46 - 2013-11-22 22:32 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-04-11 16:46 - 2013-11-22 22:32 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-04-11 16:46 - 2013-11-22 22:32 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-04-11 16:46 - 2013-11-22 22:32 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-04-11 16:46 - 2013-11-22 22:32 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-04-05 11:48 - 2014-04-05 11:47 - 00000000 ____D () C:\MyAudio 2014-04-03 22:46 - 2014-04-03 22:45 - 00000000 ____D () C:\Program Files\Unlocker 2014-04-03 22:45 - 2014-04-03 22:45 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2014-04-03 22:44 - 2014-04-03 22:44 - 01078591 _____ () C:\Users\JOHN\Downloads\Unlocker1.9.2.exe 2014-04-03 22:34 - 2014-04-03 22:34 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz 2014-04-03 22:33 - 2014-04-03 22:33 - 03842617 _____ (FranmoSoftware ) C:\Users\JOHN\Downloads\odk13.3.0.1584.exe 2014-04-03 22:20 - 2013-11-12 22:36 - 00000000 ____D () C:\Users\JOHN\AppData\Local\VirtualStore 2014-04-03 21:37 - 2014-04-03 21:28 - 00000000 ____D () C:\Program Files (x86)\Unlocker 2014-04-03 21:36 - 2014-04-03 21:36 - 00000000 __SHD () C:\Users\JOHN\AppData\Local\EmieUserList 2014-04-03 21:36 - 2014-04-03 21:36 - 00000000 __SHD () C:\Users\JOHN\AppData\Local\EmieSiteList 2014-04-03 21:34 - 2014-04-03 21:34 - 00000332 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{A9940739-9971-4EF3-9F03-2F8197CA0BA2}.job 2014-04-03 21:30 - 2014-04-03 21:30 - 00000000 ____D () C:\Users\JOHN\AppData\Local\GHISLER 2014-04-03 21:25 - 2014-04-03 21:24 - 00297072 __RSH () C:\NTLDR 2014-04-03 21:25 - 2014-04-03 21:24 - 00047772 __RSH () C:\ntdetect.com 2014-04-03 21:25 - 2014-04-03 21:24 - 00000345 __RSH () C:\Boot.ini 2014-04-03 20:39 - 2014-04-03 21:24 - 00000000 ____D () C:\NST 2014-04-03 20:13 - 2013-11-22 19:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ClassicShell 2014-04-03 20:13 - 2013-11-22 19:33 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-03 20:13 - 2013-11-22 19:33 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-03 09:51 - 2014-04-11 19:02 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-11 19:02 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2013-11-15 20:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-31 23:23 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-31 23:23 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-30 21:02 - 2014-03-29 14:23 - 00000000 ____D () C:\Users\JOHN\Downloads\WINDOWS 8.1 UPDATE 1 2014-03-30 18:52 - 2014-03-27 21:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-30 18:52 - 2013-11-24 18:09 - 00000000 ____D () C:\ProgramData\launcher 2014-03-30 18:52 - 2013-11-24 18:09 - 00000000 ____D () C:\ProgramData\explauncher 2014-03-30 18:52 - 2013-11-15 20:40 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\VideoReDo-TVSuite4 2014-03-30 18:52 - 2013-11-15 20:23 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\Azureus 2014-03-30 18:52 - 2013-11-12 22:29 - 00000000 ____D () C:\Windows\Panther 2014-03-30 18:52 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MsDtc 2014-03-30 17:44 - 2014-03-27 21:03 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\evkFv 2014-03-30 17:44 - 2014-03-27 21:01 - 00000000 ___HD () C:\ProgramData\NTKernel 2014-03-30 17:44 - 2014-03-27 21:01 - 00000000 ____D () C:\Users\JOHN\AppData\Roaming\uZNiY 2014-03-29 18:45 - 2013-11-13 23:54 - 00000000 ____D () C:\Recovery 2014-03-29 17:26 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-03-29 16:32 - 2013-11-12 22:36 - 00000000 ___RD () C:\Users\JOHN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-03-29 16:28 - 2013-08-22 16:44 - 06816200 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\uk-UA 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\th-TH 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sl-SI 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sk-SK 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ro-RO 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lv-LV 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lt-LT 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\hr-HR 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\he-IL 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\et-EE 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\bg-BG 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ar-SA 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2014-03-29 16:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform 2014-03-29 16:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-03-29 16:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-03-29 16:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2014-03-29 16:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe 2014-03-29 16:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism 2014-03-29 16:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing 2014-03-29 16:24 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager 2014-03-29 15:36 - 2013-11-15 17:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-03-27 23:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-03-27 23:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-03-27 21:13 - 2014-03-27 21:03 - 00000000 __SHD () C:\ProgramData\Windows Manager 2014-03-27 21:11 - 2014-02-09 18:47 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-27 21:11 - 2014-02-09 18:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-27 21:07 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-27 21:04 - 2014-03-27 21:01 - 00000000 _RSHD () C:\Users\JOHN\a819wyi7i9 2014-03-27 21:03 - 2013-11-12 22:42 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3324180727-1194246938-4127817598-1001 2014-03-27 21:01 - 2014-03-27 21:01 - 00003702 _____ () C:\Windows\System32\Tasks\AutoPico Daily Restart 2014-03-27 21:01 - 2014-01-27 22:17 - 00000000 ____D () C:\Program Files\KMSpico 2014-03-27 21:01 - 2013-11-12 22:36 - 00000000 ____D () C:\Users\JOHN 2014-03-27 20:55 - 2013-11-13 23:56 - 00003984 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A9940739-9971-4EF3-9F03-2F8197CA0BA2} 2014-03-27 20:54 - 2013-11-12 22:43 - 00000000 ____D () C:\Users\JOHN\Desktop\Windows 8.1 9600 Activation 2014-03-27 20:52 - 2013-11-22 22:32 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update Files to move or delete: ==================== C:\ProgramData\load32.exe C:\ProgramData\NTKernel C:\ProgramData\PKP_DLbx.DAT C:\ProgramData\PKP_DLdu.DAT C:\ProgramData\PKP_DLeo.DAT C:\ProgramData\PKP_DLes.DAT C:\ProgramData\PKP_DLet.DAT C:\ProgramData\PKP_DLev.DAT Some content of TEMP: ==================== C:\Users\JOHN\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmptynkck.dll C:\Users\JOHN\AppData\Local\Temp\fm.exe C:\Users\JOHN\AppData\Local\Temp\leaf.exe C:\Users\JOHN\AppData\Local\Temp\Quarantine.exe C:\Users\JOHN\AppData\Local\Temp\_is7BF1.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-03-29 16:06] - [2014-02-22 11:45] - 0562176 ____A (Microsoft Corporation) 306EB21E5B480AE9065EA55AC8C35936 C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe [2014-03-29 16:06] - [2014-02-22 17:50] - 2373784 ____A (Microsoft Corporation) 4CE0C733CDCF1D2F78532BBD9CE3441D C:\Windows\SysWOW64\explorer.exe [2014-03-29 16:06] - [2014-02-22 16:18] - 2088160 ____A (Microsoft Corporation) E0C84A30581BC508E289E4371A723F58 C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll [2014-03-29 16:04] - [2014-02-22 18:59] - 1519520 ____A (Microsoft Corporation) CEB069C882A0DFEDBE5C1590D44B1052 C:\Windows\SysWOW64\User32.dll [2014-03-29 16:04] - [2014-02-22 11:25] - 1361408 ____A (Microsoft Corporation) C7099D6A46B880EE194F7A4473D71E10 C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll [2014-03-29 16:07] - [2014-02-22 11:38] - 0753664 ____A (Microsoft Corporation) 81979817943D830BF24571B7C1B28A1A ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected. C:\Windows\System32\Drivers\volsnap.sys [2014-03-29 16:07] - [2014-02-22 17:44] - 0311640 ____A (Microsoft Corporation) 3595FBDF25F8BA6256072D103937D7D6 LastRegBack: 2014-02-17 19:17 ==================== End Of Log ============================