Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015
Ran by xxx (administrator) on XXX-PC (28-07-2015 14:10:34)
Running from C:\Users\xxx\Desktop
Loaded Profiles: xxx (Available Profiles: xxx)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser path: "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" -- "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(XTab system) C:\Program Files (x86)\MiuiTab\ProtectService.exe
() C:\Program Files\shopperz22072015\Jvpmajlij.exe
(SearchProtect) C:\Program Files (x86)\MiuiTab\CmdShell.exe
() C:\Program Files\shopperz22072015\TeobBopcin.exe
() C:\Program Files (x86)\00412F4E-1437050570-0000-0000-0000FFFFFFFF\knseBCF5.tmp
() C:\Program Files\shopperz22072015\Rofdhowal.EXE
() C:\Users\xxx\AppData\Local\gmsd_pl_005010041\upgmsd_pl_005010041.exe
() C:\Program Files\shopperz22072015\Huyde.exe
() C:\Program Files\shopperz22072015\Huyde64.exe
() C:\Program Files (x86)\gmsd_pl_005010041\gmsd_pl_005010041.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.4150\Agent.exe
(Blizzard Entertainment) D:\Battle.net\Battle.net.5952\Battle.net.exe
(Word Surfer) C:\Program Files (x86)\WordSurfer_1.10.0.19\Service\wsasvc.exe
() C:\Users\xxx\AppData\Local\gmsd_pl_005010043\upgmsd_pl_005010043.exe
() C:\Program Files (x86)\gmsd_pl_005010043\gmsd_pl_005010043.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\30.0.1835.157\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [shopperz22072015] => C:\Program Files\shopperz22072015\Huyde.exe [434040 2015-07-22] ()
HKLM\...\Run: [shopperz2207201564] => C:\Program Files\shopperz22072015\Huyde64.exe [464760 2015-07-22] ()
HKLM-x32\...\Run: [mbot_pl_014010032] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010032] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010033] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010034] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010035] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010036] => [X]
HKLM-x32\...\Run: [rec_pl_52] => [X]
HKLM-x32\...\Run: [rec_pl_53] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010037] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010038] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010039] => [X]
HKLM-x32\...\Run: [gmsd_pl_005010040] => [X]
HKLM-x32\...\Run: [SmartWeb] => C:\Users\xxx\AppData\Local\SmartWeb\SmartWebHelper.exe [270368 2015-02-17] (SoftBrain Technologies Ltd.)
HKLM-x32\...\Run: [gmsd_pl_005010041] => C:\Program Files (x86)\gmsd_pl_005010041\gmsd_pl_005010041.exe [3979408 2015-07-25] ()
HKLM-x32\...\Run: [gmsd_pl_005010043] => C:\Program Files (x86)\gmsd_pl_005010043\gmsd_pl_005010043.exe [3976848 2015-07-27] ()
HKLM-x32\...\RunOnce: [upgmsd_pl_005010041.exe] => C:\Users\xxx\AppData\Local\gmsd_pl_005010041\upgmsd_pl_005010041.exe [3291280 2015-07-25] ()
HKLM-x32\...\RunOnce: [upgmsd_pl_005010043.exe] => C:\Users\xxx\AppData\Local\gmsd_pl_005010041\upgmsd_pl_005010043.exe -runonce
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\...\Run: [GoogleChromeAutoLaunch_301616F0A6831F2B456716015D23ECCD] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [637440 2015-05-12] (Crossbrowse)
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\...\Run: [uTorrent] => C:\Users\xxx\AppData\Roaming\uTorrent\uTorrent.exe [1993056 2015-07-26] (BitTorrent Inc.)
HKU\S-1-5-18\...\Run: [BackUp2088327926] => C:\Users\xxx\AppData\Roaming\BackUp2088327926.exe [495616 2009-07-14] ()
Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-07-26]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [2015-07-26]
ShortcutTarget: SmartWeb.lnk -> C:\Users\xxx\AppData\Local\SmartWeb\SmartWebHelper.exe (SoftBrain Technologies Ltd.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1437931279&z=17589a96156e513e07ca685g5z3c1matdcegfo8ceg&from=face&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724
HKU\S-1-5-21-2657923099-3685160994-716934161-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1437931279&z=17589a96156e513e07ca685g5z3c1matdcegfo8ceg&from=face&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2657923099-3685160994-716934161-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&ts=1437979042&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2657923099-3685160994-716934161-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&ts=1437979042&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2657923099-3685160994-716934161-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&ts=1437979042&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2657923099-3685160994-716934161-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&ts=1437979042&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2657923099-3685160994-716934161-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724&ts=1437979042&type=default&q={searchTerms}
BHO: shopperz22072015 -> {318d2d55-9ce3-446e-8640-a43be68a550f} -> C:\Program Files\shopperz22072015\Gaalmi64.dll [2015-07-22] ()
BHO-x32: GoodTab Class -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-07-23] (Thinkgood Co. Limited)
BHO-x32: shopperz22072015 -> {318d2d55-9ce3-446e-8640-a43be68a550f} -> C:\Program Files\shopperz22072015\Gaalmi.dll [2015-07-22] ()
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}: [NameServer] 52.18.92.32,8.8.8.8
Tcpip\..\Interfaces\{F4545AEC-82ED-4B9F-A7E5-AB37EA54DBCA}: [NameServer] 52.18.92.32,8.8.8.8
Tcpip\..\Interfaces\{F4545AEC-82ED-4B9F-A7E5-AB37EA54DBCA}: [DhcpNameServer] 192.168.1.254
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1437931279&z=17589a96156e513e07ca685g5z3c1matdcegfo8ceg&from=face&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724

FireFox:
========
FF ProfilePath: C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\7vonx3ef.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll [2015-07-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll [2015-07-26] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{1457d95f-dd62-4e3c-820f-ccef2bea9201}] - C:\Program Files\shopperz20072015\Firefox
FF HKLM\...\Firefox\Extensions: [{318d2d55-9ce3-446e-8640-a43be68a550f}] - C:\Program Files\shopperz22072015\Firefox
FF Extension: shopperz22072015 - C:\Program Files\shopperz22072015\Firefox [2015-07-25]
FF HKLM-x32\...\Firefox\Extensions: [{1457d95f-dd62-4e3c-820f-ccef2bea9201}] - C:\Program Files\shopperz20072015\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{318d2d55-9ce3-446e-8640-a43be68a550f}] - C:\Program Files\shopperz22072015\Firefox
FF Extension: No Name - C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\7vonx3ef.default\extensions\deskCutv2@gmail.com [not found]
FF Extension: No Name - C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\7vonx3ef.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com [not found]
FF Extension: No Name - C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\7vonx3ef.default\extensions\defsearchp@gmail.com.xpi [not found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]

Chrome: 
=======
CHR Profile: C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ablgnpngfaaficpckehadaljnjgjkhbi [2015-07-27]
CHR Extension: (No Name) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-26]
CHR Extension: (No Name) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-07-26]
CHR Extension: (No Name) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk [2015-07-27]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/?type=sc&ts=1437978940&z=7f820ad23c3d5a938ee9cd3gaz5c2metfmbb6b4t0c&from=cmi&uid=WDCXWD800JD-22JNA0_WD-WMAM94178724

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-07-23] (XTab system)
R3 Rofdhowal; C:\Program Files\shopperz22072015\Rofdhowal.exe [2020352 2015-07-20] () [File not signed]
R2 shopperz22072015 Updater; C:\Program Files\shopperz22072015\Jvpmajlij.exe [174968 2015-07-22] ()
R2 SinaopTajc; C:\Program Files\shopperz22072015\TeobBopcin.exe [172472 2015-07-20] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 wsasvc_1.10.0.19; C:\Program Files (x86)\WordSurfer_1.10.0.19\Service\wsasvc.exe [299608 2015-06-16] (Word Surfer)
R2 zypyjyjo; C:\Program Files (x86)\00412F4E-1437050570-0000-0000-0000FFFFFFFF\knseBCF5.tmp [256512 2015-07-28] () [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 bsdriver; C:\Windows\system32\drivers\bsdriver.sys [34712 2015-07-25] ()
R3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R1 wsafd_1_10_0_19; C:\Windows\System32\drivers\wsafd_1_10_0_19.sys [61312 2015-06-16] (Word Surfer)
S3 BS2088327926; \??\C:\Users\xxx\AppData\Local\Temp\NTFS.sys [X]
S3 cpuz134; \??\C:\Users\xxx\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 wafd_vt_1_10_0_20; system32\drivers\wafd_vt_1_10_0_20.sys [X]
S1 wsfd_1_10_0_19; system32\drivers\wsfd_1_10_0_19.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-28 13:44 - 2015-07-28 14:11 - 00017301 _____ C:\Users\xxx\Desktop\FRST.txt
2015-07-28 13:40 - 2015-07-28 14:10 - 00000000 ____D C:\FRST
2015-07-28 13:37 - 2015-07-28 13:37 - 02146816 _____ (Farbar) C:\Users\xxx\Desktop\FRST64.exe
2015-07-28 13:12 - 2015-07-28 13:13 - 02248704 _____ C:\Users\xxx\Downloads\AdwCleaner (1).exe
2015-07-28 13:06 - 2015-07-28 13:06 - 00001045 _____ C:\Users\xxx\Desktop\AnyProtect.lnk
2015-07-28 13:06 - 2015-07-28 13:06 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-07-28 13:01 - 2015-07-28 13:06 - 00000000 ____D C:\Program Files (x86)\AnyProtectEx
2015-07-28 13:01 - 2015-07-28 13:01 - 00613255 _____ (CMI Limited) C:\Users\xxx\AppData\Local\nsrDB3A.tmp
2015-07-28 12:53 - 2015-07-28 12:53 - 00000000 ____D C:\Users\xxx\AppData\Local\gmsd_pl_005010043
2015-07-28 12:53 - 2015-07-28 12:53 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010043
2015-07-28 12:52 - 2015-07-28 12:52 - 00000000 ____D C:\Users\xxx\AppData\Local\SmartWeb
2015-07-28 12:50 - 2015-07-28 12:51 - 00000000 ____D C:\Program Files (x86)\WordSurfer_1.10.0.19
2015-07-28 12:29 - 2015-07-28 12:29 - 00000000 ____D C:\Users\xxx\AppData\Local\Crossbrowse
2015-07-28 11:31 - 2015-07-28 11:34 - 00001144 _____ C:\Users\xxx\Desktop\Live PC Help.lnk
2015-07-28 06:44 - 2015-07-28 06:44 - 00613255 _____ (CMI Limited) C:\Users\xxx\AppData\Local\nsjE5C1.tmp
2015-07-28 06:44 - 2015-07-28 06:44 - 00001010 _____ C:\Windows\Tasks\Ef3FxHCL9XKx46wvkSSyAwn.job
2015-07-28 06:43 - 2015-07-28 06:43 - 00005082 _____ C:\Windows\Tasks\temp_5fd930fc-d85c-478b-94de-7508b2c986c0-6.job
2015-07-28 06:39 - 2015-07-28 06:39 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-07-28 06:08 - 2015-07-28 06:08 - 00000000 ____D C:\Users\xxx\AppData\Local\VirtualStore
2015-07-28 01:50 - 2015-07-28 01:54 - 00005974 _____ C:\Windows\IE11_main.log
2015-07-27 16:51 - 2015-07-27 16:51 - 00000000 ____D C:\Users\xxx\AppData\Local\Blizzard
2015-07-27 16:48 - 2015-07-27 16:48 - 00000000 ____D C:\Users\xxx\AppData\Local\Blizzard Entertainment
2015-07-27 16:29 - 2015-07-27 16:29 - 00001135 _____ C:\Users\Public\Desktop\Opera 30.lnk
2015-07-27 16:29 - 2015-07-27 16:29 - 00001135 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 30.lnk
2015-07-27 16:29 - 2015-07-27 16:29 - 00000000 ____D C:\Users\xxx\AppData\Local\Opera Software
2015-07-27 13:54 - 2015-07-27 13:54 - 00613255 _____ (CMI Limited) C:\Users\xxx\AppData\Local\nssBBF6.tmp
2015-07-27 13:53 - 2015-07-27 13:53 - 00003004 _____ C:\Windows\Tasks\temp_9cbb2d5f-7bb7-493b-b482-59057b6a1290-1-6.job
2015-07-27 13:52 - 2015-07-27 13:52 - 00000000 ____D C:\Users\xxx\AppData\Local\globalUpdate
2015-07-27 13:51 - 2015-07-28 11:34 - 00000000 ____D C:\Users\xxx\AppData\Roaming\systweak
2015-07-27 13:51 - 2015-07-02 14:14 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-07-27 11:56 - 2015-07-27 11:56 - 00058016 _____ C:\Users\xxx\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-27 11:28 - 2015-07-27 11:28 - 00001018 _____ C:\Windows\Tasks\VgM9Ib4z6Gy7MeaK930yYbfdix8.job
2015-07-27 11:18 - 2015-07-27 11:18 - 00003296 ____N C:\bootsqm.dat
2015-07-27 08:48 - 2015-07-28 13:06 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
2015-07-27 08:48 - 2015-07-28 13:06 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
2015-07-27 08:48 - 2015-07-28 13:06 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
2015-07-27 08:48 - 2015-07-27 08:48 - 00002824 _____ C:\Windows\System32\Tasks\APSnotifierPP1
2015-07-27 08:48 - 2015-07-27 08:48 - 00002822 _____ C:\Windows\System32\Tasks\APSnotifierPP3
2015-07-27 08:48 - 2015-07-27 08:48 - 00002822 _____ C:\Windows\System32\Tasks\APSnotifierPP2
2015-07-27 08:43 - 2015-07-27 08:43 - 00000000 __SHD C:\Users\xxx\AppData\Roaming\AnyProtectEx
2015-07-27 08:39 - 2015-07-28 12:53 - 00000000 ____D C:\Users\xxx\AppData\Local\gmsd_pl_005010041
2015-07-27 08:39 - 2015-07-27 11:55 - 00000000 ____D C:\Program Files (x86)\gmsd_pl_005010041
2015-07-27 08:35 - 2015-07-28 12:21 - 00000000 ____D C:\Users\xxx\AppData\Roaming\mystartsearch
2015-07-27 08:26 - 2015-07-27 08:26 - 00000000 ____D C:\Program Files (x86)\predm
2015-07-27 08:00 - 2015-07-27 08:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-27 08:00 - 2015-07-27 08:00 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-27 02:29 - 2015-07-27 02:29 - 00000000 _____ C:\CAA7.tmp
2015-07-27 00:26 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2015-07-27 00:26 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-07-27 00:26 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-07-27 00:26 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-07-27 00:26 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2015-07-27 00:26 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-07-27 00:26 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-07-27 00:26 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-07-27 00:17 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-27 00:17 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-27 00:13 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2015-07-27 00:13 - 2012-03-01 08:38 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-27 00:13 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-07-27 00:13 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2015-07-27 00:13 - 2012-03-01 07:37 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-27 00:13 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2015-07-27 00:13 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2015-07-27 00:03 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-07-27 00:03 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2015-07-27 00:03 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-07-27 00:03 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-07-27 00:03 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2015-07-27 00:03 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2015-07-27 00:02 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-07-27 00:02 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-07-26 19:23 - 2015-07-28 13:28 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-07-26 19:23 - 2015-07-26 19:23 - 00007520 _____ C:\Windows\System32\Tasks\d80d69c9-f5b3-481e-99c7-060d36b1998e-3
2015-07-26 19:23 - 2015-07-26 19:23 - 00003992 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-07-26 19:23 - 2015-07-26 19:23 - 00003738 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-07-26 19:23 - 2015-07-26 19:23 - 00000000 ____D C:\ProgramData\IHProtectUpDate
2015-07-26 19:22 - 2015-07-28 13:22 - 00001052 _____ C:\Windows\Tasks\Crossbrowse.job
2015-07-26 19:22 - 2015-07-28 06:40 - 00002394 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
2015-07-26 19:22 - 2015-07-27 08:37 - 00000000 ____D C:\Program Files (x86)\MiuiTab
2015-07-26 19:22 - 2015-07-26 19:22 - 00004070 _____ C:\Windows\System32\Tasks\Crossbrowse
2015-07-26 19:22 - 2015-07-26 19:22 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
2015-07-26 19:22 - 2015-07-26 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-07-26 19:21 - 2015-07-27 16:35 - 00000000 ____D C:\ProgramData\MailUpdate
2015-07-26 19:21 - 2015-07-26 19:21 - 00000000 ____D C:\Users\xxx\AppData\Roaming\MailUpdate
2015-07-26 19:21 - 2015-07-26 19:21 - 00000000 ____D C:\Users\xxx\AppData\Roaming\istartsurf
2015-07-26 19:20 - 2015-07-27 08:35 - 00004022 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
2015-07-26 18:38 - 2015-07-26 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-26 18:37 - 2015-07-28 13:42 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-26 18:37 - 2015-07-28 12:18 - 00001038 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-26 18:37 - 2015-07-27 11:31 - 00000000 ____D C:\Users\xxx\AppData\Local\Google
2015-07-26 18:37 - 2015-07-26 18:38 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-26 18:37 - 2015-07-26 18:37 - 00004038 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-26 18:37 - 2015-07-26 18:37 - 00003786 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-26 13:38 - 2015-07-26 13:38 - 00291504 _____ C:\Windows\Minidump\072615-22963-01.dmp
2015-07-26 12:55 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-07-26 12:55 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-07-26 12:55 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-07-26 12:55 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-07-26 12:55 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-07-26 12:55 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-07-26 12:53 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-07-26 12:53 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-07-26 12:53 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-07-26 12:53 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-07-26 12:53 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-07-26 12:53 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-07-26 12:53 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-07-26 12:53 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-07-26 12:53 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-07-26 12:53 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-07-26 12:53 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-07-26 12:53 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-07-26 12:53 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-07-26 12:52 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-07-26 12:52 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-07-26 12:52 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-07-26 12:52 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2015-07-26 12:52 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-07-26 12:52 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-07-26 12:52 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-07-26 12:52 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-07-26 12:52 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-07-26 12:52 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-07-26 12:52 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-07-26 12:52 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2015-07-26 12:52 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-07-26 12:52 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-07-26 12:52 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2015-07-26 12:51 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-26 12:51 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-26 12:51 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-26 12:51 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-26 12:51 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-26 12:51 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-26 12:51 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-26 12:51 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-26 12:51 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-26 12:51 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-26 12:51 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-26 12:51 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-26 12:51 - 2015-06-11 19:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-26 12:51 - 2015-06-11 19:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-07-26 12:51 - 2015-06-11 19:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-07-26 12:51 - 2015-05-09 05:27 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-07-26 12:51 - 2015-05-09 05:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-07-26 12:51 - 2015-05-09 05:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-07-26 12:51 - 2015-05-09 05:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-07-26 12:51 - 2015-05-09 05:26 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-07-26 12:51 - 2015-05-09 05:26 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-07-26 12:51 - 2015-05-09 05:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-07-26 12:51 - 2015-05-09 05:25 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-07-26 12:51 - 2015-05-09 05:20 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-07-26 12:51 - 2015-05-09 05:13 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-07-26 12:51 - 2015-05-09 05:12 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-07-26 12:51 - 2015-05-09 05:12 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-07-26 12:51 - 2015-05-09 05:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 04:01 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-07-26 12:51 - 2015-05-09 04:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-07-26 12:51 - 2015-05-09 03:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 03:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-07-26 12:51 - 2015-05-09 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-07-26 12:51 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-07-26 12:51 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-07-26 12:51 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-07-26 12:51 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-07-26 12:51 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-07-26 12:51 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-07-26 12:51 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-07-26 12:51 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-07-26 12:51 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-07-26 12:51 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2015-07-26 12:51 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2015-07-26 12:51 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-07-26 12:51 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-07-26 12:51 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-07-26 12:51 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2015-07-26 12:51 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-07-26 12:51 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-07-26 12:51 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-07-26 12:51 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-07-26 12:50 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-07-26 12:50 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-07-26 12:50 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-07-26 12:50 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-07-26 12:50 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-07-26 12:50 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-07-26 12:50 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-07-26 12:50 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-07-26 12:50 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2015-07-26 12:50 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls
2015-07-26 12:50 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-07-26 12:50 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2015-07-26 12:50 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2015-07-26 12:50 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2015-07-26 12:50 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2015-07-26 12:50 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2015-07-26 12:50 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-07-26 12:50 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2015-07-26 12:50 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-07-26 12:49 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-26 12:49 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-26 12:49 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-26 12:49 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-26 12:49 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-26 12:49 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-26 12:49 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-26 12:49 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-26 12:49 - 2015-06-03 22:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-07-26 12:49 - 2015-06-03 22:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-07-26 12:49 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-07-26 12:49 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-07-26 12:49 - 2014-10-03 04:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-07-26 12:49 - 2014-10-03 04:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-07-26 12:49 - 2014-10-03 04:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-07-26 12:49 - 2014-10-03 04:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-07-26 12:49 - 2014-10-03 04:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-07-26 12:49 - 2014-10-03 03:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-07-26 12:49 - 2014-10-03 03:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-07-26 12:49 - 2014-10-03 03:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-07-26 12:49 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-07-26 12:49 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-07-26 12:49 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-07-26 12:49 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-07-26 12:49 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-07-26 12:49 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-07-26 12:49 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-07-26 12:49 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-07-26 12:49 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2015-07-26 12:49 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2015-07-26 12:49 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2015-07-26 12:49 - 2012-06-16 07:16 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-26 12:49 - 2012-06-16 07:15 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-26 12:49 - 2012-06-16 06:26 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-26 12:49 - 2012-06-16 06:26 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-26 12:49 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-07-26 12:49 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2015-07-26 12:49 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2015-07-26 12:49 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2015-07-26 12:49 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-07-26 12:49 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-07-26 12:49 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-07-26 12:48 - 2015-02-03 05:31 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-07-26 12:48 - 2015-02-03 05:12 - 01011200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-07-26 12:48 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-07-26 12:48 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-07-26 12:48 - 2014-11-08 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-07-26 12:48 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-07-26 12:48 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-07-26 12:48 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-07-26 12:48 - 2014-10-04 04:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-07-26 12:48 - 2014-10-04 03:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-07-26 12:48 - 2014-10-04 03:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-07-26 12:48 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-07-26 12:48 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-07-26 12:48 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-07-26 12:48 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-07-26 12:48 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-07-26 12:48 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-07-26 12:48 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-07-26 12:48 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-07-26 12:48 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-07-26 12:48 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-07-26 12:48 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-07-26 12:48 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-07-26 12:48 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-07-26 12:48 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2015-07-26 12:48 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-07-26 12:48 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2015-07-26 12:48 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2015-07-26 12:48 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2015-07-26 12:48 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2015-07-26 12:48 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2015-07-26 12:48 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2015-07-26 12:48 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2015-07-26 12:47 - 2015-06-27 20:07 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-26 12:47 - 2015-06-27 20:07 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-26 12:47 - 2015-06-27 20:03 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-26 12:47 - 2015-06-27 20:03 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-26 12:47 - 2015-06-27 20:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-26 12:47 - 2015-06-27 20:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-26 12:47 - 2015-06-27 20:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-26 12:47 - 2015-06-27 20:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-26 12:47 - 2015-06-27 19:57 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-26 12:47 - 2015-06-27 19:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-26 12:47 - 2015-06-27 19:49 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-26 12:47 - 2015-06-27 19:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-26 12:47 - 2015-06-27 19:49 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-26 12:47 - 2015-06-27 19:44 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-26 12:47 - 2015-06-27 19:44 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-26 12:47 - 2015-06-27 19:40 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-26 12:47 - 2015-06-27 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-26 12:47 - 2015-06-27 18:45 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-26 12:47 - 2015-06-27 18:45 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-26 12:47 - 2015-06-03 22:17 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-07-26 12:47 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-07-26 12:47 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-07-26 12:47 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-07-26 12:47 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-07-26 12:47 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-07-26 12:47 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-07-26 12:47 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-07-26 12:47 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-07-26 12:47 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-07-26 12:47 - 2014-07-17 04:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-07-26 12:47 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-07-26 12:47 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-07-26 12:47 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-07-26 12:47 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-07-26 12:47 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-07-26 12:47 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-07-26 12:47 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-07-26 12:47 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-07-26 12:47 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-07-26 12:47 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-07-26 12:47 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-07-26 12:47 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2015-07-26 12:47 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-07-26 12:47 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2015-07-26 12:47 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2015-07-26 12:47 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2015-07-26 12:47 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2015-07-26 12:47 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2015-07-26 12:46 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-07-26 12:46 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-07-26 12:46 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-26 12:46 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-26 12:46 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-26 12:46 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-07-26 12:46 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-07-26 12:46 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-07-26 12:46 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2015-07-26 12:46 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2015-07-26 12:46 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-07-26 12:46 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-07-26 12:46 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2015-07-26 12:46 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2015-07-26 12:46 - 2013-05-13 07:51 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-26 12:46 - 2013-05-13 07:51 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-26 12:46 - 2013-05-13 07:51 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-26 12:46 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2015-07-26 12:46 - 2013-05-13 06:45 - 01160192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-26 12:46 - 2013-05-13 06:45 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-26 12:46 - 2013-05-13 06:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-26 12:46 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2015-07-26 12:46 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2015-07-26 12:46 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2015-07-26 12:46 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-07-26 12:46 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-07-26 12:46 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2015-07-26 12:46 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2015-07-26 12:46 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-07-26 12:46 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-07-26 12:46 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-07-26 12:46 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2015-07-26 12:46 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2015-07-26 12:45 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-07-26 12:45 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-07-26 12:45 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-07-26 12:45 - 2015-02-04 05:16 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-07-26 12:45 - 2015-02-04 04:54 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-07-26 12:45 - 2013-10-12 04:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-07-26 12:45 - 2013-10-12 04:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-07-26 12:45 - 2013-10-12 04:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-07-26 12:45 - 2013-10-12 04:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-07-26 12:45 - 2013-10-12 04:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-07-26 12:45 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-07-26 12:45 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2015-07-26 12:45 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2015-07-26 12:45 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2015-07-26 12:45 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2015-07-26 12:45 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2015-07-26 12:45 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2015-07-26 12:45 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2015-07-26 11:43 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2015-07-26 11:43 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2015-07-26 11:43 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2015-07-26 11:06 - 2015-07-26 11:07 - 00000000 ____D C:\Users\xxx\Downloads\Bill Nye Film
2015-07-26 11:03 - 2015-07-26 11:03 - 00002627 _____ C:\Users\xxx\Desktop\µTorrent.lnk
2015-07-26 11:03 - 2015-07-26 11:03 - 00002627 _____ C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-07-26 11:03 - 2015-07-26 11:03 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2015-07-26 11:03 - 2015-07-26 11:03 - 00000000 ____D C:\Windows\Downloaded Installations
2015-07-26 11:02 - 2015-07-28 12:20 - 00000000 ____D C:\Users\xxx\AppData\Roaming\uTorrent
2015-07-26 11:01 - 2015-07-26 17:44 - 00000000 ____D C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b
2015-07-26 11:01 - 2015-07-26 11:01 - 01993056 _____ (BitTorrent Inc.) C:\Users\xxx\Downloads\uTorrent.exe
2015-07-26 05:54 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-26 05:54 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-26 05:54 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-26 05:54 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-26 05:53 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-26 05:53 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-26 05:53 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-26 05:53 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-26 05:53 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-26 05:53 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-26 05:52 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-26 05:52 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-26 05:52 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-26 05:52 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-26 05:22 - 2015-07-27 08:35 - 00001733 _____ C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-26 05:21 - 2015-07-26 05:21 - 00291504 _____ C:\Windows\Minidump\072615-22666-01.dmp
2015-07-26 01:26 - 2015-05-25 22:34 - 00000000 ____D C:\Users\xxx\Downloads\Terios
2015-07-25 22:30 - 2015-07-25 22:30 - 00283016 _____ C:\Windows\Minidump\072515-17128-01.dmp
2015-07-25 20:54 - 2015-07-27 16:29 - 00000000 ____D C:\Program Files (x86)\Opera
2015-07-25 20:39 - 2015-07-25 20:39 - 00282936 _____ C:\Windows\Minidump\072515-15678-01.dmp
2015-07-25 20:23 - 2015-07-28 01:00 - 00000000 ____D C:\Users\xxx\AppData\Roaming\tor
2015-07-25 20:01 - 2015-07-25 20:01 - 00283992 _____ C:\Windows\Minidump\072515-18860-01.dmp
2015-07-25 19:55 - 2015-07-25 19:55 - 00287360 _____ C:\Windows\Minidump\072515-18376-01.dmp
2015-07-25 18:48 - 2015-07-25 18:48 - 00034712 _____ () C:\Windows\system32\Drivers\bsdriver.sys
2015-07-25 18:45 - 2015-07-25 18:48 - 00000000 ____D C:\Program Files\shopperz22072015
2015-07-25 18:45 - 2015-07-25 18:45 - 00003640 _____ C:\Windows\System32\Tasks\Papuir
2015-07-25 18:45 - 2015-06-18 12:08 - 00061336 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
2015-07-25 01:20 - 2015-07-25 01:20 - 00291536 _____ C:\Windows\Minidump\072515-15085-01.dmp
2015-07-24 09:27 - 2015-07-27 08:35 - 00001284 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-07-24 09:27 - 2015-07-24 09:27 - 00003812 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1437722863
2015-07-23 14:15 - 2015-07-23 14:15 - 00285208 _____ C:\Windows\Minidump\072315-19078-01.dmp
2015-07-23 14:01 - 2015-07-23 14:02 - 1127906058 _____ C:\Users\xxx\Downloads\Terios.rar
2015-07-23 10:57 - 2015-07-23 10:57 - 00291536 _____ C:\Windows\Minidump\072315-18579-01.dmp
2015-07-22 22:08 - 2015-07-22 22:08 - 00687520 _____ (Opera Software) C:\Users\xxx\Downloads\Opera_NI_stable.exe
2015-07-22 17:43 - 2015-07-22 17:43 - 00284648 _____ C:\Windows\Minidump\072215-21762-01.dmp
2015-07-22 16:41 - 2015-07-28 13:15 - 00000000 ____D C:\AdwCleaner
2015-07-22 16:41 - 2015-07-22 16:41 - 02248704 _____ C:\Users\xxx\Downloads\AdwCleaner.exe
2015-07-22 16:25 - 2015-07-22 16:25 - 00242960 _____ C:\Users\xxx\Downloads\Firefox Setup Stub 39.0.exe
2015-07-22 15:53 - 2015-07-28 12:18 - 00004656 _____ C:\Windows\SysWOW64\Rofdhowal.ini
2015-07-22 15:53 - 2015-07-28 12:18 - 00002376 _____ C:\Windows\SysWOW64\RofdhowalOff.ini
2015-07-22 15:53 - 2015-07-28 12:18 - 00002376 _____ C:\Windows\system32\RofdhowalOff.ini
2015-07-22 15:53 - 2015-07-20 13:35 - 00349184 _____ C:\Windows\system32\Rofdhowal64.dll
2015-07-22 15:53 - 2015-07-20 13:35 - 00279040 _____ C:\Windows\SysWOW64\Rofdhowal.dll
2015-07-22 15:52 - 2015-07-22 16:22 - 00000000 ____D C:\Program Files\shopperz20072015
2015-07-22 15:52 - 2015-07-22 15:52 - 00000000 ____D C:\shoplog
2015-07-22 09:46 - 2015-07-22 09:46 - 00291504 _____ C:\Windows\Minidump\072215-14320-01.dmp
2015-07-21 17:19 - 2015-07-21 17:20 - 00000000 ____D C:\Users\xxx\AppData\Roaming\DBV
2015-07-21 17:19 - 2015-06-28 17:15 - 27884857 _____ (DBV TEAM) C:\Users\xxx\Desktop\DBVictory - World [S1] (v2.50).exe
2015-07-21 17:19 - 2013-09-28 17:50 - 00000787 _____ C:\Users\xxx\Downloads\Czytaj - ReadMe!.txt
2015-07-21 17:19 - 2011-03-27 14:39 - 00000133 _____ C:\Users\xxx\Downloads\Dragon Ball Victory - World [S1].url
2015-07-21 17:18 - 2015-07-21 17:19 - 27803119 _____ C:\Users\xxx\Downloads\DBVictory - World [S1] (v2.50).zip
2015-07-21 16:32 - 2015-07-21 16:35 - 109151035 _____ C:\Users\xxx\Downloads\Kękę - Nowe Rzeczy (2015).rar
2015-07-21 10:50 - 2015-07-21 10:50 - 00291472 _____ C:\Windows\Minidump\072115-15288-01.dmp
2015-07-21 09:51 - 2015-07-21 09:51 - 00291536 _____ C:\Windows\Minidump\072115-19843-01.dmp
2015-07-21 07:36 - 2015-07-21 07:36 - 00291536 _____ C:\Windows\Minidump\072115-15771-01.dmp
2015-07-21 06:31 - 2015-07-21 06:31 - 00291488 _____ C:\Windows\Minidump\072115-20654-01.dmp
2015-07-21 01:37 - 2015-07-21 01:57 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Riot Games
2015-07-20 22:39 - 2015-07-20 22:39 - 00291536 _____ C:\Windows\Minidump\072015-22417-01.dmp
2015-07-20 18:04 - 2015-07-20 18:04 - 00291472 _____ C:\Windows\Minidump\072015-22900-01.dmp
2015-07-20 00:21 - 2015-07-20 18:04 - 00013524 _____ C:\Windows\SysWOW64\cfg
2015-07-19 16:17 - 2015-07-19 16:17 - 00291544 _____ C:\Windows\Minidump\071915-27627-01.dmp
2015-07-19 13:57 - 2015-07-19 13:59 - 06767921 _____ C:\Users\xxx\Downloads\Metin2Mod_PL_08072015.exe
2015-07-19 12:57 - 2015-07-19 12:57 - 00000824 _____ C:\Users\Public\Desktop\Metin2.lnk
2015-07-19 12:57 - 2015-07-19 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2
2015-07-19 11:38 - 2015-07-19 11:38 - 00000000 __SHD C:\Windows\system32\%APPDATA%
2015-07-18 20:51 - 2015-07-18 20:51 - 00291080 _____ C:\Windows\Minidump\071815-25116-01.dmp
2015-07-18 17:51 - 2015-07-26 12:49 - 00051044 _____ C:\Windows\system32\CFG2088327926
2015-07-18 17:48 - 2015-07-26 13:38 - 00000000 ____D C:\Windows\Minidump
2015-07-18 17:48 - 2015-07-18 17:48 - 00291456 _____ C:\Windows\Minidump\071815-17284-01.dmp
2015-07-17 16:59 - 2015-07-17 17:02 - 00000000 ____D C:\Users\xxx\Documents\Heroes of the Storm
2015-07-16 23:02 - 2015-07-16 23:02 - 00000000 ____D C:\Windows\SysWOW64\Flash
2015-07-16 23:00 - 2015-07-13 13:13 - 00349184 _____ C:\Windows\system32\Cofvopjy64.dll
2015-07-16 16:19 - 2015-07-17 16:11 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV16.07
2015-07-16 15:47 - 2015-07-16 15:47 - 00003140 _____ C:\Windows\System32\Tasks\{D9A3EC8D-BC59-4A3E-BDF5-9F8D10455D82}
2015-07-16 15:22 - 2015-07-16 15:22 - 00003186 _____ C:\Windows\System32\Tasks\{658A3B1E-58D4-4838-B2A2-CA66CABAA9F2}
2015-07-16 15:14 - 2015-07-16 15:16 - 00000000 ____D C:\ProgramData\LocalStorage
2015-07-16 15:10 - 2015-07-16 15:10 - 00000000 ____D C:\Users\xxx\.android
2015-07-16 15:09 - 2015-07-17 16:50 - 00000000 ____D C:\Users\xxx\AppData\Roaming\ppslog
2015-07-16 15:08 - 2015-07-16 15:34 - 00003306 _____ C:\Windows\System32\Tasks\RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380}
2015-07-16 15:00 - 2015-07-28 06:06 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-16 14:54 - 2015-07-16 14:54 - 00000000 _____ C:\Windows\prleth.sys
2015-07-16 14:54 - 2015-07-16 14:54 - 00000000 _____ C:\Windows\hgfs.sys
2015-07-16 14:49 - 2015-07-16 14:49 - 00000000 ____D C:\Users\xxx\AppData\Local\Temp尰
2015-07-16 14:43 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-07-16 14:42 - 2015-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\00412F4E-1437050570-0000-0000-0000FFFFFFFF
2015-07-16 14:42 - 2015-07-16 14:42 - 00000000 ____D C:\Users\Public\QiYi
2015-07-16 14:39 - 2015-07-16 15:49 - 00000000 ___RD C:\RavBin
2015-07-16 14:39 - 2014-07-30 04:44 - 00091928 ____N (Beijing Rising Information Technology Co., Ltd.) C:\Windows\SysWOW64\vpatch.dll
2015-07-16 14:38 - 2015-07-16 14:39 - 00000000 ____D C:\ProgramData\Rising
2015-07-16 14:35 - 2015-07-16 15:49 - 00000000 ____D C:\Program Files (x86)\Rising
2015-07-16 14:33 - 2015-07-16 14:33 - 00000000 ____D C:\Program Files (x86)\ Notifications
2015-07-16 14:32 - 2015-07-28 08:32 - 00000326 _____ C:\Windows\Tasks\4cast.job
2015-07-16 14:32 - 2015-07-16 14:32 - 00003234 _____ C:\Windows\System32\Tasks\4cast
2015-07-16 06:48 - 2015-07-16 06:48 - 00000000 ____D C:\Users\xxx\AppData\Roaming\WinRAR
2015-07-16 06:39 - 2015-07-16 06:39 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-07-16 06:39 - 2015-07-16 06:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-07-16 06:39 - 2015-07-16 06:39 - 00000000 ____D C:\Program Files (x86)\WinRAR
2015-07-15 19:01 - 2015-07-15 19:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-07-15 18:44 - 2015-07-16 01:58 - 00002848 _____ C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2015-07-15 18:44 - 2015-07-16 01:58 - 00002848 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2015-07-15 18:44 - 2015-07-15 18:44 - 00422400 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2015-07-15 18:44 - 2015-07-15 18:44 - 00342016 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2015-07-15 16:26 - 2015-07-15 16:26 - 00000043 _____ C:\Users\xxx\AppData\Roaming\WB.CFG
2015-07-15 16:15 - 2015-07-15 16:15 - 00000464 __RSH C:\ProgramData\ntuser.pol
2015-07-15 15:26 - 2015-07-15 15:26 - 00003592 _____ C:\Windows\System32\Tasks\PFExe
2015-07-15 15:26 - 2015-07-15 15:26 - 00000000 ___HD C:\Users\xxx\AppData\Roaming\GoldenGate
2015-07-15 15:24 - 2015-07-17 16:18 - 00000000 ____D C:\Users\xxx\AppData\Roaming\WarThunder
2015-07-15 14:25 - 2015-07-27 16:29 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Opera Software
2015-07-15 14:23 - 2015-07-15 14:23 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-07-15 13:14 - 2015-07-15 13:14 - 00009933 _____ C:\Windows\DirectX.log
2015-07-15 13:14 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-07-15 13:14 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-07-15 13:14 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2015-07-15 13:14 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2015-07-15 13:14 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-07-15 13:14 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-07-15 13:14 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2015-07-15 13:14 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2015-07-15 13:14 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2015-07-15 13:14 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2015-07-15 13:14 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2015-07-15 13:14 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2015-07-15 13:14 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2015-07-15 13:14 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2015-07-15 13:14 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2015-07-15 13:14 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2015-07-15 13:14 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2015-07-15 13:14 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2015-07-15 13:14 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2015-07-15 13:14 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2015-07-15 13:14 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2015-07-15 13:14 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2015-07-15 13:14 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2015-07-15 13:14 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2015-07-15 13:14 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2015-07-15 13:14 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2015-07-15 13:14 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-07-15 13:14 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-07-15 13:14 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2015-07-15 13:14 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2015-07-15 13:14 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2015-07-15 13:14 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2015-07-15 13:14 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2015-07-15 13:14 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2015-07-15 13:14 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-07-15 13:14 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-07-15 13:14 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-07-15 13:14 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-07-15 13:14 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-07-15 13:14 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-07-15 13:14 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-07-15 13:14 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2015-07-15 13:14 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-07-15 13:14 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2015-07-15 13:14 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-07-15 13:14 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2015-07-15 13:14 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2015-07-15 13:14 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2015-07-15 13:14 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2015-07-15 13:14 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2015-07-15 13:14 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2015-07-15 13:14 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2015-07-15 13:14 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2015-07-15 13:14 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2015-07-15 13:14 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2015-07-15 13:14 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2015-07-15 13:14 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2015-07-15 13:14 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2015-07-15 13:14 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2015-07-15 13:14 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2015-07-15 13:14 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2015-07-15 13:14 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2015-07-15 13:14 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2015-07-15 13:14 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2015-07-15 13:14 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2015-07-15 13:14 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2015-07-15 13:14 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2015-07-15 13:14 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2015-07-15 13:14 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2015-07-15 13:14 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2015-07-15 13:14 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2015-07-15 13:14 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2015-07-15 13:14 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2015-07-15 13:14 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2015-07-15 13:14 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2015-07-15 13:14 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2015-07-15 13:14 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2015-07-15 13:14 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2015-07-15 13:14 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2015-07-15 13:14 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2015-07-15 13:14 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2015-07-15 13:14 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2015-07-15 13:14 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2015-07-15 13:14 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2015-07-15 13:14 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2015-07-15 13:14 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2015-07-15 13:14 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2015-07-15 13:14 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2015-07-15 13:14 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2015-07-15 13:14 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2015-07-15 13:14 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-07-15 13:14 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2015-07-15 13:14 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-07-15 13:14 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2015-07-15 13:14 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-07-15 13:14 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2015-07-15 13:14 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-07-15 13:14 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2015-07-15 13:14 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-07-15 13:14 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2015-07-15 13:14 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-07-15 13:14 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-07-15 13:14 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-07-15 13:14 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2015-07-15 13:14 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-07-15 13:14 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2015-07-15 13:14 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-07-15 13:14 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2015-07-15 13:14 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-07-15 13:14 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2015-07-15 13:14 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-07-15 13:14 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2015-07-15 13:14 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2015-07-15 13:14 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2015-07-15 13:14 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2015-07-15 13:14 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-07-15 13:14 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2015-07-15 13:14 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2015-07-15 13:14 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2015-07-15 13:14 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2015-07-15 13:14 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2015-07-15 13:14 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2015-07-15 13:14 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2015-07-15 13:14 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2015-07-15 13:14 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2015-07-15 13:14 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2015-07-15 13:14 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2015-07-15 13:14 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2015-07-15 13:14 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2015-07-15 13:14 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2015-07-15 13:14 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2015-07-15 13:14 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2015-07-15 13:14 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2015-07-15 13:14 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2015-07-15 13:14 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2015-07-15 13:14 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2015-07-15 13:14 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2015-07-15 13:14 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2015-07-15 13:14 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2015-07-15 13:14 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2015-07-15 13:14 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2015-07-15 13:14 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2015-07-15 13:14 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2015-07-15 13:14 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2015-07-15 13:14 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2015-07-15 13:14 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2015-07-15 13:14 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2015-07-15 13:14 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2015-07-15 13:14 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2015-07-15 13:14 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2015-07-15 13:04 - 2015-07-25 19:14 - 00000000 ____D C:\Users\xxx\Downloads\Gameforge Live
2015-07-15 13:04 - 2015-07-15 13:04 - 00000584 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2015-07-15 12:57 - 2015-07-15 12:57 - 00000000 ____D C:\Windows\system32\appmgmt
2015-07-13 12:56 - 2015-07-13 12:56 - 00000000 ____D C:\Users\xxx\AppData\Roaming\TERA
2015-07-13 12:55 - 2015-07-19 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-07-09 17:46 - 2015-07-09 17:46 - 00008192 __RSH C:\BOOTSECT.BAK
2015-07-09 17:46 - 2015-07-08 08:02 - 00000000 ____D C:\Windows\Panther
2015-07-09 17:46 - 2010-11-21 05:23 - 00383786 __RSH C:\bootmgr
2015-07-09 07:59 - 2015-07-28 13:56 - 01220541 _____ C:\Windows\WindowsUpdate.log
2015-07-09 07:58 - 2015-07-09 07:58 - 00001355 _____ C:\Windows\TSSysprep.log
2015-07-09 07:58 - 2015-07-09 07:58 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-07-09 07:58 - 2015-07-09 07:58 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-07-09 01:59 - 2015-07-09 01:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-07-08 23:09 - 2015-07-08 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2015-07-08 22:32 - 2015-07-28 14:07 - 00000000 ____D C:\Users\xxx\AppData\Local\Battle.net
2015-07-08 22:32 - 2015-07-08 22:33 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Battle.net
2015-07-08 22:31 - 2015-07-08 23:46 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-07-08 22:31 - 2015-07-08 22:31 - 00000655 _____ C:\Users\Public\Desktop\Battle.net.lnk
2015-07-08 22:31 - 2015-07-08 22:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-07-08 22:28 - 2015-07-08 22:28 - 00000000 ____D C:\ProgramData\Battle.net
2015-07-08 20:21 - 2015-07-08 20:21 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Macromedia
2015-07-08 20:21 - 2015-07-08 20:21 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Adobe
2015-07-08 20:18 - 2015-07-28 13:18 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-08 20:18 - 2015-07-26 18:37 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-08 20:18 - 2015-07-26 18:36 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-08 20:18 - 2015-07-26 18:36 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-08 20:18 - 2015-07-08 20:18 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2015-07-08 20:18 - 2015-07-08 20:18 - 00000000 ____D C:\Windows\system32\Macromed
2015-07-08 20:15 - 2015-07-08 20:15 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Unity
2015-07-08 20:07 - 2015-07-08 20:07 - 00000000 ____D C:\Users\xxx\AppData\Roaming\Mozilla
2015-07-08 20:06 - 2015-07-08 20:06 - 00000000 ____D C:\ProgramData\Mozilla
2015-07-08 08:02 - 2015-07-27 08:35 - 00001711 _____ C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-07-08 08:02 - 2015-07-25 20:34 - 00000000 ____D C:\Users\xxx
2015-07-08 08:02 - 2015-07-08 08:02 - 00000020 ___SH C:\Users\xxx\ntuser.ini
2015-07-08 08:02 - 2015-07-08 08:02 - 00000000 __SHD C:\Recovery
2015-07-08 08:02 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-08 08:02 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-28 13:23 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-28 13:23 - 2009-07-14 06:45 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-28 12:17 - 2010-11-21 05:47 - 00130280 _____ C:\Windows\PFRO.log
2015-07-28 12:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-28 12:17 - 2009-07-14 06:51 - 00033341 _____ C:\Windows\setupact.log
2015-07-28 06:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2015-07-27 08:09 - 2009-07-14 07:13 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-27 08:02 - 2009-07-14 06:45 - 00267360 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-27 07:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-27 07:14 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-25 20:35 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-22 15:53 - 2010-11-21 05:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-07-22 15:53 - 2010-11-21 05:24 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-07-22 15:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\spp
2015-07-21 21:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2015-07-19 11:47 - 2009-07-14 04:34 - 00000505 _____ C:\Windows\win.ini
2015-07-16 15:50 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-07-16 15:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-07-15 15:07 - 2011-04-12 10:28 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-07-14 16:02 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2015-07-09 17:46 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2015-07-09 17:46 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-07-09 16:21 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-09 08:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-09 07:58 - 2009-07-14 06:46 - 00002790 _____ C:\Windows\DtcInstall.log
2015-07-09 07:58 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-09 07:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2015-07-09 07:56 - 2011-04-12 10:28 - 00000000 ____D C:\Windows\CSC
2015-07-08 08:02 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2015-07-08 08:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery

==================== Files in the root of some directories =======

2009-07-14 01:19 - 2009-07-14 03:14 - 0495616 _____ () C:\Users\xxx\AppData\Roaming\BackUp2088327926.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\xxx\AppData\Roaming\Ef3FxHCL9XKx46wvkSSyAwn
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\xxx\AppData\Roaming\Ef3FxHCL9XKx46wvkSSyAwn.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\xxx\AppData\Roaming\R4CSym4je.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\xxx\AppData\Roaming\VgM9Ib4z6Gy7MeaK930yYbfdix8
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\xxx\AppData\Roaming\VgM9Ib4z6Gy7MeaK930yYbfdix8.exe
2015-07-15 16:26 - 2015-07-15 16:26 - 0000043 _____ () C:\Users\xxx\AppData\Roaming\WB.CFG
2015-07-28 06:44 - 2015-07-28 06:44 - 0613255 _____ (CMI Limited) C:\Users\xxx\AppData\Local\nsjE5C1.tmp
2015-07-28 13:01 - 2015-07-28 13:01 - 0613255 _____ (CMI Limited) C:\Users\xxx\AppData\Local\nsrDB3A.tmp
2015-07-27 13:54 - 2015-07-27 13:54 - 0613255 _____ (CMI Limited) C:\Users\xxx\AppData\Local\nssBBF6.tmp

Some files in TEMP:
====================
C:\Users\xxx\AppData\Local\Temp\bediagddca.exe
C:\Users\xxx\AppData\Local\Temp\fsd9DF4.exe
C:\Users\xxx\AppData\Local\Temp\mytmpinstaller.exe
C:\Users\xxx\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-24 06:01

==================== End of log ============================