Zoek.exe v5.0.0.0 Updated 27-01-2015 Tool run by alonso1780 on za 31-01-2015 at 22:40:03,33. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\alonso1780\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 31-1-2015 22:47:40 Zoek.exe System Restore Point Created Succesfully. ==== Reset Hosts File ====================== # Copyright (c) 1993-2006 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host 127.0.0.1 localhost ::1 localhost ==== Empty Folders Check ====================== C:\Program Files\MSXML 4.0 deleted successfully C:\Users\alonso1780\AppData\Local\acer eNM deleted successfully C:\Users\alonso1780\AppData\Local\Adobe deleted successfully C:\Users\alonso1780\AppData\Local\PowerCinema deleted successfully C:\Users\alonso1780\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670} deleted successfully HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670} deleted successfully HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} deleted successfully HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EF5A5D2B-C91F-475D-95BC-3A584B1AF29C} deleted successfully HKEY_CLASSES_ROOT\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully ==== Deleting Services ====================== ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}] ==== Deleting Files \ Folders ====================== C:\Program Files\Yahoo! deleted C:\Program Files\GUTB045.tmp deleted "C:\Windows\Installer\9a975.msi" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2015-01-30 22:58:19 D07D4C3038F3578FFCE1C0237F2A1253 2926592 ----a-w- C:\Windows\explorer.exe 2015-01-30 20:35:54 DAF60E13E96ECB67F0EDAA89C6B01B8D 151040 ----a-w- C:\Windows\notepad.exe 2015-01-30 20:34:19 467A3B03E924B7B7EDD16D34740574B0 134656 ----a-w- C:\Windows\regedit.exe 2015-01-30 20:33:42 64C48506832B4AA8DFFB234529F24AD0 58880 ----a-w- C:\Windows\bfsvc.exe 2015-01-30 20:32:53 8F59BB5F948D317316C0A35ED93F75BC 13312 ----a-w- C:\Windows\fveupdate.exe 2015-01-30 20:32:49 3708CCEE4878EB0B9E7B92355A631853 498176 ----a-w- C:\Windows\HelpPane.exe 2015-01-30 17:06:58 7D700D1B8E0258F03C7EC4679B25F9BF 65536 ------w- C:\Windows\SPInstall.etl ====== C:\Users\ALONSO~1\AppData\Local\Temp ==== 2015-01-30 10:02:23 984CC93BB0EF86A0B4825269D8379D81 774424 ----a-w- C:\Users\alonso1780\AppData\Local\Temp\5044_25102\GoogleUpdateSetup.exe 2015-01-30 10:02:23 4C8C0B0340C6234649C7F91FB5E89A54 571272 ----a-w- C:\Users\alonso1780\AppData\Local\Temp\5044_25102\ChromeRecovery.exe ====== Java Cache ===== ====== C:\Windows\system32 ===== 2015-01-30 23:13:35 85C04F75503F73C21AEC0AEB815065B9 57856 ----a-w- C:\Windows\System32\compcln.exe 2015-01-30 22:58:29 BBE1CD4620CBA35F383E5C499F5CECA5 93696 ----a-w- C:\Windows\System32\eappgnui.dll 2015-01-30 22:58:29 3AB4023CBD406AC33AB8CDFF6C8079A0 183808 ----a-w- C:\Windows\System32\eapphost.dll 2015-01-30 22:58:22 AD4C3968CE1DB3A3A4632E1CDECA9555 344698 ----a-w- C:\Windows\System32\eaphost.tmf 2015-01-30 22:58:22 5D0FE613570CABE3992F7DBCD68E61D1 135680 ----a-w- C:\Windows\System32\eappcfg.dll 2015-01-30 22:58:22 1303F1E8C79BDB50EA942B7494761EB8 187904 ----a-w- C:\Windows\System32\eapp3hst.dll 2015-01-30 22:58:21 9E5C1D19851FAE2ACDBA118AB20D55AC 120320 ----a-w- C:\Windows\System32\EhStorAPI.dll 2015-01-30 22:58:20 84B8827562B005C118CADBA0F25DB2C6 444416 ----a-w- C:\Windows\System32\dsound.dll 2015-01-30 22:58:20 7095D31979FFB0B917987B388779BD01 205824 ----a-w- C:\Windows\System32\eudcedit.exe 2015-01-30 22:58:20 61216539E55DDF2F78E421E7EF140650 20992 ----a-w- C:\Windows\System32\ExplorerFrame.dll 2015-01-30 22:58:20 2495C4204C63678F8FD5D488CA7DAD26 485888 ----a-w- C:\Windows\System32\evr.dll 2015-01-30 22:58:20 187AA172E7A5BD212613FBB9D9F770D5 137728 ----a-w- C:\Windows\System32\dsprop.dll 2015-01-30 22:58:20 01DD1004181FD46ECDC3628228EB269D 81920 ----a-w- C:\Windows\System32\dwm.exe 2015-01-30 22:58:19 22DC784B32BEE306A99F50D6DC2460BC 1459200 ----a-w- C:\Windows\System32\esent.dll 2015-01-30 22:58:18 B26BFFCDFD2CBB6BA216259B2CE8C040 133120 ----a-w- C:\Windows\System32\extmgr.dll 2015-01-30 22:58:18 7FC1EF4BC7AFB9F7B6A54C8D047ADE91 7168 ----a-w- C:\Windows\System32\f3ahvoas.dll 2015-01-30 22:58:17 4E6B23DFC917EA39306B529B773950F4 564224 ----a-w- C:\Windows\System32\emdmgmt.dll 2015-01-30 22:58:16 358A03A7A47F0AD71E84306AC635A626 117248 ----a-w- C:\Windows\System32\EhStorAuthn.dll 2015-01-30 22:58:16 27D1A4045917EF6ED42039CC6CDCA719 428544 ----a-w- C:\Windows\System32\EncDec.dll 2015-01-30 22:58:16 1E73E1591DA1D44E5F865E8ADD8C09FF 37376 ----a-w- C:\Windows\System32\EhStorPwdMgr.dll 2015-01-30 22:58:15 67058C46504BC12D821F38CF99B7B28F 268800 ----a-w- C:\Windows\System32\es.dll 2015-01-30 22:58:15 1DFC366D2154EF2B381A7F2CB165C7F4 1078784 ----a-w- C:\Windows\System32\diagperf.dll 2015-01-30 22:58:15 14E4470BF8ACA69A85D741BA99F75F96 114176 ----a-w- C:\Windows\System32\EhStorShell.dll 2015-01-30 22:58:14 DFB6B71CDABA9DFB49C9D2B318B97A1A 130560 ----a-w- C:\Windows\System32\dhcpcsvc6.dll 2015-01-30 22:58:14 8C5E46B7E724C216F55325FB77AB5ABD 54784 ----a-w- C:\Windows\System32\dimsroam.dll 2015-01-30 22:58:13 A9F36F9BEC6F23F5B6EDF1EB4D1AA452 119808 ----a-w- C:\Windows\System32\diskpart.exe 2015-01-30 22:58:13 206B492CC40E0E0C01F6EA73F724AB9A 230912 ----a-w- C:\Windows\System32\diskraid.exe 2015-01-30 22:58:11 2D82E6A9D1F8095F81BDDA21E369D3D2 93512 ----a-w- C:\Windows\System32\dfshim.dll 2015-01-30 22:58:10 5CAA965A14ADBDEF4359F3D2BEA9D9F7 378368 ----a-w- C:\Windows\System32\devmgr.dll 2015-01-30 22:58:10 2CC3DCFB533A1035B13DCAB6160AB38B 2092544 ----a-w- C:\Windows\System32\dfsr.exe 2015-01-30 22:58:09 9028559C132146FB75EB7ACF384B086A 204288 ----a-w- C:\Windows\System32\dhcpcsvc.dll 2015-01-30 22:58:08 D01817B15EFF45054FC24D63AD183F72 284672 ----a-w- C:\Windows\System32\drmmgrtn.dll 2015-01-30 22:58:08 7C7C620860819A62F926D7EC0B72C50B 978432 ----a-w- C:\Windows\System32\drmv2clt.dll 2015-01-30 22:58:08 7366AB74CF8489749AC4CBFBAEE9F9E2 75264 ----a-w- C:\Windows\System32\dot3msm.dll 2015-01-30 22:58:08 6A7908973D49248E4018E8E61B3DCDAA 247808 ----a-w- C:\Windows\System32\drvstore.dll 2015-01-30 22:58:08 4DF0D81B2B19B87DBFF241619DCDDC31 442788 ----a-w- C:\Windows\System32\dot3.tmf 2015-01-30 22:58:08 488F6147CBBF38ADFA29710537E02E61 194048 ----a-w- C:\Windows\System32\drvinst.exe 2015-01-30 22:58:08 324FD74686B1EF5E7C19A8AF49E748F6 175616 ----a-w- C:\Windows\System32\dot3svc.dll 2015-01-30 22:58:08 29B84718CDCBCA66A47B64AA2B02318F 407040 ----a-w- C:\Windows\System32\dpapimig.exe 2015-01-30 22:58:08 07D79E9B1569ECC5EFC487E9F4C8235D 49664 ----a-w- C:\Windows\System32\dot3cfg.dll 2015-01-30 22:58:07 F7683EC1225435144F28B611546BA5F2 168448 ----a-w- C:\Windows\System32\dnsapi.dll 2015-01-30 22:58:07 9F4C8DA21AC626BFB92DD9C7C6FF7F23 41472 ----a-w- C:\Windows\System32\hbaapi.dll 2015-01-30 22:58:07 8527C6F8DFF8CD9502FC4688CCBAEF77 105472 ----a-w- C:\Windows\System32\dmsynth.dll 2015-01-30 22:58:07 30A08728740E71947AE1E073B5CE69B4 86528 ----a-w- C:\Windows\System32\dnsrslvr.dll 2015-01-30 22:58:07 0FEA204289B8C5EAC19C1BC3809ECCF0 101888 ----a-w- C:\Windows\System32\dmusic.dll 2015-01-30 22:58:06 F01C34454A2DBA34439C2FB2B6CDDB9A 128000 ----a-w- C:\Windows\System32\gpresult.exe 2015-01-30 22:58:05 CD5D0AEEE35DFD4E986A5AA1500A6E66 576512 ----a-w- C:\Windows\System32\gpsvc.dll 2015-01-30 22:58:05 BADB6B77C2C9F729528543D79418429F 16896 ----a-w- C:\Windows\System32\gpupdate.exe 2015-01-30 22:58:05 8F29E2E9FA5830317158BB6AE5D2BBA0 58880 ----a-w- C:\Windows\System32\iasacct.dll 2015-01-30 22:58:05 68EF5A4ECAB4FE38ACE1B7DBA86EEC71 47104 ----a-w- C:\Windows\System32\iasdatastore.dll 2015-01-30 22:58:05 4C8413A2F965D6582B6605C7A2F1B715 389632 ----a-w- C:\Windows\System32\html.iec 2015-01-30 22:58:05 24468F62F811EC51F1DE9FA080E7D2C1 70656 ----a-w- C:\Windows\System32\iashlpr.dll 2015-01-30 22:58:05 1111EA117266132F5057ED8F35C47ACD 57344 ----a-w- C:\Windows\System32\iasads.dll 2015-01-30 22:58:04 9A7E344C3D52EE1A2EF003B33B1C1BF1 454144 ----a-w- C:\Windows\System32\IasMigPlugin.dll 2015-01-30 22:58:04 520FCEF4D87E37C17BB6D554B2A332E8 463872 ----a-w- C:\Windows\System32\IasMigReader.exe 2015-01-30 22:58:04 1E767541B585BB3ED02FF33BC60E92A7 150528 ----a-w- C:\Windows\System32\iasnap.dll 2015-01-30 22:58:03 84067081F3318162797385E11A8F0582 26112 ----a-w- C:\Windows\System32\hidserv.dll 2015-01-30 22:58:03 1BAF5FE4C31D20CF805B2FA7A7C2B886 80384 ----a-w- C:\Windows\System32\hdwwiz.exe 2015-01-30 22:58:02 88198AEB7F71DD2F8B6176533D70F63E 142336 ----a-w- C:\Windows\System32\fontext.dll 2015-01-30 22:58:02 77784A2BD5912A4EC6284255865526BC 147456 ----a-w- C:\Windows\System32\Faultrep.dll 2015-01-30 22:58:02 3105CFE0ADAAED21148597001478E89F 19968 ----a-w- C:\Windows\System32\fc.exe 2015-01-30 22:58:02 186954438DE3DDBF0B46F895B7936DE3 60928 ----a-w- C:\Windows\System32\findstr.exe 2015-01-30 22:58:01 D07E4D54CC014C4D3FEB9EFC2304C84E 88064 ----a-w- C:\Windows\System32\fdBth.dll 2015-01-30 22:58:01 BFEB58743A6D96B609DA0F1FD0ACE4EB 53760 ----a-w- C:\Windows\System32\fdeploy.dll 2015-01-30 22:58:01 BF741696C521FF5503CDE10E36345E4D 9728 ----a-w- C:\Windows\System32\fdBthProxy.dll 2015-01-30 22:58:01 ABAEAEE763E287BDD39094C4165E1F3F 24064 ----a-w- C:\Windows\System32\fdProxy.dll 2015-01-30 22:58:01 965AC9FBF2C67231C157E99C03C58D24 54272 ----a-w- C:\Windows\System32\feclient.dll 2015-01-30 22:58:01 78700DB5A0C319A9C3765F0673140092 69120 ----a-w- C:\Windows\System32\fdWCN.dll 2015-01-30 22:58:01 7856E3B4594714EF89BB97375E8644EE 297472 ----a-w- C:\Windows\System32\gdi32.dll 2015-01-30 22:58:01 4BAEC13BCAA595639EBB5185278DEFEA 67072 ----a-w- C:\Windows\System32\fdWSD.dll 2015-01-30 22:58:01 443C5961CACD4ABC16648874AF06E4A0 68096 ----a-w- C:\Windows\System32\fdSSDP.dll 2015-01-30 22:58:01 0F420E81062757EA8363CBACD4D40D6D 75264 ----a-w- C:\Windows\System32\gpapi.dll 2015-01-30 22:58:00 4E51A7052D162B2BA85612B486A68A45 950784 ----a-w- C:\Windows\System32\gpedit.dll 2015-01-30 22:57:59 4EDA94333BDB75B1BC0A7610BED34F00 153088 ----a-w- C:\Windows\System32\fundisc.dll 2015-01-30 22:57:58 1E2940E465AA5B2C4840E8D220BF1F32 41984 ----a-w- C:\Windows\System32\ftp.exe 2015-01-30 22:57:57 780E82F54147B3D11F52D3128B727534 2134528 ----a-w- C:\Windows\System32\FunctionDiscoveryFolder.dll 2015-01-30 22:57:57 42608AE9AF2641EE473A1797C25CFFC2 28672 ----a-w- C:\Windows\System32\FwRemoteSvr.dll 2015-01-30 22:57:56 B0D12F4344EB2AE96E487D2DF6F74413 595456 ----a-w- C:\Windows\System32\FWPUCLNT.DLL 2015-01-30 22:57:56 9B8F915F1DA844B94700868520C239ED 1696768 ----a-w- C:\Windows\System32\gameux.dll 2015-01-30 22:57:56 7258434974EA735725FD2D4A65C5E821 115712 ----a-w- C:\Windows\System32\AudioSes.dll 2015-01-30 22:57:56 68E2A1A0407A66CF50DA0300852424AB 315392 ----a-w- C:\Windows\System32\audiosrv.dll 2015-01-30 22:57:56 58C2521D87C494831A625202C80354AD 1985024 ----a-w- C:\Windows\System32\authui.dll 2015-01-30 22:57:55 D3B50C4A22A0DF8639DC4A73A7A51BEA 115200 ----a-w- C:\Windows\System32\AuxiliaryDisplayDriverLib.dll 2015-01-30 22:57:55 3437B9E218A2E4586BEF4F7A3BD00777 88576 ----a-w- C:\Windows\System32\audiodg.exe 2015-01-30 22:57:55 1CBE36F6B8F7F067FCEA10B7082FAE9E 102912 ----a-w- C:\Windows\System32\AuxiliaryDisplayServices.dll 2015-01-30 22:57:55 1AE011BB950A5E0B05023D2AFEC3666D 79872 ----a-w- C:\Windows\System32\authz.dll 2015-01-30 22:57:55 10761177A6EBE45843F443E99509F5E7 643072 ----a-w- C:\Windows\System32\autochk.exe 2015-01-30 22:57:53 79B0EC7806B563475A211C5B0F9A4B9C 1216000 ----a-w- C:\Windows\System32\AuxiliaryDisplayCpl.dll 2015-01-30 22:57:53 34DA5AE04CA114B23D93CD9D4D05FCB7 636416 ----a-w- C:\Windows\System32\autofmt.exe 2015-01-30 22:57:53 15B7BDA10B91FE62466F2A18682C16E8 656896 ----a-w- C:\Windows\System32\autoconv.exe 2015-01-30 22:57:52 2AE61DEF9112DA8948EEAB3631FF4525 516608 ----a-w- C:\Windows\System32\autoplay.dll 2015-01-30 22:57:50 A5CBDC87E694154F90DBA134733E7E8B 1342464 ----a-w- C:\Windows\System32\brcpl.dll 2015-01-30 22:57:49 B07C9EE041AC911B73755317DF39B862 45568 ----a-w- C:\Windows\System32\bthci.dll 2015-01-30 22:57:49 4504819D18FAC09B6108D8728467E5B2 1324032 ----a-w- C:\Windows\System32\browseui.dll 2015-01-30 22:57:48 9AFFE233D49471292E8328FA5775B9DA 757248 ----a-w- C:\Windows\System32\azroles.dll 2015-01-30 22:57:48 23A732A29E183E9874C86FD93CC7B9B9 130024 ----a-w- C:\Windows\System32\basecsp.dll 2015-01-30 22:57:47 DE0DD9AE3430F84A96B5501112A696BE 274432 ----a-w- C:\Windows\System32\bcrypt.dll 2015-01-30 22:57:47 C789AF0F724FDA5852FB9A7D3A432381 334848 ----a-w- C:\Windows\System32\BFE.DLL 2015-01-30 22:57:47 632557F2495931D952161465AA177B3B 31744 ----a-w- C:\Windows\System32\bitsigd.dll 2015-01-30 22:57:47 02F0BE91B0F2B1C30F6F48334F47D625 542720 ----a-w- C:\Windows\System32\blackbox.dll 2015-01-30 22:57:46 941486AB385556BF6A62342F8CA15BD8 2515968 ----a-w- C:\Windows\System32\accessibilitycpl.dll 2015-01-30 22:57:43 AC40F8899BEC013EB1CA7CCC2D69E00C 1730560 ----a-w- C:\Windows\System32\apds.dll 2015-01-30 22:57:43 2C4AC5541ADB54DEF9244F87F9AD6AF8 28672 ----a-w- C:\Windows\System32\Apphlpdm.dll 2015-01-30 22:57:43 1107BD574A84367735FEC38B9BD64E6B 171008 ----a-w- C:\Windows\System32\apphelp.dll 2015-01-30 22:57:42 E9B9C1B98C8D6D48407E1C1203EAC659 199168 ----a-w- C:\Windows\System32\adsldpc.dll 2015-01-30 22:57:42 27FC7C228999D739C11F76120A121525 75264 ----a-w- C:\Windows\System32\adsmsext.dll 2015-01-30 22:57:42 19DF185D42AA0DE80AD78C58D4A4E936 1122304 ----a-w- C:\Windows\System32\appwiz.cpl 2015-01-30 22:57:37 EC43D9CC95C3BB5FEFDBCF22D375E1F5 617984 ----a-w- C:\Windows\System32\adtschema.dll 2015-01-30 22:57:36 C01CF069D98F0E9ED9E8012099D26DC7 593408 ----a-w- C:\Windows\System32\comuid.dll 2015-01-30 22:57:36 95A5497D129D95D12A46F7848AFFE1DB 1209856 ----a-w- C:\Windows\System32\comsvcs.dll 2015-01-30 22:57:36 6080A176D09435FC8E6E800996656E18 69120 ----a-w- C:\Windows\System32\conime.exe 2015-01-30 22:57:36 50CAA7072C171B9887215C83D52069E4 800768 ----a-w- C:\Windows\System32\advapi32.dll 2015-01-30 22:57:35 93E317D7AD783D8EAEE2E3500BFE889D 178176 ----a-w- C:\Windows\System32\credui.dll 2015-01-30 22:57:35 6659EC6006FD99A3AF1B8A6306F8BE3C 978944 ----a-w- C:\Windows\System32\crypt32.dll 2015-01-30 22:57:35 36509ECC02172D09507A16FAD12C566F 1645568 ----a-w- C:\Windows\System32\connect.dll 2015-01-30 22:57:34 72EC7D98F26B962414899C83F20A9442 481792 ----a-w- C:\Windows\System32\cmdial32.dll 2015-01-30 22:57:33 4AA2A0E26CEF1A803741253DCF9A1503 450560 ----a-w- C:\Windows\System32\comdlg32.dll 2015-01-30 22:57:32 CFBD2E1FE18B50748A76703A2DC6D4E3 61440 ----a-w- C:\Windows\System32\davclnt.dll 2015-01-30 22:57:32 86497C6A9825B6252804D5C4E189AA67 49152 ----a-w- C:\Windows\System32\cmmon32.exe 2015-01-30 22:57:32 447983959A8CF49C4CC3B65DED69AF28 1856512 ----a-w- C:\Windows\System32\dbgeng.dll 2015-01-30 22:57:31 C2D9DA17737BF49E3B8E8E3C142B3008 45056 ----a-w- C:\Windows\System32\dataclen.dll 2015-01-30 22:57:31 8AAEEE8E59A70F37579993D118A34EE0 1788416 ----a-w- C:\Windows\System32\d3d9.dll 2015-01-30 22:57:31 74A68B1E09AB06FBFB494179F84544FF 478208 ----a-w- C:\Windows\System32\DevicePairing.dll 2015-01-30 22:57:31 5AAE542EBB0F3CA7C1E5E6D5457BA2CE 65536 ----a-w- C:\Windows\System32\DevicePairingWizard.exe 2015-01-30 22:57:31 493083D1BF3D62A2C2C6BE1D2194289E 26112 ----a-w- C:\Windows\System32\DeviceEject.exe 2015-01-30 22:57:31 3C7A18013E99EAA45188A7C57B1AA758 54784 ----a-w- C:\Windows\System32\DevicePairingProxy.dll 2015-01-30 22:57:30 FB27772BEAF8E1D28CCD825C09DA939B 129024 ----a-w- C:\Windows\System32\cryptsvc.dll 2015-01-30 22:57:30 D922592AB65C5D9B88B30B4510A3464E 31744 ----a-w- C:\Windows\System32\cscapi.dll 2015-01-30 22:57:30 C1BB3EF5FAFCBC9573DEEB57E8DF9309 22016 ----a-w- C:\Windows\System32\cscdll.dll 2015-01-30 22:57:30 248A1F31ABB58DDDDC01490EF0BDC777 971264 ----a-w- C:\Windows\System32\cryptui.dll 2015-01-30 22:57:29 63F2534E7E063B4F2054433597D7A1B9 135168 ----a-w- C:\Windows\System32\cscript.exe 2015-01-30 22:57:29 5A736A107416E9B55D5B5F77B06921B4 46080 ----a-w- C:\Windows\System32\csrstub.exe 2015-01-30 22:57:29 423CFD439195B8178208DE7BEEE52540 1502720 ----a-w- C:\Windows\System32\certmgr.dll 2015-01-30 22:57:29 1E8F6E00EB118B7F381E437337856A46 37376 ----a-w- C:\Windows\System32\cdd.dll 2015-01-30 22:57:28 C0ABD66F31C0B84CD944802E6D3D02C2 640512 ----a-w- C:\Windows\System32\bthprops.cpl 2015-01-30 22:57:28 AC48FD62E22C4425879FCA5A63F50497 323584 ----a-w- C:\Windows\System32\certcli.dll 2015-01-30 22:57:28 A4C8377FA4A994E07075107DBE2E3DCE 40960 ----a-w- C:\Windows\System32\bthserv.dll 2015-01-30 22:57:28 7F5936A3FF5E83272EA1DC8985B2A228 34304 ----a-w- C:\Windows\System32\bthudtask.exe 2015-01-30 22:57:28 039F5070FD21A0FA3ABA305E393F75E7 633856 ----a-w- C:\Windows\System32\CertEnrollUI.dll 2015-01-30 22:57:28 0053319C4438CDE659AA75C19BBD22F1 1112064 ----a-w- C:\Windows\System32\CertEnroll.dll 2015-01-30 22:57:27 701E62EE60DAFD5B6951B6999CB01F95 44032 ----a-w- C:\Windows\System32\cbsra.exe 2015-01-30 22:57:26 E04FA091879E982F77024DF9461649E3 124928 ----a-w- C:\Windows\System32\cintlgnt.ime 2015-01-30 22:57:26 9E447B628CBF81F006218E7B6127B7E2 58368 ----a-w- C:\Windows\System32\cipher.exe 2015-01-30 22:57:26 9996E936E9926108FBEDED4171B129B7 1671680 ----a-w- C:\Windows\System32\chsbrkr.dll 2015-01-30 22:57:26 9247AB566A1DF0C012D1A518AB0FCD52 6103040 ----a-w- C:\Windows\System32\chtbrkr.dll 2015-01-30 22:57:26 3048B1D3029D5D8424E018BD7FBFDA75 10752 ----a-w- C:\Windows\System32\CHxReadingStringIME.dll 2015-01-30 22:57:26 22F73612087430A94DBE912AB58E0C79 614376 ----a-w- C:\Windows\System32\ci.dll 2015-01-30 22:57:25 D7659D3B5B92C31E84E53C1431F35132 245736 ----a-w- C:\Windows\System32\clfs.sys 2015-01-30 22:57:25 56C182F55BF68556C974E9AD32BF56BF 215552 ----a-w- C:\Windows\System32\certreq.exe 2015-01-30 22:57:25 312EC3E37A0A1F2006534913E37B4423 40448 ----a-w- C:\Windows\System32\certprop.dll 2015-01-30 22:57:24 50AE4C1B7A68DE9FFD3D433C93BA270A 124928 ----a-w- C:\Windows\System32\chajei.ime 2015-01-30 22:57:24 4533F3B0E9AD11A1C02B191F5D873DE2 799744 ----a-w- C:\Windows\System32\certutil.exe 2015-01-30 22:57:04 AC9415A1AF0F49570F7515A7131AE2E1 738816 ----a-w- C:\Windows\System32\inetcomm.dll 2015-01-30 22:57:04 9ED83C84DA75E974F496721B6F8AE02E 1827840 ----a-w- C:\Windows\System32\inetcpl.cpl 2015-01-30 22:57:03 F67843CFD59FB2015823E2CE2D2A65D8 35168 ----a-w- C:\Windows\System32\infocardcpl.cpl 2015-01-30 22:57:03 E6AA880A6AE64D9C5FED9D7CCC9DA8EF 99680 ----a-w- C:\Windows\System32\infocardapi.dll 2015-01-30 22:57:03 E3E821B879CF04AA13865D5E6A1FC2A0 413696 ----a-w- C:\Windows\System32\imkr80.ime 2015-01-30 22:57:03 D2A8D0EE4EEAAE913A19AC37E2CD07ED 217600 ----a-w- C:\Windows\System32\InkEd.dll 2015-01-30 22:57:03 34668001FFE132F076E6177F607BCDE9 15360 ----a-w- C:\Windows\System32\inetppui.dll 2015-01-30 22:57:03 2E8E30F3B318A9FDA5A2485723F4C2B3 122368 ----a-w- C:\Windows\System32\inetpp.dll 2015-01-30 22:57:02 C8BDCECEE082B54F0BAC838BF0A34597 114688 ----a-w- C:\Windows\System32\imm32.dll 2015-01-30 22:57:01 D0494460421A03CD5225CCA0059AA146 364032 ----a-w- C:\Windows\System32\IPSECSVC.DLL 2015-01-30 22:57:01 C192DD0C53FD0616AC31A9E0ADAE0C39 396288 ----a-w- C:\Windows\System32\ipsmsnap.dll 2015-01-30 22:57:01 A763901E05BBF173CE4C01D1E82B20D3 200704 ----a-w- C:\Windows\System32\input.dll 2015-01-30 22:57:01 3A3A0092B961CA122124EEDC0F163F08 27648 ----a-w- C:\Windows\System32\jsproxy.dll 2015-01-30 22:57:00 D0DB6CA4E21BE6809F356C90BBDE8A66 6079488 ----a-w- C:\Windows\System32\ieframe.dll 2015-01-30 22:57:00 AF4CE3ED512387897AB197637B6E8F91 193024 ----a-w- C:\Windows\System32\iepeers.dll 2015-01-30 22:57:00 A5CBBED853E6183D4E067B42B73A20DA 26624 ----a-w- C:\Windows\System32\ipconfig.exe 2015-01-30 22:57:00 4FE8425F21B3F0F8C4B4726351D43EAA 91648 ----a-w- C:\Windows\System32\IPHLPAPI.DLL 2015-01-30 22:57:00 3A0D03407790A5F8B799AA683858E590 270336 ----a-w- C:\Windows\System32\iertutil.dll 2015-01-30 22:57:00 0170442A2DF1127A9F4330FDDAEC35F6 759296 ----a-w- C:\Windows\System32\ipsecsnp.dll 2015-01-30 22:56:59 EBAE6CE901EDB7F0F794589BF5FDF695 619864 ----a-w- C:\Windows\System32\icardagt.exe 2015-01-30 22:56:59 E176452A085570571A38C0CB33B1F99A 119296 ----a-w- C:\Windows\System32\iasrecst.dll 2015-01-30 22:56:59 CAC183ABA07231B031EC0627E3A4A618 76288 ----a-w- C:\Windows\System32\iassvcs.dll 2015-01-30 22:56:59 A080A841827D71F86ACEDC48F3B5AF64 158208 ----a-w- C:\Windows\System32\iasrad.dll 2015-01-30 22:56:59 97C89AA7146D73B387AADAA11D8B56F1 33792 ----a-w- C:\Windows\System32\iaspolcy.dll 2015-01-30 22:56:59 7F470535CDBE0B83FE7D96146E513F84 398848 ----a-w- C:\Windows\System32\iedkcs32.dll 2015-01-30 22:56:59 5A1B9A7761FB1BA3A42C8F7F0EB49994 252928 ----a-w- C:\Windows\System32\iassdo.dll 2015-01-30 22:56:59 34B7FA82A85231348C170EF39B636DB4 9048 ----a-w- C:\Windows\System32\icardres.dll 2015-01-30 22:56:59 240B65CDA06C38733DF9B65E1D314BC7 182272 ----a-w- C:\Windows\System32\iassam.dll 2015-01-30 22:56:59 1C9D052A8759508072C584348136B7BA 380928 ----a-w- C:\Windows\System32\ieapfltr.dll 2015-01-30 22:56:59 17CBA378C42E4525A3BC9DDD77EF5DD2 29696 ----a-w- C:\Windows\System32\ifmon.dll 2015-01-30 22:56:58 AE4DAA8F0F9AE5EC2DE1ACB5D37AFA55 883712 ----a-w- C:\Windows\System32\IMJP10.IME 2015-01-30 22:56:58 5178E1791950054638DA0CC444E2D187 729600 ----a-w- C:\Windows\System32\IMJP10K.DLL 2015-01-30 22:56:58 0A1742349EB0D74DB1ABB5F1A6FC0C77 230400 ----a-w- C:\Windows\System32\ieaksie.dll 2015-01-30 22:56:57 C3EB60969612B265FB7265E76B6AEA6F 677376 ----a-w- C:\Windows\System32\imapi2fs.dll 2015-01-30 22:56:57 C399E29AC25746CDC126DC621F41F219 107520 ----a-w- C:\Windows\System32\imapi.dll 2015-01-30 22:56:57 9B0726A03B790E5B82BED44D24009BEF 378368 ----a-w- C:\Windows\System32\imapi2.dll 2015-01-30 22:56:57 9908D8A397B76CD8D31D0D383C5773C9 438784 ----a-w- C:\Windows\System32\IKEEXT.DLL 2015-01-30 22:56:56 C732992FF9798F2ACBF86314F0E4A6F5 208896 ----a-w- C:\Windows\System32\mfplat.dll 2015-01-30 22:56:56 9A8880BE64A67FA72A8F4DC71AF882E1 1135104 ----a-w- C:\Windows\System32\mfc42.dll 2015-01-30 22:56:56 1DC99BA7265ACF7A5E19A924800EB823 1160704 ----a-w- C:\Windows\System32\mfc42u.dll 2015-01-30 22:56:55 FAF53B680C7DE42328EAE23638934D10 41984 ----a-w- C:\Windows\System32\mimefilt.dll 2015-01-30 22:56:55 C99403A5B641520DAED0021DDA06F272 2012160 ----a-w- C:\Windows\System32\milcore.dll 2015-01-30 22:56:54 83199EF88D691E730B80666E29F90D58 17408 ----a-w- C:\Windows\System32\midimap.dll 2015-01-30 22:56:53 FD44B4D9129EDD68BBD0A26683024EF9 93696 ----a-w- C:\Windows\System32\Kswdmcap.ax 2015-01-30 22:56:53 C1B7AB03AC2F3C990A40BC2E18E02CF1 11967524 ----a-w- C:\Windows\System32\korwbrkr.lex 2015-01-30 22:56:53 A35B257A0A45EFCBF548E74E7E883268 143872 ----a-w- C:\Windows\System32\korwbrkr.dll 2015-01-30 22:56:53 44DA7EE9F50381DBA0F63BB2401DC8FD 48128 ----a-w- C:\Windows\System32\l2nacp.dll 2015-01-30 22:56:52 FC9EF8CC90B8524FA0FC8526FF9F9C2F 19944 ----a-w- C:\Windows\System32\kdusb.dll 2015-01-30 22:56:52 CF9BA9125C32978B33A1E6D5D34A2884 17896 ----a-w- C:\Windows\System32\kd1394.dll 2015-01-30 22:56:52 BB8509089E7DF514310814E1B2593FFC 891392 ----a-w- C:\Windows\System32\kernel32.dll 2015-01-30 22:56:52 8DDFDF8A433DC09F92ACA1F3DE4DE067 356864 ----a-w- C:\Windows\System32\MediaMetadataHandler.dll 2015-01-30 22:56:52 67628B9829FCB3F9AD2532F91B1A8A93 852992 ----a-w- C:\Windows\System32\mcmde.dll 2015-01-30 22:56:52 5F61BE656699A41F4EBBE6169B6810CF 438744 ----a-w- C:\Windows\System32\mcupdate_GenuineIntel.dll 2015-01-30 22:56:52 48E083898FE5611006725796B055011B 17384 ----a-w- C:\Windows\System32\kdcom.dll 2015-01-30 22:56:52 338104E0E18307CD65604FE317B5FB8D 950272 ----a-w- C:\Windows\System32\mblctr.exe 2015-01-30 22:56:51 E47C854A28A81F2939F42CBE9FEA994C 710144 ----a-w- C:\Windows\System32\Magnify.exe 2015-01-30 22:56:51 B51BF7934D2B657454F66035AA5BFA03 3662128 ----a-w- C:\Windows\System32\locale.nls 2015-01-30 20:35:34 BF2156D8D9866983B55D95382131DC4A 19968 ----a-w- C:\Windows\System32\lsmproxy.dll 2015-01-30 20:35:34 4774AD6C447E02E954BD9A793614EBEC 229888 ----a-w- C:\Windows\System32\lsm.exe 2015-01-30 20:35:33 85EFC7BCBF6327B9C7FA774D374313CC 98304 ----a-w- C:\Windows\System32\makecab.exe 2015-01-30 20:35:32 6A59B1ACCD52DA23472830E65279DD13 101376 ----a-w- C:\Windows\System32\luainstall.dll 2015-01-30 20:35:32 3E00045487A69D5021D5B64893E926EA 40448 ----a-w- C:\Windows\System32\lodctr.exe 2015-01-30 20:35:31 6A11BC4DD8C913723FF67D709E6BCADC 13824 ----a-w- C:\Windows\System32\localui.dll 2015-01-30 20:35:31 53964AC4646ACC32A689405312B10524 429056 ----a-w- C:\Windows\System32\localsec.dll 2015-01-30 20:35:31 01FB02762AEF28A55CF21363D3919AB4 179712 ----a-w- C:\Windows\System32\lpksetup.exe 2015-01-30 20:35:25 DE3021B382D37122850280B6392397CD 26624 ----a-w- C:\Windows\System32\mfcsubs.dll 2015-01-30 20:35:25 CB1B21D884C6F1AAAFB90F64BA5E184E 62464 ----a-w- C:\Windows\System32\mfvdsp.dll 2015-01-30 20:35:25 30C062B2D048EC6F9CB15189677B9E45 614400 ----a-w- C:\Windows\System32\MFWMAAEC.DLL 2015-01-30 20:35:22 D18BBDFE4A35BA4C1F2A302E86975C40 129024 ----a-w- C:\Windows\System32\McxDriv.dll 2015-01-30 20:35:22 8D865A3E7E2C78317EDE4EAE8316284F 128512 ----a-w- C:\Windows\System32\MdSched.exe 2015-01-30 20:35:22 79624E5E4C263C3D0B09C90B798E43A8 275968 ----a-w- C:\Windows\System32\mcbuilder.exe 2015-01-30 20:35:22 23615808AD84A96FE5D2301FDBE4CBFC 205312 ----a-w- C:\Windows\System32\mdminst.dll 2015-01-30 20:35:21 AEF9BABB8A506BC4CE0451A64AADED46 53760 ----a-w- C:\Windows\System32\Mcx2Svc.dll 2015-01-30 20:35:21 2C5EE59D59B9A62032368B78DF04509B 64000 ----a-w- C:\Windows\System32\iscsiwmi.dll 2015-01-30 20:35:21 08886EFE112F7E5437711FCF6D8B04C1 141824 ----a-w- C:\Windows\System32\itss.dll 2015-01-30 20:35:20 DD348DA5669282C80A3DE4D8991DB717 28160 ----a-w- C:\Windows\System32\iscsium.dll 2015-01-30 20:35:20 85466C0757A23D9A9AECDC0755203CB2 111616 ----a-w- C:\Windows\System32\iscsiexe.dll 2015-01-30 20:35:20 61C5507090E036D647E4FAC1F5ACB1C6 8192 ----a-w- C:\Windows\System32\iscsied.dll 2015-01-30 20:35:19 E1499BD0FF76B1B2FBBF1AF339D91165 288256 ----a-w- C:\Windows\System32\ipnathlp.dll 2015-01-30 20:35:19 B7027CF0CD31C820928950CBFE7E91EF 8192 ----a-w- C:\Windows\System32\iprtprio.dll 2015-01-30 20:35:19 9AC218C6E6105477484C6FDBE7D409A4 74240 ----a-w- C:\Windows\System32\IPBusEnum.dll 2015-01-30 20:35:19 490C755CD179B16E0C9EB7804BD9E578 337408 ----a-w- C:\Windows\System32\intl.cpl 2015-01-30 20:35:19 469C9DFA4A9E09B811324EEE91C71C5B 252416 ----a-w- C:\Windows\System32\iprtrmgr.dll 2015-01-30 20:35:19 4023E0174BE81A68D64F4E8F0B280849 93696 ----a-w- C:\Windows\System32\inseng.dll 2015-01-30 20:35:18 EADA658B40C187C162E8ECA311EB9572 157696 ----a-w- C:\Windows\System32\keymgr.dll 2015-01-30 20:35:18 D8AD255B37DA92434C26E4876DB7D418 68096 ----a-w- C:\Windows\System32\KMSVC.DLL 2015-01-30 20:35:18 D19270F084652370D5F0A451EFD62D6A 69120 ----a-w- C:\Windows\System32\kstvtune.ax 2015-01-30 20:35:18 CA0B849566776A17F35F0339BE17DFD9 12288 ----a-w- C:\Windows\System32\ktmw32.dll 2015-01-30 20:35:18 C4143298689F85E86AF5E58AAFFDA820 31232 ----a-w- C:\Windows\System32\lltdapi.dll 2015-01-30 20:35:18 AC3F68966528AA14E02893405BE0D008 25600 ----a-w- C:\Windows\System32\LangCleanupSysprepAction.dll 2015-01-30 20:35:18 A882A0BC8136C4DF36D61DE2FA2B34C4 40448 ----a-w- C:\Windows\System32\lnkstub.exe 2015-01-30 20:35:18 9AC01F9BA7D43C76AD4B4DFC2EFE9206 13824 ----a-w- C:\Windows\System32\ktmutil.exe 2015-01-30 20:35:18 8B2D61CA83825CEAD423228ACD40CFBC 113664 ----a-w- C:\Windows\System32\loadperf.dll 2015-01-30 20:35:18 861797D3C83A6EBA05FB2C63B1A45E82 144384 ----a-w- C:\Windows\System32\ksproxy.ax 2015-01-30 20:35:18 2D5A428872F1442631D0959A34ABFF63 188928 ----a-w- C:\Windows\System32\lltdsvc.dll 2015-01-30 20:35:18 19FFAD68A02AF1BF0BC336EE26CD6767 53760 ----a-w- C:\Windows\System32\l2gpstore.dll 2015-01-30 20:35:18 129BFBD63A1C76CC78F612D45EEAE56A 43520 ----a-w- C:\Windows\System32\ksxbar.ax 2015-01-30 20:35:18 0E650E554E29C29430350DF5A6ABA916 41984 ----a-w- C:\Windows\System32\licmgr10.dll 2015-01-30 20:35:17 FED96A7CA1154437416C2CD01BC5FE45 442368 ----a-w- C:\Windows\System32\joy.cpl 2015-01-30 20:35:16 82B0D62AE51A9086B38318BDE44CCB5E 10240 ----a-w- C:\Windows\System32\KBDKOR.DLL 2015-01-30 20:35:16 1A7C1B39DDF46B91748D710B97DAC962 10752 ----a-w- C:\Windows\System32\KBDJPN.DLL 2015-01-30 20:35:04 3EB6D30D82F0E300FCFBAD0498F654FD 187904 ----a-w- C:\Windows\System32\mlang.dll 2015-01-30 20:35:02 F0C789FDF068163E037780FC7BE4522D 95232 ----a-w- C:\Windows\System32\migisol.dll 2015-01-30 20:35:02 E336E7A9E5A38941245C1EF61E335E98 94776 ----a-w- C:\Windows\System32\MigAutoPlay.exe 2015-01-30 20:34:17 DAE6F839F39C8D2FE3DBFE21D1C7BA9B 208896 ----a-w- C:\Windows\System32\d3d10_1core.dll 2015-01-30 20:34:17 C166EF14CBC85AC9747DDA3797F30A06 816128 ----a-w- C:\Windows\System32\d3dim700.dll 2015-01-30 20:34:17 B123B2E554AD31FC88A7447F551D9FEC 1039360 ----a-w- C:\Windows\System32\d3d8.dll 2015-01-30 20:34:17 8EB378F5AF47731B36DD1B4B79BC532D 188416 ----a-w- C:\Windows\System32\d3d10core.dll 2015-01-30 20:34:17 184233C079DC8477CEA87479491E1593 159744 ----a-w- C:\Windows\System32\d3d10_1.dll 2015-01-30 20:34:17 15FEF0750BEF3E2DCC28BD4B3828263B 384512 ----a-w- C:\Windows\System32\d3dim.dll 2015-01-30 20:34:16 EF130F7C8036F4150C9068717F417A91 368640 ----a-w- C:\Windows\System32\desk.cpl 2015-01-30 20:34:16 2B5C45B57745C6B103CEEE40228EB475 1029120 ----a-w- C:\Windows\System32\d3d10.dll 2015-01-30 20:34:15 7F73B83E2C975B5057D36625FA3D1A71 226816 ----a-w- C:\Windows\System32\Defrag.exe 2015-01-30 20:34:15 6C9FF16DA8BFDDA8A57DA0A6769AC8D5 53248 ----a-w- C:\Windows\System32\d3dxof.dll 2015-01-30 20:34:15 6950BBCEB21F9C3CB3B52E90960109C3 64000 ----a-w- C:\Windows\System32\devenum.dll 2015-01-30 20:34:15 0F3334E72FA397B9EE536E1FE6CED525 135168 ----a-w- C:\Windows\System32\dbnetlib.dll 2015-01-30 20:34:14 FC4954D8CCDBE5C469F7737525B3300E 97792 ----a-w- C:\Windows\System32\cryptnet.dll 2015-01-30 20:34:14 FA2A3AFADC4FB47DBC234A4E57F92CDB 522752 ----a-w- C:\Windows\System32\ddraw.dll 2015-01-30 20:34:14 ABCA209EBA02CB59233614DB83B4F50D 6144 ----a-w- C:\Windows\System32\csrss.exe 2015-01-30 20:34:14 4934241CD20AC87D78121352E3BA8318 798208 ----a-w- C:\Windows\System32\dbghelp.dll 2015-01-30 20:34:14 459B48188494490707DCA8BAA91AA185 57856 ----a-w- C:\Windows\System32\cryptdll.dll 2015-01-30 20:34:14 26F139DDEC6407508071930D3D07337E 15872 ----a-w- C:\Windows\System32\credssp.dll 2015-01-30 20:34:13 7F55C714567E2E55C79B7FD33433C93D 49152 ----a-w- C:\Windows\System32\csrsrv.dll 2015-01-30 20:34:13 70C6489D56008D75DEDF73226FA63C11 35328 ----a-w- C:\Windows\System32\dimsjob.dll 2015-01-30 20:34:13 30A742FFCEA6661E501C44DC273C77B1 159232 ----a-w- C:\Windows\System32\dinput8.dll 2015-01-30 20:34:12 A7D9D1A6C9BDFA4B0B5095A6E8837275 35328 ----a-w- C:\Windows\System32\dispci.dll 2015-01-30 20:34:12 3DC2E29236DCB33851B847FE922371E6 121856 ----a-w- C:\Windows\System32\dispdiag.exe 2015-01-30 20:34:12 18734053F80013E344106CC831A796EE 94208 ----a-w- C:\Windows\System32\diantz.exe 2015-01-30 20:34:11 CB1F79A5B3551273E55F69DDDCB919E3 32768 ----a-w- C:\Windows\System32\dispex.dll 2015-01-30 20:34:11 5C58F73D55DB850C47A1A8B193BDBF1B 163840 ----a-w- C:\Windows\System32\DfrgNtfs.exe 2015-01-30 20:34:11 2327C11B043FCEB80BE00CC8D077E9AA 671232 ----a-w- C:\Windows\System32\dfrgui.exe 2015-01-30 20:34:10 FAF3D589C7E28315EBFCDFA4EE9C610E 66048 ----a-w- C:\Windows\System32\DHCPQEC.DLL 2015-01-30 20:34:10 E496B0BACC7F9B4194FEC610198DA58E 39936 ----a-w- C:\Windows\System32\dfdts.dll 2015-01-30 20:34:10 D09FEC4DA05FBFB9B69283A11730BEFE 68608 ----a-w- C:\Windows\System32\DFDWiz.exe 2015-01-30 20:34:10 97872E5309026CFBB1AE89FB2FF0AE31 61440 ----a-w- C:\Windows\System32\dhcpsapi.dll 2015-01-30 20:34:10 74F26FC01B180D4A99A168ED69C30A53 318976 ----a-w- C:\Windows\System32\cmd.exe 2015-01-30 20:34:10 6AE49062DBE58B49273E8AD027966923 96768 ----a-w- C:\Windows\System32\dfrgfat.exe 2015-01-30 20:34:10 4AD7FBD73582498EA291356800446AC2 58880 ----a-w- C:\Windows\System32\dfrgifc.exe 2015-01-30 20:34:10 3382A934DEEFD422CFAE0EDC1AD536A4 31232 ----a-w- C:\Windows\System32\cmcfg32.dll 2015-01-30 20:34:10 25689B65734D65E4E73256B3D6842C1A 53760 ----a-w- C:\Windows\System32\DfsShlEx.dll 2015-01-30 20:34:09 D7D9019F5952731303A9FD44ACAA3B43 32768 ----a-w- C:\Windows\System32\cmlua.dll 2015-01-30 20:34:09 D333058925CE305E39DE8D5AD2B52A46 178176 ----a-w- C:\Windows\System32\clusapi.dll 2015-01-30 20:34:08 D59374AA78A8ADDB0EEEF800C40D0BD8 67584 ----a-w- C:\Windows\System32\cmifw.dll 2015-01-30 20:34:08 31F244C7B382975E062674CCDE836702 297472 ----a-w- C:\Windows\System32\cmipnpinstall.dll 2015-01-30 20:34:08 1EE1AB885DF48EE50D6F27866E0FC5B2 64512 ----a-w- C:\Windows\System32\cmicryptinstall.dll 2015-01-30 20:34:08 0E254F477D6534069A341ED79A2A05BE 72704 ----a-w- C:\Windows\System32\cmdl32.exe 2015-01-30 20:34:07 1FA026C5208D0568F0D069387222B058 171520 ----a-w- C:\Windows\System32\cic.dll 2015-01-30 20:34:06 FC5282802468C396B696A6E07C549BAE 56832 ----a-w- C:\Windows\System32\clfsw32.dll 2015-01-30 20:34:06 D7BC0EB22AA1B64AFC6F92A7F15A6161 91648 ----a-w- C:\Windows\System32\comrepl.dll 2015-01-30 20:34:06 CEC91FE5C7C9EB9D2C6945721994AA35 36352 ----a-w- C:\Windows\System32\ComputerDefaults.exe 2015-01-30 20:34:06 C394079EB162E812D682C73FA96AF6E4 523776 ----a-w- C:\Windows\System32\clbcatq.dll 2015-01-30 20:34:06 973642071FD324603235AFD9B1B199AA 220160 ----a-w- C:\Windows\System32\comsnap.dll 2015-01-30 20:34:06 4211249955AF9133E2E357CC92B54DFD 1291264 ----a-w- C:\Windows\System32\comres.dll 2015-01-30 20:34:06 18BC013FD5A9F5BA2068119C83D550D9 282624 ----a-w- C:\Windows\System32\CompatUI.dll 2015-01-30 20:34:05 BF6F0C2DF119F71C22C00525ADF2EE56 17408 ----a-w- C:\Windows\System32\corpol.dll 2015-01-30 20:34:05 AF2CAAAF1E82C14F37F5BD7D1E6E18E1 276480 ----a-w- C:\Windows\System32\compstui.dll 2015-01-30 20:34:05 838A80A4DF9D0624ABD3EB80B7D784CF 17408 ----a-w- C:\Windows\System32\convert.exe 2015-01-30 20:34:05 0ADA4B85E1E2ACE2BEC41BBD9846C9B6 145408 ----a-w- C:\Windows\System32\CompMgmtLauncher.exe 2015-01-30 20:34:04 FA7E42E885AC45766E03161C8830D8C4 84992 ----a-w- C:\Windows\System32\cmstp.exe 2015-01-30 20:34:04 EB5EC24F7CF1282D1275D864A5982C69 26624 ----a-w- C:\Windows\System32\cofiredm.dll 2015-01-30 20:34:04 E8DE40DE899656055A1691EE74F75841 62464 ----a-w- C:\Windows\System32\colbact.dll 2015-01-30 20:34:04 B8124B934DF7B8D6EBD9152A8E0E926F 686592 ----a-w- C:\Windows\System32\colorui.dll 2015-01-30 20:34:04 B150132B1C8CF562752D065F287D5D57 161280 ----a-w- C:\Windows\System32\COLORCNV.DLL 2015-01-30 20:34:04 A38AD4A5F1D5BD5560CE5F0F0A208471 47616 ----a-w- C:\Windows\System32\cmutil.dll 2015-01-30 20:34:04 73FE91ECFDE60D39DD08D45B1914087E 14336 ----a-w- C:\Windows\System32\cmstplua.dll 2015-01-30 20:34:04 3709EC685E0076CB20743096C9C7E587 26112 ----a-w- C:\Windows\System32\cmpbk32.dll 2015-01-30 20:34:04 2CB2EBF09B7F7D84D1A733DB43449C72 81920 ----a-w- C:\Windows\System32\consent.exe 2015-01-30 20:34:02 50CDFD99E606D172875E73B87C64053D 531968 ----a-w- C:\Windows\System32\comctl32.dll 2015-01-30 20:34:02 3327D8A301A3FEC73B450C0BC130D616 179200 ----a-w- C:\Windows\System32\els.dll 2015-01-30 20:33:56 E146357975D701F398D2D28EAEE6FE3B 169984 ----a-w- C:\Windows\System32\EncDump.dll 2015-01-30 20:33:56 4188D91B8E95CA732B1E5C5E528BB508 93184 ----a-w- C:\Windows\System32\esentutl.exe 2015-01-30 20:33:56 2A238698EAF925970630CEEBAD0A6D35 36352 ----a-w- C:\Windows\System32\esentprf.dll 2015-01-30 20:33:55 C0B95E40D85CD807D614E264248A45B9 57344 ----a-w- C:\Windows\System32\eapsvc.dll 2015-01-30 20:33:55 9D9FFC923FADBB575E0452EA0BBB15BD 41472 ----a-w- C:\Windows\System32\eappprxy.dll 2015-01-30 20:33:55 7D7960C85E4259F3B90EB4B742616BFF 67584 ----a-w- C:\Windows\System32\EAPQEC.DLL 2015-01-30 20:33:55 00A737302C14977A7B3F49CD982C710D 86528 ----a-w- C:\Windows\System32\efsadu.dll 2015-01-30 20:33:53 90438B514A5AC6A23602484A907E20A7 442368 ----a-w- C:\Windows\System32\filemgmt.dll 2015-01-30 20:33:53 68886FE98B9DAAD197828AB065AA8AE1 23040 ----a-w- C:\Windows\System32\fmifs.dll 2015-01-30 20:33:53 6629B5F0E98151F4AFDD87567EA32BA3 13312 ----a-w- C:\Windows\System32\fdPHost.dll 2015-01-30 20:33:53 564347E36A0C80CECC5312B3E55B6F79 131072 ----a-w- C:\Windows\System32\fde.dll 2015-01-30 20:33:52 F824AB6B4F32CDA2F1750D3D9F5318B7 2249216 ----a-w- C:\Windows\System32\Firewall.cpl 2015-01-30 20:33:52 E926252DF5DF9775FE040D04B4C39BD9 2585088 ----a-w- C:\Windows\System32\FirewallControlPanel.exe 2015-01-30 20:33:52 95F1EB99B81CFD6F581C85F0A0AA9B2B 403968 ----a-w- C:\Windows\System32\FirewallAPI.dll 2015-01-30 20:33:52 3133CA3734379D9C79868819DB7DA7BC 64512 ----a-w- C:\Windows\System32\findnetprinters.dll 2015-01-30 20:33:51 419D476CDE881C0D32608825E14B089A 51712 ----a-w- C:\Windows\System32\esrb.rs 2015-01-30 20:33:51 197FE5C1FEC75B1700ED92041707D5D1 19968 ----a-w- C:\Windows\System32\eventcls.dll 2015-01-30 20:33:50 8F17F4814F100CC70AFD0C20F9A121D8 53248 ----a-w- C:\Windows\System32\extrac32.exe 2015-01-30 20:33:50 8E89E1ECEC628C61C49848EFAC567B37 52736 ----a-w- C:\Windows\System32\expand.exe 2015-01-30 20:33:50 898ABECCD5F0B9A8E8F1318DDB234685 45056 ----a-w- C:\Windows\System32\dot3api.dll 2015-01-30 20:33:50 8071C33E6508EE2A4BDBAB77CFAB807B 142848 ----a-w- C:\Windows\System32\dot3ui.dll 2015-01-30 20:33:50 72763FB32F75CA9E3C6FCBD764ADC80D 235520 ----a-w- C:\Windows\System32\dot3gpui.dll 2015-01-30 20:33:50 26ED466B32392DF1568AF94F9C92E56C 45568 ----a-w- C:\Windows\System32\dot3dlg.dll 2015-01-30 20:33:49 FB5C247CDD2A333C183F20B345416E13 43008 ----a-w- C:\Windows\System32\dot3gpclnt.dll 2015-01-30 20:33:49 E921E752385C351E6506F5846A2F2E1A 38400 ----a-w- C:\Windows\System32\dmloader.dll 2015-01-30 20:33:49 DA4F262D2C28C760409F161885C80D5C 178688 ----a-w- C:\Windows\System32\dmime.dll 2015-01-30 20:33:49 D7914E8E0F3DF5DA015C59684488844F 25088 ----a-w- C:\Windows\System32\dnscacheugc.exe 2015-01-30 20:33:49 B4C4990BFA054DF52731300C911B47C6 388096 ----a-w- C:\Windows\System32\dmdlgs.dll 2015-01-30 20:33:49 A8C867371D7923DE74E35EB01E01B258 66048 ----a-w- C:\Windows\System32\driverquery.exe 2015-01-30 20:33:49 A622E888F8AA2F6B49E9BC466F0E5DEF 134656 ----a-w- C:\Windows\System32\dps.dll 2015-01-30 20:33:49 A31E818D43AB419CF2109F413874845C 84480 ----a-w- C:\Windows\System32\dmscript.dll 2015-01-30 20:33:49 8DAAEB693155EB610EAAD9477EEA1875 184320 ----a-w- C:\Windows\System32\dmdskmgr.dll 2015-01-30 20:33:49 8D27B8E9652B1BA65C03D05A816EA940 376320 ----a-w- C:\Windows\System32\dpnet.dll 2015-01-30 20:33:49 7E2849AF13D7133D58877516F58882E2 48128 ----a-w- C:\Windows\System32\dnshc.dll 2015-01-30 20:33:49 4EBDD20AFC19AAECBA2893D128DD5ECD 258560 ----a-w- C:\Windows\System32\dpx.dll 2015-01-30 20:33:49 1D6B201D81CBA88CB4510B6BF96C5CE0 42496 ----a-w- C:\Windows\System32\dmocx.dll 2015-01-30 20:33:49 16BDDB43FC365599A852CD254D0B08DA 2048 ----a-w- C:\Windows\System32\dmdskres2.dll 2015-01-30 20:33:49 0247D3228EE5F4B8D5C38C2F1D3B9415 160768 ----a-w- C:\Windows\System32\DpiScaling.exe 2015-01-30 20:33:48 DFB8564A8D01C19688C0A5CC50EF3397 131584 ----a-w- C:\Windows\System32\dmvdsitf.dll 2015-01-30 20:33:48 BA29E0F81A45A6DC0F0FDD1F11A7CB9C 171520 ----a-w- C:\Windows\System32\dxgi.dll 2015-01-30 20:33:48 76D5F7FB4FBC83E88B8321226EF3055D 195072 ----a-w- C:\Windows\System32\dxdiagn.dll 2015-01-30 20:33:48 57F7F0A3A19EAC41C16730887651BE52 88064 ----a-w- C:\Windows\System32\dmview.ocx 2015-01-30 20:33:48 2DCFD51EB37A5C24B38B9E4AEA7502BD 104448 ----a-w- C:\Windows\System32\DWWIN.EXE 2015-01-30 20:33:48 24AD1E3A5BE7153FB358D0271A2028B0 252928 ----a-w- C:\Windows\System32\dxdiag.exe 2015-01-30 20:33:48 17D68D0FF76BCDC0B0F851056259D32A 18944 ----a-w- C:\Windows\System32\dmutil.dll 2015-01-30 20:33:47 EFD278F8129EE12F1D4AE0250494B791 64512 ----a-w- C:\Windows\System32\dxva2.dll 2015-01-30 20:33:47 D80C6539C00CB4F5D59066865479C308 81920 ----a-w- C:\Windows\System32\dwmredir.dll 2015-01-30 20:33:47 D12FEB0E3EA6063A65A5498ED90FD790 214528 ----a-w- C:\Windows\System32\dxtrans.dll 2015-01-30 20:33:47 C002F160632EC24BCC7BB3E5EB18E6DA 173568 ----a-w- C:\Windows\System32\dsdmo.dll 2015-01-30 20:33:47 B68FCC1F8684AB3EC4BE4D0A2537D26D 347136 ----a-w- C:\Windows\System32\dxtmsft.dll 2015-01-30 20:33:47 9B96F6952186336CC6E3D4E08BE2E0AF 39936 ----a-w- C:\Windows\System32\dwmapi.dll 2015-01-30 20:33:47 3E6B0F599CF73E00E018C9E1C0E83560 190976 ----a-w- C:\Windows\System32\dskquoui.dll 2015-01-30 20:33:46 C8DBFEF835FF54467425C8F3ABCF7046 155704 ----a-w- C:\Windows\System32\dssenh.dll 2015-01-30 20:33:46 75EB73E64F5B4655D9797D20F26DE320 183808 ----a-w- C:\Windows\System32\duser.dll 2015-01-30 20:33:46 721BAA64EF443D9033F2330F0FF8C70B 86528 ----a-w- C:\Windows\System32\dskquota.dll 2015-01-30 20:33:46 474F35F4AA33C4E2F20CE28BB7C81C80 29696 ----a-w- C:\Windows\System32\dsauth.dll 2015-01-30 20:33:46 3EC9043C392B7A335AE4D79A2FF4FB38 616448 ----a-w- C:\Windows\System32\dsuiext.dll 2015-01-30 20:33:45 F35D79E64E1D38AFD0FF5C123B979F15 251904 ----a-w- C:\Windows\System32\authfwcfg.dll 2015-01-30 20:33:45 DB7F4AB85298F3FE522C5512B8B0F56D 397312 ----a-w- C:\Windows\System32\AudioEng.dll 2015-01-30 20:33:45 B2232AE63F84539B3416EDF1B4240A4A 394240 ----a-w- C:\Windows\System32\dsquery.dll 2015-01-30 20:33:45 76928A90BD710A9A0C857CC88262001E 24576 ----a-w- C:\Windows\System32\at.exe 2015-01-30 20:33:45 67C30FAFA58BD7E02A9DA8BE28512934 244224 ----a-w- C:\Windows\System32\audiodev.dll 2015-01-30 20:33:45 4C7D8D9885ACD8E6E8349B14F008A21F 44032 ----a-w- C:\Windows\System32\dssec.dll 2015-01-30 20:33:45 3CD1B69551236977918E60F9543C89A2 28160 ----a-w- C:\Windows\System32\AtBroker.exe 2015-01-30 20:33:44 FC772BA174094D86AA73A65A8AD77047 4595712 ----a-w- C:\Windows\System32\AuthFWSnapin.dll 2015-01-30 20:33:44 F240B31DA00632718CC2392A4D193313 1370624 ----a-w- C:\Windows\System32\Aurora.scr 2015-01-30 20:33:44 30AFC6E6A0012C22A37995291285E3A7 41472 ----a-w- C:\Windows\System32\auditpol.exe 2015-01-30 20:33:44 296937202E4D930AAE98085B99D744D8 274944 ----a-w- C:\Windows\System32\AUDIOKSE.dll 2015-01-30 20:33:44 0ADED25D371AE14665CE514E413988E7 509952 ----a-w- C:\Windows\System32\AuthFWGP.dll 2015-01-30 20:33:42 F31EEBC1A1C81FD04005489CC3DCDFE7 68096 ----a-w- C:\Windows\System32\basesrv.dll 2015-01-30 20:33:42 CCF1D8BB8FC6FE26BDCA234F3E28CE81 117760 ----a-w- C:\Windows\System32\bcdsrv.dll 2015-01-30 20:33:42 BF6FCD049C5FBB3FD967B27B6341E6E3 12800 ----a-w- C:\Windows\System32\batt.dll 2015-01-30 20:33:42 A4781E0F9DE69140110C8BD5F05B5059 334336 ----a-w- C:\Windows\System32\bcdedit.exe 2015-01-30 20:33:42 9CF3F19F2E147C62C3384DBE2A1F91AA 192000 ----a-w- C:\Windows\System32\bitsadmin.exe 2015-01-30 20:33:42 29D678CBCE9BEE878971ACE41E9EEE47 48128 ----a-w- C:\Windows\System32\bcdprov.dll 2015-01-30 20:33:41 D89FFFBE0379D5359F7E49E1155D83E6 28160 ----a-w- C:\Windows\System32\AzSqlExt.dll 2015-01-30 20:33:41 322614D469D1B4268DBBE45DA13DBF05 103936 ----a-w- C:\Windows\System32\AuxiliaryDisplayApi.dll 2015-01-30 20:33:40 F34702E751418E7261B94B23D54C0E24 81408 ----a-w- C:\Windows\System32\ACW.exe 2015-01-30 20:33:40 CA47571D86040FF7CBF40A125759DAFB 167424 ----a-w- C:\Windows\System32\ActionQueue.dll 2015-01-30 20:33:40 C9244BCAC83B259B920BBEE18A97BFE1 12800 ----a-w- C:\Windows\System32\avrt.dll 2015-01-30 20:33:40 9F95771A5E04C4A5E9BB2C128B1E2526 317440 ----a-w- C:\Windows\System32\azroleui.dll 2015-01-30 20:33:39 8D78BA30DB4AE040A52EDEE725782715 326656 ----a-w- C:\Windows\System32\actxprxy.dll 2015-01-30 20:33:39 784D3FCC1AB109C69C88A20AB64438D4 1405952 ----a-w- C:\Windows\System32\ActiveContentWizard.dll 2015-01-30 20:33:39 6468C3FF6D0C7874FA8C619AF3E23B22 204800 ----a-w- C:\Windows\System32\activeds.dll 2015-01-30 20:33:39 2EF881D190A41E02CC7EB25DB7D3B01B 111616 ----a-w- C:\Windows\System32\activeds.tlb 2015-01-30 20:33:38 D016A58A7ECA0A34647EDEC5113C8C7A 72704 ----a-w- C:\Windows\System32\admparse.dll 2015-01-30 20:33:38 09C91E1F199C53E1114396B59B3B4D9E 127488 ----a-w- C:\Windows\System32\aclui.dll 2015-01-30 20:33:37 6ED0090E409F635CE7203CA36D0B3C10 219648 ----a-w- C:\Windows\System32\apircl.dll 2015-01-30 20:33:37 5859457757FC4E44BE355185CD3DC67B 24064 ----a-w- C:\Windows\System32\amxread.dll 2015-01-30 20:33:37 570D1DA9BD508C518097F3E6AB13ADDB 70144 ----a-w- C:\Windows\System32\amstream.dll 2015-01-30 20:33:36 6F4AF30005CF55F4B1DF8F4D603F7C4B 198656 ----a-w- C:\Windows\System32\apss.dll 2015-01-30 20:33:35 CE683F9B7482B31D0EC5D04FD7533F54 185856 ----a-w- C:\Windows\System32\adsldp.dll 2015-01-30 20:33:35 C77F71AA825263541965846EDD9E8729 128000 ----a-w- C:\Windows\System32\advpack.dll 2015-01-30 20:33:35 C6D704C7F0434DC791AAC37CAC4B6E14 33280 ----a-w- C:\Windows\System32\appinfo.dll 2015-01-30 20:33:35 A1545B731579895D8CC44FC0481C1192 59392 ----a-w- C:\Windows\System32\alg.exe 2015-01-30 20:33:35 3DB66361DDBB1A017EDE92A68F940DCB 257024 ----a-w- C:\Windows\System32\adsnt.dll 2015-01-30 20:33:34 A99871BA522CB2539AE275AC18CACC8F 71680 ----a-w- C:\Windows\System32\cabinet.dll 2015-01-30 20:33:34 83C807E149FE18D1160B86C2A7D036A8 91648 ----a-w- C:\Windows\System32\btpanui.dll 2015-01-30 20:33:34 26DBDDEB53BA845451DF191FBE3459B9 879616 ----a-w- C:\Windows\System32\Bubbles.scr 2015-01-30 20:33:33 A36E1A0CB17DDDF6E0BF3CEA4E7A52EC 487936 ----a-w- C:\Windows\System32\catsrvut.dll 2015-01-30 20:33:32 C5546A8532BB62F20FC1744481B9CB5F 17920 ----a-w- C:\Windows\System32\capisp.dll 2015-01-30 20:33:32 3171813CC62E61264B45F9902CD32FDA 25600 ----a-w- C:\Windows\System32\cacls.exe 2015-01-30 20:33:32 169F4763D943FB712948292066318635 451072 ----a-w- C:\Windows\System32\catsrv.dll 2015-01-30 20:33:31 F0821E18CAFC7135CCF6DE3D306E97CD 24120 ----a-w- C:\Windows\System32\BOOTVID.DLL 2015-01-30 20:33:31 601A53B57FEC5AB4A2D9250BFE355FC8 2560 ----a-w- C:\Windows\System32\bootstr.dll 2015-01-30 20:33:31 4CE5B3256751B646EDF60C4893937304 52736 ----a-w- C:\Windows\System32\brcplsdw.dll 2015-01-30 20:33:31 4BF118416F0E4C142FF51CAE0288E489 15360 ----a-w- C:\Windows\System32\bridgeunattend.exe 2015-01-30 20:33:30 A3629A0C4226F9E9C72FAAEEBC3AD33C 81920 ----a-w- C:\Windows\System32\browser.dll 2015-01-30 20:33:30 8D1E70DB1EBC670A94DF954FC4A51676 6656 ----a-w- C:\Windows\System32\CertEnrollCtrl.exe 2015-01-30 20:33:28 83ADC95272B048DFD1563E0EA0F269FB 225792 ----a-w- C:\Windows\System32\cewmdm.dll 2015-01-30 20:33:28 1A09CB187440993FA5E24DE1EEB7B916 17408 ----a-w- C:\Windows\System32\cfgmgr32.dll 2015-01-30 20:33:28 10211A7098EC0ABE137E9625E6B75434 47104 ----a-w- C:\Windows\System32\cfgbkend.dll 2015-01-30 20:33:27 CDA90F015B5EDEF9463A672B7C10654E 805888 ----a-w- C:\Windows\System32\cdosys.dll 2015-01-30 20:33:25 D5658BB2A9E26497F37C0927205A10DD 81408 ----a-w- C:\Windows\System32\bootcfg.exe 2015-01-30 20:33:17 5A005676A0252FBAFEC8F68162EB9F88 36352 ----a-w- C:\Windows\System32\imgutil.dll 2015-01-30 20:33:15 8FC5891A577F4F125874A0179D1FA749 705536 ----a-w- C:\Windows\System32\imagesp1.dll 2015-01-30 20:33:14 8C55A6333DAFAB88E44C040C55179274 153088 ----a-w- C:\Windows\System32\imagehlp.dll 2015-01-30 20:33:12 12E8A79644955A6D1D371CBD7DA7C871 52736 ----a-w- C:\Windows\System32\inetmib1.dll 2015-01-30 20:33:11 F2BA6F31E7DAC6523DBA1E5193F57B48 11776 ----a-w- C:\Windows\System32\InfDefaultInstall.exe 2015-01-30 20:33:08 7A5F8218325F00396DAEA2F985FA0ECB 18944 ----a-w- C:\Windows\System32\ias.dll 2015-01-30 20:33:08 2A7AF088B95D3A0B01A5C4BF49388A0B 17408 ----a-w- C:\Windows\System32\iashost.exe 2015-01-30 20:33:07 0C84B6AFFA7486422235584110D7176F 15872 ----a-w- C:\Windows\System32\icaapi.dll 2015-01-30 20:33:05 3BEF600B09D963E7A05959038061F919 167936 ----a-w- C:\Windows\System32\iexpress.exe 2015-01-30 20:33:04 F2F627E24FC6ADF67526840D68A3544D 180736 ----a-w- C:\Windows\System32\ieui.dll 2015-01-30 20:33:04 EE3ECC1BC7CFE6B121291F85CA1831C4 123392 ----a-w- C:\Windows\System32\ifsutil.dll 2015-01-30 20:33:04 7FDD0F988ED5EE0940FD6B6935FDEEA8 44544 ----a-w- C:\Windows\System32\iernonce.dll 2015-01-30 20:33:04 4546EAA7EBE7C035FED0FD9519C69A11 69120 ----a-w- C:\Windows\System32\iesetup.dll 2015-01-30 20:33:02 FB1348532894FD792278DBF3B6A625D6 13824 ----a-w- C:\Windows\System32\icsunattend.exe 2015-01-30 20:33:02 D1AA18D4C77734A04FF19C34CAD414B9 26112 ----a-w- C:\Windows\System32\idndl.dll 2015-01-30 20:33:02 7BFE0195B13260AC2C9E574F9CEC3DEA 142336 ----a-w- C:\Windows\System32\icsfiltr.dll 2015-01-30 20:33:02 76543EEBCC6DC4D0063BE2C75CE86733 27136 ----a-w- C:\Windows\System32\icacls.exe 2015-01-30 20:33:02 2C7B4E944A48B9A07B7BF2AB262F197E 215040 ----a-w- C:\Windows\System32\icm32.dll 2015-01-30 20:33:02 1326580EB728C28DB5AF9F1F77609779 63488 ----a-w- C:\Windows\System32\icardie.dll 2015-01-30 20:33:02 0C896EA5979BDA2D96244F0A683F806E 153088 ----a-w- C:\Windows\System32\ieakeng.dll 2015-01-30 20:33:02 08CCE3147B94F07C0E08AD990815DE5B 70656 ----a-w- C:\Windows\System32\ie4uinit.exe 2015-01-30 20:33:01 E5E2B1E813F5586267EE6E594E0E2F03 78336 ----a-w- C:\Windows\System32\ieencode.dll 2015-01-30 20:33:01 57326C19D26A51C15DC44D543893B70E 87552 ----a-w- C:\Windows\System32\icfupgd.dll 2015-01-30 20:32:59 A952D0DED445F26AEFCF593A935AB300 289792 ----a-w- C:\Windows\System32\hnetcfg.dll 2015-01-30 20:32:59 9D6196134EF28C11CA48FB06171BCFC3 14848 ----a-w- C:\Windows\System32\hnetmon.dll 2015-01-30 20:32:59 782C8019C89920A77B1907AD3B4C8FF9 21504 ----a-w- C:\Windows\System32\HotStartUserAgent.dll 2015-01-30 20:32:59 70F60DE5F06CDF8E0B8B48E3BCE82987 83968 ----a-w- C:\Windows\System32\hlink.dll 2015-01-30 20:32:54 97AED7FC6C2B38F34CA1A3C10D2F5A60 144909 ----a-w- C:\Windows\System32\fsmgmt.msc 2015-01-30 20:32:53 FC51A0C86E48EDEF589D0F882FA30FC6 202240 ----a-w- C:\Windows\System32\framedyn.dll 2015-01-30 20:32:53 F78FDA952245ECBE6DC03CBEDD86C1CA 11776 ----a-w- C:\Windows\System32\framebuf.dll 2015-01-30 20:32:53 67BB7141F7F5F37411F796943B3418B6 204800 ----a-w- C:\Windows\System32\framedynos.dll 2015-01-30 20:32:53 2D5DC9A16B7BEB3349B86C718D9DD28C 50688 ----a-w- C:\Windows\System32\fphc.dll 2015-01-30 20:32:53 049065B767519D7A6AC351397136877D 55296 ----a-w- C:\Windows\System32\fsutil.exe 2015-01-30 20:32:52 060D77BFD6076EFD7029DB2B3F63B202 54272 ----a-w- C:\Windows\System32\fwcfg.dll 2015-01-30 20:32:51 8FD2D3100B64D307E6132069F442AFE1 16896 ----a-w- C:\Windows\System32\grb.rs 2015-01-30 20:32:51 187B1207C85298BA8A07E29746F6DB17 69120 ----a-w- C:\Windows\System32\GuidedHelp.dll 2015-01-30 20:32:51 01CA5388F3991B9AF886FE5FBDCE4E5C 15872 ----a-w- C:\Windows\System32\hcrstco.dll 2015-01-30 20:32:49 627AFB8E607DF6DE6E0D81FFDC5E4C4C 67072 ----a-w- C:\Windows\System32\HelpPaneProxy.dll 2015-01-30 20:32:49 05B6A5CE1C7767C32DF35966107CB1EC 523776 ----a-w- C:\Windows\System32\hhctrl.ocx 2015-01-30 20:32:48 EF5219A8CABC82F50FB96BBD9D12C8C1 45568 ----a-w- C:\Windows\System32\g711codc.ax 2015-01-30 20:32:48 BDBA1F70DA1CED706768E7E1378899E0 65024 ----a-w- C:\Windows\System32\getmac.exe 2015-01-30 20:32:48 5DA8400A6310992A3DD57A6345FBBD39 50176 ----a-w- C:\Windows\System32\gacinstall.dll 2015-01-30 20:32:48 4599D028A0CA8B54555CF72345940B45 12198 ----a-w- C:\Windows\System32\gatherWiredInfo.vbs 2015-01-30 20:32:48 38EF9CCCAFD85779CEF7B8F5049EA4CA 4240384 ----a-w- C:\Windows\System32\GameUXLegacyGDFs.dll 2015-01-30 20:32:47 8BD624B72E81E24F8A551D51A6F8F71D 56320 ----a-w- C:\Windows\System32\graftabl.com 2015-01-30 18:36:04 A71978FEA56FDCDBE762C4DFB71661F9 296064 ----a-w- C:\Windows\System32\FNTCACHE.DAT 2015-01-30 09:43:12 FC7B97167B00E37735A1C62BB1DB4018 71344 ----a-w- C:\Windows\System32\FlashPlayerCPLApp.cpl 2015-01-30 09:43:12 54044A3206F5F32E2890F720115AC895 701616 ----a-w- C:\Windows\System32\FlashPlayerApp.exe 2015-01-30 09:11:52 2321379B7924CD3F50D95A25FCC79EFC 18432 ----a-w- C:\Windows\System32\amcompat.tlb 2015-01-30 09:11:46 EC28527CEA47E0695524D66E7D966648 4096 ----a-w- C:\Windows\System32\dxmasf.dll 2015-01-29 21:12:01 FB69A3E9AAD1EF99E5DCF6DEF8F3B821 34304 ----a-w- C:\Windows\System32\atmlib.dll 2015-01-29 21:12:01 EF764E33878B3A4A9E5A2FB5D0D031D0 10240 ----a-w- C:\Windows\System32\dciman32.dll 2015-01-29 21:12:01 EB0E02749CE5C488741C9A0ABEAB5DEC 23552 ----a-w- C:\Windows\System32\lpk.dll 2015-01-29 21:12:01 9AD98622A6CCF68F5A427DE7A8E63D1A 72704 ----a-w- C:\Windows\System32\fontsub.dll 2015-01-29 21:12:01 0A4F65D5C519D761F6FA77215B1242CF 289792 ----a-w- C:\Windows\System32\atmfd.dll 2015-01-29 21:08:41 E6EDFE3DB66028E4455DF14C25D1B3D4 10240 ----a-w- C:\Windows\System32\finger.exe 2015-01-29 21:08:41 7015022E8158E382A6AC73912B456ECA 19968 ----a-w- C:\Windows\System32\ARP.EXE 2015-01-29 21:08:41 60840945586A62FCFFD6C3597F8035E5 8704 ----a-w- C:\Windows\System32\HOSTNAME.EXE 2015-01-29 21:05:44 C08178DB25AA6BDD033A7BCEE51926C2 127488 ----a-w- C:\Windows\System32\L2SecHC.dll 2015-01-29 21:05:39 956481EDE95CBF973D0192F980DDA4A6 15181 ----a-w- C:\Windows\System32\gatherWirelessInfo.vbs 2015-01-29 21:01:12 EFD23147B334B686E614A9B8806DBAA6 98816 ----a-w- C:\Windows\System32\mfps.dll 2015-01-29 21:01:12 A5C978DD5B123D6070B2076FF3B36600 2048 ----a-w- C:\Windows\System32\mferror.dll 2015-01-29 21:01:12 8F5F5038465559C754D0C72FF74660D4 24576 ----a-w- C:\Windows\System32\mfpmp.exe 2015-01-29 21:01:12 8BCCD8E66C94135E88D401F0331B6DEF 2868224 ----a-w- C:\Windows\System32\mf.dll 2015-01-29 20:56:36 409F36C8BD06FCE184631EB4142B009A 71680 ----a-w- C:\Windows\System32\atl.dll 2015-01-29 20:51:50 11CBE5E2940FC6CBD041779B0F707E6F 136192 ----a-w- C:\Windows\System32\aaclient.dll 2015-01-29 20:42:11 3F5F5A4D358126FA69C79FB15A4878B8 623616 ----a-w- C:\Windows\System32\localspl.dll 2015-01-29 20:38:39 AA01497884F9CBAC89470120AF78D2B1 499712 ----a-w- C:\Windows\System32\kerberos.dll 2015-01-29 20:38:38 3978F3540329E16C0AC3BCF677E5669F 9728 ----a-w- C:\Windows\System32\lsass.exe 2015-01-29 20:38:38 306AD1920492A43FC14CC3579C404D3F 1259008 ----a-w- C:\Windows\System32\lsasrv.dll 2015-01-29 20:35:04 A8E57A33670E127C7D9E6DAB9863A857 6656 ----a-w- C:\Windows\System32\kbd106n.dll 2015-01-29 20:27:45 8A64A3F68F0E24917759852C842DCD74 62464 ----a-w- C:\Windows\System32\l3codeca.acm 2015-01-29 20:27:45 0857BDD856888D78E6E991CDDA49A4B8 220672 ----a-w- C:\Windows\System32\l3codecp.acm 2015-01-29 20:27:12 462D705964D0E70DFDADDFCC3F5FAA6D 512000 ----a-w- C:\Windows\System32\jscript.dll 2015-01-29 20:26:37 1998BD97F950680BB55F55A7244679C2 200704 ----a-w- C:\Windows\System32\iphlpsvc.dll 2015-01-29 20:24:51 FE6EC12E560E3D290A109F7E656FB839 98304 ----a-w- C:\Windows\System32\cabview.dll 2015-01-29 20:20:50 64B0D18454E65B61B39D3704A9C8EA4D 84480 ----a-w- C:\Windows\System32\INETRES.dll 2015-01-29 20:19:13 F86293D93760C70ADF4F19E66E3FA5E8 30720 ----a-w- C:\Windows\System32\httpapi.dll 2015-01-29 20:14:30 9EFDF7F0153C066BE619450E3D5D59DD 91136 ----a-w- C:\Windows\System32\avifil32.dll 2015-01-29 20:14:30 928C90E02E05244D2290C1551DF732C8 65024 ----a-w- C:\Windows\System32\avicap32.dll 2015-01-29 20:14:30 49481223D2451181266FD6BA51ACACAC 82944 ----a-w- C:\Windows\System32\mciavi32.dll 2015-01-29 20:14:29 A613A29FB640FB2E45DA418C396D186C 50176 ----a-w- C:\Windows\System32\iyuv_32.dll ====== C:\Windows\system32\drivers ===== 2015-01-30 22:59:42 EEC7EE5675294B03E88AA868540007C1 113664 ----a-w- C:\Windows\System32\drivers\rmcast.sys 2015-01-30 22:59:41 D9225D107E40D0FA5C5069446759C8E9 33280 ----a-w- C:\Windows\System32\drivers\RNDISMP.sys 2015-01-30 22:59:28 99514FAA8DF93D34B5589187DB3AA0BA 72192 ----a-w- C:\Windows\System32\drivers\pacer.sys 2015-01-30 22:59:28 941DC1D19E7E8620F40BBC206981EFDB 149480 ----a-w- C:\Windows\System32\drivers\pci.sys 2015-01-30 22:59:28 6429D10C5D149AC9EB2D95052A390CFF 43496 ----a-w- C:\Windows\System32\drivers\pciidex.sys 2015-01-30 22:59:28 57389FA59A36D96B3EB09D0CB91E9CDC 54248 ----a-w- C:\Windows\System32\drivers\partmgr.sys 2015-01-30 22:59:28 218286724EC530FF252648369E05B090 167936 ----a-w- C:\Windows\System32\drivers\portcls.sys 2015-01-30 22:59:28 1636D43F10416AEB483BC6001097B26C 14312 ----a-w- C:\Windows\System32\drivers\pciide.sys 2015-01-30 22:59:24 D36F239D7CCE1931598E8FB90A0DBC26 35328 ----a-w- C:\Windows\System32\drivers\npfs.sys 2015-01-30 22:59:22 6A4A98CEE84CF9E99564510DDA4BAA47 1083880 ----a-w- C:\Windows\System32\drivers\ntfs.sys 2015-01-30 22:59:14 85C44FDFF9CF7E72A40DCB7EC06A4416 148480 ----a-w- C:\Windows\System32\drivers\nwifi.sys 2015-01-30 22:59:11 509A98DD18AF4375E1FC40BC175F1DEF 41472 ----a-w- C:\Windows\System32\drivers\raspppoe.sys 2015-01-30 22:59:11 2005F4A1E05FA09389AC85840F0A9E4D 69120 ----a-w- C:\Windows\System32\drivers\rassstp.sys 2015-01-30 22:59:09 B14C9D5B9ADD2F84F70570BBBFAA7935 225280 ----a-w- C:\Windows\System32\drivers\rdbss.sys 2015-01-30 22:59:09 30BFBDFB7F95559EDE971F9DDB9A00BA 180736 ----a-w- C:\Windows\System32\drivers\rdpwd.sys 2015-01-30 22:58:29 7F64EA048DCFAC7ACF8B4D7B4E6FE371 141288 ----a-w- C:\Windows\System32\drivers\ecache.sys 2015-01-30 22:58:21 C67EBF9C05531C406E1E079FF669A2E6 27624 ----a-w- C:\Windows\System32\drivers\Dumpata.sys 2015-01-30 22:58:20 FB85F7F69E9B109820409243F578CC4D 626176 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys 2015-01-30 22:58:20 C8D5369BFE193B5FB53337DCE77CE314 76288 ----a-w- C:\Windows\System32\drivers\dxg.sys 2015-01-30 22:58:20 22B408651F9123527BCEE54B4F6C5CAE 136704 ----a-w- C:\Windows\System32\drivers\exfat.sys 2015-01-30 22:58:11 5D4AEFC3386920236A548271F8F1AF6A 53736 ----a-w- C:\Windows\System32\drivers\disk.sys 2015-01-30 22:58:11 494075282E23D838F43A4C9FB7143959 19456 ----a-w- C:\Windows\System32\drivers\Diskdump.sys 2015-01-30 22:58:10 218D8AE46C88E82014F5D73D0236D9B2 75264 ----a-w- C:\Windows\System32\drivers\dfsc.sys 2015-01-30 22:58:07 062452B7FFD68C8C042A6261FE8DFF4A 561152 ----a-w- C:\Windows\System32\drivers\hdaudbus.sys 2015-01-30 22:58:04 5961CADB7CAD938368D2028725EF771D 39424 ----a-w- C:\Windows\System32\drivers\hidclass.sys 2015-01-30 22:58:03 CCA4B519B17E23A00B826C55716809CC 12800 ----a-w- C:\Windows\System32\drivers\hidusb.sys 2015-01-30 22:58:02 01334F9EA68E6877C4EF05D3EA8ABB05 190424 ----a-w- C:\Windows\System32\drivers\fltMgr.sys 2015-01-30 22:58:01 1E9B9A70D332103C52995E957DC09EF8 142848 ----a-w- C:\Windows\System32\drivers\fastfat.sys 2015-01-30 22:57:56 73594DBC99E22958150192EE99BC48CE 99816 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS 2015-01-30 22:57:55 64B0052340B8EC28FA8A56B708AE71CC 109032 ----a-w- C:\Windows\System32\drivers\ataport.sys 2015-01-30 22:57:51 1F05B78AB91C9075565A9D8A4B880BC4 19944 ----a-w- C:\Windows\System32\drivers\atapi.sys 2015-01-30 22:57:49 B1564976D98E91FC764D5DC28A0297DA 93696 ----a-w- C:\Windows\System32\drivers\bridge.sys 2015-01-30 22:57:47 82B296AE1892FE3DBEE00C9CF92F8AC7 265688 ----a-w- C:\Windows\System32\drivers\acpi.sys 2015-01-30 22:57:37 A201207363AA900ABF1A388468688570 273920 ----a-w- C:\Windows\System32\drivers\afd.sys 2015-01-30 22:57:35 36975327EF03949CC378AB01E316B574 35304 ----a-w- C:\Windows\System32\drivers\crashdmp.sys 2015-01-30 22:57:29 6B4BFFB9BECD728097024276430DB314 67072 ----a-w- C:\Windows\System32\drivers\cdrom.sys 2015-01-30 22:57:26 0767B09C74D935A590B4879D14463B64 125928 ----a-w- C:\Windows\System32\drivers\Classpnp.sys 2015-01-30 22:57:13 5457DCFA7C0DA43522F4D9D4049C1472 27112 ----a-w- C:\Windows\System32\drivers\msahci.sys 2015-01-30 22:57:12 82CEA0395524AACFEB58BA1448E8325C 114688 ----a-w- C:\Windows\System32\drivers\mrxdav.sys 2015-01-30 22:57:11 ECD64230A59CBD93C85F1CD1CAB9F3F6 185856 ----a-w- C:\Windows\System32\drivers\netbt.sys 2015-01-30 22:57:11 818F648618AE34F729FDB47EC68345C3 121344 ----a-w- C:\Windows\System32\drivers\ndiswan.sys 2015-01-30 22:57:11 1357274D1883F68300AEADD15D7BBB42 527848 ----a-w- C:\Windows\System32\drivers\ndis.sys 2015-01-30 22:57:11 063EE4D3CB88A14EAB9901875CEE98B1 223208 ----a-w- C:\Windows\System32\drivers\netio.sys 2015-01-30 22:57:10 6A57B5733D4CB702C8EA4542E836B96C 48104 ----a-w- C:\Windows\System32\drivers\mup.sys 2015-01-30 22:57:07 B49456D70555DE905C311BCDA6EC6ADB 161752 ----a-w- C:\Windows\System32\drivers\msrpc.sys 2015-01-30 22:57:05 232FA340531D940AAC623B121A595034 180712 ----a-w- C:\Windows\System32\drivers\msiscsi.sys 2015-01-30 22:56:53 EF73C1E29FBE7B0FD0274BF4394E346A 149504 ----a-w- C:\Windows\System32\drivers\ks.sys 2015-01-30 22:56:52 EDE59EC70E25C24581ADD1FBEC7325F7 17408 ----a-w- C:\Windows\System32\drivers\kbdhid.sys 2015-01-30 22:56:45 A1C100A87D981AD0774FBC0B4B82E913 226304 ----a-w- C:\Windows\System32\drivers\usbport.sys 2015-01-30 22:56:44 4A5C31E2C1646034E6A60EBA4C747FF6 33280 ----a-w- C:\Windows\System32\drivers\watchdog.sys 2015-01-30 22:56:44 23E41B834759917BFD6B9A0D625D0C28 292840 ----a-w- C:\Windows\System32\drivers\volmgrx.sys 2015-01-30 22:56:44 147281C01FCB1DF9252DE2A10D5E7093 226280 ----a-w- C:\Windows\System32\drivers\volsnap.sys 2015-01-30 22:56:34 70A92E46A2F459CDEDE3CA558CB26B6A 52992 ----a-w- C:\Windows\System32\drivers\stream.sys 2015-01-30 22:56:34 47E55AFE1ED1D5AFF09690DB226F4A7A 122344 ----a-w- C:\Windows\System32\drivers\Storport.sys 2015-01-30 22:56:29 7B75299A4D201D6A6533603D6914AB04 66560 ----a-w- C:\Windows\System32\drivers\smb.sys 2015-01-30 22:56:22 A7F8BAD9590ADDC425B4003E94780DFA 684032 ----a-w- C:\Windows\System32\drivers\spsys.sys 2015-01-30 22:56:20 D9728AF68C4C7693CB100B8441CBDEC6 226816 ----a-w- C:\Windows\System32\drivers\udfs.sys 2015-01-30 22:56:19 D06F193F3E9CC3B356DF97F6A43C054A 25856 ----a-w- C:\Windows\System32\drivers\USBCAMD.sys 2015-01-30 22:56:19 830D5D8456B822C1247C1E59B4C464FA 15872 ----a-w- C:\Windows\System32\drivers\usb8023.sys 2015-01-30 22:56:18 EAE017D3AA298374A1967B96C379C5AB 25856 ----a-w- C:\Windows\System32\drivers\USBCAMD2.sys 2015-01-30 22:56:18 79E96C23A97CE7B8F14D310DA2DB0C9B 39936 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2015-01-30 22:56:18 4673BBCB006AF60E7ABDDBE7A130BA42 196096 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2015-01-30 22:56:05 76B06EB8A01FC8624D699E7045303E54 72192 ----a-w- C:\Windows\System32\drivers\tdx.sys 2015-01-30 22:56:05 3CAD38910468EAB9A6479E2F01DB43C7 53224 ----a-w- C:\Windows\System32\drivers\termdd.sys 2015-01-30 20:36:17 E384487CB84BE41D09711C30CA79646C 31288 ----a-w- C:\Windows\System32\drivers\mssmbios.sys 2015-01-30 20:36:17 B572DA05BF4E098D4BBA3A4734FB505B 5504 ----a-w- C:\Windows\System32\drivers\mspqm.sys 2015-01-30 20:36:17 7199C1EEC1E4993CAF96B8C0A26BD58A 6016 ----a-w- C:\Windows\System32\drivers\mstee.sys 2015-01-30 20:36:17 1D373C90D62DDB641D50E55B9E78D65E 5888 ----a-w- C:\Windows\System32\drivers\mspclock.sys 2015-01-30 20:36:12 A9927F4A46B816C92F461ACB90CF8515 22528 ----a-w- C:\Windows\System32\drivers\msfs.sys 2015-01-30 20:36:08 933222B19FF3E7EA5F65517EA1F7D57E 3 ----a-w- C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf 2015-01-30 20:36:06 D8C63D34D9C9E56C059E24EC7185CC07 8192 ----a-w- C:\Windows\System32\drivers\mskssrv.sys 2015-01-30 20:35:58 0F400E306F385C56317357D6DEA56F62 16440 ----a-w- C:\Windows\System32\drivers\msisadrv.sys 2015-01-30 20:35:42 C5DBBCDA07D780BDA9B685DF333BB41E 4608 ----a-w- C:\Windows\System32\drivers\null.sys 2015-01-30 20:35:42 609773E344A97410CE4EBF74A8914FCF 16384 ----a-w- C:\Windows\System32\drivers\nsiproxy.sys 2015-01-30 20:35:40 BCD093A5A6777CF626434568DC7DBA78 35840 ----a-w- C:\Windows\System32\drivers\netbios.sys 2015-01-30 20:35:38 D6973AA34C4D5D76C0430B181C3CD389 16896 ----a-w- C:\Windows\System32\drivers\ndisuio.sys 2015-01-30 20:35:38 71DAB552B41936358F3B541AE5997FB3 49664 ----a-w- C:\Windows\System32\drivers\ndproxy.sys 2015-01-30 20:35:38 0E186E90404980569FB449BA7519AE61 20992 ----a-w- C:\Windows\System32\drivers\ndistapi.sys 2015-01-30 20:35:32 8F5C7426567798E62A3B3614965D62CC 84480 ----a-w- C:\Windows\System32\drivers\luafv.sys 2015-01-30 20:35:22 B271EC02E71271A2DA28B3B7BC4E4F15 18944 ----a-w- C:\Windows\System32\drivers\mcd.sys 2015-01-30 20:35:21 E50A95179211B12946F7E035D60AF560 95744 ----a-w- C:\Windows\System32\drivers\irda.sys 2015-01-30 20:35:21 109C0DFB82C3632FBD11949B73AEEAC9 13312 ----a-w- C:\Windows\System32\drivers\irenum.sys 2015-01-30 20:35:20 224191001E78C89DFA78924C3EA595FF 41472 ----a-w- C:\Windows\System32\drivers\intelppm.sys 2015-01-30 20:35:19 8793643A67B42CEC66490B2A0CF92D68 100864 ----a-w- C:\Windows\System32\drivers\ipnat.sys 2015-01-30 20:35:19 62C265C38769B864CB25B4BCF62DF6C3 47616 ----a-w- C:\Windows\System32\drivers\ipfltdrv.sys 2015-01-30 20:35:18 D1C5883087A0C3F1344D9D55A44901F6 47104 ----a-w- C:\Windows\System32\drivers\lltdio.sys 2015-01-30 20:35:17 37605E0A8CF00CBBA538E753E4344C6E 35384 ----a-w- C:\Windows\System32\drivers\kbdclass.sys 2015-01-30 20:35:15 22241FEBA9B2DEFA669C8CB0A8DD7D2E 64000 ----a-w- C:\Windows\System32\drivers\mpsdrv.sys 2015-01-30 20:35:14 BDAFC88AA6B92F7842416EA6A48E1600 57400 ----a-w- C:\Windows\System32\drivers\mountmgr.sys 2015-01-30 20:35:14 93B8D4869E12CFBE663915502900876F 15872 ----a-w- C:\Windows\System32\drivers\mouhid.sys 2015-01-30 20:35:14 5BF6A1326A335C5298477754A506D263 34360 ----a-w- C:\Windows\System32\drivers\mouclass.sys 2015-01-30 20:35:14 0A9BB33B56E294F686ABB7C1E4E2D8A8 41984 ----a-w- C:\Windows\System32\drivers\monitor.sys 2015-01-30 20:35:04 E13B5EA0F51BA5B1512EC671393D09BA 31744 ----a-w- C:\Windows\System32\drivers\modem.sys 2015-01-30 20:34:51 A7D7EA1771D2ED6F39A8063E79B6C3E8 17408 ----a-w- C:\Windows\System32\drivers\smclib.sys 2015-01-30 20:34:48 8AF3D28A879BF75DB53A0EE7A4289624 19968 ----a-w- C:\Windows\System32\drivers\sermouse.sys 2015-01-30 20:34:30 9C508F4074A39E8B4B31D27198146FAD 60416 ----a-w- C:\Windows\System32\drivers\rspndr.sys 2015-01-30 20:34:27 75E8A6BFA7374ABA833AE92BF41AE4E6 8192 ----a-w- C:\Windows\System32\drivers\rootmdm.sys 2015-01-30 20:34:25 6F5CA34AE885645ACF8A20D564DB976C 142904 ----a-w- C:\Windows\System32\drivers\scsiport.sys 2015-01-30 20:34:22 9F5E0E1926014D17486901C88ECA2DB7 31232 ----a-w- C:\Windows\System32\drivers\qwavedrv.sys 2015-01-30 20:34:22 147D7F9C556D259924351FEB0DE606C3 11776 ----a-w- C:\Windows\System32\drivers\rasacd.sys 2015-01-30 20:34:19 9D91FE5286F748862ECFFA05F8A0710C 6144 ----a-w- C:\Windows\System32\drivers\RDPENCDD.sys 2015-01-30 20:34:18 A214ADBAF4CB47DD2728859EF31F26B0 76288 ----a-w- C:\Windows\System32\drivers\rasl2tp.sys 2015-01-30 20:34:17 ECFFFAEC0C1ECD8DBC77F39070EA1DB1 62976 ----a-w- C:\Windows\System32\drivers\raspptp.sys 2015-01-30 20:34:17 89E59BE9A564262A3FB6C4F4F1CD9899 6144 ----a-w- C:\Windows\System32\drivers\RDPCDD.sys 2015-01-30 20:34:10 99AFC3795B58CC478FBBBCDC658FCB56 14208 ----a-w- C:\Windows\System32\drivers\CmBatt.sys 2015-01-30 20:34:06 6AFEF0B60FA25DE07C0968983EE4F60A 20792 ----a-w- C:\Windows\System32\drivers\compbatt.sys 2015-01-30 20:33:53 A8C0139A884861E3AAE9CFE73B208A9F 58936 ----a-w- C:\Windows\System32\drivers\fileinfo.sys 2015-01-30 20:33:53 0AE429A696AECBC5970E3CF2C62635AE 27648 ----a-w- C:\Windows\System32\drivers\filetrace.sys 2015-01-30 20:33:49 97FEF831AB90BEE128C9AF390E243F80 5632 ----a-w- C:\Windows\System32\drivers\drmkaud.sys 2015-01-30 20:33:49 7BE5A3C671A2CB56E94403BFC2020A0D 130048 ----a-w- C:\Windows\System32\drivers\drmk.sys 2015-01-30 20:33:48 EAAAFEF04FBB45665C9576E525D45A12 13312 ----a-w- C:\Windows\System32\drivers\dxapi.sys 2015-01-30 20:33:43 53B202ABEE6455406254444303E87BE1 17408 ----a-w- C:\Windows\System32\drivers\asyncmac.sys 2015-01-30 20:33:42 67E506B75BD5326A3EC7B70BD014DFB6 6144 ----a-w- C:\Windows\System32\drivers\beep.sys 2015-01-30 20:33:42 2B8A5A8879238C3BA9A89A8E3AC4E45D 28216 ----a-w- C:\Windows\System32\drivers\battc.sys 2015-01-30 20:33:41 9F5F8F2318DFA3974A6F6A5602733929 12288 ----a-w- C:\Windows\System32\drivers\bdasup.sys 2015-01-30 20:33:31 74B442B2BE1260B7588C136177CEAC66 69632 ----a-w- C:\Windows\System32\drivers\bowser.sys 2015-01-30 20:33:27 7ADD03E75BEB9E6DD102C3081D29840A 70144 ----a-w- C:\Windows\System32\drivers\cdfs.sys 2015-01-30 20:33:08 22D56C8184586B7A1F6FA60BE5F5A2BD 54784 ----a-w- C:\Windows\System32\drivers\i8042prt.sys 2015-01-30 20:32:54 65EA8B77B5851854F0C55C43FA51A198 12800 ----a-w- C:\Windows\System32\drivers\fs_rec.sys 2015-01-30 20:32:50 175444D3A01CA45D0E1C5DC5F48DF7CD 25472 ----a-w- C:\Windows\System32\drivers\hidparse.sys 2015-01-30 20:32:26 55201897378CCA7AF8B5EFD874374A26 62464 ----a-w- C:\Windows\System32\drivers\wanarp.sys 2015-01-30 20:32:20 B6F0A7AD6D4BD325FBCD8BAC96CD8D96 503864 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys 2015-01-30 20:32:20 B4FC6DD9167B058E6DBE6CB14ACFA2CB 35896 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys 2015-01-30 20:32:18 E3A3CB253C0EC2494D4A61F5E43A389C 15872 ----a-w- C:\Windows\System32\drivers\ws2ifsl.sys 2015-01-30 20:32:11 AC13CB789D93412106B0FB6C7EB2BCB6 83328 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys 2015-01-30 20:32:11 13B5F255E90624A5BA0441D39CFB6BE2 51200 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys 2015-01-30 20:32:08 2E7255D172DF0B8283CDFB7B433B864E 11264 ----a-w- C:\Windows\System32\drivers\wmiacpi.sys 2015-01-30 20:32:07 C546864EED786304762D030FEBF6B411 17976 ----a-w- C:\Windows\System32\drivers\wmilib.sys 2015-01-30 20:31:42 389C63E32B3CEFED425B61ED92D3F021 29184 ----a-w- C:\Windows\System32\drivers\tdtcp.sys 2015-01-30 20:31:41 77937EFF009AC696B90E09F671F9D0A4 20992 ----a-w- C:\Windows\System32\drivers\tdi.sys 2015-01-30 20:31:41 5DCF5E267BE67A1AE926F2DF77FBCC56 17920 ----a-w- C:\Windows\System32\drivers\tdpipe.sys 2015-01-30 20:31:39 1239FD18895040D97B7CDBC19BC2075E 24576 ----a-w- C:\Windows\System32\drivers\tape.sys 2015-01-30 20:31:29 7AEBDEEF071FE28B0EEF2CDD69102BFF 21048 ----a-w- C:\Windows\System32\drivers\spldr.sys 2015-01-30 20:31:23 7BA58ECF0C0A9A69D44B3DCA62BECF56 15288 ----a-w- C:\Windows\System32\drivers\swenum.sys 2015-01-30 20:31:20 CAF811AE4C147FFCD5B51750C7F09142 73216 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2015-01-30 20:31:20 814D653EFC4D48BE3B04A307ECEFF56F 23552 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2015-01-30 20:31:20 790FDAC6D0C762DF9047C3C625A6FF6C 5888 ----a-w- C:\Windows\System32\drivers\usbd.sys 2015-01-30 20:31:19 2E93AC0A1D8C79D019DB6C51F036636C 25088 ----a-w- C:\Windows\System32\drivers\vga.sys 2015-01-30 20:31:17 C048D2C33D27441A0CDCAAE2651EB03D 110080 ----a-w- C:\Windows\System32\drivers\videoprt.sys 2015-01-30 20:31:17 69503668AC66C77C6CD7AF86FBDF8C43 52792 ----a-w- C:\Windows\System32\drivers\volmgr.sys 2015-01-30 20:31:14 DCF0F056A2E4F52287264F5AB29CF206 23552 ----a-w- C:\Windows\System32\drivers\tssecsrv.sys 2015-01-30 20:31:11 32CFF9F809AE9AED85464492BF3E32D2 34816 ----a-w- C:\Windows\System32\drivers\umbus.sys 2015-01-30 20:31:10 88BD96A1BAEED33EE8BDF9499C07A841 7680 ----a-w- C:\Windows\System32\drivers\umpass.sys 2015-01-29 21:10:01 0C5AB1892AE0FA504218DB094BF6D041 98816 ----a-w- C:\Windows\System32\drivers\srvnet.sys 2015-01-29 21:10:00 0DEBAFCC0E3591FCA34F077CAB62F7F7 302080 ----a-w- C:\Windows\System32\drivers\srv.sys 2015-01-29 21:02:21 454341E652BDF5E01B0F2140232B073E 106496 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys 2015-01-29 21:02:21 2A4901AFF069944FA945ED5BBF4DCDE3 212992 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys 2015-01-29 21:02:21 28B3F1AB44BDD4432C041581412F17D9 79360 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys 2015-01-29 20:38:39 86165728AF9BF72D6442A894FDFB4F8B 439864 ----a-w- C:\Windows\System32\drivers\ksecdd.sys 2015-01-29 20:26:37 CAECC0120AC49E3D2F758B9169872D38 15360 ----a-w- C:\Windows\System32\drivers\TUNMP.SYS 2015-01-29 20:26:37 608C345A255D82A6289C2D468EB41FD7 30720 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys 2015-01-29 20:26:37 48CBE6D53632D0067C2D6B20F90D84CA 904576 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2015-01-29 20:26:37 300DB877AC094FEAB0BE7688C3454A9C 25088 ----a-w- C:\Windows\System32\drivers\tunnel.sys 2015-01-29 20:19:13 F870AA3E254628EBEAFE754108D664DE 411648 ----a-w- C:\Windows\System32\drivers\http.sys 2015-01-29 20:17:24 6B6F3658E0A58C6C50C5F7FBDF3DF633 144896 ----a-w- C:\Windows\System32\drivers\srv2.sys ====== C:\Windows\Tasks ====== 2015-01-30 09:44:51 E390C8A98884F609C5D89AEC6E0B0CA4 1046 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-30 09:44:51 089C0FB06050013ED497E4E2B0733D6D 4042 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2015-01-30 09:44:46 AC9CF4DAB2495C4C471EB015715BA062 3790 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2015-01-30 09:44:46 299A602BFB765C4FD82693D65430F2D6 1042 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-30 09:43:26 81A46B63DD9256E225CCD9971361CFC8 3794 ----a-w- C:\Windows\system32\Tasks\Adobe Flash Player Updater 2015-01-30 09:43:25 DA61E17632A608704595A81940427B20 940 ----a-w- C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-29 21:43:28 E12A86188CC22E372B6E5C4293419976 3190 ----a-w- C:\Windows\system32\Tasks\{2C4EA083-19B8-43AA-9AB6-4FDA6594EBD7} 2015-01-29 21:40:48 C7D3695323BA46168D05CB3897469C91 3166 ----a-w- C:\Windows\system32\Tasks\{545A1C9D-FAE5-48F5-A30B-910A13F71B3C} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2015-01-31 16:29:02 -------- d-----w- C:\Program Files\trend micro 2015-01-31 09:33:32 -------- d-----w- C:\Program Files\Speccy 2015-01-30 08:56:29 -------- d-----w- C:\Program Files\AVG ======= C: ===== ====== C:\Users\alonso1780\AppData\Roaming ====== 2015-01-31 16:20:45 -------- d-----w- C:\Users\alonso1780\AppData\Roaming\Adobe 2015-01-30 15:20:52 BB2D003375AD9572C9AF34CA1D8F340D 70104 ----a-w- C:\Users\alonso1780\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-30 11:22:57 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Roaming\PeerNetworking 2015-01-30 09:59:13 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Local\Google 2015-01-30 09:03:08 -------- d-----w- C:\Users\alonso1780\AppData\Roaming\AVG2015 2015-01-30 09:02:03 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Roaming\AVG2015 2015-01-30 09:00:55 -------- d-----w- C:\Users\alonso1780\AppData\Roaming\TuneUp Software 2015-01-30 08:56:33 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Local\Avg2015 2015-01-30 08:52:10 -------- d-----w- C:\Users\alonso1780\AppData\Local\Avg2015 ====== C:\Users\alonso1780 ====== 2015-01-31 16:25:50 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\alonso1780\Downloads\RSIT (1).exe 2015-01-30 09:55:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-30 09:00:56 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2015-01-30 08:59:01 -------- d-----w- C:\ProgramData\AVG2015 2015-01-30 08:52:10 -------- d--h--w- C:\ProgramData\Common Files ====== C: exe-files == 2015-01-31 16:31:12 1B4D550099ABB8B091E800157D64602C 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IJEPZ5N.exe 2015-01-31 09:29:10 024542793EF5B061EA2AE16D991D2DD3 4845384 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RJEPZ5N.exe 2015-01-31 09:01:23 B565C4DEB191D63B7AC342502BCE9468 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$I53UPIE.exe 2015-01-31 09:01:16 62B5BC5CCFF00E958AF2A037065795C3 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IJS6YDJ.exe 2015-01-31 09:01:09 9AD0EAF8C0CE4A27C3043D2C86402F6A 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IY35GX1.exe 2015-01-31 08:50:45 F5042B046AE92B0B0F978E65BC3CE62B 5135288 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RY35GX1.exe 2015-01-31 08:50:16 F5042B046AE92B0B0F978E65BC3CE62B 5135288 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$R53UPIE.exe 2015-01-31 08:50:06 F5042B046AE92B0B0F978E65BC3CE62B 5135288 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RJS6YDJ.exe 2015-01-30 22:58:53 949B048F7D17E0BDAFCDA613458DE06A 941056 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe 2015-01-30 22:57:06 D3D1CE8FF30786D50272DA3085149904 408064 ----a-w- C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe 2015-01-30 22:57:03 C667C3CC62B3E0FBC2011265EFABED0C 783872 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\InkWatson.exe 2015-01-30 22:56:14 7122B0AA2212B07BBFC49BD22215BF3B 304128 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe 2015-01-30 20:35:21 BC560F8CC62571E47C95F289166D0E3A 159744 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\IpsOptInSrv.exe 2015-01-30 20:35:19 B19B204CABFA9F225618EDA4A90C1A2C 198656 ----a-w- C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe 2015-01-30 17:06:42 D8744589C28B3AA5A6D27AE01B853240 47560 ----a-w- C:\948a64aea81f67cdc3f1b4397e\spreview.exe 2015-01-30 17:06:42 8AA6C43CA7AA28E8851C9224E2E21BE5 131016 ----a-w- C:\948a64aea81f67cdc3f1b4397e\spinstall.exe 2015-01-30 09:11:16 DA676F1DD9265DCF6035E218E09EAC22 7140600 ----a-w- C:\Program Files\AVG\AVG2015\Notification\Launcher.exe === C: other files == 2015-01-31 21:27:36 ADFA9248EEA2EB1FC8B03DC291B328CA 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$I3SCT82.zip 2015-01-31 21:27:08 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$R3SCT82.zip 2015-01-31 21:25:54 7A22D84B6F00B3A613E1C894B8FDDBB0 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IIYXBXE.zip 2015-01-31 21:25:48 164B80F2774CC32F2CD708585C3CCC84 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IIHGRZX.zip 2015-01-31 21:25:40 318CCA1687C1974681E9A5A9BC8FB446 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IAWLS4J.zip 2015-01-31 21:25:31 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RIYXBXE.zip 2015-01-31 21:25:24 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RAWLS4J.zip 2015-01-31 21:25:18 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RIHGRZX.zip 2015-01-31 21:23:57 7123D845021AC7934BA7EAAF0C29918F 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IFIBMP8.zip 2015-01-31 21:23:35 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RFIBMP8.zip 2015-01-31 21:09:22 84F09CD3D5592E9B19A0C9E49DFCAF05 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$I2KO9ZQ.zip 2015-01-31 21:08:48 034FD3ADC68B4C9EED2F148E3E535D0B 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$IGWJG9A.zip 2015-01-31 21:07:58 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$RGWJG9A.zip 2015-01-31 21:07:58 7748D56FE1880839E11F99A36F090747 4134156 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-758546736-2328884439-20848859-1000\$R2KO9ZQ.zip 2015-01-30 20:51:57 8E64DFB5944E55B8A200686037925BF6 2048 ----a-w- C:\Windows\Boot\DVD\PCAT\etfsboot.com ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-758546736-2328884439-20848859-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ALaunch"="C:\Acer\ALaunch\AlaunchClient.exe" "RtHDVCpl"="RtHDVCpl.exe" "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" "IS CfgWiz"="C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE REBOOT" "osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "BisonInst0402"="C:\Windows\BR040286.exe" "LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" "AVG_UI"="C:\Program Files\AVG\AVG2015\avgui.exe /TRAYONLY" "Skytel"="Skytel.exe" "Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" ==== Startup Folders ====================== 2007-09-12 13:20:59 1493 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [30-01-2015 10:43] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [30-01-2015 10:43] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [30-01-2015 10:43] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] ==== Chromium Look ====================== Google Docs - alonso1780\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - alonso1780\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - alonso1780\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - alonso1780\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Google Wallet - alonso1780\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - alonso1780\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.nl/" "SEARCH PAGE"="http://uk.rd.yahoo.com/customize/ycomp/defaults/sp/*http://uk.yahoo.com" "SearchMigratedDefaultURL"="http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://nl.intl.acer.yahoo.com" "Default_Page_URL"="http://nl.intl.acer.yahoo.com" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] @="http://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{EF5A5D2B-C91F-475D-95BC-3A584B1AF29C}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EF5A5D2B-C91F-475D-95BC-3A584B1AF29C}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "SEARCH PAGE"="http://go.microsoft.com/fwlink/?LinkId=54896" "SearchMigratedDefaultURL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.google.nl/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\15CC353DD034F6C4B9E72500D31A0EA5 deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D353CC51-430D-4C6F-9B7E-52003DA1E05A} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\15CC353DD034F6C4B9E72500D31A0EA5 deleted successfully ==== Empty IE Cache ====================== C:\Users\alonso1780\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\alonso1780\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT0HU1ME will be deleted at reboot C:\Users\alonso1780\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\alonso1780\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=3 folders=0 51526290 bytes) ==== Empty Temp Folders ====================== C:\Users\alonso1780\AppData\Local\Temp will be emptied at reboot C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\ALONSO~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\alonso1780\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Users\alonso1780\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT0HU1ME" not found ==== EOF on za 31-01-2015 at 23:30:38,02 ======================