Logfile of random's system information tool 1.10 (written by random/random) Run by Qtera69 at 2015-03-19 11:10:02 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 173 GB (57%) free of 305 GB Total RAM: 3955 MB (30% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:10:07, on 19/03/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17689) Boot mode: Normal Running processes: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files\trend micro\Qtera69.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office15\URLREDIR.DLL O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM\..\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user') O4 - Startup: Setup.lnk = C:\ProgramData\{73074b2e-c83e-8406-7307-74b2ec832cbb}\Setup.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13374 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS "c:\Program Files\Microsoft Security Client\MsMpEng.exe" C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs "C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe" atieclxx "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS C:\Windows\system32\svchost.exe -k NetworkService "C:\Windows\system32\Dwm.exe" C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\Explorer.EXE "taskhost.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" "c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe" "C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3 "C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe" "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray "C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe" "C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe" "C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe" C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\TODDSrv.exe "C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe" "C:\Program Files\TOSHIBA\TECO\TecoService.exe" "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" "C:\Program Files\TOSHIBA\TECO\Teco.exe" /r C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\wbem\wmiprvse.exe WLIDSvcM.exe 2556 "C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe" "C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe" "C:\Program Files\iTunes\iTunesHelper.exe" "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac "C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" C:\Windows\system32\wbem\wmiprvse.exe taskeng.exe {B47D2613-BE8E-4675-B050-0761354919E7} "C:\Program Files\iPod\bin\iPodService.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60 "C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe" "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe" C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "c:\Program Files\Microsoft Security Client\NisSrv.exe" "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe" "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe" "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe" "C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" "C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe" "C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe" "C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe" "C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe" C:\Windows\servicing\TrustedInstaller.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6952.0.1892888558\1661273901" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,18,40 --gpu-vendor-id=0x1002 --gpu-device-id=0x68c1 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.712.2.1000 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Freud/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/DevHUPDecayWithHQPRelevanceScoring_HUPDecayDisabled/PasswordGeneration/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/On/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_53/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-ScreencastTargetBitrateOvershoot/Control/WebRTC-SupportVP9/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6952 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6952.1.1847394058\853363728" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Freud/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/DevHUPDecayWithHQPRelevanceScoring_HUPDecayDisabled/PasswordGeneration/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/On/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_53/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/V8CacheOptions/default/VoiceTrigger/Install/WebRTC-ScreencastTargetBitrateOvershoot/Control/WebRTC-SupportVP9/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6952 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6952.2.1011112398\1886498117" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Freud/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp6 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/DevHUPDecayWithHQPRelevanceScoring_HUPDecayDisabled/PasswordGeneration/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/On/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_53/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/V8CacheOptions/default/VoiceTrigger/Install/WebRTC-ScreencastTargetBitrateOvershoot/Control/WebRTC-SupportVP9/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=6952 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="6952.3.1035372369\193183799" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6952.6.1782415239\146055343" --ppapi-flash-args=enable_hw_video_decode=1 --lang=nl --ignored=" --type=renderer " /prefetch:-632637702 "C:\Users\Qtera69\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10 218776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL [2014-01-23 881880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2015-01-21 2334928] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10 153248] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office15\URLREDIR.DLL [2014-01-22 707800] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~4\Office15\GROOVEEX.DLL [2015-01-21 1729744] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-04-22 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C88694-EFFA-4d78-B409-54B7B2535B14}] TOSHIBA Media Controller Plug-in - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-03-19 529784] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "TosNC"=C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [2010-03-19 595816] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-10 2052392] "Toshiba TEMPRO"=C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [2010-02-11 1050072] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-01-12 13874392] "RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-04 1391472] "TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2009-11-05 505696] "HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2009-03-09 52600] "SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 570680] "00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2010-03-03 913720] "SmartFaceVWatcher"=C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [2009-10-19 238080] "TosSENotify"=C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [2010-02-05 709976] "Teco"=C:\Program Files\TOSHIBA\TECO\Teco.exe [2010-04-06 1489760] "TosWaitSrv"=C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [2010-02-23 705368] "TosReelTimeMonitor"=C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [2010-03-03 35672] "TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376] "Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [2010-04-19 136136] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-02-13 169768] "MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "HWSetup"=C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [2010-03-04 423936] "NBAgent"=c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [2010-03-09 1086760] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-15 98304] "KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2009-12-25 34160] "TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2010-02-24 2454840] "ToshibaServiceStation"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [2009-10-06 1294136] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152] C:\Users\Qtera69\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Setup.lnk - C:\ProgramData\{73074b2e-c83e-8406-7307-74b2ec832cbb}\Setup.exe [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLinkedConnections"=1 "SoftwareSASGeneration"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=l3codecp.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "VIDC.FFDS"=ff_vfw.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-03-18 16:07:43 ----D---- C:\Malwarebytes 2015-03-18 16:01:02 ----D---- C:\zoek_backup 2015-03-18 15:53:09 ----D---- C:\rsit 2015-03-18 15:53:09 ----D---- C:\Program Files\trend micro 2015-03-18 14:43:51 ----A---- C:\Windows\SYSWOW64\devcon_x64.exe 2015-03-18 14:43:50 ----D---- C:\Program Files (x86)\Driver Checker 2015-03-18 14:29:05 ----D---- C:\ProgramData\{a001d6a9-cf1e-1a12-a001-1d6a9cf15aa7} 2015-03-18 00:32:00 ----D---- C:\ProgramData\{73074b2e-c83e-8406-7307-74b2ec832cbb} 2015-03-18 00:26:13 ----D---- C:\Program Files (x86)\Hey Girl 2015-03-18 00:23:48 ----D---- C:\ProgramData\{de2184d3-d03c-d886-de21-184d3d03134f} 2015-03-17 16:30:19 ----D---- C:\ProgramData\GridinSoft 2015-03-17 16:16:56 ----D---- C:\AdwCleaner 2015-03-16 15:11:37 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys 2015-03-16 15:10:52 ----A---- C:\Windows\system32\drivers\mwac.sys 2015-03-16 15:10:52 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys 2015-03-16 15:10:51 ----D---- C:\ProgramData\Malwarebytes 2015-03-16 15:10:51 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-03-16 15:10:51 ----A---- C:\Windows\system32\drivers\mbam.sys 2015-03-16 12:37:50 ----D---- C:\Program Files\CCleaner 2015-03-16 12:27:21 ----SD---- C:\Windows\SYSWOW64\Microsoft 2015-03-14 16:44:16 ----D---- C:\Program Files (x86)\TurboSys 2015-03-14 12:39:09 ----D---- C:\Program Files (x86)\SectionStasis 2015-03-14 12:30:43 ----D---- C:\Program Files (x86)\Share on Tumblr 2015-03-14 12:29:40 ----D---- C:\ProgramData\9621959003729763529 2015-03-14 12:28:05 ----D---- C:\ProgramData\{4798ffde-1943-c4d9-4798-8ffde194ff78} 2015-03-12 00:28:04 ----SHD---- C:\Config.Msi 2015-03-11 17:51:42 ----D---- C:\Windows\AutoKMS 2015-03-11 17:46:56 ----D---- C:\Windows\AutoRearm 2015-03-11 17:43:29 ----D---- C:\ProgramData\Microsoft Toolkit 2015-03-11 09:26:55 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-03-11 09:26:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-03-11 09:26:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-03-11 09:26:54 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-03-11 09:26:54 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-03-11 09:26:53 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-03-11 09:26:51 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-03-11 09:26:51 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-03-11 09:26:51 ----A---- C:\Windows\system32\iernonce.dll 2015-03-11 09:26:51 ----A---- C:\Windows\system32\ie4uinit.exe 2015-03-11 09:26:50 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-03-11 09:26:50 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-03-11 09:26:50 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-03-11 09:26:50 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-03-11 09:26:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-03-11 09:26:47 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-03-11 09:26:47 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-03-11 09:26:46 ----A---- C:\Windows\system32\iedkcs32.dll 2015-03-11 09:26:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-03-11 09:26:45 ----A---- C:\Windows\system32\urlmon.dll 2015-03-11 09:26:44 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-03-11 09:26:44 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-03-11 09:26:44 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-03-11 09:26:44 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-03-11 09:26:43 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-03-11 09:26:43 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-03-11 09:26:42 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-03-11 09:26:42 ----A---- C:\Windows\system32\msfeeds.dll 2015-03-11 09:26:42 ----A---- C:\Windows\system32\dxtrans.dll 2015-03-11 09:26:41 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-03-11 09:26:40 ----A---- C:\Windows\system32\iesetup.dll 2015-03-11 09:26:40 ----A---- C:\Windows\system32\ieapfltr.dll 2015-03-11 09:26:38 ----A---- C:\Windows\system32\iertutil.dll 2015-03-11 09:26:37 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-03-11 09:26:36 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-03-11 09:26:36 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-03-11 09:26:35 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-03-11 09:26:35 ----A---- C:\Windows\system32\jsproxy.dll 2015-03-11 09:26:35 ----A---- C:\Windows\system32\ieUnatt.exe 2015-03-11 09:26:34 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-03-11 09:26:33 ----A---- C:\Windows\system32\dxtmsft.dll 2015-03-11 09:26:32 ----A---- C:\Windows\system32\ieui.dll 2015-03-11 09:26:32 ----A---- C:\Windows\system32\ieframe.dll 2015-03-11 09:26:30 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-03-11 09:26:30 ----A---- C:\Windows\system32\mshtmled.dll 2015-03-11 09:26:30 ----A---- C:\Windows\system32\jscript9diag.dll 2015-03-11 09:26:29 ----A---- C:\Windows\system32\jscript9.dll 2015-03-11 09:26:28 ----A---- C:\Windows\system32\wininet.dll 2015-03-11 09:26:28 ----A---- C:\Windows\system32\vbscript.dll 2015-03-11 09:26:27 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-03-11 09:26:26 ----A---- C:\Windows\system32\msrating.dll 2015-03-11 09:26:23 ----A---- C:\Windows\system32\mshtml.dll 2015-03-11 09:26:20 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-03-11 09:26:20 ----A---- C:\Windows\system32\lpk.dll 2015-03-11 09:26:20 ----A---- C:\Windows\system32\atmfd.dll 2015-03-11 09:26:19 ----A---- C:\Windows\SYSWOW64\lpk.dll 2015-03-11 09:26:19 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2015-03-11 09:26:19 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2015-03-11 09:26:19 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-03-11 09:26:19 ----A---- C:\Windows\system32\fontsub.dll 2015-03-11 09:26:19 ----A---- C:\Windows\system32\dciman32.dll 2015-03-11 09:26:19 ----A---- C:\Windows\system32\atmlib.dll 2015-03-11 09:26:11 ----A---- C:\Windows\system32\blackbox.dll 2015-03-11 09:26:10 ----A---- C:\Windows\SYSWOW64\blackbox.dll 2015-03-11 09:26:10 ----A---- C:\Windows\system32\drmv2clt.dll 2015-03-11 09:26:08 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll 2015-03-11 09:26:07 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-03-11 09:26:05 ----A---- C:\Windows\system32\wmp.dll 2015-03-11 09:26:04 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll 2015-03-11 09:26:04 ----A---- C:\Windows\system32\wmdrmsdk.dll 2015-03-11 09:26:03 ----A---- C:\Windows\SYSWOW64\mf.dll 2015-03-11 09:26:02 ----A---- C:\Windows\SYSWOW64\wmp.dll 2015-03-11 09:26:00 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-03-11 09:26:00 ----A---- C:\Windows\system32\drmmgrtn.dll 2015-03-11 09:25:59 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll 2015-03-11 09:25:59 ----A---- C:\Windows\system32\crypt32.dll 2015-03-11 09:25:58 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-03-11 09:25:58 ----A---- C:\Windows\system32\drivers\PEAuth.sys 2015-03-11 09:25:57 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2015-03-11 09:25:56 ----A---- C:\Windows\system32\quartz.dll 2015-03-11 09:25:56 ----A---- C:\Windows\system32\evr.dll 2015-03-11 09:25:54 ----A---- C:\Windows\SYSWOW64\evr.dll 2015-03-11 09:25:54 ----A---- C:\Windows\system32\cryptui.dll 2015-03-11 09:25:53 ----A---- C:\Windows\system32\mfplat.dll 2015-03-11 09:25:52 ----A---- C:\Windows\SYSWOW64\quartz.dll 2015-03-11 09:25:52 ----A---- C:\Windows\SYSWOW64\cryptui.dll 2015-03-11 09:25:52 ----A---- C:\Windows\system32\winresume.exe 2015-03-11 09:25:51 ----A---- C:\Windows\SYSWOW64\mfplat.dll 2015-03-11 09:25:51 ----A---- C:\Windows\system32\pcasvc.dll 2015-03-11 09:25:51 ----A---- C:\Windows\system32\drivers\mountmgr.sys 2015-03-11 09:25:51 ----A---- C:\Windows\system32\cryptsp.dll 2015-03-11 09:25:50 ----A---- C:\Windows\SYSWOW64\cryptsp.dll 2015-03-11 09:25:50 ----A---- C:\Windows\system32\mf.dll 2015-03-11 09:25:49 ----A---- C:\Windows\system32\msscp.dll 2015-03-11 09:25:48 ----A---- C:\Windows\system32\srcore.dll 2015-03-11 09:25:47 ----A---- C:\Windows\system32\winload.exe 2015-03-11 09:25:45 ----A---- C:\Windows\system32\msnetobj.dll 2015-03-11 09:25:44 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2015-03-11 09:25:44 ----A---- C:\Windows\system32\rstrui.exe 2015-03-11 09:25:44 ----A---- C:\Windows\system32\cryptnet.dll 2015-03-11 09:25:44 ----A---- C:\Windows\system32\ci.dll 2015-03-11 09:25:44 ----A---- C:\Windows\system32\audiosrv.dll 2015-03-11 09:25:44 ----A---- C:\Windows\system32\appidsvc.dll 2015-03-11 09:25:43 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2015-03-11 09:25:43 ----A---- C:\Windows\SYSWOW64\msscp.dll 2015-03-11 09:25:43 ----A---- C:\Windows\SYSWOW64\cryptnet.dll 2015-03-11 09:25:43 ----A---- C:\Windows\system32\wintrust.dll 2015-03-11 09:25:42 ----A---- C:\Windows\system32\drivers\appid.sys 2015-03-11 09:25:42 ----A---- C:\Windows\system32\AUDIOKSE.dll 2015-03-11 09:25:42 ----A---- C:\Windows\system32\audiodg.exe 2015-03-11 09:25:41 ----A---- C:\Windows\SYSWOW64\msnetobj.dll 2015-03-11 09:25:41 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2015-03-11 09:25:41 ----A---- C:\Windows\system32\AudioSes.dll 2015-03-11 09:25:40 ----A---- C:\Windows\system32\qdvd.dll 2015-03-11 09:25:39 ----A---- C:\Windows\system32\cryptsvc.dll 2015-03-11 09:25:38 ----A---- C:\Windows\system32\pcadm.dll 2015-03-11 09:25:37 ----A---- C:\Windows\SYSWOW64\AudioEng.dll 2015-03-11 09:25:37 ----A---- C:\Windows\system32\rrinstaller.exe 2015-03-11 09:25:37 ----A---- C:\Windows\system32\AudioEng.dll 2015-03-11 09:25:36 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe 2015-03-11 09:25:36 ----A---- C:\Windows\system32\appidpolicyconverter.exe 2015-03-11 09:25:35 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll 2015-03-11 09:25:35 ----A---- C:\Windows\system32\smss.exe 2015-03-11 09:25:34 ----A---- C:\Windows\SYSWOW64\mfps.dll 2015-03-11 09:25:34 ----A---- C:\Windows\SYSWOW64\appidapi.dll 2015-03-11 09:25:34 ----A---- C:\Windows\system32\msmmsp.dll 2015-03-11 09:25:34 ----A---- C:\Windows\system32\mfps.dll 2015-03-11 09:25:34 ----A---- C:\Windows\system32\appidapi.dll 2015-03-11 09:25:33 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-03-11 09:25:33 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2015-03-11 09:25:33 ----A---- C:\Windows\system32\srclient.dll 2015-03-11 09:25:33 ----A---- C:\Windows\system32\pcawrk.exe 2015-03-11 09:25:33 ----A---- C:\Windows\system32\pcalua.exe 2015-03-11 09:25:32 ----A---- C:\Windows\SYSWOW64\mfpmp.exe 2015-03-11 09:25:32 ----A---- C:\Windows\system32\setbcdlocale.dll 2015-03-11 09:25:32 ----A---- C:\Windows\system32\mfpmp.exe 2015-03-11 09:25:32 ----A---- C:\Windows\system32\EncDump.dll 2015-03-11 09:25:32 ----A---- C:\Windows\system32\csrsrv.dll 2015-03-11 09:25:29 ----A---- C:\Windows\system32\appidcertstorecheck.exe 2015-03-11 09:25:27 ----A---- C:\Windows\SYSWOW64\spwmp.dll 2015-03-11 09:25:27 ----A---- C:\Windows\system32\spwmp.dll 2015-03-11 09:25:27 ----A---- C:\Windows\system32\dxmasf.dll 2015-03-11 09:25:26 ----A---- C:\Windows\SYSWOW64\dxmasf.dll 2015-03-11 09:25:25 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-03-11 09:25:25 ----A---- C:\Windows\system32\pcaevts.dll 2015-03-11 09:25:25 ----A---- C:\Windows\system32\apisetschema.dll 2015-03-11 09:25:22 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2015-03-11 09:25:21 ----A---- C:\Windows\system32\wmploc.DLL 2015-03-11 09:25:18 ----A---- C:\Windows\SYSWOW64\mferror.dll 2015-03-11 09:25:18 ----A---- C:\Windows\system32\mferror.dll 2015-03-11 09:24:32 ----A---- C:\Windows\SYSWOW64\ubpm.dll 2015-03-11 09:24:32 ----A---- C:\Windows\system32\ubpm.dll 2015-03-11 09:24:28 ----A---- C:\Windows\system32\shell32.dll 2015-03-11 09:24:27 ----A---- C:\Windows\SYSWOW64\shell32.dll 2015-03-11 09:24:18 ----A---- C:\Windows\system32\schannel.dll 2015-03-11 09:24:18 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-03-11 09:24:18 ----A---- C:\Windows\system32\drivers\cng.sys 2015-03-11 09:24:17 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-03-11 09:24:17 ----A---- C:\Windows\system32\lsasrv.dll 2015-03-11 09:24:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-03-11 09:24:16 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2015-03-11 09:24:16 ----A---- C:\Windows\system32\kerberos.dll 2015-03-11 09:24:15 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2015-03-11 09:24:15 ----A---- C:\Windows\system32\wdigest.dll 2015-03-11 09:24:15 ----A---- C:\Windows\system32\ncrypt.dll 2015-03-11 09:24:15 ----A---- C:\Windows\system32\msv1_0.dll 2015-03-11 09:24:14 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2015-03-11 09:24:14 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2015-03-11 09:24:14 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2015-03-11 09:24:14 ----A---- C:\Windows\system32\TSpkg.dll 2015-03-11 09:24:14 ----A---- C:\Windows\system32\sspicli.dll 2015-03-11 09:24:14 ----A---- C:\Windows\system32\lsass.exe 2015-03-11 09:24:13 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-03-11 09:24:13 ----A---- C:\Windows\system32\sspisrv.dll 2015-03-11 09:24:13 ----A---- C:\Windows\system32\credssp.dll 2015-03-11 09:24:13 ----A---- C:\Windows\system32\auditpol.exe 2015-03-11 09:24:12 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-03-11 09:24:12 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-03-11 09:24:12 ----A---- C:\Windows\SYSWOW64\credssp.dll 2015-03-11 09:24:12 ----A---- C:\Windows\system32\secur32.dll 2015-03-11 09:24:11 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-03-11 09:24:11 ----A---- C:\Windows\system32\adtschema.dll 2015-03-11 09:24:10 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-03-11 09:24:10 ----A---- C:\Windows\system32\msaudite.dll 2015-03-11 09:24:09 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-03-11 09:24:09 ----A---- C:\Windows\system32\msobjs.dll 2015-03-11 09:24:02 ----A---- C:\Windows\system32\win32k.sys 2015-03-11 09:24:01 ----A---- C:\Windows\system32\WindowsCodecs.dll 2015-03-11 09:24:00 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2015-03-11 09:23:56 ----A---- C:\Windows\SYSWOW64\msctf.dll 2015-03-11 09:23:56 ----A---- C:\Windows\system32\msctf.dll 2015-03-11 09:23:04 ----A---- C:\Windows\system32\WMPhoto.dll 2015-03-11 09:23:02 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2015-02-27 16:28:00 ----D---- C:\Program Files (x86)\Microsoft Security Client 2015-02-27 16:27:55 ----D---- C:\Program Files\Microsoft Security Client 2015-02-22 12:10:38 ----D---- C:\Users\Qtera69\AppData\Roaming\Apple Computer 2015-02-22 12:10:12 ----DC---- C:\Windows\system32\DRVSTORE 2015-02-22 12:10:12 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys 2015-02-22 12:09:14 ----D---- C:\Program Files (x86)\iTunes 2015-02-22 12:09:13 ----D---- C:\Program Files\iPod 2015-02-22 12:08:56 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-02-22 12:08:56 ----D---- C:\ProgramData\Apple Computer 2015-02-22 12:08:56 ----D---- C:\Program Files\iTunes 2015-02-22 12:07:34 ----D---- C:\Program Files (x86)\Apple Software Update 2015-02-22 12:06:54 ----D---- C:\Program Files\Bonjour 2015-02-22 12:06:54 ----D---- C:\Program Files (x86)\Bonjour 2015-02-22 12:06:22 ----D---- C:\Program Files\Common Files\Apple 2015-02-22 12:05:45 ----D---- C:\ProgramData\Apple 2015-02-21 18:10:35 ----D---- C:\Windows\system32\MRT 2015-02-21 18:10:28 ----A---- C:\Windows\system32\MRT.exe 2015-02-21 12:53:29 ----D---- C:\Program Files (x86)\Adobe 2015-02-21 12:31:45 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information 2015-02-21 12:31:25 ----HD---- C:\ProgramData\CanonBJ 2015-02-21 12:30:41 ----A---- C:\Windows\system32\CNMLMAG.DLL 2015-02-21 10:42:47 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll 2015-02-21 10:42:47 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2015-02-21 10:03:19 ----A---- C:\Windows\SYSWOW64\explorer.exe 2015-02-21 10:03:19 ----A---- C:\Windows\explorer.exe 2015-02-21 10:02:01 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2015-02-21 10:02:01 ----A---- C:\Windows\system32\d3d10warp.dll 2015-02-21 10:01:56 ----A---- C:\Windows\system32\KBDTAT.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\system32\KBDYAK.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\system32\KBDRU1.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\system32\KBDRU.DLL 2015-02-21 10:01:55 ----A---- C:\Windows\system32\KBDBASH.DLL 2015-02-21 10:01:51 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2015-02-21 10:01:51 ----A---- C:\Windows\system32\d2d1.dll 2015-02-21 10:01:37 ----A---- C:\Windows\system32\esent.dll 2015-02-21 10:01:36 ----A---- C:\Windows\SYSWOW64\esent.dll 2015-02-21 10:01:36 ----A---- C:\Windows\system32\fsutil.exe 2015-02-21 10:01:35 ----A---- C:\Windows\system32\drivers\nvraid.sys 2015-02-21 10:01:35 ----A---- C:\Windows\system32\drivers\iaStorV.sys 2015-02-21 10:01:35 ----A---- C:\Windows\system32\drivers\amdxata.sys 2015-02-21 10:01:35 ----A---- C:\Windows\system32\drivers\amdsata.sys 2015-02-21 10:01:34 ----A---- C:\Windows\SYSWOW64\fsutil.exe 2015-02-21 10:01:34 ----A---- C:\Windows\system32\drivers\nvstor.sys 2015-02-21 10:01:33 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS 2015-02-21 09:57:37 ----A---- C:\Windows\system32\spoolsv.exe 2015-02-21 09:57:36 ----A---- C:\Windows\splwow64.exe 2015-02-21 09:33:57 ----D---- C:\Windows\SYSWOW64\Wat 2015-02-21 09:33:57 ----D---- C:\Windows\system32\Wat 2015-02-21 02:59:23 ----A---- C:\Windows\system32\IEUDINIT.EXE 2015-02-21 02:41:01 ----A---- C:\Windows\SYSWOW64\elshyph.dll 2015-02-21 02:40:54 ----A---- C:\Windows\SYSWOW64\jsIntl.dll 2015-02-21 02:40:54 ----A---- C:\Windows\system32\elshyph.dll 2015-02-21 02:40:53 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2015-02-21 02:40:53 ----A---- C:\Windows\SYSWOW64\msls31.dll 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\wextract.exe 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\url.dll 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\pngfilt.dll 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\licmgr10.dll 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\inseng.dll 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\iexpress.exe 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat 2015-02-21 02:40:52 ----A---- C:\Windows\SYSWOW64\icardie.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\occache.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\mshtmler.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\mshta.exe 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\imgutil.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\iepeers.dll 2015-02-21 02:40:51 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll 2015-02-21 02:40:49 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2015-02-21 02:40:49 ----A---- C:\Windows\system32\msls31.dll 2015-02-21 02:40:49 ----A---- C:\Windows\system32\jsIntl.dll 2015-02-21 02:40:48 ----A---- C:\Windows\system32\SetIEInstalledDate.exe 2015-02-21 02:40:48 ----A---- C:\Windows\system32\mshtmler.dll 2015-02-21 02:40:48 ----A---- C:\Windows\system32\msfeedssync.exe 2015-02-21 02:40:48 ----A---- C:\Windows\system32\msfeedsbs.dll 2015-02-21 02:40:48 ----A---- C:\Windows\system32\iesysprep.dll 2015-02-21 02:40:48 ----A---- C:\Windows\system32\IEAdvpack.dll 2015-02-21 02:40:47 ----A---- C:\Windows\system32\wextract.exe 2015-02-21 02:40:47 ----A---- C:\Windows\system32\webcheck.dll 2015-02-21 02:40:47 ----A---- C:\Windows\system32\url.dll 2015-02-21 02:40:47 ----A---- C:\Windows\system32\licmgr10.dll 2015-02-21 02:40:47 ----A---- C:\Windows\system32\inseng.dll 2015-02-21 02:40:47 ----A---- C:\Windows\system32\iexpress.exe 2015-02-21 02:40:47 ----A---- C:\Windows\system32\ieapfltr.dat 2015-02-21 02:40:47 ----A---- C:\Windows\system32\icardie.dll 2015-02-21 02:40:46 ----A---- C:\Windows\system32\pngfilt.dll 2015-02-21 02:40:46 ----A---- C:\Windows\system32\occache.dll 2015-02-21 02:40:46 ----A---- C:\Windows\system32\mshta.exe 2015-02-21 02:40:46 ----A---- C:\Windows\system32\jscript.dll 2015-02-21 02:40:46 ----A---- C:\Windows\system32\imgutil.dll 2015-02-21 02:40:46 ----A---- C:\Windows\system32\iepeers.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2015-02-21 02:26:31 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2015-02-21 02:26:31 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll 2015-02-21 02:26:31 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll 2015-02-21 02:26:31 ----A---- C:\Windows\system32\XpsPrint.dll 2015-02-21 02:26:31 ----A---- C:\Windows\system32\XpsGdiConverter.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\d3d10core.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll 2015-02-21 02:26:30 ----A---- C:\Windows\SYSWOW64\d3d10.dll 2015-02-21 02:26:30 ----A---- C:\Windows\system32\WindowsCodecsExt.dll 2015-02-21 02:26:30 ----A---- C:\Windows\system32\FntCache.dll 2015-02-21 02:26:30 ----A---- C:\Windows\system32\dxgi.dll 2015-02-21 02:26:30 ----A---- C:\Windows\system32\DWrite.dll 2015-02-21 02:26:30 ----A---- C:\Windows\system32\d3d10core.dll 2015-02-21 02:26:30 ----A---- C:\Windows\system32\d3d10.dll 2015-02-21 02:26:29 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll 2015-02-21 02:26:29 ----A---- C:\Windows\SYSWOW64\dxgi.dll 2015-02-21 02:26:29 ----A---- C:\Windows\system32\UIAnimation.dll 2015-02-21 02:26:29 ----A---- C:\Windows\system32\d3d10level9.dll 2015-02-21 02:26:29 ----A---- C:\Windows\system32\d3d10_1core.dll 2015-02-21 02:26:29 ----A---- C:\Windows\system32\d3d10_1.dll 2015-02-21 00:07:53 ----A---- C:\Windows\system32\drivers\WUDFRd.sys 2015-02-21 00:07:53 ----A---- C:\Windows\system32\drivers\WUDFPf.sys 2015-02-21 00:07:52 ----A---- C:\Windows\system32\WUDFSvc.dll 2015-02-21 00:07:51 ----A---- C:\Windows\system32\WUDFPlatform.dll 2015-02-21 00:07:49 ----A---- C:\Windows\system32\WUDFCoinstaller.dll 2015-02-21 00:07:48 ----A---- C:\Windows\system32\WUDFx.dll 2015-02-21 00:07:48 ----A---- C:\Windows\system32\WUDFHost.exe 2015-02-20 23:45:57 ----A---- C:\Windows\system32\drivers\fs_rec.sys 2015-02-20 23:45:55 ----A---- C:\Windows\SYSWOW64\wmi.dll 2015-02-20 23:45:55 ----A---- C:\Windows\system32\wmi.dll 2015-02-20 23:32:48 ----A---- C:\Windows\SYSWOW64\infocardapi.dll 2015-02-20 23:32:48 ----A---- C:\Windows\system32\infocardapi.dll 2015-02-20 23:32:47 ----A---- C:\Windows\SYSWOW64\icardagt.exe 2015-02-20 23:32:47 ----A---- C:\Windows\system32\icardagt.exe 2015-02-20 23:32:43 ----A---- C:\Windows\SYSWOW64\icardres.dll 2015-02-20 23:32:43 ----A---- C:\Windows\system32\icardres.dll 2015-02-20 23:31:57 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe 2015-02-20 23:31:57 ----A---- C:\Windows\system32\TsWpfWrp.exe 2015-02-20 12:05:54 ----A---- C:\Windows\SYSWOW64\wdi.dll 2015-02-20 12:05:54 ----A---- C:\Windows\system32\wdi.dll 2015-02-20 12:05:54 ----A---- C:\Windows\system32\powertracker.dll 2015-02-20 12:05:54 ----A---- C:\Windows\system32\perftrack.dll 2015-02-20 12:02:43 ----A---- C:\Windows\system32\TSWbPrxy.exe 2015-02-20 12:02:41 ----A---- C:\Windows\SYSWOW64\xmllite.dll 2015-02-20 12:02:41 ----A---- C:\Windows\system32\xmllite.dll 2015-02-20 12:02:29 ----A---- C:\Windows\SYSWOW64\msieftp.dll 2015-02-20 12:02:29 ----A---- C:\Windows\system32\msieftp.dll 2015-02-20 12:02:27 ----A---- C:\Windows\system32\odbccu32.dll 2015-02-20 12:02:26 ----A---- C:\Windows\system32\odbccr32.dll 2015-02-20 12:02:26 ----A---- C:\Windows\system32\odbccp32.dll 2015-02-20 12:02:25 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll 2015-02-20 12:02:25 ----A---- C:\Windows\system32\odbctrac.dll 2015-02-20 12:02:24 ----A---- C:\Windows\SYSWOW64\odbccu32.dll 2015-02-20 12:02:24 ----A---- C:\Windows\SYSWOW64\odbccr32.dll 2015-02-20 12:02:24 ----A---- C:\Windows\SYSWOW64\odbccp32.dll 2015-02-20 12:02:22 ----A---- C:\Windows\SYSWOW64\odbctrac.dll 2015-02-20 12:02:20 ----A---- C:\Windows\system32\wwansvc.dll 2015-02-20 12:02:19 ----A---- C:\Windows\system32\wwanprotdim.dll 2015-02-20 12:02:17 ----A---- C:\Windows\system32\comctl32.dll 2015-02-20 12:02:16 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2015-02-20 12:02:16 ----A---- C:\Windows\system32\generaltel.dll 2015-02-20 12:02:15 ----A---- C:\Windows\system32\invagent.dll 2015-02-20 12:02:15 ----A---- C:\Windows\system32\devinv.dll 2015-02-20 12:02:15 ----A---- C:\Windows\system32\appraiser.dll 2015-02-20 12:02:15 ----A---- C:\Windows\system32\aepic.dll 2015-02-20 12:02:15 ----A---- C:\Windows\system32\aeinv.dll 2015-02-20 12:02:14 ----A---- C:\Windows\system32\aepdu.dll 2015-02-20 12:02:11 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll 2015-02-20 12:02:11 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll 2015-02-20 12:02:11 ----A---- C:\Windows\system32\dhcpcsvc6.dll 2015-02-20 12:02:11 ----A---- C:\Windows\system32\dhcpcore6.dll 2015-02-20 12:01:24 ----A---- C:\Windows\system32\CPFilters.dll 2015-02-20 12:01:23 ----A---- C:\Windows\SYSWOW64\CPFilters.dll 2015-02-20 12:01:23 ----A---- C:\Windows\system32\sbe.dll 2015-02-20 12:01:22 ----A---- C:\Windows\SYSWOW64\sbe.dll 2015-02-20 12:01:02 ----A---- C:\Windows\SYSWOW64\ntshrui.dll 2015-02-20 12:01:02 ----A---- C:\Windows\system32\ntshrui.dll 2015-02-20 11:53:05 ----A---- C:\Windows\system32\tquery.dll 2015-02-20 11:53:05 ----A---- C:\Windows\system32\mssrch.dll 2015-02-20 11:52:58 ----A---- C:\Windows\system32\SearchIndexer.exe 2015-02-20 11:52:57 ----A---- C:\Windows\SYSWOW64\tquery.dll 2015-02-20 11:52:57 ----A---- C:\Windows\SYSWOW64\mssrch.dll 2015-02-20 11:52:57 ----A---- C:\Windows\system32\SearchProtocolHost.exe 2015-02-20 11:52:55 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe 2015-02-20 11:52:55 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe 2015-02-20 11:52:55 ----A---- C:\Windows\SYSWOW64\mssph.dll 2015-02-20 11:52:54 ----A---- C:\Windows\system32\SearchFilterHost.exe 2015-02-20 11:52:54 ----A---- C:\Windows\system32\mssvp.dll 2015-02-20 11:52:54 ----A---- C:\Windows\system32\mssphtb.dll 2015-02-20 11:52:54 ----A---- C:\Windows\system32\mssph.dll 2015-02-20 11:52:53 ----A---- C:\Windows\SYSWOW64\mssvp.dll 2015-02-20 11:52:52 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe 2015-02-20 11:52:51 ----A---- C:\Windows\SYSWOW64\mssphtb.dll 2015-02-20 11:52:51 ----A---- C:\Windows\system32\msscntrs.dll 2015-02-20 11:52:50 ----A---- C:\Windows\SYSWOW64\msscntrs.dll 2015-02-20 11:52:16 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2015-02-20 11:52:15 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys 2015-02-20 11:52:15 ----A---- C:\Windows\system32\drivers\mrxsmb.sys 2015-02-20 11:52:12 ----A---- C:\Windows\SYSWOW64\usp10.dll 2015-02-20 11:52:12 ----A---- C:\Windows\system32\usp10.dll 2015-02-20 11:52:08 ----A---- C:\Windows\SYSWOW64\webio.dll 2015-02-20 11:52:08 ----A---- C:\Windows\system32\webio.dll 2015-02-20 11:52:04 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2015-02-20 11:52:04 ----A---- C:\Windows\system32\TSWorkspace.dll 2015-02-20 11:51:30 ----A---- C:\Windows\system32\profsvc.dll 2015-02-20 11:51:09 ----A---- C:\Windows\SYSWOW64\mscorier.dll 2015-02-20 11:51:09 ----A---- C:\Windows\SYSWOW64\dfshim.dll 2015-02-20 11:51:09 ----A---- C:\Windows\system32\mscorier.dll 2015-02-20 11:51:08 ----A---- C:\Windows\SYSWOW64\mscories.dll 2015-02-20 11:51:08 ----A---- C:\Windows\system32\mscories.dll 2015-02-20 11:51:08 ----A---- C:\Windows\system32\dfshim.dll 2015-02-20 11:51:06 ----A---- C:\Windows\SYSWOW64\wer.dll 2015-02-20 11:51:06 ----A---- C:\Windows\system32\wer.dll 2015-02-20 11:51:04 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2015-02-20 11:51:04 ----A---- C:\Windows\system32\imagehlp.dll 2015-02-20 11:51:03 ----A---- C:\Windows\system32\drivers\tcpip.sys 2015-02-20 11:51:02 ----A---- C:\Windows\system32\drivers\netio.sys 2015-02-20 11:51:02 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS 2015-02-20 11:50:42 ----A---- C:\Windows\system32\termsrv.dll 2015-02-20 11:50:15 ----A---- C:\Windows\SYSWOW64\nlaapi.dll 2015-02-20 11:50:15 ----A---- C:\Windows\SYSWOW64\ncsi.dll 2015-02-20 11:50:15 ----A---- C:\Windows\system32\nlasvc.dll 2015-02-20 11:50:11 ----A---- C:\Windows\system32\msxml6.dll 2015-02-20 11:50:10 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2015-02-20 11:50:09 ----A---- C:\Windows\SYSWOW64\msxml6r.dll 2015-02-20 11:50:09 ----A---- C:\Windows\system32\msxml6r.dll 2015-02-20 11:49:40 ----A---- C:\Windows\system32\drivers\portcls.sys 2015-02-20 11:49:40 ----A---- C:\Windows\system32\drivers\drmk.sys 2015-02-20 11:49:34 ----A---- C:\Windows\SYSWOW64\osk.exe 2015-02-20 11:49:34 ----A---- C:\Windows\system32\osk.exe 2015-02-20 11:49:32 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2015-02-20 11:49:20 ----A---- C:\Windows\system32\drivers\ataport.sys 2015-02-20 11:49:12 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll 2015-02-20 11:49:12 ----A---- C:\Windows\SYSWOW64\credui.dll 2015-02-20 11:49:12 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll 2015-02-20 11:49:12 ----A---- C:\Windows\system32\credui.dll 2015-02-20 11:48:57 ----A---- C:\Windows\system32\mfc42u.dll 2015-02-20 11:48:57 ----A---- C:\Windows\system32\mfc42.dll 2015-02-20 11:48:56 ----A---- C:\Windows\SYSWOW64\mfc42.dll 2015-02-20 11:48:55 ----A---- C:\Windows\SYSWOW64\mfc42u.dll 2015-02-20 11:48:28 ----A---- C:\Windows\system32\msxml3.dll 2015-02-20 11:48:27 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2015-02-20 11:48:27 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2015-02-20 11:48:27 ----A---- C:\Windows\system32\msxml3r.dll 2015-02-20 11:48:22 ----A---- C:\Windows\system32\RMActivate_isv.exe 2015-02-20 11:48:21 ----A---- C:\Windows\system32\RMActivate.exe 2015-02-20 11:48:20 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe 2015-02-20 11:48:20 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe 2015-02-20 11:48:20 ----A---- C:\Windows\SYSWOW64\RMActivate.exe 2015-02-20 11:48:19 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2015-02-20 11:48:19 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2015-02-20 11:48:18 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll 2015-02-20 11:48:18 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe 2015-02-20 11:48:18 ----A---- C:\Windows\system32\secproc_isv.dll 2015-02-20 11:48:17 ----A---- C:\Windows\SYSWOW64\secproc.dll 2015-02-20 11:48:17 ----A---- C:\Windows\SYSWOW64\msdrm.dll 2015-02-20 11:48:17 ----A---- C:\Windows\system32\secproc.dll 2015-02-20 11:48:17 ----A---- C:\Windows\system32\msdrm.dll 2015-02-20 11:48:16 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll 2015-02-20 11:48:16 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll 2015-02-20 11:48:16 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2015-02-20 11:48:16 ----A---- C:\Windows\system32\secproc_ssp.dll 2015-02-20 11:48:06 ----A---- C:\Windows\system32\drivers\usbehci.sys 2015-02-20 11:48:06 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2015-02-20 11:48:05 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2015-02-20 11:48:05 ----A---- C:\Windows\system32\drivers\usbport.sys 2015-02-20 11:48:05 ----A---- C:\Windows\system32\drivers\usbohci.sys 2015-02-20 11:48:05 ----A---- C:\Windows\system32\drivers\usbhub.sys 2015-02-20 11:48:05 ----A---- C:\Windows\system32\drivers\usbd.sys 2015-02-20 11:48:03 ----A---- C:\Windows\system32\d3d11.dll 2015-02-20 11:48:02 ----A---- C:\Windows\SYSWOW64\d3d11.dll 2015-02-20 11:48:01 ----A---- C:\Windows\system32\drivers\ndis.sys 2015-02-20 11:48:00 ----A---- C:\Windows\system32\drivers\RNDISMP.sys 2015-02-20 11:47:57 ----A---- C:\Windows\SYSWOW64\qedit.dll 2015-02-20 11:47:57 ----A---- C:\Windows\system32\qedit.dll 2015-02-20 11:47:40 ----A---- C:\Windows\system32\WMVDECOD.DLL 2015-02-20 11:47:39 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL 2015-02-20 11:47:38 ----A---- C:\Windows\system32\drivers\usb8023.sys 2015-02-20 11:47:15 ----A---- C:\Windows\system32\drivers\afd.sys 2015-02-20 11:47:13 ----A---- C:\Windows\system32\Wdfres.dll 2015-02-20 11:47:13 ----A---- C:\Windows\system32\drivers\WdfLdr.sys 2015-02-20 11:47:13 ----A---- C:\Windows\system32\drivers\Wdf01000.sys 2015-02-20 11:47:12 ----A---- C:\Windows\system32\drivers\usbvideo.sys 2015-02-20 11:47:11 ----A---- C:\Windows\system32\drivers\usbcir.sys 2015-02-20 11:47:08 ----A---- C:\Windows\system32\ncsi.dll 2015-02-20 11:47:07 ----A---- C:\Windows\SYSWOW64\netcorehc.dll 2015-02-20 11:47:07 ----A---- C:\Windows\system32\netcorehc.dll 2015-02-20 11:47:07 ----A---- C:\Windows\system32\iphlpsvc.dll 2015-02-20 11:47:06 ----A---- C:\Windows\SYSWOW64\netevent.dll 2015-02-20 11:47:06 ----A---- C:\Windows\system32\nlaapi.dll 2015-02-20 11:47:06 ----A---- C:\Windows\system32\netevent.dll 2015-02-20 11:47:06 ----A---- C:\Windows\system32\drivers\tcpipreg.sys 2015-02-20 11:46:59 ----A---- C:\Windows\system32\drivers\tdx.sys 2015-02-20 11:46:58 ----A---- C:\Windows\system32\drivers\hidparse.sys 2015-02-20 11:46:58 ----A---- C:\Windows\system32\drivers\hidclass.sys 2015-02-20 11:46:57 ----A---- C:\Windows\SYSWOW64\dnsapi.dll 2015-02-20 11:46:57 ----A---- C:\Windows\system32\dnsapi.dll 2015-02-20 11:46:56 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe 2015-02-20 11:46:56 ----A---- C:\Windows\system32\dnsrslvr.dll 2015-02-20 11:46:56 ----A---- C:\Windows\system32\dnscacheugc.exe 2015-02-20 11:46:09 ----A---- C:\Windows\system32\WebClnt.dll 2015-02-20 11:46:08 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2015-02-20 11:46:08 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2015-02-20 11:46:08 ----A---- C:\Windows\system32\davclnt.dll 2015-02-20 11:46:06 ----A---- C:\Windows\SYSWOW64\dpnet.dll 2015-02-20 11:46:06 ----A---- C:\Windows\system32\dpnet.dll 2015-02-20 11:45:39 ----A---- C:\Windows\system32\KernelBase.dll 2015-02-20 11:45:38 ----A---- C:\Windows\system32\objsel.dll 2015-02-20 11:45:36 ----A---- C:\Windows\SYSWOW64\objsel.dll 2015-02-20 11:45:35 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-02-20 11:45:34 ----A---- C:\Windows\system32\dimsroam.dll 2015-02-20 11:45:33 ----A---- C:\Windows\SYSWOW64\dimsroam.dll 2015-02-20 11:45:33 ----A---- C:\Windows\SYSWOW64\cngprovider.dll 2015-02-20 11:45:33 ----A---- C:\Windows\SYSWOW64\capiprovider.dll 2015-02-20 11:45:33 ----A---- C:\Windows\SYSWOW64\adprovider.dll 2015-02-20 11:45:33 ----A---- C:\Windows\system32\dpapiprovider.dll 2015-02-20 11:45:33 ----A---- C:\Windows\system32\cngprovider.dll 2015-02-20 11:45:33 ----A---- C:\Windows\system32\capiprovider.dll 2015-02-20 11:45:33 ----A---- C:\Windows\system32\adprovider.dll 2015-02-20 11:45:32 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll 2015-02-20 11:45:32 ----A---- C:\Windows\system32\wincredprovider.dll 2015-02-20 11:45:31 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll 2015-02-20 11:45:04 ----A---- C:\Windows\system32\OxpsConverter.exe 2015-02-20 11:44:21 ----A---- C:\Windows\system32\drivers\srvnet.sys 2015-02-20 11:44:21 ----A---- C:\Windows\system32\drivers\srv2.sys 2015-02-20 11:44:21 ----A---- C:\Windows\system32\drivers\srv.sys 2015-02-20 11:44:19 ----A---- C:\Windows\system32\IMJP10K.DLL 2015-02-20 11:44:18 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL 2015-02-20 11:44:17 ----A---- C:\Windows\system32\drivers\dxgmms1.sys 2015-02-20 11:44:17 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2015-02-20 11:44:16 ----A---- C:\Windows\system32\cdd.dll 2015-02-20 11:44:13 ----A---- C:\Windows\system32\mswsock.dll 2015-02-20 11:44:12 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2015-02-20 11:44:04 ----A---- C:\Windows\system32\Wpc.dll 2015-02-20 11:44:02 ----A---- C:\Windows\SYSWOW64\Wpc.dll 2015-02-20 11:44:02 ----A---- C:\Windows\SYSWOW64\gameux.dll 2015-02-20 11:44:02 ----A---- C:\Windows\system32\gameux.dll 2015-02-20 11:43:37 ----A---- C:\Windows\system32\psisdecd.dll 2015-02-20 11:43:36 ----A---- C:\Windows\SYSWOW64\psisdecd.dll 2015-02-20 11:42:30 ----A---- C:\Windows\system32\oleaut32.dll 2015-02-20 11:42:29 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2015-02-20 11:42:23 ----A---- C:\Windows\system32\ntdll.dll 2015-02-20 11:42:23 ----A---- C:\Windows\system32\advapi32.dll 2015-02-20 11:42:22 ----A---- C:\Windows\SYSWOW64\tdh.dll 2015-02-20 11:42:22 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-02-20 11:42:22 ----A---- C:\Windows\system32\tdh.dll 2015-02-20 11:42:21 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2015-02-20 11:42:10 ----A---- C:\Windows\system32\drivers\partmgr.sys 2015-02-20 10:53:27 ----A---- C:\Windows\system32\pku2u.dll 2015-02-20 10:53:26 ----A---- C:\Windows\SYSWOW64\pku2u.dll 2015-02-20 10:53:01 ----A---- C:\Windows\system32\drivers\msiscsi.sys 2015-02-20 10:53:00 ----A---- C:\Windows\system32\drivers\storport.sys 2015-02-20 10:53:00 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2015-02-20 10:52:59 ----A---- C:\Windows\SYSWOW64\iologmsg.dll 2015-02-20 10:52:59 ----A---- C:\Windows\system32\iologmsg.dll 2015-02-20 10:52:52 ----A---- C:\Windows\system32\synceng.dll 2015-02-20 10:52:51 ----A---- C:\Windows\SYSWOW64\synceng.dll 2015-02-20 10:52:47 ----A---- C:\Windows\system32\kdusb.dll 2015-02-20 10:52:47 ----A---- C:\Windows\system32\kdcom.dll 2015-02-20 10:52:47 ----A---- C:\Windows\system32\kd1394.dll 2015-02-20 10:52:38 ----A---- C:\Windows\SYSWOW64\shdocvw.dll 2015-02-20 10:52:38 ----A---- C:\Windows\system32\shdocvw.dll 2015-02-20 10:52:13 ----A---- C:\Windows\system32\mstscax.dll 2015-02-20 10:52:12 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2015-02-20 10:52:12 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2015-02-20 10:52:03 ----A---- C:\Windows\SYSWOW64\charmap.exe 2015-02-20 10:52:03 ----A---- C:\Windows\system32\charmap.exe 2015-02-20 10:52:02 ----A---- C:\Windows\SYSWOW64\rastls.dll 2015-02-20 10:52:02 ----A---- C:\Windows\system32\rastls.dll 2015-02-20 10:52:00 ----A---- C:\Windows\system32\win32spl.dll 2015-02-20 10:51:59 ----A---- C:\Windows\SYSWOW64\win32spl.dll 2015-02-20 10:51:58 ----A---- C:\Windows\system32\WsmSvc.dll 2015-02-20 10:51:57 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll 2015-02-20 10:51:57 ----A---- C:\Windows\system32\WsmWmiPl.dll 2015-02-20 10:51:57 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll 2015-02-20 10:51:57 ----A---- C:\Windows\system32\WSManHTTPConfig.exe 2015-02-20 10:51:56 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll 2015-02-20 10:51:56 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll 2015-02-20 10:51:56 ----A---- C:\Windows\system32\WsmAuto.dll 2015-02-20 10:51:55 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll 2015-02-20 10:51:55 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe 2015-02-20 10:51:54 ----A---- C:\Windows\system32\taskhost.exe 2015-02-20 10:51:38 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll 2015-02-20 10:51:38 ----A---- C:\Windows\system32\cryptdlg.dll 2015-02-20 10:51:25 ----A---- C:\Windows\SYSWOW64\drvinst.exe 2015-02-20 10:51:25 ----A---- C:\Windows\SYSWOW64\devrtl.dll 2015-02-20 10:51:25 ----A---- C:\Windows\SYSWOW64\devobj.dll 2015-02-20 10:51:25 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll 2015-02-20 10:51:25 ----A---- C:\Windows\system32\umpnpmgr.dll 2015-02-20 10:51:01 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-02-20 10:51:01 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-02-20 10:50:56 ----A---- C:\Windows\SYSWOW64\tzres.dll 2015-02-20 10:50:56 ----A---- C:\Windows\system32\tzres.dll 2015-02-20 10:50:20 ----A---- C:\Windows\SYSWOW64\packager.dll 2015-02-20 10:50:20 ----A---- C:\Windows\system32\packager.dll 2015-02-20 10:50:11 ----A---- C:\Windows\system32\winlogon.exe 2015-02-20 10:50:08 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2015-02-20 10:50:08 ----A---- C:\Windows\system32\mstsc.exe 2015-02-20 10:50:07 ----A---- C:\Windows\system32\winsta.dll 2015-02-20 10:50:07 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2015-02-20 10:50:06 ----A---- C:\Windows\SYSWOW64\winsta.dll 2015-02-20 10:50:06 ----A---- C:\Windows\system32\rdrmemptylst.exe 2015-02-20 10:50:06 ----A---- C:\Windows\system32\rdpcorekmts.dll 2015-02-20 10:50:05 ----A---- C:\Windows\system32\rdpwsx.dll 2015-02-20 10:50:05 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2015-02-20 10:50:04 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2015-02-20 10:50:04 ----A---- C:\Windows\system32\tsgqec.dll 2015-02-20 10:50:04 ----A---- C:\Windows\system32\aaclient.dll 2015-02-20 10:49:43 ----A---- C:\Windows\SYSWOW64\netapi32.dll 2015-02-20 10:49:43 ----A---- C:\Windows\system32\netapi32.dll 2015-02-20 10:49:43 ----A---- C:\Windows\system32\browser.dll 2015-02-20 10:49:43 ----A---- C:\Windows\system32\browcli.dll 2015-02-20 10:49:41 ----A---- C:\Windows\SYSWOW64\browcli.dll 2015-02-20 10:48:57 ----A---- C:\Windows\system32\wow64win.dll 2015-02-20 10:48:57 ----A---- C:\Windows\system32\wow64.dll 2015-02-20 10:48:57 ----A---- C:\Windows\system32\kernel32.dll 2015-02-20 10:48:56 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-02-20 10:48:56 ----A---- C:\Windows\system32\winsrv.dll 2015-02-20 10:48:55 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-02-20 10:48:55 ----A---- C:\Windows\system32\ntvdm64.dll 2015-02-20 10:48:55 ----A---- C:\Windows\system32\conhost.exe 2015-02-20 10:48:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-02-20 10:48:54 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-02-20 10:48:54 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-02-20 10:48:53 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-02-20 10:48:53 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-02-20 10:48:53 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-02-20 10:48:53 ----A---- C:\Windows\system32\wow64cpu.dll 2015-02-20 10:48:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-02-20 10:48:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-02-20 10:48:52 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-02-20 10:48:52 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-02-20 10:48:51 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-02-20 10:48:50 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-02-20 10:48:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-02-20 10:48:48 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-02-20 10:48:47 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-02-20 10:48:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-02-20 10:48:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-02-20 10:48:46 ----A---- C:\Windows\SYSWOW64\user.exe 2015-02-20 10:48:43 ----A---- C:\Windows\SYSWOW64\prevhost.exe 2015-02-20 10:48:43 ----A---- C:\Windows\system32\prevhost.exe 2015-02-20 10:48:40 ----A---- C:\Windows\system32\drivers\fvevol.sys 2015-02-20 10:48:35 ----A---- C:\Windows\system32\FXSCOVER.exe 2015-02-20 10:48:33 ----A---- C:\Windows\SYSWOW64\inetcomm.dll 2015-02-20 10:48:33 ----A---- C:\Windows\system32\inetcomm.dll 2015-02-20 10:48:31 ----A---- C:\Windows\system32\msvcrt.dll 2015-02-20 10:48:30 ----A---- C:\Windows\SYSWOW64\msvcrt.dll 2015-02-20 10:48:28 ----A---- C:\Windows\system32\drivers\ntfs.sys 2015-02-20 10:48:26 ----A---- C:\Windows\SYSWOW64\scesrv.dll 2015-02-20 10:48:26 ----A---- C:\Windows\system32\scesrv.dll 2015-02-20 10:48:22 ----A---- C:\Windows\system32\msi.dll 2015-02-20 10:48:21 ----A---- C:\Windows\SYSWOW64\msi.dll 2015-02-20 10:48:20 ----A---- C:\Windows\SYSWOW64\authui.dll 2015-02-20 10:48:20 ----A---- C:\Windows\system32\authui.dll 2015-02-20 10:48:20 ----A---- C:\Windows\system32\appinfo.dll 2015-02-20 10:48:19 ----A---- C:\Windows\SYSWOW64\msihnd.dll 2015-02-20 10:48:19 ----A---- C:\Windows\system32\msihnd.dll 2015-02-20 10:48:19 ----A---- C:\Windows\system32\consent.exe 2015-02-20 10:48:06 ----A---- C:\Windows\system32\certutil.exe 2015-02-20 10:48:05 ----A---- C:\Windows\SYSWOW64\certutil.exe 2015-02-20 10:48:02 ----A---- C:\Windows\SYSWOW64\certenc.dll 2015-02-20 10:48:02 ----A---- C:\Windows\system32\certenc.dll 2015-02-20 10:47:48 ----A---- C:\Windows\system32\scrrun.dll 2015-02-20 10:47:48 ----A---- C:\Windows\system32\cscript.exe 2015-02-20 10:47:47 ----A---- C:\Windows\SYSWOW64\wscript.exe 2015-02-20 10:47:47 ----A---- C:\Windows\SYSWOW64\scrrun.dll 2015-02-20 10:47:47 ----A---- C:\Windows\SYSWOW64\cscript.exe 2015-02-20 10:47:47 ----A---- C:\Windows\system32\wscript.exe 2015-02-20 10:46:55 ----A---- C:\Windows\system32\localspl.dll 2015-02-20 10:46:35 ----A---- C:\Windows\SYSWOW64\gdi32.dll 2015-02-20 10:46:35 ----A---- C:\Windows\system32\gdi32.dll 2015-02-20 10:46:32 ----A---- C:\Windows\system32\drivers\bowser.sys 2015-02-20 10:46:29 ----A---- C:\Windows\SYSWOW64\oleacc.dll 2015-02-20 10:46:29 ----A---- C:\Windows\system32\oleacc.dll 2015-02-20 10:46:25 ----A---- C:\Windows\system32\EncDec.dll 2015-02-20 10:46:24 ----A---- C:\Windows\SYSWOW64\EncDec.dll 2015-02-20 10:44:10 ----A---- C:\Windows\SYSWOW64\cdosys.dll 2015-02-20 10:44:06 ----A---- C:\Windows\system32\cdosys.dll 2015-02-20 10:43:47 ----A---- C:\Windows\system32\IKEEXT.DLL 2015-02-20 10:43:47 ----A---- C:\Windows\system32\FWPUCLNT.DLL 2015-02-20 10:43:46 ----A---- C:\Windows\SYSWOW64\nshwfp.dll 2015-02-20 10:43:46 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL 2015-02-20 10:43:46 ----A---- C:\Windows\system32\nshwfp.dll 2015-02-20 10:43:43 ----A---- C:\Windows\system32\scavengeui.dll 2015-02-20 10:04:26 ----A---- C:\Windows\system32\rpcrt4.dll 2015-02-20 10:04:25 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2015-02-20 09:52:44 ----A---- C:\Windows\system32\rdpcore.dll 2015-02-20 09:52:43 ----A---- C:\Windows\SYSWOW64\rdpcore.dll 2015-02-20 09:52:42 ----A---- C:\Windows\system32\drivers\tdtcp.sys 2015-02-20 09:31:26 ----A---- C:\Windows\system32\wups2.dll 2015-02-20 09:31:26 ----A---- C:\Windows\system32\wuauclt.exe 2015-02-20 09:31:25 ----A---- C:\Windows\system32\wucltux.dll 2015-02-20 09:31:25 ----A---- C:\Windows\system32\wuaueng.dll 2015-02-20 09:30:57 ----A---- C:\Windows\system32\wups.dll 2015-02-20 09:30:56 ----A---- C:\Windows\SYSWOW64\wups.dll 2015-02-20 09:30:56 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2015-02-20 09:30:56 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2015-02-20 09:30:56 ----A---- C:\Windows\system32\wudriver.dll 2015-02-20 09:30:56 ----A---- C:\Windows\system32\wuapi.dll 2015-02-20 09:30:33 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2015-02-20 09:30:33 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2015-02-20 09:30:33 ----A---- C:\Windows\system32\wuwebv.dll 2015-02-20 09:30:33 ----A---- C:\Windows\system32\wuapp.exe ======List of files/folders modified in the last 1 month====== 2015-03-19 11:10:07 ----D---- C:\Windows\Prefetch 2015-03-19 11:07:36 ----D---- C:\Windows\Temp 2015-03-19 11:05:32 ----D---- C:\Windows\system32\config 2015-03-19 11:02:06 ----A---- C:\Windows\SYSWOW64\log.txt 2015-03-19 03:26:33 ----D---- C:\Windows\system32\drivers 2015-03-18 16:31:37 ----SHD---- C:\System Volume Information 2015-03-18 16:12:59 ----RD---- C:\Program Files (x86) 2015-03-18 16:12:59 ----HD---- C:\ProgramData 2015-03-18 16:09:05 ----D---- C:\Windows\Panther 2015-03-18 16:01:07 ----D---- C:\Windows\SysWOW64 2015-03-18 15:53:09 ----RD---- C:\Program Files 2015-03-18 15:37:44 ----D---- C:\Windows 2015-03-18 15:36:49 ----D---- C:\Users\Qtera69\AppData\Roaming\BitTorrent 2015-03-18 15:36:27 ----D---- C:\Windows\Tasks 2015-03-18 15:13:37 ----D---- C:\Windows\system32\Tasks 2015-03-17 18:12:25 ----SD---- C:\ProgramData\Microsoft 2015-03-16 22:11:59 ----D---- C:\ProgramData\AVAST Software 2015-03-16 22:09:48 ----D---- C:\Windows\System32 2015-03-16 22:09:23 ----D---- C:\Windows\system32\DriverStore 2015-03-16 22:09:22 ----D---- C:\Windows\inf 2015-03-16 15:42:35 ----RSD---- C:\Windows\Fonts 2015-03-16 12:52:36 ----D---- C:\Users\Qtera69\AppData\Roaming\uTorrent 2015-03-16 12:52:31 ----D---- C:\Windows\Minidump 2015-03-16 12:52:31 ----D---- C:\Windows\Logs 2015-03-16 12:52:31 ----D---- C:\Windows\debug 2015-03-16 12:20:12 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-03-12 10:50:49 ----D---- C:\Windows\rescache 2015-03-12 10:02:46 ----D---- C:\Windows\winsxs 2015-03-12 09:58:38 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-03-12 09:58:38 ----D---- C:\Windows\SYSWOW64\Dism 2015-03-12 09:58:38 ----D---- C:\Program Files\Windows Media Player 2015-03-12 09:58:38 ----D---- C:\Program Files (x86)\Windows Media Player 2015-03-12 09:58:37 ----D---- C:\Windows\system32\nl-NL 2015-03-12 09:58:36 ----D---- C:\Windows\system32\Dism 2015-03-12 09:58:34 ----D---- C:\Windows\system32\CodeIntegrity 2015-03-12 09:58:34 ----D---- C:\Windows\system32\Boot 2015-03-12 09:58:26 ----D---- C:\Windows\SYSWOW64\en-US 2015-03-12 09:58:26 ----D---- C:\Program Files\Internet Explorer 2015-03-12 09:58:25 ----D---- C:\Windows\system32\en-US 2015-03-12 09:58:23 ----D---- C:\Program Files (x86)\Internet Explorer 2015-03-12 00:52:43 ----SHD---- C:\Windows\Installer 2015-03-12 00:52:00 ----D---- C:\ProgramData\Microsoft Help 2015-03-12 00:31:23 ----RSD---- C:\Windows\assembly 2015-03-12 00:27:29 ----A---- C:\Windows\win.ini 2015-03-11 09:22:10 ----D---- C:\Windows\system32\catroot2 2015-03-03 14:17:35 ----N---- C:\Windows\system32\MpSigStub.exe 2015-02-23 22:46:00 ----D---- C:\Windows\system32\wdi 2015-02-23 07:55:50 ----SD---- C:\Users\Qtera69\AppData\Roaming\Microsoft 2015-02-23 07:55:50 ----D---- C:\Users\Qtera69\AppData\Roaming\Adobe 2015-02-22 23:27:13 ----D---- C:\Windows\system32\catroot 2015-02-22 12:26:11 ----SHD---- C:\$RECYCLE.BIN 2015-02-22 12:06:22 ----D---- C:\Program Files\Common Files 2015-02-22 12:05:45 ----D---- C:\Program Files (x86)\Common Files 2015-02-21 23:48:00 ----D---- C:\ProgramData\Adobe 2015-02-21 18:07:22 ----D---- C:\Windows\system32\drivers\UMDF 2015-02-21 12:47:05 ----D---- C:\Windows\Microsoft.NET 2015-02-21 11:29:53 ----D---- C:\Windows\PolicyDefinitions 2015-02-21 09:34:52 ----D---- C:\Windows\ehome 2015-02-21 09:34:51 ----SD---- C:\Windows\system32\CompatTel 2015-02-21 09:34:50 ----D---- C:\Program Files\Common Files\System 2015-02-21 09:34:45 ----D---- C:\Windows\SYSWOW64\wbem 2015-02-21 09:34:45 ----D---- C:\Windows\SYSWOW64\migration 2015-02-21 09:34:42 ----D---- C:\Windows\system32\migration 2015-02-21 09:34:41 ----D---- C:\Windows\system32\wbem 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\zh-TW 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\zh-HK 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\zh-CN 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\tr-TR 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\sv-SE 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\pt-PT 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\pt-BR 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\pl-PL 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\ko-KR 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\it-IT 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\hu-HU 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\fr-FR 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\fi-FI 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\es-ES 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\el-GR 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\de-DE 2015-02-21 09:34:38 ----D---- C:\Windows\SYSWOW64\cs-CZ 2015-02-21 09:34:37 ----D---- C:\Windows\SYSWOW64\ru-RU 2015-02-21 09:34:37 ----D---- C:\Windows\SYSWOW64\nb-NO 2015-02-21 09:34:37 ----D---- C:\Windows\SYSWOW64\ja-JP 2015-02-21 09:34:37 ----D---- C:\Windows\SYSWOW64\da-DK 2015-02-21 09:34:36 ----D---- C:\Windows\system32\zh-HK 2015-02-21 09:34:36 ----D---- C:\Windows\system32\pt-PT 2015-02-21 09:34:36 ----D---- C:\Windows\system32\pt-BR 2015-02-21 09:34:36 ----D---- C:\Windows\system32\pl-PL 2015-02-21 09:34:36 ----D---- C:\Windows\system32\ko-KR 2015-02-21 09:34:36 ----D---- C:\Windows\system32\it-IT 2015-02-21 09:34:36 ----D---- C:\Windows\system32\hu-HU 2015-02-21 09:34:36 ----D---- C:\Windows\system32\fr-FR 2015-02-21 09:34:36 ----D---- C:\Windows\system32\fi-FI 2015-02-21 09:34:36 ----D---- C:\Windows\system32\el-GR 2015-02-21 09:34:35 ----D---- C:\Windows\system32\zh-TW 2015-02-21 09:34:35 ----D---- C:\Windows\system32\zh-CN 2015-02-21 09:34:35 ----D---- C:\Windows\system32\tr-TR 2015-02-21 09:34:35 ----D---- C:\Windows\system32\sv-SE 2015-02-21 09:34:35 ----D---- C:\Windows\system32\ru-RU 2015-02-21 09:34:35 ----D---- C:\Windows\system32\nb-NO 2015-02-21 09:34:35 ----D---- C:\Windows\system32\ja-JP 2015-02-21 09:34:35 ----D---- C:\Windows\system32\es-ES 2015-02-21 09:34:35 ----D---- C:\Windows\system32\de-DE 2015-02-21 09:34:35 ----D---- C:\Windows\system32\da-DK 2015-02-21 09:34:35 ----D---- C:\Windows\system32\cs-CZ 2015-02-21 09:34:33 ----D---- C:\Windows\AppPatch 2015-02-21 09:34:31 ----D---- C:\Program Files\Windows Journal 2015-02-21 09:34:07 ----D---- C:\Windows\system32\drivers\nl-NL 2015-02-21 09:34:05 ----D---- C:\Windows\tracing 2015-02-21 09:34:05 ----D---- C:\Program Files\Windows Defender 2015-02-21 09:34:05 ----D---- C:\Program Files (x86)\Windows Defender ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-05-20 557848] R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2014-04-24 633704] R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2014-04-24 28008] R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560] R2 regi;regi; \??\C:\Windows\system32\drivers\regi.sys [2007-04-17 14112] R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver; C:\Windows\system32\DRIVERS\TVALZFL.sys [2009-06-19 14472] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-15 6403072] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-15 188928] R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-09-02 108544] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240] R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-02-19 57848] R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-01-13 4372952] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-03-19 129752] R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 63704] R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-11-19 943832] R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\Windows\system32\DRIVERS\rtl8192se.sys [2010-12-13 916072] R3 SynTP;Synaptics Pointing Device Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-03-10 316464] R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784] S3 athr;Stuurprogramma Atheros Extensible draadloze LAN-apparaat; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688] S3 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2009-07-30 44912] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-07 232992] S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-12-02 213280] S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2011-09-08 508520] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-08-15 54784] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040] S3 WSDScan;Ondersteuning voor WSD-scan via UMB; C:\Windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-15 202752] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-19 77128] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200] R2 ConfigFree Service;ConfigFree Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448] R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-03 268824] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160] R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016] R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-01-15 935208] R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632] R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2014-12-23 293080] R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2009-07-28 140632] R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2009-11-05 489312] R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [2010-04-06 258928] R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-03 2320920] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-02-13 643880] R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512] R3 TMachInfo;TMachInfo; C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-10-06 51512] R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560] R3 TPCHSrv;TPCH Service; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2010-02-23 835952] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-12 107848] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-12 107848] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688] S3 npggsvc;nProtect GameGuard Service; C:\Windows\syswow64\GameMon.des [2015-01-13 3143224] S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888] S3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO); C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2010-02-11 124368] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-02-21 1255736] -----------------EOF-----------------