Logfile of random's system information tool 1.10 (written by random/random) Run by HP at 2016-10-09 19:46:24 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 191 GB (67%) free of 287 GB Total RAM: 2811 MB (50% free) ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =========Mozilla firefox========= ProfilePath - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\dudv13cz.default-1476033514144 [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 23.0.0.162 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4] "Description"=VLC Multimedia Plugin "Path"=C:\Users\HP\Desktop\VLC\npvlc.dll ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-22 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-07-20 41760] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-06-30 102400] "HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-07-02 602680] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760] "Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [] "Magic Desktop for HP notification"=C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [2016-07-25 1444880] "WAHELPER.EXE"=C:\Program Files\WinArchiver\WAHELPER.EXE [2016-02-21 926856] "PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2016-06-07 454792] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HPAdvisorDock"=C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe [] "LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-05-19 2736128] "EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent [] "Chromium"=c:\users\hp\appdata\local\chromium\application\chrome.exe [2016-03-18 1068544] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableLockWorkstation"=0 "DisableTaskMgr"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "HideFastUserSwitching"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "EnableShellExecuteHooks"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvyu"=msyuv.dll "vidc.iyuv"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "vidc.yvu9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm "vidc.cvid"=iccvid.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "vidc.VP60"=C:\Windows\system32\vp6vfw.dll "vidc.VP61"=C:\Windows\system32\vp6vfw.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2016-10-09 19:43:34 ----D---- C:\rsit 2016-10-09 19:43:34 ----D---- C:\Program Files (x86)\trend micro 2016-10-08 14:28:05 ----A---- C:\autoexec.bat 2016-10-08 14:27:06 ----D---- C:\sh4ldr 2016-10-03 15:18:17 ----D---- C:\Program Files (x86)\GrabIt 2016-10-03 14:37:14 ----D---- C:\Program Files (x86)\Hide Your IP Address 2016-09-26 21:38:42 ----D---- C:\Program Files (x86)\Mozilla Firefox 2016-09-26 20:52:00 ----D---- C:\Users\HP\AppData\Roaming\Kodi 2016-09-26 20:23:24 ----A---- C:\Windows\SysWOW64\D3DCompiler_43.dll 2016-09-26 20:23:23 ----A---- C:\Windows\SysWOW64\D3DX9_43.dll 2016-09-21 14:08:24 ----A---- C:\Windows\SysWOW64\tzres.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\urlmon.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\occache.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\mshtmled.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\inseng.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\iernonce.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll 2016-09-21 14:08:10 ----A---- C:\Windows\SysWOW64\iedkcs32.dll 2016-09-21 14:08:09 ----A---- C:\Windows\SysWOW64\vbscript.dll 2016-09-21 14:08:09 ----A---- C:\Windows\SysWOW64\mshtml.dll 2016-09-21 14:08:09 ----A---- C:\Windows\SysWOW64\msfeeds.dll 2016-09-21 14:08:09 ----A---- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-09-21 14:08:09 ----A---- C:\Windows\SysWOW64\dxtrans.dll 2016-09-21 14:08:07 ----A---- C:\Windows\SysWOW64\jsproxy.dll 2016-09-21 14:08:07 ----A---- C:\Windows\SysWOW64\jscript9diag.dll 2016-09-21 14:08:07 ----A---- C:\Windows\SysWOW64\jscript.dll 2016-09-21 14:08:07 ----A---- C:\Windows\SysWOW64\iesetup.dll 2016-09-21 14:08:07 ----A---- C:\Windows\SysWOW64\iertutil.dll 2016-09-21 14:08:07 ----A---- C:\Windows\SysWOW64\ieapfltr.dll 2016-09-21 14:08:06 ----A---- C:\Windows\SysWOW64\ieui.dll 2016-09-21 14:08:06 ----A---- C:\Windows\SysWOW64\ieframe.dll 2016-09-21 14:08:06 ----A---- C:\Windows\SysWOW64\dxtmsft.dll 2016-09-21 14:08:04 ----A---- C:\Windows\SysWOW64\wininet.dll 2016-09-21 14:08:04 ----A---- C:\Windows\SysWOW64\webcheck.dll 2016-09-21 14:08:04 ----A---- C:\Windows\SysWOW64\mshtmlmedia.dll 2016-09-21 14:08:04 ----A---- C:\Windows\SysWOW64\jscript9.dll 2016-09-21 14:08:04 ----A---- C:\Windows\SysWOW64\ieUnatt.exe 2016-09-21 14:08:03 ----A---- C:\Windows\SysWOW64\msrating.dll 2016-09-21 14:08:03 ----A---- C:\Windows\SysWOW64\MshtmlDac.dll 2016-09-21 14:06:19 ----A---- C:\Windows\SysWOW64\d2d1.dll 2016-09-21 13:21:35 ----D---- C:\Program Files (x86)\Common Files\DESIGNER 2016-09-20 19:05:24 ----A---- C:\Windows\SysWOW64\KBDYAK.DLL 2016-09-20 19:05:24 ----A---- C:\Windows\SysWOW64\KBDTAT.DLL 2016-09-20 19:05:24 ----A---- C:\Windows\SysWOW64\KBDRU1.DLL 2016-09-20 19:05:24 ----A---- C:\Windows\SysWOW64\KBDRU.DLL 2016-09-20 19:05:24 ----A---- C:\Windows\SysWOW64\KBDBASH.DLL 2016-09-20 19:05:19 ----A---- C:\Windows\SysWOW64\user32.dll 2016-09-20 19:04:15 ----A---- C:\Windows\SysWOW64\inetcomm.dll 2016-09-20 19:04:14 ----A---- C:\Windows\SysWOW64\INETRES.dll 2016-09-20 19:04:08 ----A---- C:\Windows\SysWOW64\oleaut32.dll 2016-09-20 18:58:22 ----A---- C:\Windows\SysWOW64\wuwebv.dll 2016-09-20 18:58:22 ----A---- C:\Windows\SysWOW64\wudriver.dll 2016-09-20 18:58:22 ----A---- C:\Windows\SysWOW64\wuapp.exe 2016-09-20 18:58:22 ----A---- C:\Windows\SysWOW64\wuapi.dll 2016-09-20 18:58:20 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe 2016-09-20 18:58:20 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe 2016-09-20 18:58:19 ----A---- C:\Windows\SysWOW64\ntdll.dll 2016-09-20 18:58:19 ----A---- C:\Windows\SysWOW64\advapi32.dll 2016-09-20 18:58:18 ----A---- C:\Windows\SysWOW64\wups.dll 2016-09-20 18:58:18 ----A---- C:\Windows\SysWOW64\KernelBase.dll 2016-09-20 18:58:18 ----A---- C:\Windows\SysWOW64\kernel32.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\schannel.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\olepro32.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\msiexec.exe 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\msi.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\cryptsvc.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\crypt32.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\asycfilt.dll 2016-09-20 18:58:17 ----A---- C:\Windows\SysWOW64\appidapi.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-09-20 18:58:16 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\wow32.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\wintrust.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\user.exe 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\srclient.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\setup16.exe 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\rpcrt4.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\ntvdm64.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\instnm.exe 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\cryptnet.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\certcli.dll 2016-09-20 18:58:16 ----A---- C:\Windows\SysWOW64\apisetschema.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\wdigest.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\TSpkg.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\sspicli.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\secur32.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\rpchttp.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\ncrypt.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\msv1_0.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\msobjs.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\msimsg.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\msihnd.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\msaudite.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\kerberos.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\cryptbase.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\credssp.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\authui.dll 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\auditpol.exe 2016-09-20 18:58:15 ----A---- C:\Windows\SysWOW64\adtschema.dll 2016-09-20 18:53:28 ----A---- C:\Windows\SysWOW64\DWrite.dll 2016-09-20 18:52:35 ----A---- C:\Windows\SysWOW64\d3d10warp.dll 2016-09-20 18:52:28 ----A---- C:\Windows\SysWOW64\d3d10level9.dll 2016-09-20 18:52:24 ----A---- C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-09-20 18:40:15 ----A---- C:\Windows\SysWOW64\esent.dll 2016-09-20 18:40:14 ----A---- C:\Windows\SysWOW64\fsutil.exe 2016-09-20 18:36:21 ----A---- C:\Windows\SysWOW64\clfsw32.dll 2016-09-20 18:36:17 ----A---- C:\Windows\SysWOW64\WindowsCodecs.dll 2016-09-20 18:36:09 ----A---- C:\Windows\SysWOW64\WMPhoto.dll 2016-09-16 10:19:15 ----A---- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-09-15 22:22:30 ----A---- C:\Windows\SysWOW64\elshyph.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\wextract.exe 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\url.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\SetIEInstalledDate.exe 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\pngfilt.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\msls31.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\mshtmler.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\mshta.exe 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\msfeedssync.exe 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\licmgr10.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\jsIntl.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\imgutil.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\iexpress.exe 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\iesysprep.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\iepeers.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\ieapfltr.dat 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\IEAdvpack.dll 2016-09-15 22:22:25 ----A---- C:\Windows\SysWOW64\icardie.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2016-09-15 22:19:52 ----AH---- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2016-09-15 22:19:52 ----A---- C:\Windows\SysWOW64\XpsPrint.dll 2016-09-15 22:19:52 ----A---- C:\Windows\SysWOW64\XpsGdiConverter.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\WindowsCodecsExt.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\UIAnimation.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\dxgi.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\d3d10core.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\d3d10_1core.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\d3d10_1.dll 2016-09-15 22:19:51 ----A---- C:\Windows\SysWOW64\d3d10.dll 2016-09-15 17:30:20 ----D---- C:\Windows\SysWOW64\Wat 2016-09-15 10:09:25 ----D---- C:\ae07abe01316284cbdc7cae7204723 2016-09-14 18:16:06 ----A---- C:\Windows\SysWOW64\wmi.dll 2016-09-13 02:01:31 ----A---- C:\Windows\SysWOW64\wdi.dll 2016-09-13 01:53:42 ----A---- C:\Windows\SysWOW64\mapistub.dll 2016-09-13 01:53:42 ----A---- C:\Windows\SysWOW64\mapi32.dll 2016-09-13 01:53:42 ----A---- C:\Windows\SysWOW64\fixmapi.exe 2016-09-13 01:53:08 ----A---- C:\Windows\SysWOW64\mtxoci.dll 2016-09-13 01:53:08 ----A---- C:\Windows\SysWOW64\msorcl32.dll 2016-09-13 01:52:39 ----A---- C:\Windows\SysWOW64\cewmdm.dll 2016-09-13 01:52:32 ----A---- C:\Windows\SysWOW64\xmllite.dll 2016-09-13 01:52:12 ----A---- C:\Windows\SysWOW64\msieftp.dll 2016-09-13 01:52:07 ----A---- C:\Windows\SysWOW64\odbctrac.dll 2016-09-13 01:52:07 ----A---- C:\Windows\SysWOW64\odbcjt32.dll 2016-09-13 01:52:07 ----A---- C:\Windows\SysWOW64\odbccu32.dll 2016-09-13 01:52:07 ----A---- C:\Windows\SysWOW64\odbccr32.dll 2016-09-13 01:52:07 ----A---- C:\Windows\SysWOW64\odbccp32.dll 2016-09-13 01:51:52 ----A---- C:\Windows\SysWOW64\msxml3.dll 2016-09-13 01:51:51 ----A---- C:\Windows\SysWOW64\msxml3r.dll 2016-09-13 01:51:32 ----A---- C:\Windows\SysWOW64\ole32.dll 2016-09-13 01:51:05 ----A---- C:\Windows\SysWOW64\dhcpcsvc6.dll 2016-09-13 01:51:05 ----A---- C:\Windows\SysWOW64\dhcpcore6.dll 2016-09-13 01:50:53 ----A---- C:\Windows\SysWOW64\sbe.dll 2016-09-13 01:49:29 ----A---- C:\Windows\SysWOW64\tsgqec.dll 2016-09-13 01:49:29 ----A---- C:\Windows\SysWOW64\mstscax.dll 2016-09-13 01:49:29 ----A---- C:\Windows\SysWOW64\aaclient.dll 2016-09-13 01:49:10 ----A---- C:\Windows\SysWOW64\shell32.dll 2016-09-13 01:49:07 ----A---- C:\Windows\SysWOW64\ExplorerFrame.dll 2016-09-13 01:48:50 ----A---- C:\Windows\SysWOW64\ntshrui.dll 2016-09-13 01:48:16 ----A---- C:\Windows\SysWOW64\tracerpt.exe 2016-09-13 01:48:16 ----A---- C:\Windows\SysWOW64\sechost.dll 2016-09-13 01:48:15 ----A---- C:\Windows\SysWOW64\typeperf.exe 2016-09-13 01:48:15 ----A---- C:\Windows\SysWOW64\relog.exe 2016-09-13 01:48:15 ----A---- C:\Windows\SysWOW64\logman.exe 2016-09-13 01:48:14 ----A---- C:\Windows\SysWOW64\diskperf.exe 2016-09-13 01:47:09 ----A---- C:\Windows\SysWOW64\usp10.dll 2016-09-13 01:47:05 ----A---- C:\Windows\SysWOW64\win32spl.dll 2016-09-13 01:47:05 ----A---- C:\Windows\SysWOW64\ntprint.exe 2016-09-13 01:47:05 ----A---- C:\Windows\SysWOW64\ntprint.dll 2016-09-13 01:46:59 ----A---- C:\Windows\SysWOW64\tquery.dll 2016-09-13 01:46:59 ----A---- C:\Windows\SysWOW64\mssrch.dll 2016-09-13 01:46:58 ----A---- C:\Windows\SysWOW64\SearchProtocolHost.exe 2016-09-13 01:46:58 ----A---- C:\Windows\SysWOW64\SearchIndexer.exe 2016-09-13 01:46:58 ----A---- C:\Windows\SysWOW64\mssph.dll 2016-09-13 01:46:57 ----A---- C:\Windows\SysWOW64\SearchFilterHost.exe 2016-09-13 01:46:57 ----A---- C:\Windows\SysWOW64\mssvp.dll 2016-09-13 01:46:56 ----A---- C:\Windows\SysWOW64\mssphtb.dll 2016-09-13 01:46:56 ----A---- C:\Windows\SysWOW64\msscntrs.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2016-09-13 01:46:12 ----A---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\ucrtbase.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2016-09-13 01:46:11 ----A---- C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2016-09-13 01:45:59 ----A---- C:\Windows\SysWOW64\TSWorkspace.dll 2016-09-13 01:45:33 ----A---- C:\Windows\SysWOW64\blackbox.dll 2016-09-13 01:45:31 ----A---- C:\Windows\SysWOW64\drmv2clt.dll 2016-09-13 01:45:23 ----A---- C:\Windows\SysWOW64\wmdrmsdk.dll 2016-09-13 01:45:18 ----A---- C:\Windows\SysWOW64\drmmgrtn.dll 2016-09-13 01:45:15 ----A---- C:\Windows\SysWOW64\AUDIOKSE.dll 2016-09-13 01:45:10 ----A---- C:\Windows\SysWOW64\cryptui.dll 2016-09-13 01:45:09 ----A---- C:\Windows\SysWOW64\cryptsp.dll 2016-09-13 01:45:09 ----A---- C:\Windows\SysWOW64\AudioEng.dll 2016-09-13 01:45:08 ----A---- C:\Windows\SysWOW64\AudioSes.dll 2016-09-13 01:45:07 ----A---- C:\Windows\SysWOW64\msscp.dll 2016-09-13 01:45:06 ----A---- C:\Windows\SysWOW64\msnetobj.dll 2016-09-13 01:42:56 ----A---- C:\Windows\SysWOW64\cdosys.dll 2016-09-13 01:42:39 ----A---- C:\Windows\SysWOW64\imagehlp.dll 2016-09-13 01:42:33 ----A---- C:\Windows\SysWOW64\mscorier.dll 2016-09-13 01:42:32 ----A---- C:\Windows\SysWOW64\dfshim.dll 2016-09-13 01:42:31 ----A---- C:\Windows\SysWOW64\mscories.dll 2016-09-13 01:40:52 ----A---- C:\Windows\SysWOW64\wer.dll 2016-09-13 01:40:49 ----A---- C:\Windows\SysWOW64\dwmcore.dll 2016-09-13 01:40:48 ----A---- C:\Windows\SysWOW64\dwmapi.dll 2016-09-13 01:39:13 ----A---- C:\Windows\SysWOW64\ncsi.dll 2016-09-13 01:39:12 ----A---- C:\Windows\SysWOW64\nlaapi.dll 2016-09-13 01:37:59 ----A---- C:\Windows\SysWOW64\osk.exe 2016-09-13 01:37:47 ----A---- C:\Windows\SysWOW64\ubpm.dll 2016-09-13 01:37:30 ----A---- C:\Windows\SysWOW64\wpdshext.dll 2016-09-13 01:37:24 ----A---- C:\Windows\SysWOW64\tbs.dll 2016-09-13 01:37:05 ----A---- C:\Windows\SysWOW64\mfc42u.dll 2016-09-13 01:37:05 ----A---- C:\Windows\SysWOW64\mfc42.dll 2016-09-13 01:36:50 ----A---- C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2016-09-13 01:36:50 ----A---- C:\Windows\SysWOW64\credui.dll 2016-09-13 01:36:22 ----A---- C:\Windows\SysWOW64\WebClnt.dll 2016-09-13 01:36:22 ----A---- C:\Windows\SysWOW64\davclnt.dll 2016-09-13 01:36:02 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe 2016-09-13 01:36:01 ----A---- C:\Windows\SysWOW64\secproc_isv.dll 2016-09-13 01:36:01 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2016-09-13 01:36:01 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe 2016-09-13 01:36:01 ----A---- C:\Windows\SysWOW64\RMActivate.exe 2016-09-13 01:36:00 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll 2016-09-13 01:36:00 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll 2016-09-13 01:36:00 ----A---- C:\Windows\SysWOW64\secproc.dll 2016-09-13 01:36:00 ----A---- C:\Windows\SysWOW64\msdrm.dll 2016-09-13 01:35:42 ----A---- C:\Windows\SysWOW64\d3d11.dll 2016-09-13 01:35:35 ----A---- C:\Windows\SysWOW64\comctl32.dll 2016-09-13 01:35:29 ----A---- C:\Windows\SysWOW64\wshrm.dll 2016-09-13 01:35:07 ----A---- C:\Windows\SysWOW64\comsvcs.dll 2016-09-13 01:35:07 ----A---- C:\Windows\SysWOW64\catsrvut.dll 2016-09-13 01:34:31 ----A---- C:\Windows\SysWOW64\netcorehc.dll 2016-09-13 01:34:30 ----A---- C:\Windows\SysWOW64\netevent.dll 2016-09-13 01:32:48 ----A---- C:\Windows\SysWOW64\mfds.dll 2016-09-13 01:32:43 ----A---- C:\Windows\SysWOW64\dnscacheugc.exe 2016-09-13 01:32:43 ----A---- C:\Windows\SysWOW64\dnsapi.dll 2016-09-13 01:32:32 ----A---- C:\Windows\SysWOW64\dpnet.dll 2016-09-13 01:32:21 ----A---- C:\Windows\SysWOW64\bcryptprimitives.dll 2016-09-13 01:31:35 ----A---- C:\Windows\SysWOW64\samlib.dll 2016-09-13 01:30:53 ----A---- C:\Windows\SysWOW64\StructuredQuery.dll 2016-09-13 01:30:39 ----A---- C:\Windows\SysWOW64\objsel.dll 2016-09-13 01:30:38 ----A---- C:\Windows\SysWOW64\wincredprovider.dll 2016-09-13 01:30:38 ----A---- C:\Windows\SysWOW64\dpapiprovider.dll 2016-09-13 01:30:38 ----A---- C:\Windows\SysWOW64\dimsroam.dll 2016-09-13 01:30:38 ----A---- C:\Windows\SysWOW64\cngprovider.dll 2016-09-13 01:30:38 ----A---- C:\Windows\SysWOW64\capiprovider.dll 2016-09-13 01:30:38 ----A---- C:\Windows\SysWOW64\adprovider.dll 2016-09-13 01:29:58 ----A---- C:\Windows\SysWOW64\shimeng.dll 2016-09-13 01:29:58 ----A---- C:\Windows\SysWOW64\sdbinst.exe 2016-09-13 01:29:58 ----A---- C:\Windows\SysWOW64\apphelp.dll 2016-09-13 01:29:54 ----A---- C:\Windows\SysWOW64\lpk.dll 2016-09-13 01:29:54 ----A---- C:\Windows\SysWOW64\fontsub.dll 2016-09-13 01:29:54 ----A---- C:\Windows\SysWOW64\dciman32.dll 2016-09-13 01:29:54 ----A---- C:\Windows\SysWOW64\atmlib.dll 2016-09-13 01:29:54 ----A---- C:\Windows\SysWOW64\atmfd.dll 2016-09-13 01:29:48 ----A---- C:\Windows\SysWOW64\Wpc.dll 2016-09-13 01:29:48 ----A---- C:\Windows\SysWOW64\gameux.dll 2016-09-13 01:28:49 ----A---- C:\Windows\SysWOW64\tdh.dll 2016-09-13 01:26:43 ----A---- C:\Windows\SysWOW64\notepad.exe 2016-09-13 01:26:43 ----A---- C:\Windows\notepad.exe 2016-09-13 01:26:38 ----A---- C:\Windows\SysWOW64\IMJP10K.DLL 2016-09-13 01:25:39 ----A---- C:\Windows\SysWOW64\psisdecd.dll 2016-09-13 01:24:12 ----A---- C:\Windows\SysWOW64\pku2u.dll 2016-09-13 01:23:43 ----A---- C:\Windows\SysWOW64\qedit.dll 2016-09-13 01:23:05 ----A---- C:\Windows\SysWOW64\WMVDECOD.DLL 2016-09-13 01:23:04 ----A---- C:\Windows\SysWOW64\msmpeg2adec.dll 2016-09-13 01:23:03 ----A---- C:\Windows\SysWOW64\mf.dll 2016-09-13 01:23:02 ----A---- C:\Windows\SysWOW64\WMADMOD.DLL 2016-09-13 01:23:02 ----A---- C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2016-09-13 01:23:01 ----A---- C:\Windows\SysWOW64\WMVSDECD.DLL 2016-09-13 01:23:01 ----A---- C:\Windows\SysWOW64\WMSPDMOD.DLL 2016-09-13 01:23:00 ----A---- C:\Windows\SysWOW64\WMADMOE.DLL 2016-09-13 01:22:57 ----A---- C:\Windows\SysWOW64\wmpmde.dll 2016-09-13 01:22:57 ----A---- C:\Windows\SysWOW64\quartz.dll 2016-09-13 01:22:57 ----A---- C:\Windows\SysWOW64\qdvd.dll 2016-09-13 01:22:57 ----A---- C:\Windows\SysWOW64\evr.dll 2016-09-13 01:22:57 ----A---- C:\Windows\SysWOW64\COLORCNV.DLL 2016-09-13 01:22:56 ----A---- C:\Windows\SysWOW64\WMVXENCD.DLL 2016-09-13 01:22:56 ----A---- C:\Windows\SysWOW64\WMVENCOD.DLL 2016-09-13 01:22:56 ----A---- C:\Windows\SysWOW64\mfplat.dll 2016-09-13 01:22:55 ----A---- C:\Windows\SysWOW64\WMVSENCD.DLL 2016-09-13 01:22:55 ----A---- C:\Windows\SysWOW64\MPG4DECD.DLL 2016-09-13 01:22:55 ----A---- C:\Windows\SysWOW64\MP43DECD.DLL 2016-09-13 01:22:55 ----A---- C:\Windows\SysWOW64\MFWMAAEC.DLL 2016-09-13 01:22:55 ----A---- C:\Windows\SysWOW64\devenum.dll 2016-09-13 01:22:54 ----A---- C:\Windows\SysWOW64\WMSPDMOE.DLL 2016-09-13 01:22:54 ----A---- C:\Windows\SysWOW64\VIDRESZR.DLL 2016-09-13 01:22:54 ----A---- C:\Windows\SysWOW64\qasf.dll 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\rrinstaller.exe 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\MP4SDECD.DLL 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\MP3DMOD.DLL 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\mfvdsp.dll 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\mfps.dll 2016-09-13 01:22:53 ----A---- C:\Windows\SysWOW64\mfpmp.exe 2016-09-13 01:22:52 ----A---- C:\Windows\SysWOW64\mferror.dll 2016-09-13 01:22:52 ----A---- C:\Windows\SysWOW64\ksuser.dll 2016-09-13 01:22:34 ----A---- C:\Windows\SysWOW64\poqexec.exe 2016-09-13 01:20:38 ----A---- C:\Windows\SysWOW64\shdocvw.dll 2016-09-13 01:20:03 ----A---- C:\Windows\SysWOW64\msxml6r.dll 2016-09-13 01:20:03 ----A---- C:\Windows\SysWOW64\msxml6.dll 2016-09-13 01:19:59 ----A---- C:\Windows\SysWOW64\synceng.dll 2016-09-13 01:19:56 ----A---- C:\Windows\SysWOW64\iologmsg.dll 2016-09-13 01:19:43 ----A---- C:\Windows\SysWOW64\gdi32.dll 2016-09-13 01:19:41 ----A---- C:\Windows\SysWOW64\rastls.dll 2016-09-13 01:19:39 ----A---- C:\Windows\SysWOW64\msctf.dll 2016-09-13 01:19:33 ----A---- C:\Windows\SysWOW64\charmap.exe 2016-09-13 01:19:27 ----A---- C:\Windows\SysWOW64\cryptdlg.dll 2016-09-13 01:19:07 ----A---- C:\Windows\SysWOW64\WsmSvc.dll 2016-09-13 01:19:06 ----A---- C:\Windows\SysWOW64\WsmWmiPl.dll 2016-09-13 01:19:06 ----A---- C:\Windows\SysWOW64\WsmAuto.dll 2016-09-13 01:19:06 ----A---- C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2016-09-13 01:19:06 ----A---- C:\Windows\SysWOW64\WSManHTTPConfig.exe 2016-09-13 01:19:04 ----A---- C:\Windows\SysWOW64\ws2_32.dll 2016-09-13 01:19:04 ----A---- C:\Windows\SysWOW64\winhttp.dll 2016-09-13 01:19:04 ----A---- C:\Windows\SysWOW64\netbtugc.exe 2016-09-13 01:19:04 ----A---- C:\Windows\SysWOW64\mswsock.dll 2016-09-13 01:18:50 ----A---- C:\Windows\SysWOW64\EncDec.dll 2016-09-13 01:18:50 ----A---- C:\Windows\SysWOW64\CPFilters.dll 2016-09-13 01:17:49 ----A---- C:\Windows\SysWOW64\prevhost.exe 2016-09-13 01:17:45 ----A---- C:\Windows\SysWOW64\polstore.dll 2016-09-13 01:17:44 ----A---- C:\Windows\SysWOW64\winipsec.dll 2016-09-13 01:17:44 ----A---- C:\Windows\SysWOW64\gpapi.dll 2016-09-13 01:17:44 ----A---- C:\Windows\SysWOW64\FwRemoteSvr.dll 2016-09-13 01:17:31 ----A---- C:\Windows\SysWOW64\wmp.dll 2016-09-13 01:17:24 ----A---- C:\Windows\SysWOW64\spwmp.dll 2016-09-13 01:17:24 ----A---- C:\Windows\SysWOW64\dxmasf.dll 2016-09-13 01:17:23 ----A---- C:\Windows\SysWOW64\wmploc.DLL 2016-09-13 01:16:22 ----A---- C:\Windows\SysWOW64\drvinst.exe 2016-09-13 01:16:22 ----A---- C:\Windows\SysWOW64\devrtl.dll 2016-09-13 01:16:22 ----A---- C:\Windows\SysWOW64\devobj.dll 2016-09-13 01:16:22 ----A---- C:\Windows\SysWOW64\cfgmgr32.dll 2016-09-13 01:14:31 ----A---- C:\Windows\SysWOW64\mstsc.exe 2016-09-13 01:14:29 ----A---- C:\Windows\SysWOW64\winsta.dll 2016-09-13 01:13:49 ----A---- C:\Windows\SysWOW64\webio.dll 2016-09-13 01:13:47 ----A---- C:\Windows\SysWOW64\packager.dll 2016-09-13 01:13:43 ----A---- C:\Windows\SysWOW64\InkEd.dll 2016-09-13 01:13:41 ----A---- C:\Windows\SysWOW64\netapi32.dll 2016-09-13 01:13:40 ----A---- C:\Windows\SysWOW64\browcli.dll 2016-09-13 01:13:30 ----A---- C:\Windows\SysWOW64\msvcrt.dll 2016-09-13 01:13:23 ----A---- C:\Windows\SysWOW64\wscript.exe 2016-09-13 01:13:23 ----A---- C:\Windows\SysWOW64\scrrun.dll 2016-09-13 01:13:23 ----A---- C:\Windows\SysWOW64\cscript.exe 2016-09-13 01:13:19 ----A---- C:\Windows\SysWOW64\scesrv.dll 2016-09-13 01:13:16 ----A---- C:\Windows\SysWOW64\els.dll 2016-09-13 01:13:06 ----A---- C:\Windows\SysWOW64\certutil.exe 2016-09-13 01:13:05 ----A---- C:\Windows\SysWOW64\certenc.dll 2016-09-13 00:45:46 ----A---- C:\Windows\SysWOW64\oleacc.dll 2016-09-11 23:03:29 ----A---- C:\Windows\SysWOW64\nshwfp.dll 2016-09-11 23:03:29 ----A---- C:\Windows\SysWOW64\FWPUCLNT.DLL 2016-09-11 22:24:12 ----A---- C:\Windows\SysWOW64\infocardapi.dll 2016-09-11 22:24:12 ----A---- C:\Windows\SysWOW64\icardagt.exe 2016-09-11 22:24:11 ----A---- C:\Windows\SysWOW64\icardres.dll 2016-09-11 22:23:52 ----A---- C:\Windows\SysWOW64\TsWpfWrp.exe 2016-09-11 02:04:09 ----A---- C:\Windows\SysWOW64\rdpcore.dll ======List of files/folders modified in the last 1 month====== 2016-10-09 19:46:19 ----D---- C:\Windows\Temp 2016-10-09 19:43:34 ----RD---- C:\Program Files (x86) 2016-10-09 19:14:30 ----SHD---- C:\System Volume Information 2016-10-09 19:13:21 ----D---- C:\Windows\System32 2016-10-09 19:13:21 ----D---- C:\Windows\inf 2016-10-09 19:13:13 ----D---- C:\Program Files (x86)\SearchProtect 2016-10-09 19:13:09 ----D---- C:\Windows\AppPatch 2016-10-09 19:06:51 ----D---- C:\Windows\Tasks 2016-10-09 19:06:51 ----D---- C:\Windows\SysWOW64 2016-10-09 19:06:44 ----D---- C:\Windows 2016-10-09 19:05:47 ----SHD---- C:\Windows\Installer 2016-10-09 19:05:36 ----SD---- C:\Users\HP\AppData\Roaming\Microsoft 2016-10-09 19:05:36 ----D---- C:\Users\HP\AppData\Roaming\WinArchiver 2016-10-09 19:05:36 ----D---- C:\Users\HP\AppData\Roaming\uTorrent 2016-10-09 19:05:34 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2016-10-09 19:05:33 ----D---- C:\Program Files (x86)\Bing Bar Installer 2016-10-09 19:05:20 ----D---- C:\Windows\registration 2016-10-09 19:05:07 ----D---- C:\Windows\Microsoft.NET 2016-10-09 19:04:32 ----D---- C:\Users\HP\AppData\Roaming\SoftGrid Client 2016-10-09 19:04:27 ----D---- C:\ProgramData\Package Cache 2016-09-26 20:05:07 ----D---- C:\Windows\AppCompat 2016-09-26 20:02:38 ----D---- C:\Windows\winsxs 2016-09-26 20:01:02 ----D---- C:\Windows\SysWOW64\en-US 2016-09-26 20:01:00 ----D---- C:\Windows\PolicyDefinitions 2016-09-26 20:00:59 ----D---- C:\Program Files (x86)\Internet Explorer 2016-09-21 22:08:45 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI 2016-09-21 22:07:07 ----D---- C:\Windows\SysWOW64\nl-NL 2016-09-21 21:45:34 ----D---- C:\Windows\Prefetch 2016-09-21 13:58:19 ----RSD---- C:\Windows\assembly 2016-09-21 13:45:38 ----RSD---- C:\Windows\Fonts 2016-09-21 13:28:57 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client 2016-09-21 13:21:35 ----D---- C:\Program Files (x86)\Common Files 2016-09-21 13:16:40 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2016-09-20 18:53:30 ----RD---- C:\Program Files 2016-09-20 18:42:25 ----D---- C:\Program Files (x86)\Common Files\Apple 2016-09-17 18:35:22 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-09-17 18:35:06 ----D---- C:\Windows\SysWOW64\Macromed 2016-09-16 10:45:26 ----D---- C:\Windows\ehome 2016-09-16 10:45:23 ----D---- C:\Program Files (x86)\Common Files\System 2016-09-16 10:45:20 ----D---- C:\Windows\SysWOW64\wbem 2016-09-16 10:45:20 ----D---- C:\Windows\SysWOW64\migration 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\zh-HK 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\pt-PT 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\pt-BR 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\pl-PL 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\ko-KR 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\it-IT 2016-09-16 10:45:15 ----D---- C:\Windows\SysWOW64\hu-HU 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\zh-TW 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\zh-CN 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\tr-TR 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\sv-SE 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\ru-RU 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\nb-NO 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\ja-JP 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\fr-FR 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\fi-FI 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\es-ES 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\el-GR 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\de-DE 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\da-DK 2016-09-16 10:45:14 ----D---- C:\Windows\SysWOW64\cs-CZ 2016-09-16 10:10:51 ----D---- C:\Windows\Logs 2016-09-15 17:10:54 ----D---- C:\Windows\SysWOW64\Dism 2016-09-15 17:10:24 ----D---- C:\Windows\tracing 2016-09-15 17:10:24 ----D---- C:\Program Files (x86)\Windows Defender 2016-09-15 17:10:01 ----SD---- C:\ProgramData\Microsoft 2016-09-15 17:08:48 ----D---- C:\Program Files (x86)\Windows Media Player ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie64.sys [] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [] R0 waemu;waemu; C:\Windows\system32\Drivers\waemu.sys [] R1 SCDEmu;SCDEmu; C:\Windows\SysWOW64\drivers\SCDEmu.sys [] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [] R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [] R3 BCM43XX;Stuurprogramma voor de Broadcom 802.11-netwerkadapter; C:\Windows\system32\DRIVERS\bcmwl664.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [] R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [] R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [] R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [] R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [] R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [] S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [] S3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [] S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [] S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [] S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\Windows\system32\DRIVERS\dtliteusbbus.sys [] S3 dtproscsibus;DAEMON Tools Pro Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtproscsibus.sys [] S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [] S3 netr28x;Ralink 802.11n stuurprogramma voor draadloze netwerken voor Windows Vista; C:\Windows\system32\DRIVERS\netr28x.sys [] S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [] S3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-09-23 225280] S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [] S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [] S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [] S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [] S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2016-08-05 83768] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096] R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-03-18 822496] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\System32\ezSharedSvcHost.exe [2010-04-23 514232] R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-06-30 121344] R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992] R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-07-02 27192] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728] R2 RtVOsdService;RtVOsdService Installer; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [2010-06-17 315392] R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2014-10-08 534184] R2 WinArchiver Service;WinArchiver Service; C:\Program Files\WinArchiver\WAService.exe [2016-02-21 264840] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568] R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-05-14 230968] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2016-09-09 651576] R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2014-10-08 211104] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112] S2 CltMngSvc;Search Protect Service; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2016-09-29 3253008] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-17 270016] S3 GameConsoleService;GameConsoleService; C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe [2010-04-04 246520] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V [] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-09-26 172488] S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-08-02 2122248] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848] -----------------EOF-----------------