Results 1 to 5 of 5

Thread: **INFECTED** Win32:Aluroot-B [Rtk] - Logs included

  1. 2016-10-22, 18:35 #1
    Illusionz
    Illusionz is offline
    Junior Member
    Join Date
    Aug 2016
    Posts
    2

    Default **INFECTED** Win32:Aluroot-B [Rtk] - Logs included

    My system runs slow at various, undefined times, using almost all Virtual Memory OR High CP Usage. I have replaced my Wireless router and have started from scratch a few times. Formatted and re-installed the OS twice in two months. As soon as I install MS Office Home and Student 2007 things start getting strange, I think.


    With this newest install I'm finding that my Desktop (from the wallpaper to the Shortcuts and programs placed on it) will change with every reboot, including resolution.


    I have established preferred IP/DNS server/Gateway, Ipv4 and Ipv6 addresses, and Domain Servers on the router, and this PC to prevent repeated DNS client, TcPiP, and other network related errors. The majority of those were related to slow DHCP responses for the Ipv6 servers. I still get a few random events for that even though I took DHCP out of the loop.


    I have disabled HomeGroup services repeatedly and the folder keeps reappearing in my navigation pane, and when i go check, I'm either BACK in a homegroup i didn't create .... or I'm NOT in network discovery mode anymore. My usual settings are to say yes to discovery so I can view a network map (not very helpful), but I select to share nothing and disabled the media center sharing too. (Media Center is another fishy program for me).


    I have many 0 byte files throughout the MS Office files which belong to "Trusted Installer" and though I take ownership - it is often taken back from me although I set it to not be manipulated. ...... Same with my XPS printer files and settings. I take control and change settings and they are taken away from me. I also cannot find a way to remove my MS Office Home and Student 2007 as its not in the control panel. Office 12 seems to have taken over.


    This install has hardly ANY personal files. MS Office has more files than me :(


    I have svchost processes handling services I've never seen before, and its become too much to research and repair, and more and more services regarding "remote".


    Windows Firewall has been set back to Default a few times and I only allowed Spybot and Google Chrome through since (Chrome tells my WiFi which proxy we are using).


    I do not use Internet Explorer, and have not downloaded Firefox as a means of keeping things simple.
    Google Chrome goes through phases where it redirects me or does not offer me a truly safe https address even for sites known to be safe. The inspect tool will show a good certificate and "mixed content" or will have some scripts on the page. I dont download from anywhere until i have a truly safe https connection, but have to constantly keep an eye on it. Last night someone tried to access my Google Account.


    *example* https://forums.spybot.info/showthrea...tance)-Updated ... this page shows to be "https" but is grey and pushing the button for more info tells me my connection is private but someone on the network may be able to change the look of the page and presents this infomation:


    Security Overview
    This page is not secure.
    Valid Certificate
    The connection to this site is using a valid, trusted server certificate.
    View certificate
    Secure Connection
    The connection to this site is encrypted and authenticated using a strong protocol (TLS 1.2), a strong key exchange (ECDHE_RSA), and a strong cipher (CHACHA20_POLY1305).


    Mixed Content
    The site includes HTTP resources.
    vbulletin-core.js?v=423:11 This browser is AJAX compatible
    showthread.php:492 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/welcome.gif'. This content should also be served over HTTPS.
    showthread.php:508 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/smile.png'. This content should also be served over HTTPS.
    showthread.php:525 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/smile.png'. This content should also be served over HTTPS.
    showthread.php:529 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/wink.png'. This content should also be served over HTTPS.
    showthread.php:548 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/smile.png'. This content should also be served over HTTPS.
    showthread.php:556 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/smile.png'. This content should also be served over HTTPS.
    showthread.php:558 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/wink.png'. This content should also be served over HTTPS.
    showthread.php:562 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/images/smilies/thanks.gif'. This content should also be served over HTTPS.
    showthread.php:733 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://i280.photobucket.com/albums/kk173/Dakeyras_album2/TCRB-1.jpg'. This content should also be served over HTTPS.
    showthread.php:736 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://i280.photobucket.com/albums/kk173/Dakeyras_album2/TBRB-2.jpg'. This content should also be served over HTTPS.
    showthread.php:1440 Mixed Content: The page at 'https://forums.spybot.info/showthread.php?288-quot-BEFORE-You-POST-quot-(Please-read-this-Procedure-Before-Requesting-Assistance)-Updated' was loaded over HTTPS, but requested an insecure image 'http://forums.spybot.info/misc.php?do=email_dev&email=bGljZW5zZXNAc3B5Ym90LmluZm8='. This content should also be served over HTTPS.
    vbulletin-core.js?v=423:11 Fire vB_XHTML_Ready
    vbulletin-core.js?v=423:11 Fetch Cookie :: vbulletin_collapse (null)
    vbulletin-core.js?v=423:11 Fetch Cookie :: vbulletin_multiquote (null)
    vbulletin-core.js?v=423:11 Firing System Init


    I dont feel safe anymore! Please help!




    I've only used my anti-virus (Avira), Spybot (newest version), and Malwarebytes (nothing found).



    ========================================================
    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-10-2016
    Ran by Illusionz (administrator) on BOPEEPSHOME (21-10-2016 18:02:12)
    Running from C:\Users\Illusionz
    Loaded Profiles: Illusionz (Available Profiles: Illusionz)
    Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/




    ==================== Processes (Whitelisted) =================


    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)


    (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
    (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
    (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
    (Google Inc.) C:\Program Files\Google\Update\1.3.31.5\GoogleCrashHandler.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
    (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
    (Intel Corporation) C:\Windows\System32\igfxtray.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe




    ==================== Registry (Whitelisted) ====================


    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)


    HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61648 2016-09-26] (Avira Operations GmbH & Co. KG)
    HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917584 2016-09-27] (Avira Operations GmbH & Co. KG)
    HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
    HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\MountPoints2: {28215141-93be-11e6-b5ed-806e6f6e6963} - D:\SETUP.EXE
    HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-10-19] (Microsoft Corporation)
    BootExecute: autocheck autochk * sdnclean.exe


    ==================== Internet (Whitelisted) ====================


    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)


    Tcpip\..\Interfaces\{E66F4663-22B3-45D4-B878-9576B669E5F9}: [NameServer] 68.105.28.11,68.105.29.12


    Internet Explorer:
    ==================


    FireFox:
    ========
    FF ProfilePath: C:\Users\Illusionz\AppData\Roaming\Mozilla\Firefox\Profiles\KiARtjhm.default [2016-10-18]
    FF Extension: (No Name) - C:\Users\Illusionz\AppData\Roaming\Mozilla\Firefox\Profiles\KiARtjhm.default\Extensions\abs@avira.com [2016-10-18]
    FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-16] (Google Inc.)
    FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-16] (Google Inc.)


    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR StartupUrls: Default -> "hxxps://www.google.com/"
    CHR Profile: C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default [2016-10-21]
    CHR Extension: (Google Docs) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-18]
    CHR Extension: (Google Drive) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-16]
    CHR Extension: (YouTube) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-16]
    CHR Extension: (Avira Browser Safety) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-10-19]
    CHR Extension: (Google Docs Offline) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-18]
    CHR Extension: (Vintage Rose) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\lngamldcnpdjaofjjopkkdbfbcghjblp [2016-10-16]
    CHR Extension: (FreeCell) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\loaecokofmdgccldeaacoakfninhoboe [2016-10-17]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-18]
    CHR Extension: (Gmail) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-16]
    CHR Extension: (Chrome Media Router) - C:\Users\Illusionz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-18]
    CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx


    ==================== Services (Whitelisted) ====================


    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1086040 2016-09-27] (Avira Operations GmbH & Co. KG)
    R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [475232 2016-09-27] (Avira Operations GmbH & Co. KG)
    R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [475232 2016-09-27] (Avira Operations GmbH & Co. KG)
    S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1489240 2016-09-27] (Avira Operations GmbH & Co. KG)
    R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [350584 2016-09-26] (Avira Operations GmbH & Co. KG)
    R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)


    ===================== Drivers (Whitelisted) ======================


    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [118240 2016-09-27] (Avira Operations GmbH & Co. KG)
    R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140272 2016-09-27] (Avira Operations GmbH & Co. KG)
    R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
    R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
    R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [28568 2016-09-27] (Avira Operations GmbH & Co. KG)
    R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [379904 2010-03-31] (Realtek Semiconductor Corporation )


    ==================== NetSvcs (Whitelisted) ===================


    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)




    ==================== One Month Created files and folders ========


    (If an entry is included in the fixlist, the file/folder will be moved.)


    2016-10-21 18:01 - 2016-10-21 18:01 - 00153172 _____ C:\Users\Illusionz\Documents\FRST.txt
    2016-10-21 17:58 - 2016-10-21 18:00 - 00021226 _____ C:\Users\Illusionz\Addition.txt
    2016-10-21 17:57 - 2016-10-21 18:02 - 00008406 _____ C:\Users\Illusionz\FRST.txt
    2016-10-21 17:56 - 2016-10-21 18:02 - 00000000 ____D C:\FRST
    2016-10-21 17:56 - 2016-10-21 17:56 - 01756672 _____ (Farbar) C:\Users\Illusionz\FRST.exe
    2016-10-21 17:52 - 2016-10-21 17:52 - 00002181 _____ C:\Users\Illusionz\Desktop\Tweaking.com - Registry Backup.lnk
    2016-10-21 17:52 - 2016-10-21 17:52 - 00000000 ____D C:\Users\Illusionz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2016-10-21 17:52 - 2016-10-21 17:52 - 00000000 ____D C:\Program Files\Tweaking.com
    2016-10-21 17:51 - 2016-10-21 17:51 - 00000432 _____ C:\Users\Illusionz\Documents\SDRootkits.161021-1730.txt
    2016-10-21 17:49 - 2016-10-21 17:52 - 00017560 _____ C:\Windows\Tweaking.com - Registry Backup Setup Log.txt
    2016-10-21 17:48 - 2016-10-21 17:48 - 05596528 _____ (Tweaking.com) C:\Users\Illusionz\Downloads\tweaking.com_registry_backup_setup.exe
    2016-10-21 17:02 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
    2016-10-21 16:40 - 2016-10-21 16:40 - 07100088 _____ (VS Revo Group ) C:\Users\Illusionz\Downloads\revosetup.exe
    2016-10-21 04:23 - 2016-10-21 04:23 - 01065376 _____ (Google Inc.) C:\Users\Illusionz\Downloads\googledrivesync.exe
    2016-10-21 00:19 - 2012-07-25 20:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
    2016-10-21 00:19 - 2012-07-25 20:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
    2016-10-21 00:19 - 2012-07-25 20:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
    2016-10-21 00:19 - 2012-07-25 20:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
    2016-10-21 00:19 - 2012-07-25 20:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
    2016-10-21 00:19 - 2012-07-25 19:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
    2016-10-21 00:19 - 2012-07-25 19:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
    2016-10-21 00:19 - 2012-06-02 07:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    2016-10-21 00:18 - 2012-02-29 22:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
    2016-10-21 00:18 - 2012-02-29 22:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2016-10-20 23:58 - 2016-10-20 23:58 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2016-10-20 23:58 - 2016-10-20 23:58 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
    2016-10-20 23:58 - 2016-10-20 23:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2016-10-20 23:58 - 2016-10-20 23:58 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
    2016-10-20 23:58 - 2016-10-20 23:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
    2016-10-20 23:58 - 2016-10-20 23:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
    2016-10-20 23:58 - 2016-10-20 23:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2016-10-20 23:57 - 2016-10-20 23:57 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
    2016-10-20 23:54 - 2016-10-20 23:54 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
    2016-10-20 23:54 - 2016-10-20 23:54 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    2016-10-20 23:51 - 2016-10-20 23:51 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
    2016-10-20 19:28 - 2016-10-20 19:31 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2016-10-20 19:28 - 2016-10-20 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2016-10-20 19:28 - 2016-10-20 19:28 - 00000000 ____D C:\ProgramData\Malwarebytes
    2016-10-20 19:28 - 2016-10-20 19:28 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
    2016-10-20 19:28 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
    2016-10-20 19:28 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
    2016-10-20 19:28 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
    2016-10-20 19:26 - 2016-10-20 19:26 - 22851472 _____ (Malwarebytes ) C:\Users\Illusionz\Downloads\mbam-setup-2.2.1.1043.exe
    2016-10-20 19:00 - 2016-10-20 19:00 - 00388608 _____ (Trend Micro Inc.) C:\Users\Illusionz\Downloads\HijackThis.exe
    2016-10-20 18:42 - 2016-10-20 18:42 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
    2016-10-20 18:42 - 2016-10-20 18:42 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ___RD C:\Users\Public\Recorded TV
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ____D C:\Windows\system32\FxsTmp
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ____D C:\Windows\addins
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ____D C:\Program Files\Reference Assemblies
    2016-10-20 18:41 - 2016-10-20 18:41 - 00000000 ____D C:\Program Files\MSBuild
    2016-10-20 18:40 - 2016-10-20 20:04 - 00049870 _____ C:\Windows\ntbtlog.txt
    2016-10-20 17:32 - 2016-10-20 17:32 - 00013743 _____ C:\Users\Illusionz\Downloads\3179573.csv
    2016-10-20 16:14 - 2015-01-08 19:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
    2016-10-20 16:14 - 2015-01-08 19:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
    2016-10-20 16:14 - 2015-01-08 19:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
    2016-10-20 16:06 - 2015-11-11 11:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
    2016-10-20 16:06 - 2015-11-11 11:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
    2016-10-20 16:06 - 2015-07-09 10:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
    2016-10-20 16:06 - 2015-07-09 10:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
    2016-10-20 16:05 - 2013-07-02 20:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
    2016-10-20 16:05 - 2013-07-02 20:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
    2016-10-20 16:05 - 2012-07-04 12:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
    2016-10-20 16:02 - 2016-02-03 10:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
    2016-10-20 16:00 - 2016-02-02 11:48 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
    2016-10-20 15:56 - 2012-11-01 22:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
    2016-10-20 15:55 - 2015-07-10 10:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2016-10-20 15:55 - 2015-07-10 10:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
    2016-10-20 15:55 - 2015-07-10 10:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
    2016-10-20 15:55 - 2013-10-29 19:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
    2016-10-20 15:44 - 2013-02-11 20:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023x.sys
    2016-10-20 15:44 - 2013-02-11 20:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
    2016-10-20 15:44 - 2012-07-04 12:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rndismpx.sys
    2016-10-20 15:30 - 2016-02-09 02:50 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
    2016-10-20 14:11 - 2016-05-11 08:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
    2016-10-20 10:46 - 2011-06-15 21:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
    2016-10-20 10:14 - 2016-05-13 14:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2016-10-20 10:14 - 2016-05-13 14:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2016-10-20 10:14 - 2016-05-13 14:49 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2016-10-20 10:14 - 2016-05-13 14:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2016-10-20 10:14 - 2016-05-13 14:27 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2016-10-20 10:10 - 2016-03-17 15:30 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2016-10-20 10:10 - 2016-03-17 15:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2016-10-20 10:10 - 2016-03-17 15:26 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2016-10-20 10:10 - 2016-03-17 15:26 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2016-10-20 10:10 - 2016-03-17 14:36 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2016-10-20 10:10 - 2016-02-04 11:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
    2016-10-20 10:10 - 2016-01-06 11:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 15:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 14:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 14:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 14:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2016-10-20 10:09 - 2016-03-17 14:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2016-10-20 10:09 - 2013-01-23 21:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
    2016-10-20 10:08 - 2016-03-09 11:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
    2016-10-20 10:07 - 2015-08-05 10:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
    2016-10-20 10:06 - 2014-11-10 19:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
    2016-10-20 10:05 - 2016-06-25 12:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2016-10-20 10:05 - 2016-06-25 12:53 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2016-10-20 10:05 - 2016-06-25 12:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
    2016-10-20 10:05 - 2016-06-25 12:53 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
    2016-10-20 10:05 - 2016-06-25 12:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
    2016-10-20 10:05 - 2016-06-25 12:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
    2016-10-20 10:05 - 2016-06-25 12:41 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
    2016-10-20 10:05 - 2011-03-02 22:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
    2016-10-20 10:05 - 2011-03-02 22:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
    2016-10-20 10:05 - 2011-03-02 22:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
    2016-10-20 10:01 - 2013-10-18 18:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
    2016-10-20 10:00 - 2016-02-12 11:39 - 02956288 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2016-10-20 10:00 - 2016-02-12 11:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2016-10-20 10:00 - 2016-02-12 11:26 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
    2016-10-20 10:00 - 2016-02-12 11:07 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2016-10-20 10:00 - 2016-02-12 11:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2016-10-20 10:00 - 2016-02-12 11:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2016-10-20 10:00 - 2016-02-12 11:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2016-10-20 10:00 - 2016-02-12 11:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2016-10-20 10:00 - 2016-02-12 11:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2016-10-20 10:00 - 2016-02-12 11:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2016-10-20 10:00 - 2016-02-12 11:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
    2016-10-20 10:00 - 2014-08-11 18:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
    2016-10-20 09:59 - 2015-10-29 10:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
    2016-10-20 09:59 - 2015-10-29 10:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
    2016-10-20 09:59 - 2015-10-29 10:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
    2016-10-20 09:59 - 2015-10-29 10:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
    2016-10-20 09:59 - 2014-03-04 02:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
    2016-10-20 09:59 - 2014-03-04 02:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
    2016-10-20 09:59 - 2014-03-04 02:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
    2016-10-20 09:59 - 2014-03-04 02:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
    2016-10-20 09:59 - 2014-03-04 02:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
    2016-10-20 09:59 - 2014-03-04 02:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
    2016-10-20 09:59 - 2014-03-04 02:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
    2016-10-20 09:59 - 2013-10-11 19:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
    2016-10-20 09:59 - 2013-10-11 19:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
    2016-10-20 09:59 - 2013-10-11 18:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
    2016-10-20 09:59 - 2013-10-11 18:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
    2016-10-20 09:58 - 2016-05-12 08:18 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
    2016-10-20 09:58 - 2016-05-12 08:18 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
    2016-10-20 09:58 - 2016-05-12 08:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
    2016-10-20 09:58 - 2016-05-12 08:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
    2016-10-20 09:58 - 2016-05-12 08:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
    2016-10-20 09:58 - 2016-05-12 08:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
    2016-10-20 09:58 - 2016-02-03 11:49 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
    2016-10-20 09:58 - 2016-02-03 11:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
    2016-10-20 09:58 - 2012-08-21 13:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
    2016-10-20 09:57 - 2015-07-15 10:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
    2016-10-20 09:54 - 2011-08-16 21:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
    2016-10-20 09:54 - 2011-08-16 21:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
    2016-10-20 09:52 - 2015-10-13 09:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
    2016-10-20 09:52 - 2015-10-13 09:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2016-10-20 09:51 - 2013-05-09 20:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
    2016-10-20 09:50 - 2014-09-03 22:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
    2016-10-20 09:50 - 2011-08-26 21:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
    2016-10-20 09:49 - 2015-10-12 21:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
    2016-10-20 09:48 - 2015-11-03 11:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
    2016-10-20 09:48 - 2015-04-10 20:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
    2016-10-20 09:48 - 2015-03-03 21:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
    2016-10-20 09:48 - 2015-03-03 21:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
    2016-10-20 09:47 - 2013-05-12 20:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
    2016-10-20 09:47 - 2013-05-12 20:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
    2016-10-20 09:46 - 2016-03-15 16:53 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
    2016-10-20 09:46 - 2016-03-15 16:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
    2016-10-20 09:46 - 2015-01-16 19:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
    2016-10-20 09:45 - 2016-09-30 08:20 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
    2016-10-20 09:45 - 2016-09-30 08:20 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2016-10-20 09:45 - 2016-09-12 13:53 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2016-10-20 09:45 - 2016-09-12 13:49 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2016-10-20 09:45 - 2016-09-12 13:49 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
    2016-10-20 09:45 - 2016-09-12 13:28 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2016-10-20 09:45 - 2016-09-12 13:26 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2016-10-20 09:45 - 2016-09-12 13:26 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2016-10-20 09:45 - 2016-09-12 13:26 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2016-10-20 09:45 - 2016-09-10 08:53 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
    2016-10-20 09:45 - 2016-09-09 11:01 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2016-10-20 09:45 - 2016-09-09 10:59 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2016-10-20 09:45 - 2016-09-08 13:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
    2016-10-20 09:45 - 2016-09-08 13:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
    2016-10-20 09:45 - 2016-09-08 07:49 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2016-10-20 09:45 - 2016-09-08 07:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
    2016-10-20 09:45 - 2016-08-16 11:47 - 00419640 _____ C:\Windows\system32\locale.nls
    2016-10-20 09:45 - 2016-08-12 09:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2016-10-20 09:45 - 2016-08-12 09:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2016-10-20 09:45 - 2016-08-12 09:21 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
    2016-10-20 09:45 - 2016-08-06 08:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2016-10-20 09:45 - 2016-08-06 08:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2016-10-20 09:45 - 2016-08-06 08:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2016-10-20 09:45 - 2016-08-06 08:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2016-10-20 09:45 - 2016-08-06 07:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2016-10-20 09:45 - 2016-06-14 08:25 - 00078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2016-10-20 09:45 - 2016-06-14 08:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
    2016-10-20 09:45 - 2016-06-14 08:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
    2016-10-20 09:45 - 2016-06-14 08:17 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
    2016-10-20 09:45 - 2016-05-12 06:04 - 00370784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2016-10-20 09:45 - 2016-03-23 15:42 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
    2016-10-20 09:45 - 2016-03-23 15:39 - 00534816 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2016-10-20 09:45 - 2016-03-23 15:39 - 00470704 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2016-10-20 09:44 - 2016-09-15 08:15 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
    2016-10-20 09:44 - 2016-09-15 08:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
    2016-10-20 09:44 - 2016-09-12 13:53 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2016-10-20 09:44 - 2016-09-12 13:49 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2016-10-20 09:44 - 2016-09-12 13:49 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2016-10-20 09:44 - 2016-09-12 13:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2016-10-20 09:44 - 2016-09-12 13:25 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
    2016-10-20 09:44 - 2016-09-12 13:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2016-10-20 09:44 - 2016-09-12 13:25 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2016-10-20 09:44 - 2016-09-09 11:00 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2016-10-20 09:44 - 2016-09-09 11:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2016-10-20 09:44 - 2016-09-09 10:59 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2016-10-20 09:44 - 2016-09-09 10:59 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2016-10-20 09:44 - 2016-09-09 10:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2016-10-20 09:44 - 2016-09-09 10:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2016-10-20 09:44 - 2016-09-09 10:42 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2016-10-20 09:44 - 2016-09-09 10:42 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2016-10-20 09:44 - 2016-09-09 10:42 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2016-10-20 09:44 - 2016-09-09 10:42 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2016-10-20 09:44 - 2016-09-09 10:39 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2016-10-20 09:44 - 2016-09-09 10:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2016-10-20 09:44 - 2016-08-12 09:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
    2016-10-20 09:44 - 2016-08-12 09:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
    2016-10-20 09:44 - 2016-08-12 09:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
    2016-10-20 09:44 - 2016-08-06 08:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
    2016-10-20 09:44 - 2016-08-06 07:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
    2016-10-20 09:44 - 2016-08-06 07:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
    2016-10-20 09:44 - 2016-06-14 08:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
    2016-10-20 09:44 - 2016-06-14 08:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
    2016-10-20 09:44 - 2016-06-14 08:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2016-10-20 09:44 - 2016-06-14 08:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
    2016-10-20 09:44 - 2016-06-14 08:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
    2016-10-20 09:44 - 2016-06-14 08:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
    2016-10-20 09:44 - 2016-06-14 08:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2016-10-20 09:44 - 2016-06-14 08:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
    2016-10-20 09:44 - 2016-06-14 08:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
    2016-10-20 09:44 - 2016-06-14 08:00 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
    2016-10-20 09:44 - 2016-06-14 07:55 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
    2016-10-20 09:44 - 2016-06-14 07:55 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
    2016-10-20 09:44 - 2016-06-14 07:54 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
    2016-10-20 09:44 - 2016-05-12 06:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
    2016-10-20 09:43 - 2016-08-29 08:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2016-10-20 09:43 - 2016-08-29 08:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2016-10-20 09:43 - 2016-08-29 08:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2016-10-20 09:43 - 2016-08-29 07:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\explorer.exe
    2016-10-20 09:43 - 2014-02-03 19:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
    2016-10-20 09:43 - 2014-02-03 19:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
    2016-10-20 09:43 - 2014-02-03 19:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
    2016-10-20 09:43 - 2014-02-03 19:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
    2016-10-20 09:43 - 2012-10-03 09:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
    2016-10-20 09:43 - 2012-10-03 09:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
    2016-10-20 09:43 - 2012-10-03 09:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
    2016-10-20 09:42 - 2015-07-22 10:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
    2016-10-20 09:42 - 2015-07-22 10:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
    2016-10-20 09:42 - 2015-07-22 09:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
    2016-10-20 09:41 - 2015-07-09 10:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
    2016-10-20 09:41 - 2015-07-09 10:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
    2016-10-20 09:41 - 2012-06-05 22:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
    2016-10-20 09:41 - 2011-02-11 22:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
    2016-10-20 09:40 - 2016-08-15 19:48 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2016-10-20 09:40 - 2016-07-07 08:20 - 01309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2016-10-20 09:40 - 2016-07-07 08:20 - 00240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
    2016-10-20 09:40 - 2016-07-07 08:20 - 00187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2016-10-20 09:40 - 2016-07-07 07:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
    2016-10-20 09:40 - 2014-06-17 18:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
    2016-10-20 09:40 - 2012-07-04 14:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
    2016-10-20 09:40 - 2012-07-04 14:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
    2016-10-20 09:40 - 2012-07-04 14:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
    2016-10-20 09:39 - 2016-01-21 23:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
    2016-10-20 09:39 - 2016-01-21 23:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
    2016-10-20 09:39 - 2016-01-21 23:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
    2016-10-20 09:39 - 2016-01-21 23:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
    2016-10-20 09:39 - 2016-01-20 17:51 - 00057280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
    2016-10-20 09:39 - 2015-05-25 11:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
    2016-10-20 09:39 - 2015-05-25 11:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
    2016-10-20 09:39 - 2015-05-25 11:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
    2016-10-20 09:39 - 2015-05-25 11:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
    2016-10-20 09:39 - 2015-05-25 11:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
    2016-10-20 09:39 - 2015-05-25 11:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
    2016-10-20 09:38 - 2016-08-12 09:21 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
    2016-10-20 09:38 - 2016-08-12 09:21 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
    2016-10-20 09:38 - 2016-08-12 09:21 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
    2016-10-20 09:38 - 2015-11-03 11:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2016-10-20 09:38 - 2015-04-17 19:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2016-10-20 09:38 - 2015-04-12 20:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
    2016-10-20 09:38 - 2010-12-22 22:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
    2016-10-20 09:38 - 2010-12-22 22:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
    2016-10-20 09:37 - 2015-12-08 14:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
    2016-10-20 09:35 - 2016-03-06 11:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2016-10-20 09:35 - 2016-03-06 11:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
    2016-10-20 09:35 - 2015-11-05 12:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
    2016-10-20 09:35 - 2015-11-05 02:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
    2016-10-20 09:35 - 2015-02-02 20:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
    2016-10-20 09:35 - 2014-12-18 19:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
    2016-10-20 09:35 - 2014-12-11 10:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
    2016-10-20 09:35 - 2014-10-24 18:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
    2016-10-20 09:35 - 2013-07-25 18:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
    2016-10-20 09:35 - 2012-09-25 15:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
    2016-10-20 09:35 - 2012-03-17 00:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
    2016-10-20 09:35 - 2011-12-16 00:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
    2016-10-20 09:35 - 2011-06-15 01:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
    2016-10-20 09:35 - 2011-06-15 01:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
    2016-10-20 09:35 - 2011-06-15 01:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
    2016-10-20 09:35 - 2011-06-15 01:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
    2016-10-20 09:35 - 2011-06-15 01:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
    2016-10-20 09:34 - 2016-08-06 08:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2016-10-20 09:34 - 2016-02-05 11:58 - 00123328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
    2016-10-20 09:34 - 2016-02-05 11:44 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
    2016-10-20 09:34 - 2016-02-05 10:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
    2016-10-20 09:34 - 2015-11-19 07:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
    2016-10-20 09:34 - 2015-11-13 15:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
    2016-10-20 09:34 - 2015-11-13 15:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
    2016-10-20 09:34 - 2015-11-13 15:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
    2016-10-20 09:34 - 2015-06-03 13:22 - 00355456 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
    2016-10-20 09:34 - 2014-07-16 18:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
    2016-10-20 09:34 - 2014-07-16 18:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
    2016-10-20 09:34 - 2014-07-16 18:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
    2016-10-20 09:34 - 2014-07-16 18:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
    2016-10-20 09:34 - 2014-07-16 18:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
    2016-10-20 09:34 - 2014-07-16 18:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
    2016-10-20 09:34 - 2013-10-11 19:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
    2016-10-20 09:34 - 2013-10-11 19:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
    2016-10-20 09:34 - 2013-10-11 19:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
    2016-10-20 09:34 - 2013-08-04 18:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
    2016-10-20 09:34 - 2012-04-25 21:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
    2016-10-20 09:34 - 2012-04-25 21:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
    2016-10-20 09:33 - 2016-05-11 08:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
    2016-10-20 09:33 - 2016-05-11 08:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
    2016-10-20 09:33 - 2016-05-11 08:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
    2016-10-20 09:33 - 2016-05-11 08:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
    2016-10-20 09:33 - 2016-05-11 07:52 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
    2016-10-20 09:33 - 2015-07-14 19:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
    2016-10-20 09:33 - 2015-02-24 20:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
    2016-10-20 09:33 - 2014-12-05 20:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2016-10-20 09:33 - 2013-07-12 03:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
    2016-10-20 09:33 - 2013-07-12 03:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
    2016-10-20 09:33 - 2012-10-09 10:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
    2016-10-20 09:33 - 2012-10-09 10:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
    2016-10-20 09:33 - 2012-10-03 09:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
    2016-10-20 09:33 - 2012-10-03 09:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
    2016-10-20 09:32 - 2016-04-14 08:38 - 00105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2016-10-20 09:32 - 2016-04-14 08:33 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2016-10-20 09:32 - 2016-04-14 08:33 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
    2016-10-20 09:32 - 2016-04-14 08:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2016-10-20 09:32 - 2016-04-14 08:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
    2016-10-20 09:32 - 2016-04-14 08:11 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
    2016-10-20 09:32 - 2015-12-08 14:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 01202688 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
    2016-10-20 09:32 - 2015-12-08 14:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
    2016-10-20 09:32 - 2015-12-08 14:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
    2016-10-20 09:32 - 2015-12-08 14:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
    2016-10-20 09:32 - 2015-12-08 14:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
    2016-10-20 09:32 - 2015-12-08 14:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
    2016-10-20 09:32 - 2015-12-08 14:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
    2016-10-20 09:32 - 2015-12-08 14:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
    2016-10-20 09:32 - 2015-12-08 14:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
    2016-10-20 09:32 - 2015-12-08 14:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
    2016-10-20 09:32 - 2015-12-08 14:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
    2016-10-20 09:32 - 2015-12-08 14:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
    2016-10-20 09:32 - 2015-12-08 14:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
    2016-10-20 09:32 - 2015-12-08 14:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
    2016-10-20 09:32 - 2015-12-08 14:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
    2016-10-20 09:32 - 2013-06-25 15:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
    2016-10-20 09:32 - 2011-12-29 22:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
    2016-10-20 09:32 - 2011-05-03 21:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2016-10-20 09:32 - 2011-05-03 21:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2016-10-20 09:32 - 2011-05-03 21:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2016-10-20 09:32 - 2011-05-03 21:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
    2016-10-20 09:32 - 2011-05-03 21:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2016-10-20 09:32 - 2011-05-03 21:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
    2016-10-20 09:32 - 2011-05-03 21:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
    2016-10-20 09:32 - 2011-05-03 21:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
    2016-10-20 09:32 - 2011-05-03 21:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
    2016-10-20 09:32 - 2011-02-17 22:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
    2016-10-20 09:31 - 2015-06-01 16:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
    2016-10-20 09:31 - 2014-01-28 19:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
    2016-10-20 09:31 - 2012-01-04 01:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
    2016-10-20 09:31 - 2011-05-24 03:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
    2016-10-20 09:31 - 2011-03-10 22:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
    2016-10-20 09:31 - 2011-03-10 22:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
    2016-10-20 09:31 - 2011-02-22 21:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
    2016-10-20 08:44 - 2016-04-08 23:59 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
    2016-10-20 08:44 - 2016-04-08 23:59 - 00218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
    2016-10-20 08:44 - 2016-04-08 23:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
    2016-10-20 08:44 - 2015-07-14 19:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2016-10-20 08:44 - 2015-07-14 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
    2016-10-20 08:44 - 2014-12-07 19:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2016-10-20 08:44 - 2013-11-26 18:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
    2016-10-20 08:44 - 2013-11-26 18:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
    2016-10-20 08:44 - 2013-11-26 18:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
    2016-10-20 08:44 - 2013-11-26 18:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
    2016-10-20 08:44 - 2013-11-26 18:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
    2016-10-20 08:44 - 2013-11-26 18:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
    2016-10-20 08:44 - 2013-11-26 18:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
    2016-10-20 08:43 - 2015-04-24 10:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
    2016-10-20 08:39 - 2016-01-11 11:54 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
    2016-10-20 08:39 - 2014-10-13 18:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
    2016-10-20 08:36 - 2012-02-16 21:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
    2016-10-20 08:35 - 2012-02-16 22:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
    2016-10-20 08:33 - 2016-05-18 09:10 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2016-10-20 06:33 - 2016-10-20 06:34 - 89317336 _____ C:\Users\Illusionz\Downloads\facebook-100008537582562.zip
    2016-10-20 05:09 - 2016-10-20 05:10 - 00000000 ____D C:\Users\Illusionz\Computer Maintenance
    2016-10-19 20:43 - 2016-10-19 20:43 - 00457351 _____ C:\Users\Illusionz\Documents\svchost.dmp
    2016-10-19 20:03 - 2016-10-19 21:05 - 00000000 ____D C:\Users\Illusionz\Downloads\ProcessExplorer
    2016-10-19 20:02 - 2016-10-19 20:03 - 01270466 _____ C:\Users\Illusionz\Downloads\ProcessExplorer.zip
    2016-10-19 16:21 - 2016-10-19 16:21 - 00000000 ____D C:\Users\Illusionz\Documents\Receipts
    2016-10-19 05:52 - 2016-10-19 05:52 - 00000000 ____D C:\Windows\system32\SPReview
    2016-10-19 05:48 - 2016-10-19 05:48 - 00000000 ____D C:\Windows\system32\EventProviders
    2016-10-19 05:36 - 2010-11-20 05:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
    2016-10-19 05:36 - 2010-11-20 05:30 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
    2016-10-19 05:36 - 2010-11-20 05:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
    2016-10-19 05:36 - 2010-11-20 05:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
    2016-10-19 05:36 - 2010-11-20 05:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
    2016-10-19 05:36 - 2010-11-20 05:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
    2016-10-19 05:36 - 2010-11-20 05:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
    2016-10-19 05:36 - 2010-11-20 05:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
    2016-10-19 05:36 - 2010-11-20 05:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
    2016-10-19 05:36 - 2010-11-20 05:20 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
    2016-10-19 05:36 - 2010-11-20 05:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
    2016-10-19 05:36 - 2010-11-20 05:19 - 01698816 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
    2016-10-19 05:36 - 2010-11-20 05:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
    2016-10-19 05:36 - 2010-11-20 05:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
    2016-10-19 05:36 - 2010-11-20 05:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
    2016-10-19 05:36 - 2010-11-20 05:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
    2016-10-19 05:36 - 2010-11-20 05:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
    2016-10-19 05:36 - 2010-11-20 05:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
    2016-10-19 05:36 - 2010-11-20 05:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
    2016-10-19 05:36 - 2010-11-20 05:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
    2016-10-19 05:36 - 2010-11-20 05:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
    2016-10-19 05:36 - 2010-11-20 05:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
    2016-10-19 05:36 - 2010-11-20 05:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
    2016-10-19 05:36 - 2010-11-20 05:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
    2016-10-19 05:36 - 2010-11-20 05:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
    2016-10-19 05:36 - 2010-11-20 05:17 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
    2016-10-19 05:36 - 2010-11-20 05:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
    2016-10-19 05:36 - 2010-11-20 03:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
    2016-10-19 05:36 - 2010-11-20 03:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
    2016-10-19 05:36 - 2010-11-04 19:20 - 00146852 _____ C:\Windows\system32\systemsf.ebd
    2016-10-19 05:36 - 2010-11-04 18:58 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
    2016-10-19 05:36 - 2010-11-04 18:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
    2016-10-19 05:36 - 2010-11-04 18:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
    2016-10-19 05:36 - 2010-11-04 18:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
    2016-10-19 05:35 - 2010-11-20 05:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
    2016-10-19 05:35 - 2010-11-20 05:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
    2016-10-19 05:35 - 2010-11-20 05:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
    2016-10-19 05:35 - 2010-11-20 05:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
    2016-10-19 05:35 - 2010-11-20 05:29 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
    2016-10-19 05:35 - 2010-11-20 05:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
    2016-10-19 05:35 - 2010-11-20 05:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
    2016-10-19 05:35 - 2010-11-20 05:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
    2016-10-19 05:35 - 2010-11-20 05:29 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
    2016-10-19 05:35 - 2010-11-20 05:29 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
    2016-10-19 05:35 - 2010-11-20 05:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
    2016-10-19 05:35 - 2010-11-20 05:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
    2016-10-19 05:35 - 2010-11-20 05:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
    2016-10-19 05:35 - 2010-11-20 05:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
    2016-10-19 05:35 - 2010-11-20 05:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
    2016-10-19 05:35 - 2010-11-20 05:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
    2016-10-19 05:35 - 2010-11-20 05:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
    2016-10-19 05:35 - 2010-11-20 05:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
    2016-10-19 05:35 - 2010-11-20 05:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
    2016-10-19 05:35 - 2010-11-20 05:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
    2016-10-19 05:35 - 2010-11-20 05:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
    2016-10-19 05:35 - 2010-11-20 05:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
    2016-10-19 05:35 - 2010-11-20 05:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
    2016-10-19 05:35 - 2010-11-20 05:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
    2016-10-19 05:35 - 2010-11-20 05:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
    2016-10-19 05:35 - 2010-11-20 05:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
    2016-10-19 05:35 - 2010-11-20 05:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
    2016-10-19 05:35 - 2010-11-20 05:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
    2016-10-19 05:35 - 2010-11-20 05:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
    2016-10-19 05:35 - 2010-11-20 05:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
    2016-10-19 05:35 - 2010-11-20 05:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
    2016-10-19 05:35 - 2010-11-20 05:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
    2016-10-19 05:35 - 2010-11-20 05:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
    2016-10-19 05:35 - 2010-11-20 04:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2016-10-19 05:35 - 2010-11-20 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
    2016-10-19 05:35 - 2010-11-20 02:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusb.sys
    2016-10-19 05:35 - 2010-11-20 01:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
    2016-10-19 05:35 - 2010-11-20 01:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
    2016-10-19 05:35 - 2010-11-04 18:58 - 00155472 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
    2016-10-19 05:35 - 2010-11-04 18:58 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
    2016-10-19 05:35 - 2010-11-04 18:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
    2016-10-19 05:34 - 2010-11-20 05:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
    2016-10-19 05:34 - 2010-11-20 05:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
    2016-10-19 05:34 - 2010-11-20 05:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
    2016-10-19 05:34 - 2010-11-20 05:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
    2016-10-19 05:34 - 2010-11-20 05:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
    2016-10-19 05:34 - 2010-11-20 05:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
    2016-10-19 05:34 - 2010-11-20 05:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
    2016-10-19 05:34 - 2010-11-20 05:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
    2016-10-19 05:34 - 2010-11-20 05:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
    2016-10-19 05:34 - 2010-11-20 05:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
    2016-10-19 05:34 - 2010-11-20 05:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
    2016-10-19 05:34 - 2010-11-20 05:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
    2016-10-19 05:34 - 2010-11-20 05:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
    2016-10-19 05:34 - 2010-11-20 05:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
    2016-10-19 05:34 - 2010-11-20 05:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
    2016-10-19 05:34 - 2010-11-20 05:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
    2016-10-19 05:34 - 2010-11-20 05:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
    2016-10-19 05:34 - 2010-11-20 05:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
    2016-10-19 05:34 - 2010-11-20 05:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
    2016-10-19 05:34 - 2010-11-20 05:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
    2016-10-19 05:34 - 2010-11-20 05:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
    2016-10-19 05:34 - 2010-11-20 05:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
    2016-10-19 05:34 - 2010-11-20 05:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
    2016-10-19 05:34 - 2010-11-20 05:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
    2016-10-19 05:34 - 2010-11-20 05:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
    2016-10-19 05:34 - 2010-11-20 05:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
    2016-10-19 05:34 - 2010-11-20 05:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
    2016-10-19 05:34 - 2010-11-20 05:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
    2016-10-19 05:34 - 2010-11-20 05:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
    2016-10-19 05:34 - 2010-11-20 05:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
    2016-10-19 05:34 - 2010-11-20 05:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
    2016-10-19 05:34 - 2010-11-20 05:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2016-10-19 05:34 - 2010-11-20 05:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
    2016-10-19 05:34 - 2010-11-20 05:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
    2016-10-19 05:34 - 2010-11-20 05:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
    2016-10-19 05:34 - 2010-11-20 05:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
    2016-10-19 05:34 - 2010-11-20 05:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
    2016-10-19 05:34 - 2010-11-20 05:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
    2016-10-19 05:34 - 2010-11-20 05:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
    2016-10-19 05:34 - 2010-11-20 05:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
    2016-10-19 05:34 - 2010-11-20 04:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
    2016-10-19 05:34 - 2010-11-20 04:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
    2016-10-19 05:34 - 2010-11-20 03:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
    2016-10-19 05:34 - 2010-11-20 03:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
    2016-10-19 05:34 - 2010-11-20 03:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys
    2016-10-19 05:34 - 2010-11-20 03:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll
    2016-10-19 05:34 - 2010-11-20 03:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys
    2016-10-19 05:34 - 2010-11-20 03:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
    2016-10-19 05:34 - 2010-11-20 03:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
    2016-10-19 05:34 - 2010-11-20 03:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
    2016-10-19 05:34 - 2010-11-20 03:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
    2016-10-19 05:34 - 2010-11-20 03:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
    2016-10-19 05:34 - 2010-11-20 03:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
    2016-10-19 05:34 - 2010-11-20 03:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
    2016-10-19 05:34 - 2010-11-20 03:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
    2016-10-19 05:34 - 2010-11-20 03:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
    2016-10-19 05:34 - 2010-11-20 02:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
    2016-10-19 05:34 - 2010-11-20 02:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
    2016-10-19 05:34 - 2010-11-20 02:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
    2016-10-19 05:34 - 2010-11-20 02:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
    2016-10-19 05:34 - 2010-11-20 02:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
    2016-10-19 05:34 - 2010-11-20 02:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
    2016-10-19 05:34 - 2010-11-20 02:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
    2016-10-19 05:34 - 2010-11-20 02:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
    2016-10-19 05:34 - 2010-11-20 01:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
    2016-10-19 05:34 - 2010-11-20 01:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
    2016-10-19 05:34 - 2010-11-20 01:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
    2016-10-19 05:34 - 2010-11-19 22:23 - 00053600 _____ C:\Windows\system32\dosx.exe
    2016-10-19 05:34 - 2010-11-09 18:45 - 00010429 _____ C:\Windows\system32\ScavengeSpace.xml
    2016-10-19 05:34 - 2010-11-04 19:20 - 00105559 _____ C:\Windows\system32\RacRules.xml
    2016-10-19 05:34 - 2010-11-04 19:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
    2016-10-19 05:33 - 2010-11-20 05:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
    2016-10-19 05:33 - 2010-11-20 05:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
    2016-10-19 04:54 - 2016-10-19 04:54 - 00001709 _____ C:\Users\Illusionz\Desktop\Avira - Shortcut.lnk
    2016-10-19 04:43 - 2009-06-10 14:39 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20161019-044336.backup
    2016-10-19 02:34 - 2016-10-19 02:34 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
    2016-10-19 01:21 - 2016-10-19 01:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
    2016-10-18 20:53 - 2016-10-18 20:53 - 00000000 ____D C:\Users\Illusionz\AppData\Roaming\Avira
    2016-10-18 20:49 - 2009-06-10 14:39 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20161018-204904.backup
    2016-10-18 20:48 - 2016-10-18 20:49 - 141042968 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2016-10-18 20:48 - 2009-09-23 19:30 - 01002008 _____ (Intel Corporation) C:\Windows\system32\igxpun.exe
    2016-10-18 20:45 - 2016-10-18 20:45 - 00002131 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2016-10-18 20:45 - 2016-10-18 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2016-10-18 20:45 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
    2016-10-18 20:43 - 2016-10-18 20:44 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Illusionz\Downloads\spybot-2.4.exe
    2016-10-18 20:40 - 2011-04-08 22:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
    2016-10-18 20:38 - 2016-10-18 20:38 - 00000000 ____D C:\Users\Illusionz\AppData\Roaming\Mozilla
    2016-10-18 20:37 - 2016-09-27 14:19 - 00028568 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avusbflt.sys
    2016-10-18 20:35 - 2016-09-27 14:19 - 00140272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
    2016-10-18 20:35 - 2016-09-27 14:19 - 00118240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
    2016-10-18 20:35 - 2016-09-27 14:19 - 00060088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
    2016-10-18 20:35 - 2016-09-27 14:19 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
    2016-10-18 20:35 - 2016-09-27 14:19 - 00018760 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\ssmdrv.sys
    2016-10-18 20:31 - 2016-10-18 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
    2016-10-18 20:31 - 2016-10-18 20:31 - 04480896 _____ (Avira Operations GmbH & Co. KG) C:\Users\Illusionz\Downloads\avira_en_av_5803b531d1bbc__ws (1).exe
    2016-10-18 20:31 - 2016-10-18 20:31 - 00000000 ____D C:\ProgramData\Package Cache
    2016-10-18 20:31 - 2016-06-25 08:43 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
    2016-10-18 19:10 - 2016-10-18 19:10 - 00000000 ____D C:\Program Files\Common Files\AV
    2016-10-18 18:44 - 2016-10-18 18:44 - 00313366 _____ C:\Users\Illusionz\Downloads\WindowsUpdateDiagnostic.diagcab
    2016-10-18 17:00 - 2016-10-18 17:00 - 00106021 _____ C:\Users\Illusionz\Documents\bookmarks_10_18_16.html
    2016-10-17 17:33 - 2016-10-21 16:28 - 00000000 ____D C:\Users\Illusionz\Documents\OneNote Notebooks
    2016-10-16 19:56 - 2016-10-16 19:56 - 00000000 ____D C:\Users\Illusionz\Documents\ProcAlyzer Dumps
    2016-10-16 19:47 - 2016-10-18 20:53 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
    2016-10-16 19:47 - 2016-10-18 20:48 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
    2016-10-16 19:16 - 2016-10-16 19:16 - 00000000 ____D C:\Windows\PCHEALTH
    2016-10-16 19:13 - 2016-10-21 16:28 - 00000000 ____D C:\Program Files\Microsoft Office
    2016-10-16 19:13 - 2016-10-16 19:13 - 00000000 ____D C:\Users\Illusionz\AppData\Local\Microsoft Help
    2016-10-16 19:00 - 2016-10-16 19:00 - 00000000 ____D C:\Users\Illusionz\AppData\Local\AviraSpeedup
    2016-10-16 12:01 - 2016-10-18 20:59 - 00000000 ____D C:\Windows\system32\MRT
    2016-10-16 11:52 - 2016-10-16 11:52 - 07390447 _____ C:\Users\Illusionz\Downloads\awll3028_drv_util.zip
    2016-10-16 11:52 - 2016-10-16 11:52 - 07390447 _____ C:\Users\Illusionz\Downloads\awll3028_drv_util (2).zip
    2016-10-16 11:52 - 2016-10-16 11:52 - 07390447 _____ C:\Users\Illusionz\Downloads\awll3028_drv_util (1).zip
    2016-10-16 11:47 - 2016-10-18 19:59 - 00000000 ____D C:\Users\Illusionz\AppData\Local\Avira
    2016-10-16 11:42 - 2016-10-18 19:58 - 00000000 ____D C:\Windows\system32\Macromed
    2016-10-16 11:30 - 2016-10-21 03:26 - 00000000 ____D C:\Users\Illusionz\AppData\Roaming\Adobe
    2016-10-16 11:30 - 2016-10-16 11:30 - 00000000 ____D C:\Users\Illusionz\AppData\LocalLow\Adobe
    2016-10-16 11:29 - 2016-10-18 19:59 - 00000000 ____D C:\Program Files\Common Files\Adobe
    2016-10-16 11:29 - 2016-10-16 11:29 - 00000000 ____D C:\Program Files\Adobe
    2016-10-16 11:28 - 2016-10-16 11:31 - 00000000 ____D C:\ProgramData\Adobe
    2016-10-16 11:27 - 2016-10-16 11:41 - 00000000 ____D C:\Users\Illusionz\AppData\Local\Adobe
    2016-10-16 11:08 - 2016-10-16 11:08 - 00000000 ____D C:\Windows\system32\x64
    2016-10-16 11:04 - 2016-10-20 18:46 - 00000000 ____D C:\Users\Illusionz\AppData\Local\ElevatedDiagnostics
    2016-10-16 10:32 - 2016-10-16 09:45 - 00000000 ____D C:\Windows\Panther
    2016-10-16 10:19 - 2016-10-18 20:02 - 00000000 ____D C:\Users\Illusionz\Downloads\0868477185362bab1b - Win7 sp1 install
    2016-10-16 10:19 - 2016-10-18 19:59 - 00000000 ____D C:\Users\Illusionz\Downloads\0868477185362bab1b -Windows install stuff
    2016-10-16 10:17 - 2016-10-16 10:17 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
    2016-10-16 10:17 - 2016-10-16 10:17 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
    2016-10-16 10:17 - 2012-07-25 20:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
    2016-10-16 10:17 - 2012-07-25 19:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
    2016-10-16 10:17 - 2012-06-02 07:34 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
    2016-10-16 10:14 - 2016-10-18 20:35 - 00000000 ____D C:\ProgramData\Avira
    2016-10-16 10:14 - 2016-10-18 20:35 - 00000000 ____D C:\Program Files\Avira
    2016-10-16 10:13 - 2016-10-16 10:13 - 04480896 _____ (Avira Operations GmbH & Co. KG) C:\Users\Illusionz\Downloads\avira_en_av_5803b531d1bbc__ws.exe
    2016-10-16 10:12 - 2016-10-19 16:15 - 00002141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-10-16 10:11 - 2016-10-21 17:52 - 00057560 _____ C:\Users\Illusionz\AppData\Local\GDIPFONTCACHEV1.DAT
    2016-10-16 10:11 - 2016-10-21 17:16 - 00000892 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2016-10-16 10:11 - 2016-10-21 10:16 - 00000888 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2016-10-16 10:11 - 2016-10-18 19:59 - 00000000 ____D C:\Users\Illusionz\AppData\Local\Apps\2.0
    2016-10-16 10:11 - 2016-10-18 19:52 - 00000000 ____D C:\Users\Illusionz\AppData\Local\Google
    2016-10-16 10:11 - 2016-10-16 10:12 - 00000000 ____D C:\Program Files\Google
    2016-10-16 10:11 - 2016-10-16 10:11 - 00000000 ____D C:\Users\Illusionz\AppData\Local\Deployment
    2016-10-16 09:55 - 2016-07-26 14:24 - 00406184 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2016-10-16 09:47 - 2016-10-16 09:47 - 00000000 ____D C:\Users\Illusionz\AppData\LocalLow\Temp
    2016-10-16 09:45 - 2016-10-21 18:01 - 00000000 ____D C:\Users\Illusionz
    2016-10-16 09:45 - 2016-10-16 09:45 - 00001413 _____ C:\Users\Illusionz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2016-10-16 09:45 - 2016-10-16 09:45 - 00000020 ___SH C:\Users\Illusionz\ntuser.ini
    2016-10-16 09:45 - 2016-10-16 09:45 - 00000000 _SHDL C:\Users\Illusionz\My Documents
    2016-10-16 09:45 - 2016-10-16 09:45 - 00000000 _SHDL C:\Users\Illusionz\Documents\My Videos
    2016-10-16 09:45 - 2016-10-16 09:45 - 00000000 _SHDL C:\Users\Illusionz\Documents\My Pictures
    2016-10-16 09:45 - 2016-10-16 09:45 - 00000000 _SHDL C:\Users\Illusionz\Documents\My Music
    2016-10-16 09:45 - 2016-10-16 09:45 - 00000000 ____D C:\Users\Illusionz\AppData\Local\VirtualStore
    2016-10-16 09:45 - 2009-07-14 00:48 - 00000000 ____D C:\Users\Illusionz\AppData\Roaming\Media Center Programs
    2016-10-16 09:43 - 2016-10-21 03:31 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
    2016-10-16 09:35 - 2016-10-16 09:35 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk


    ==================== One Month Modified files and folders ========


    (If an entry is included in the fixlist, the file/folder will be moved.)


    2016-10-21 17:04 - 2009-07-13 19:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2016-10-21 09:10 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\rescache
    2016-10-21 05:39 - 2009-07-13 21:34 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2016-10-21 05:39 - 2009-07-13 21:34 - 00014944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2016-10-21 03:31 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\inf
    2016-10-21 03:23 - 2009-07-13 21:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2016-10-21 03:23 - 2009-07-13 21:33 - 00266320 _____ C:\Windows\system32\FNTCACHE.DAT
    2016-10-21 01:21 - 2009-07-13 19:37 - 00000000 ____D C:\Program Files\Common Files\System
    2016-10-21 01:20 - 2009-07-13 21:52 - 00000000 ____D C:\Program Files\Windows Defender
    2016-10-21 01:20 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\PolicyDefinitions
    2016-10-20 23:07 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\tracing
    2016-10-20 23:07 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\Dism
    2016-10-20 18:41 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\Setup
    2016-10-20 15:55 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\NDF
    2016-10-19 16:06 - 2009-07-13 21:52 - 00000000 ____D C:\Program Files\Windows Sidebar
    2016-10-19 16:06 - 2009-07-13 21:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
    2016-10-19 16:06 - 2009-07-13 21:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
    2016-10-19 16:06 - 2009-07-13 21:52 - 00000000 ____D C:\Program Files\DVD Maker
    2016-10-19 16:06 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\sysprep
    2016-10-19 16:06 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\oobe
    2016-10-19 16:06 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\migwiz
    2016-10-19 16:06 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\manifeststore
    2016-10-19 16:06 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
    2016-10-19 16:06 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\servicing
    2016-10-19 06:08 - 2009-07-13 19:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
    2016-10-18 20:00 - 2009-07-13 21:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 __RSD C:\Windows\Media
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 __RHD C:\Users\Public\Libraries
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\TAPI
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\ras
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\Msdtc
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\lv-LV
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\lt-LT
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\ias
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\et-EE
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\L2Schemas
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\IME
    2016-10-18 20:00 - 2009-07-13 19:37 - 00000000 ____D C:\Program Files\Common Files\Services
    2016-10-18 19:59 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\MUI
    2016-10-18 19:59 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\security
    2016-10-18 19:59 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\AppCompat
    2016-10-18 19:57 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\registration
    2016-10-16 10:31 - 2009-07-13 21:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template


    Files to move or delete:
    ====================
    C:\Users\Illusionz\FRST.exe




    Some files in TEMP:
    ====================
    C:\Users\Illusionz\AppData\Local\Temp\ose00000.exe




    ==================== Bamital & volsnap ======================


    (There is no automatic fix for files that do not pass verification.)


    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed




    LastRegBack: 2016-10-16 12:48


    ==================== End of FRST.txt ============================





    Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-10-2016
    Ran by Illusionz (21-10-2016 18:02:36)
    Running from C:\Users\Illusionz
    Microsoft Windows 7 Home Premium Service Pack 1 (X86) (2016-10-16 16:45:04)
    Boot Mode: Normal
    ==========================================================




    ==================== Accounts: =============================


    Administrator (S-1-5-21-919443778-2045338895-2174037859-500 - Administrator - Disabled)
    Guest (S-1-5-21-919443778-2045338895-2174037859-501 - Limited - Disabled)
    Illusionz (S-1-5-21-919443778-2045338895-2174037859-1000 - Administrator - Enabled) => C:\Users\Illusionz


    ==================== Security Center ========================


    (If an entry is included in the fixlist, it will be removed.)


    AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
    AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}


    ==================== Installed Programs ======================


    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)


    Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.22.54 - Avira Operations GmbH & Co. KG)
    Avira Connect (HKLM\...\{ee247a19-722f-4096-884b-47ec3b7ec396}) (Version: 1.2.73.15322 - Avira Operations GmbH & Co. KG)
    Avira Connect (Version: 1.2.73.15322 - Avira Operations GmbH & Co. KG) Hidden
    Google Chrome (HKLM\...\Google Chrome) (Version: 54.0.2840.59 - Google Inc.)
    Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
    Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
    Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    Tweaking.com - Registry Backup (HKLM\...\Tweaking.com - Registry Backup) (Version: 3.5.2 - Tweaking.com)


    ==================== Custom CLSID (Whitelisted): ==========================


    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)




    ==================== Scheduled Tasks (Whitelisted) =============


    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    Task: {0B0248EC-C556-4154-9FF9-3DAB992C53DE} - System32\Tasks\{5F83EF10-B4ED-4277-A70A-E67824CAD5AB} => pcalua.exe -a D:\setup.exe -d D:\
    Task: {190F547F-07ED-43D6-8F5C-5F7525C525D7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {1DBAE2A1-64C5-4E31-BDBF-1F56D81E5641} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
    Task: {64EC1BB6-1016-4690-AACA-382EC19BEE15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-16] (Google Inc.)
    Task: {78CB3DD9-A53C-4615-869B-A92A65FC8AD5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
    Task: {BF2B34D5-A3A4-421B-8F5F-97869360446B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-16] (Google Inc.)
    Task: {F73D957E-BC5A-4037-9030-341245557BDA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)


    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe


    ==================== Shortcuts =============================


    (The entries could be listed to be restored or removed.)


    ==================== Loaded Modules (Whitelisted) ==============


    2016-10-16 19:47 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2016-10-16 19:47 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
    2016-10-16 19:47 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2016-10-18 20:45 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
    2016-10-18 20:45 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll


    ==================== Alternate Data Streams (Whitelisted) =========


    (If an entry is included in the fixlist, only the ADS will be removed.)




    ==================== Safe Mode (Whitelisted) ===================


    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)




    ==================== Association (Whitelisted) ===============


    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)




    ==================== Internet Explorer trusted/restricted ===============


    (If an entry is included in the fixlist, it will be removed from the registry.)


    IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
    IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
    IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
    IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
    IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
    IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
    IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
    IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
    IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
    IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
    IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
    IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
    IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
    IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
    IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
    IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
    IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
    IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
    IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
    IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com


    There are 7915 more sites.


    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\007guard.com -> install.007guard.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\008i.com -> 008i.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\008k.com -> www.008k.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\00hq.com -> www.00hq.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\010402.com -> 010402.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\0scan.com -> www.0scan.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\1-2005-search.com -> www.1-2005-search.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\1000gratisproben.com -> www.1000gratisproben.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\1001namen.com -> www.1001namen.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\100888290cs.com -> mir.100888290cs.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\100sexlinks.com -> www.100sexlinks.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\10sek.com -> www.10sek.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\12-26.net -> user1.12-26.net
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\12-27.net -> user1.12-27.net
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\123fporn.info -> www.123fporn.info
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\123moviedownload.com -> www.123moviedownload.com
    IE restricted site: HKU\S-1-5-21-919443778-2045338895-2174037859-1000\...\123simsen.com -> www.123simsen.com


    There are 7915 more sites.




    ==================== Hosts content: ===============================


    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)


    2009-07-13 19:04 - 2009-06-10 14:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts




    ==================== Other Areas ============================


    (Currently there is no automatic fix for this section.)


    HKU\S-1-5-21-919443778-2045338895-2174037859-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Illusionz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 68.105.28.11 - 68.105.29.12
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.


    ==================== MSCONFIG/TASK MANAGER disabled items ==




    ==================== FirewallRules (Whitelisted) ===============


    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    FirewallRules: [{39247F12-B714-48A6-82FF-F12589AD72D0}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
    FirewallRules: [{CD6D56FA-5180-4AFF-B2CA-86E6B5611BBB}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
    StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
    StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
    StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
    StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service


    ==================== Restore Points =========================


    20-10-2016 01:54:40 Windows Update
    20-10-2016 16:46:04 Windows Modules Installer
    20-10-2016 17:44:35 Installed Easy fix 51044
    20-10-2016 21:37:01 Installed Microsoft Office Home and Student 2007
    20-10-2016 21:40:53 Installed Microsoft Office Home and Student 2007
    20-10-2016 21:47:49 Installed Microsoft Office Excel MUI (English) 2007
    20-10-2016 21:48:35 Installed Microsoft Office Home and Student 2007
    20-10-2016 22:25:01 Windows Update
    20-10-2016 22:47:30 Windows Update
    20-10-2016 23:37:35 Windows Update
    20-10-2016 23:46:58 Windows Update
    21-10-2016 16:49:30 Installed Microsoft Office Home and Student 2007


    ==================== Faulty Device Manager Devices =============


    Name: PCI Serial Port
    Description: PCI Serial Port
    Class Guid:
    Manufacturer:
    Service:
    Problem: : The drivers for this device are not installed. (Code 28)
    Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


    Name: PS/2 Compatible Mouse
    Description: PS/2 Compatible Mouse
    Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
    Manufacturer: Microsoft
    Service: i8042prt
    Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
    Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
    Devices stay in this state if they have been prepared for removal.
    After you remove the device, this error disappears.Remove the device, and this error should be resolved.


    Name: PCI Simple Communications Controller
    Description: PCI Simple Communications Controller
    Class Guid:
    Manufacturer:
    Service:
    Problem: : The drivers for this device are not installed. (Code 28)
    Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.




    ==================== Event log errors: =========================


    Application errors:
    ==================
    Error: (10/21/2016 05:03:43 PM) (Source: MsiInstaller) (EventID: 11935) (User: BoPeepsHome)
    Description: Product: Microsoft Office Home and Student 2007 -- Error 1935.An error occurred during the installation of assembly component {97F81AF1-0E47-DC99-A01F-C8B3B9A1E18E}. HRESULT: 0x8007041D. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.VC80.ATL,version="8.0.50727.42",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",processorArchitecture="x86"


    Error: (10/21/2016 04:49:29 PM) (Source: VSS) (EventID: 8194) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
    .
    This is often caused by incorrect security settings in either the writer or requestor process.




    Operation:
    Gathering Writer Data


    Context:
    Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
    Writer Name: System Writer
    Writer Instance ID: {006314c2-0659-47de-a2f2-0da96c52f329}


    Error: (10/20/2016 11:55:02 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: Explorer.EXE, version: 6.1.7601.23537, time stamp: 0x57c44cc4
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x8b800040
    Faulting process id: 0xd90
    Faulting application start time: 0x01d22b668f1373b2
    Faulting application path: C:\Windows\Explorer.EXE
    Faulting module path: unknown
    Report Id: 49a1ba71-975b-11e6-a69d-001cc49aaf89


    Error: (10/20/2016 09:49:31 PM) (Source: MsiInstaller) (EventID: 11713) (User: BoPeepsHome)
    Description: Product: Microsoft Office Home and Student 2007 -- Error 1713. Setup cannot install one of the required products for Microsoft Office Home and Student 2007.


    Error: (10/20/2016 09:48:03 PM) (Source: MsiInstaller) (EventID: 11713) (User: BoPeepsHome)
    Description: Product: Microsoft Office Excel MUI (English) 2007 -- Error 1713. Setup cannot install one of the required products for Microsoft Office Excel MUI (English) 2007.


    Error: (10/20/2016 08:51:03 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17514, time stamp: 0x4ce796f3
    Faulting module name: SHLWAPI.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b9e2
    Exception code: 0xc0000005
    Fault offset: 0x00013496
    Faulting process id: 0x524
    Faulting application start time: 0x01d22b3e9939d6b1
    Faulting application path: C:\Windows\Explorer.EXE
    Faulting module path: C:\Windows\system32\SHLWAPI.dll
    Report Id: 9602d570-9741-11e6-a4ba-001cc49aaf89


    Error: (10/20/2016 06:58:07 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17514, time stamp: 0x4ce796f3
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x00730fef
    Faulting process id: 0x5e4
    Faulting application start time: 0x01d22b3c80533924
    Faulting application path: C:\Windows\Explorer.EXE
    Faulting module path: unknown
    Report Id: cf191eb6-9731-11e6-a4ba-001cc49aaf89


    Error: (10/19/2016 04:13:18 PM) (Source: ESENT) (EventID: 215) (User: )
    Description: WinMail (3672) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.


    Error: (10/19/2016 04:07:00 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
    Description: The protocol handler File cannot be loaded. Error description: The process cannot access the file because it is being used by another process. (HRESULT : 0x80070020).


    Error: (10/19/2016 05:47:15 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program avscan.exe version 15.0.22.49 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.


    Process ID: bf0


    Start Time: 01d22a05f3433085


    Termination Time: 60000


    Application Path: C:\program files\avira\antivirus\avscan.exe


    Report Id: fb044c71-95f9-11e6-b04e-001cc49aaf89




    System errors:
    =============
    Error: (10/21/2016 05:03:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Windows Modules Installer service failed to start due to the following error:
    The service did not respond to the start or control request in a timely fashion.


    Error: (10/21/2016 05:03:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Modules Installer service to connect.


    Error: (10/21/2016 05:03:42 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1053" attempting to start the service TrustedInstaller with arguments "" in order to run the server:
    {3C6859CE-230B-48A4-BE6C-932C0C202048}


    Error: (10/21/2016 04:43:33 PM) (Source: Ntfs) (EventID: 55) (User: )
    Description: The file system structure on the disk is corrupt and unusable.
    Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.


    Error: (10/21/2016 04:43:07 PM) (Source: Ntfs) (EventID: 55) (User: )
    Description: The file system structure on the disk is corrupt and unusable.
    Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.


    Error: (10/21/2016 03:27:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80242016: Update for Windows 7 (KB2703157).


    Error: (10/21/2016 03:27:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80242016: Update for Internet Explorer 8 Compatibility View List for Windows 7 (KB2598845).


    Error: (10/21/2016 01:23:12 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
    Description: The Windows Modules Installer service did not shut down properly after receiving a preshutdown control.


    Error: (10/21/2016 01:17:15 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3109094).


    Error: (10/21/2016 01:17:15 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB3035132).




    ==================== Memory info ===========================


    Processor: Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz
    Percentage of memory in use: 72%
    Total physical RAM: 2018.3 MB
    Available physical RAM: 552.94 MB
    Total Virtual: 4036.6 MB
    Available Virtual: 1886.53 MB


    ==================== Drives ================================


    Drive c: () (Fixed) (Total:465.66 GB) (Free:434.54 GB) NTFS
    Drive d: (OFFICE12) (CDROM) (Total:0.31 GB) (Free:0 GB) CDFS


    ==================== MBR & Partition Table ==================


    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 966C0116)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)


    ==================== End of Addition.txt ============================



    aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
    Run date: 2016-10-21 18:37:40
    -----------------------------
    18:37:40.936 OS Version: Windows 6.1.7601 Service Pack 1
    18:37:40.936 Number of processors: 2 586 0xF0B
    18:37:40.936 ComputerName: BOPEEPSHOME UserName: Illusionz
    18:37:41.776 Initialize success
    18:37:41.856 VM: initialized successfully
    18:37:41.856 VM: Intel CPU BiosDisabled
    18:38:23.545 AVAST engine defs: 16102100
    18:38:43.375 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
    18:38:43.375 Disk 0 Vendor: HITACHI_HDS725050KLA360 K2AOAB0A Size: 476940MB BusType: 3
    18:38:43.505 Disk 0 MBR read successfully
    18:38:43.515 Disk 0 MBR scan
    18:38:43.545 Disk 0 Windows 7 default MBR code
    18:38:43.565 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
    18:38:43.565 Disk 0 default boot code
    18:38:43.585 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
    18:38:43.595 Disk 0 scanning sectors +976771072
    18:38:43.655 Disk 0 scanning C:\Windows\system32\drivers
    18:38:59.662 Service scanning
    18:39:28.898 Modules scanning
    18:39:28.908 Disk 0 trace - called modules:
    18:39:28.928 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
    18:39:28.938 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8567a030]
    18:39:28.938 3 CLASSPNP.SYS[8898859e] -> nt!IofCallDriver -> [0x855b0790]
    18:39:28.948 5 ACPI.sys[884bc3d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0x85594908]
    18:39:29.728 AVAST engine scan C:\Windows
    18:39:32.018 AVAST engine scan C:\Windows\system32
    18:39:50.060 File: C:\Windows\system32\csrsrv.dll **INFECTED** Win32:Aluroot-B [Rtk]
    18:42:50.090 AVAST engine scan C:\Windows\system32\drivers
    18:43:10.275 AVAST engine scan C:\Users\Illusionz
    18:47:05.057 AVAST engine scan C:\ProgramData
    18:47:32.595 Disk 0 statistics 2420747/0/0 @ 4.32 MB/s
    18:47:32.605 Scan finished successfully
    18:50:44.568 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
    18:50:44.578 Disk 0 Vendor: HITACHI_HDS725050KLA360 K2AOAB0A Size: 476940MB BusType: 3
    18:50:44.778 Disk 0 MBR read successfully
    18:50:44.788 Disk 0 MBR scan
    18:50:44.808 Disk 0 Windows 7 default MBR code
    18:50:44.828 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
    18:50:44.838 Disk 0 default boot code
    18:50:44.858 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
    18:50:44.868 Disk 0 scanning sectors +976771072
    18:50:44.988 Disk 0 scanning C:\Windows\system32\drivers
    18:50:59.506 Service scanning
    18:51:26.956 Modules scanning
    18:51:26.965 Disk 0 trace - called modules:
    18:51:26.974
    18:51:27.775 AVAST engine scan C:\Windows
    18:51:33.718 AVAST engine scan C:\Windows\system32
    18:51:50.541 File: C:\Windows\system32\csrsrv.dll **INFECTED** Win32:Aluroot-B [Rtk]
    18:57:00.675 AVAST engine scan C:\Windows\system32\drivers
    18:57:33.646 AVAST engine scan C:\Users\Illusionz
    19:00:57.130 AVAST engine scan C:\ProgramData
    19:01:24.630 Disk 0 statistics 4841963/0/0 @ 3.48 MB/s
    19:01:24.640 Scan finished successfully
    19:05:15.682 Disk 0 MBR has been saved successfully to "C:\Users\Illusionz\Desktop\MBR.dat"
    19:05:15.682 The log file has been saved successfully to "C:\Users\Illusionz\Desktop\aswMBR.txt"


    aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
    Run date: 2016-10-21 19:08:24
    -----------------------------
    19:08:24.330 OS Version: Windows 6.1.7601 Service Pack 1
    19:08:24.330 Number of processors: 2 586 0xF0B
    19:08:24.330 ComputerName: BOPEEPSHOME UserName: Illusionz
    19:08:26.320 Initialze error C000010E - driver not loaded
    19:08:26.350 write error "aswCmnB.dll". The process cannot access the file because it is being used by another process.
    19:08:26.912 AVAST engine defs: 16102100
    19:08:44.541 The log file has been saved successfully to "C:\Users\Illusionz\Desktop\aswMBR.txt"
  2. 2016-10-23, 02:52 #2
    ken545
    ken545 is offline
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default



    Not sure whats going on as your log Malwarewise looks ok, that entry from aswMBR is possibly a false postive. Let me ask you a few things. After you reinstall the OS, is everything ok until you install Office ?? Where did you get office from ? It looks like you installed Office on this system twice ??
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.
  3. 2016-10-23, 11:50 #3
    Illusionz
    Illusionz is offline
    Junior Member
    Join Date
    Aug 2016
    Posts
    2

    Default

    The Office Home and Student was purchased new in the store by me, in 2007. I've installed it several times, over the years, on a few machines and never had a problem. The last two times i've installed I have noticed that it doesn't seem to install in the correct directories (Start Menu, maybe, is where its suppose to go?) I then send shortcuts to my desktop. The last two times i've seen empty Start Menu folders, or found the start menu folder off in the middle of my Program files. Took me almost two weeks to realize I hadn't put them on the desktop. I went looking for them and kept coming up with Office 12, and MSOcache files lol......
  4. 2016-10-23, 12:53 #4
    ken545
    ken545 is offline
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Like I said earlier your FRST logs look ok, but its possible for malware to hide so lets run a few programs and see what they find if anything. If its determined that no malware is on your system than at that point I can send you to a windows forum that we work closely with

    Lets do this one first


    Please download Malwarebytes Anti-Rootkit (MBAR) from Here and save it to your desktop.

    • Unzip the contents to a folder in a convenient location.
    • Open the folder where the contents were unzipped and run mbar.exe
    • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
    • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
    • Wait while the system shuts down and the cleanup process is performed.
    • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
    • When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.
  5. 2016-10-26, 13:12 #5
    ken545
    ken545 is offline
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Due to inactivity, this thread will now be closed.


    If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new FRST log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.


    It takes time to analyze logs and prepare a response. Volunteers help users at several sites, and take X number of new topics in order to give each member their attention.
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.
« Previous Thread | Next Thread »

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules