Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Got infected by hao123

hao123

  • Please log in to reply

#1
furlano

furlano

    New Member

  • Member
  • Pip
  • 3 posts

Hey,

 

Got infected by hao123, every time the computed boots it changes the default homepage on all browsers.

I already tried a bunch of software that were suppose to clean it up, but none worked (among them: adwcleaner, malware bytes, ccleaner and jrt). Tried to remove from regedit all entrys from hao123, it all comes back afted boot. Also tried removing the address from every shortcut, it all comes back after boot. Tried a combination of those, it all comes back after boot. Those guys really did a great job annoying everybody else.

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão:18-01-2016
Executado por Administrador (administrador) em AMILTON2-PC (20-01-2016 09:48:08)
Executando a partir de C:\Amilton
Perfis Carregados: amilton & Administrador (Perfis Disponíveis: Amilton2 & amilton & Administrador)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: IE)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(LAN Messenger) C:\Program Files (x86)\LAN Messenger\lmc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Flux Software LLC) C:\Users\amilton\AppData\Local\FluxSoftware\Flux\flux.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2016-01-19] (AVAST Software)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\77c3d57f-f0a7-452a-9863-1ad1704575b6.exe [168336 2016-01-19] (AVAST Software)
HKU\S-1-5-21-1791303942-176834493-2395421313-1105 Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <====== ATENÇÃO
HKU\S-1-5-21-1791303942-176834493-2395421313-1105 Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <====== ATENÇÃO
HKU\S-1-5-21-1791303942-176834493-2395421313-1105\...\Run: [LAN Messenger] => C:\Program Files (x86)\LAN Messenger\lmc.exe [1721344 2012-07-24] (LAN Messenger)
HKU\S-1-5-21-1791303942-176834493-2395421313-1105\...\Run: [f.lux] => C:\Users\amilton\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-1791303942-176834493-2395421313-1105\...\Policies\system: [DisableRegistryTools] 2
HKU\S-1-5-21-1791303942-176834493-2395421313-1105\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-1791303942-176834493-2395421313-500\...\Run: [LAN Messenger] => C:\Program Files (x86)\LAN Messenger\lmc.exe [1721344 2012-07-24] (LAN Messenger)
HKU\S-1-5-21-1791303942-176834493-2395421313-500\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[C1].txt
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-01-19] (AVAST Software)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Hosts: Há mais de uma entrada no Hosts. Veja a seção Hosts do Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2E3FBB26-C7F8-4B5E-A7FD-F9D6FE98F7D3}: [NameServer] 192.168.0.2,8.8.8.8
Tcpip\..\Interfaces\{2E3FBB26-C7F8-4B5E-A7FD-F9D6FE98F7D3}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.169x.cn/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.169x.cn/
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-01-19] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-01-19] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2015-12-10] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-10] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2015-12-10] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-12-10] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\1qpcl1oz.default
FF Plugin: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-12-18] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-01-19]

Chrome: 
=======
CHR Profile: C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-18]
CHR Extension: (Google Apresentações) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-18]
CHR Extension: (Google Drive) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-18]
CHR Extension: (YouTube) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-18]
CHR Extension: (Google Search) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-18]
CHR Extension: (Google Apresentações) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-18]
CHR Extension: (Google Apresentações) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-18]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-18]
CHR Extension: (Gmail) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-18]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-01-19]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S4 ASRockIOMon; C:\Program Files (x86)\ASRock Utility\A-Tuning\Bin\IOMonitorSrv.exe [454656 2013-05-28] () [Arquivo não assinado]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2016-01-19] (AVAST Software)
S4 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [652640 2013-05-31] (cFos Software GmbH)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-09-04] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Arquivo não assinado]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

S3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2016-01-18] (ASRock Incorporation)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [40200 2013-05-09] (ASRock Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2016-01-19] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2016-01-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2016-01-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2016-01-19] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2016-01-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [451040 2016-01-19] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2016-01-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2016-01-19] (AVAST Software)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-01-20 09:47 - 2016-01-20 09:48 - 00000000 ____D C:\FRST
2016-01-20 09:37 - 2016-01-20 09:40 - 00000000 ____D C:\Windows\system32\MRT
2016-01-20 09:37 - 2016-01-20 09:37 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-01-20 09:35 - 2015-12-16 16:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-01-20 09:35 - 2015-12-16 16:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-01-20 09:35 - 2015-12-16 16:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-01-20 09:35 - 2015-12-16 16:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-01-20 09:35 - 2015-12-16 16:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-01-20 09:35 - 2015-12-16 16:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-01-20 09:35 - 2015-12-16 16:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-01-20 09:35 - 2015-12-16 16:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-01-20 09:35 - 2015-12-11 16:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-01-20 09:35 - 2015-12-08 19:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-01-20 09:35 - 2015-12-08 17:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-01-20 09:28 - 2016-01-20 09:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-20 09:27 - 2016-01-20 09:27 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-20 09:27 - 2016-01-20 09:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-19 13:35 - 2016-01-19 13:42 - 00000000 ____D C:\Users\Todos os Usuários\HitmanPro
2016-01-19 13:35 - 2016-01-19 13:42 - 00000000 ____D C:\ProgramData\HitmanPro
2016-01-19 13:04 - 2016-01-19 13:04 - 00000000 ____D C:\Users\Todos os Usuários\Malwarebytes
2016-01-19 13:04 - 2016-01-19 13:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-19 12:01 - 2016-01-19 12:01 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-01-19 12:01 - 2016-01-19 12:01 - 00000000 ____D C:\Users\amilton\AppData\Roaming\AVAST Software
2016-01-19 12:01 - 2016-01-19 12:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-01-19 12:00 - 2016-01-19 12:01 - 00451040 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-01-19 12:00 - 2016-01-19 12:01 - 00097648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2016-01-19 12:00 - 2016-01-19 12:01 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-01-19 12:00 - 2016-01-19 12:00 - 01055560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-01-19 12:00 - 2016-01-19 12:00 - 00386096 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-01-19 12:00 - 2016-01-19 12:00 - 00273784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-01-19 12:00 - 2016-01-19 12:00 - 00155304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-01-19 12:00 - 2016-01-19 12:00 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-01-19 12:00 - 2016-01-19 12:00 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-01-19 12:00 - 2016-01-19 12:00 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-01-19 12:00 - 2016-01-19 12:00 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-01-19 12:00 - 2016-01-19 12:00 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-01-19 12:00 - 2016-01-19 12:00 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-01-19 12:00 - 2016-01-19 12:00 - 00000000 ____D C:\ProgramData\AVAST Software
2016-01-19 12:00 - 2016-01-19 12:00 - 00000000 ____D C:\Program Files\Common Files\AV
2016-01-19 12:00 - 2016-01-19 12:00 - 00000000 ____D C:\Program Files\AVAST Software
2016-01-19 10:53 - 2016-01-19 13:00 - 00000692 _____ C:\Users\Administrador\Desktop\JRT.txt
2016-01-19 10:30 - 2016-01-19 10:30 - 00000000 ____D C:\Windows\system32\appmgmt
2016-01-19 10:13 - 2016-01-19 10:13 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-01-18 21:39 - 2015-07-30 16:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-01-18 21:39 - 2015-07-30 15:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-01-18 21:34 - 2016-01-18 21:34 - 00001793 _____ C:\Users\Public\Desktop\FileZilla Client.lnk
2016-01-18 21:34 - 2016-01-18 21:34 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\FileZilla
2016-01-18 21:34 - 2016-01-18 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2016-01-18 21:34 - 2016-01-18 21:34 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2016-01-18 21:09 - 2010-12-06 00:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-01-18 21:04 - 2016-01-18 21:04 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-01-18 21:04 - 2016-01-18 21:04 - 00000000 ____D C:\Windows\system32\appraiser
2016-01-18 20:58 - 2016-01-18 20:58 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-01-18 20:51 - 2016-01-18 20:51 - 00000000 ____D C:\Users\Usuário Padrão\AppData\Local\Microsoft Help
2016-01-18 20:51 - 2016-01-18 20:51 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-01-18 20:51 - 2016-01-18 20:51 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-01-18 20:50 - 2015-11-16 23:11 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-01-18 20:50 - 2015-11-16 23:08 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-01-18 20:50 - 2015-11-16 23:08 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-01-18 20:50 - 2015-11-16 23:08 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-01-18 20:50 - 2015-11-16 23:08 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-01-18 20:50 - 2015-11-16 23:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-01-18 20:50 - 2015-11-16 18:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-01-18 20:50 - 2015-11-10 16:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-01-18 20:50 - 2015-11-10 16:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-01-18 20:50 - 2015-11-10 16:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-01-18 20:50 - 2015-07-16 17:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-01-18 20:50 - 2015-07-16 17:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-01-18 20:50 - 2015-07-16 17:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-01-18 20:50 - 2015-07-16 17:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-01-18 20:50 - 2015-07-16 17:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-01-18 20:50 - 2015-07-16 17:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-01-18 20:50 - 2015-07-11 11:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2016-01-18 20:50 - 2015-06-09 16:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-01-18 20:50 - 2015-06-09 16:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-01-18 20:50 - 2015-06-03 18:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-01-18 20:50 - 2015-06-03 18:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2016-01-18 20:50 - 2015-02-03 01:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-01-18 20:50 - 2015-02-03 01:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-01-18 20:50 - 2014-12-11 15:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-01-18 20:50 - 2013-11-26 06:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-01-18 20:50 - 2013-11-22 20:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-01-18 20:49 - 2015-02-04 01:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-01-18 20:49 - 2015-02-04 00:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-01-18 20:28 - 2016-01-18 20:28 - 00000000 ____D C:\Users\amilton\AppData\Roaming\WinRAR
2016-01-18 20:28 - 2016-01-18 20:28 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-18 20:18 - 2015-05-25 16:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-01-18 20:18 - 2015-05-25 16:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-01-18 20:18 - 2015-05-25 16:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-01-18 20:18 - 2015-05-25 16:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-01-18 20:18 - 2015-05-25 16:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-01-18 20:18 - 2015-05-25 16:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-01-18 20:18 - 2015-05-25 16:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-01-18 20:18 - 2015-05-25 16:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-01-18 20:18 - 2015-05-25 16:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-01-18 20:18 - 2015-05-25 16:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-01-18 20:18 - 2015-05-25 16:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-01-18 20:18 - 2015-05-25 16:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-01-18 20:18 - 2015-02-03 01:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-01-18 20:18 - 2015-02-03 01:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-01-18 20:18 - 2015-02-03 01:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-01-18 20:18 - 2015-02-03 01:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-01-18 20:18 - 2015-02-03 01:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-01-18 20:18 - 2015-02-03 01:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-01-18 20:18 - 2015-02-03 01:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-01-18 20:18 - 2015-02-03 01:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-01-18 20:18 - 2015-02-03 01:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-01-18 20:18 - 2015-02-03 01:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-01-18 20:18 - 2015-02-03 01:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-01-18 20:18 - 2015-02-03 01:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-01-18 20:18 - 2015-02-03 01:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-01-18 20:17 - 2016-01-18 20:17 - 00000000 ____D C:\Users\Administrador\AppData\Local\WindowsUpdate
2016-01-18 20:12 - 2016-01-18 20:12 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\Adobe
2016-01-18 20:12 - 2016-01-18 20:12 - 00000000 ____D C:\Users\Administrador\AppData\LocalLow\Adobe
2016-01-18 20:12 - 2016-01-18 20:12 - 00000000 ____D C:\Users\Administrador\AppData\Local\Adobe
2016-01-18 20:08 - 2016-01-18 21:19 - 00000000 ____D C:\Users\Administrador\AppData\Local\Mozilla
2016-01-18 20:08 - 2016-01-18 20:08 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\Mozilla
2016-01-18 20:01 - 2016-01-18 20:01 - 00000000 ____D C:\Users\Administrador\AppData\Local\Google
2016-01-18 19:59 - 2013-10-02 00:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2016-01-18 19:59 - 2013-10-02 00:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2016-01-18 19:59 - 2013-10-02 00:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2016-01-18 19:59 - 2013-10-01 23:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2016-01-18 19:59 - 2013-10-01 23:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2016-01-18 19:59 - 2013-10-01 23:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2016-01-18 19:59 - 2013-10-01 22:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2016-01-18 19:59 - 2013-10-01 22:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2016-01-18 19:59 - 2013-10-01 21:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-01-18 19:59 - 2013-10-01 20:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-01-18 19:56 - 2016-01-18 21:43 - 01598152 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-01-18 19:54 - 2012-08-23 12:12 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\terminpt.sys
2016-01-18 19:54 - 2012-08-23 12:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2016-01-18 19:54 - 2012-08-23 12:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2016-01-18 19:54 - 2012-08-23 09:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2016-01-18 19:54 - 2012-08-23 08:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2016-01-18 19:53 - 2013-01-13 19:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 19:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-18 19:53 - 2013-01-13 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-01-18 19:53 - 2013-01-13 18:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-01-18 19:53 - 2013-01-13 18:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-01-18 19:53 - 2013-01-13 17:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-01-18 19:53 - 2013-01-13 17:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-01-18 19:53 - 2013-01-13 17:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-01-18 19:53 - 2013-01-13 17:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-01-18 19:53 - 2013-01-13 17:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-01-18 19:53 - 2013-01-13 17:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-01-18 19:53 - 2013-01-13 17:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-01-18 19:53 - 2013-01-13 17:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-01-18 19:53 - 2013-01-13 17:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-01-18 19:53 - 2013-01-13 17:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-01-18 19:53 - 2013-01-13 17:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-01-18 19:53 - 2013-01-13 17:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-01-18 19:53 - 2013-01-13 17:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-01-18 19:53 - 2013-01-13 16:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-01-18 19:53 - 2013-01-13 16:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-01-18 19:53 - 2013-01-13 15:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-01-18 19:53 - 2013-01-13 15:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-01-18 19:52 - 2015-12-10 17:05 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 12306432 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 09074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 02470400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00495616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-01-18 19:52 - 2015-12-10 17:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll
2016-01-18 19:52 - 2015-12-10 17:03 - 01538048 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-01-18 19:52 - 2015-12-10 17:03 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-01-18 19:52 - 2015-12-10 17:03 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-01-18 19:52 - 2015-12-10 17:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-01-18 19:52 - 2015-12-10 16:30 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 11033088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 06035968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 02088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 01267712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00717312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-01-18 19:52 - 2015-12-10 16:29 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-01-18 19:52 - 2015-12-10 16:29 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll
2016-01-18 19:52 - 2015-12-10 16:29 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-01-18 19:52 - 2015-12-10 16:28 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-01-18 19:52 - 2015-12-10 16:24 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-01-18 19:52 - 2015-12-10 16:01 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-01-18 19:52 - 2015-12-10 16:00 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-01-18 19:52 - 2015-12-10 15:45 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-01-18 19:52 - 2015-08-05 15:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-01-18 19:52 - 2015-08-05 15:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-01-18 19:42 - 2015-07-15 01:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-01-18 19:42 - 2014-06-30 20:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-01-18 19:42 - 2014-06-30 20:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-01-18 19:42 - 2014-06-06 04:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-01-18 19:42 - 2014-06-06 04:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-01-18 19:42 - 2014-03-09 19:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-01-18 19:42 - 2014-03-09 19:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-01-18 19:42 - 2014-03-09 19:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-01-18 19:42 - 2014-03-09 19:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-01-18 19:41 - 2015-12-30 17:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-18 19:41 - 2015-12-30 17:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-01-18 19:41 - 2015-12-30 17:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-01-18 19:41 - 2015-12-30 17:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-01-18 19:41 - 2015-12-30 17:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-01-18 19:41 - 2015-12-30 17:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-01-18 19:41 - 2015-12-30 17:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-01-18 19:41 - 2015-12-30 17:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-01-18 19:41 - 2015-12-30 17:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-01-18 19:41 - 2015-12-30 17:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-01-18 19:41 - 2015-12-30 17:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-01-18 19:41 - 2015-12-30 17:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-01-18 19:41 - 2015-12-30 16:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-01-18 19:41 - 2015-12-30 16:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-01-18 19:41 - 2015-12-30 16:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-01-18 19:41 - 2015-12-30 16:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-01-18 19:41 - 2015-12-30 16:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-01-18 19:41 - 2015-12-30 16:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-01-18 19:41 - 2015-12-30 16:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-01-18 19:41 - 2015-12-30 16:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-01-18 19:41 - 2015-12-30 16:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-01-18 19:41 - 2015-12-30 16:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-01-18 19:41 - 2015-12-30 16:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-01-18 19:41 - 2015-12-30 16:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-01-18 19:41 - 2015-12-30 16:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-01-18 19:41 - 2015-12-30 16:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-01-18 19:41 - 2015-12-30 16:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-18 19:41 - 2015-12-30 16:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-01-18 19:41 - 2015-12-30 16:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-01-18 19:41 - 2015-12-30 16:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-01-18 19:41 - 2015-12-30 16:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-01-18 19:41 - 2015-12-30 16:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-01-18 19:41 - 2015-12-30 16:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-01-18 19:41 - 2015-12-30 16:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 16:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 15:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-01-18 19:41 - 2015-12-30 15:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-01-18 19:41 - 2015-12-30 15:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-01-18 19:41 - 2015-12-30 15:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-01-18 19:41 - 2015-12-30 15:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-01-18 19:41 - 2015-12-30 15:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-01-18 19:41 - 2015-12-30 15:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-01-18 19:41 - 2015-12-30 15:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-01-18 19:41 - 2015-12-30 15:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-01-18 19:41 - 2015-12-30 15:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-01-18 19:41 - 2015-12-30 15:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-01-18 19:41 - 2015-12-30 15:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-01-18 19:41 - 2015-12-30 15:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-01-18 19:41 - 2015-12-30 15:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-01-18 19:41 - 2015-12-30 15:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 15:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 15:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-18 19:41 - 2015-12-30 15:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-18 19:41 - 2015-10-08 17:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2016-01-18 19:41 - 2015-10-08 16:52 - 00419928 _____ C:\Windows\system32\locale.nls
2016-01-18 19:41 - 2015-09-23 11:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-01-18 19:41 - 2015-09-23 11:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-01-18 19:41 - 2015-09-23 11:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-01-18 19:41 - 2015-07-22 22:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-01-18 19:41 - 2015-07-22 22:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-01-18 19:41 - 2015-07-22 15:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-01-18 19:41 - 2015-07-22 14:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-01-18 19:41 - 2015-07-15 16:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-01-18 19:41 - 2015-07-15 16:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-01-18 19:41 - 2015-07-15 16:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-01-18 19:41 - 2015-04-29 16:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-01-18 19:41 - 2015-04-29 16:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-01-18 19:41 - 2015-04-29 16:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-01-18 19:41 - 2015-04-29 16:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-01-18 19:41 - 2015-04-29 16:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-01-18 19:41 - 2015-04-29 16:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-01-18 19:41 - 2015-04-29 16:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-01-18 19:41 - 2015-04-29 16:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-01-18 19:41 - 2015-04-29 16:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-01-18 19:41 - 2015-04-29 16:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-01-18 19:39 - 2015-12-08 19:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-01-18 19:39 - 2015-12-08 19:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-01-18 19:39 - 2015-12-08 19:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-01-18 19:39 - 2015-12-08 19:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-01-18 19:39 - 2015-12-08 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-01-18 19:39 - 2015-12-08 19:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-01-18 19:39 - 2015-12-08 19:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-01-18 19:39 - 2015-12-08 19:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-01-18 19:39 - 2015-12-08 17:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-01-18 19:39 - 2015-12-08 17:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-01-18 19:39 - 2015-12-08 17:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-01-18 19:39 - 2015-12-08 17:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-01-18 19:39 - 2015-12-08 17:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-01-18 19:39 - 2015-12-08 17:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-01-18 19:39 - 2015-12-08 16:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-01-18 19:39 - 2015-12-08 16:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-01-18 19:39 - 2015-12-08 16:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-01-18 19:39 - 2015-10-01 16:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-01-18 19:39 - 2015-10-01 16:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-01-18 19:39 - 2015-10-01 16:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-01-18 19:39 - 2015-10-01 16:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-01-18 19:39 - 2015-10-01 16:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-01-18 19:39 - 2015-10-01 16:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-01-18 19:39 - 2015-10-01 16:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-01-18 19:39 - 2015-10-01 15:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-01-18 19:39 - 2015-10-01 15:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-01-18 19:39 - 2015-06-03 18:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-01-18 19:39 - 2015-06-03 18:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-01-18 19:39 - 2015-06-03 18:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-01-18 19:28 - 2015-08-06 16:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-01-18 19:28 - 2015-08-06 16:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-01-18 19:28 - 2015-08-06 15:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-01-18 19:28 - 2015-08-06 15:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-01-18 19:28 - 2015-02-18 05:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-01-18 19:28 - 2015-02-18 05:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-01-18 19:28 - 2015-01-07 01:15 - 00104896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2016-01-18 19:28 - 2015-01-07 01:10 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-01-18 19:28 - 2015-01-07 00:44 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-01-18 19:28 - 2015-01-06 23:49 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-01-18 19:28 - 2015-01-06 23:48 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-01-18 19:28 - 2014-07-17 00:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-01-18 19:28 - 2014-07-17 00:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-01-18 19:28 - 2014-07-17 00:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-01-18 19:28 - 2014-07-16 23:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-01-18 19:28 - 2014-07-16 23:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-01-18 19:28 - 2014-07-09 00:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-01-18 19:28 - 2014-07-09 00:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-01-18 19:28 - 2014-07-09 00:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-01-18 19:28 - 2014-07-09 00:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-01-18 19:28 - 2014-07-09 00:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-01-18 19:28 - 2014-07-08 23:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2016-01-18 19:28 - 2014-07-08 23:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2016-01-18 19:28 - 2014-07-08 23:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2016-01-18 19:28 - 2014-07-08 23:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2016-01-18 19:28 - 2014-07-08 23:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2016-01-18 19:28 - 2014-03-04 07:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-01-18 19:28 - 2014-03-04 07:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-01-18 19:28 - 2014-03-04 07:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-01-18 19:28 - 2014-03-04 07:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-01-18 19:28 - 2014-03-04 07:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-01-18 19:28 - 2014-03-04 07:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-01-18 19:28 - 2014-03-04 07:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-01-18 19:28 - 2014-03-04 07:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-01-18 19:28 - 2013-07-26 00:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-01-18 19:28 - 2013-07-25 23:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-01-18 19:28 - 2012-01-04 08:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-01-18 19:28 - 2012-01-04 06:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-01-18 19:28 - 2011-03-11 04:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2016-01-18 19:28 - 2011-03-11 04:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2016-01-18 19:28 - 2011-03-11 04:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2016-01-18 19:28 - 2011-03-11 04:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2016-01-18 19:28 - 2011-03-11 04:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2016-01-18 19:28 - 2011-03-11 04:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-01-18 19:28 - 2011-03-11 04:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2016-01-18 19:28 - 2011-03-11 03:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-01-18 19:28 - 2011-03-11 03:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2016-01-18 19:28 - 2011-03-11 02:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-01-18 18:20 - 2015-11-20 16:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-01-18 18:20 - 2015-11-20 16:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-01-18 18:20 - 2015-11-20 16:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-01-18 18:20 - 2015-11-20 16:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-01-18 18:20 - 2015-11-20 16:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-01-18 18:20 - 2015-11-20 16:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-01-18 18:20 - 2015-11-20 16:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-01-18 18:20 - 2015-11-20 16:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-01-18 18:20 - 2015-11-20 16:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-01-18 18:20 - 2015-11-10 16:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-01-18 18:20 - 2015-11-10 16:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-01-18 18:20 - 2015-10-29 15:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-01-18 18:20 - 2015-10-29 15:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-01-18 18:20 - 2015-10-29 15:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-01-18 18:20 - 2015-10-29 15:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-01-18 18:20 - 2015-10-29 15:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-01-18 18:20 - 2015-10-29 15:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-01-18 18:20 - 2015-10-29 15:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-01-18 18:20 - 2015-06-15 19:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-01-18 18:20 - 2015-06-15 19:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-01-18 18:20 - 2015-06-15 19:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-01-18 18:20 - 2015-06-15 19:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-01-18 18:20 - 2015-06-15 19:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-01-18 18:20 - 2015-06-15 19:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-01-18 18:20 - 2015-06-15 19:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-01-18 18:20 - 2015-06-15 19:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-01-18 18:20 - 2015-04-27 17:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-01-18 18:20 - 2015-04-27 17:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-01-18 18:20 - 2015-04-27 17:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-01-18 18:20 - 2015-04-27 17:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-01-18 18:20 - 2015-04-27 17:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-01-18 18:20 - 2015-04-27 17:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-01-18 18:20 - 2015-04-27 17:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-01-18 18:20 - 2015-04-27 17:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-01-18 18:20 - 2015-04-18 01:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-01-18 18:20 - 2015-04-18 00:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-01-18 18:20 - 2014-11-11 01:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-01-18 18:20 - 2014-11-11 00:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-01-18 18:20 - 2014-10-14 00:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-01-18 18:20 - 2013-12-04 00:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-01-18 18:20 - 2013-12-04 00:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-01-18 18:20 - 2013-12-04 00:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-01-18 18:20 - 2013-12-04 00:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-01-18 18:20 - 2013-12-04 00:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-01-18 18:20 - 2013-12-04 00:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-01-18 18:20 - 2013-12-04 00:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-01-18 18:20 - 2013-12-04 00:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-01-18 18:20 - 2013-12-04 00:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-01-18 18:20 - 2013-12-04 00:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-01-18 18:20 - 2013-12-04 00:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-01-18 18:20 - 2013-12-04 00:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-01-18 18:20 - 2013-12-04 00:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-01-18 18:20 - 2013-12-04 00:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-01-18 18:20 - 2013-12-03 23:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-01-18 18:20 - 2013-12-03 23:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-01-18 18:20 - 2013-12-03 23:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-01-18 18:20 - 2013-12-03 23:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-01-18 18:20 - 2013-05-13 03:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-01-18 18:20 - 2013-05-13 01:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-01-18 18:20 - 2013-05-13 01:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-01-18 18:20 - 2013-05-13 01:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-01-18 18:20 - 2012-12-07 11:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-01-18 18:20 - 2012-12-07 11:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-01-18 18:20 - 2012-12-07 10:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-01-18 18:20 - 2012-12-07 10:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-01-18 18:20 - 2012-12-07 09:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-01-18 18:20 - 2012-12-07 09:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-01-18 18:20 - 2012-12-07 09:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-01-18 18:20 - 2012-12-07 09:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-01-18 18:20 - 2012-12-07 09:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-01-18 18:20 - 2012-12-07 09:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-01-18 18:20 - 2012-12-07 09:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-01-18 18:20 - 2012-12-07 09:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-01-18 18:20 - 2012-12-07 08:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-01-18 18:20 - 2012-10-03 15:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-01-18 18:20 - 2012-10-03 15:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-01-18 18:20 - 2012-10-03 15:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-01-18 18:20 - 2012-10-03 14:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-01-18 18:20 - 2012-10-03 14:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-01-18 18:20 - 2012-10-03 14:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-01-18 18:20 - 2011-05-04 03:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-01-18 18:20 - 2011-05-04 03:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-01-18 18:20 - 2011-05-04 03:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-01-18 18:20 - 2011-05-04 03:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-01-18 18:20 - 2011-05-04 03:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-01-18 18:20 - 2011-05-04 03:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-01-18 18:20 - 2011-05-04 03:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-01-18 18:20 - 2011-05-04 03:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-01-18 18:20 - 2011-05-04 03:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-01-18 18:20 - 2011-05-04 02:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-01-18 18:20 - 2011-05-04 02:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-01-18 18:20 - 2011-05-04 02:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-01-18 18:20 - 2011-05-04 02:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-01-18 18:20 - 2011-05-04 02:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-01-18 18:20 - 2011-05-04 02:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-01-18 18:20 - 2011-05-04 02:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-01-18 18:20 - 2011-05-04 02:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-01-18 18:20 - 2011-05-04 02:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-01-18 18:20 - 2010-12-23 08:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2016-01-18 18:20 - 2010-12-23 08:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-01-18 18:20 - 2010-12-23 08:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2016-01-18 18:20 - 2010-12-23 03:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2016-01-18 18:20 - 2010-12-23 03:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-01-18 18:20 - 2010-12-23 03:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2016-01-18 18:19 - 2015-10-01 16:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-01-18 18:19 - 2015-10-01 16:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-01-18 18:19 - 2015-10-01 15:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-01-18 18:19 - 2015-08-27 16:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-18 18:19 - 2015-08-27 16:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-01-18 18:19 - 2015-08-27 16:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-01-18 18:19 - 2015-08-27 16:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-01-18 18:19 - 2015-08-27 15:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-01-18 18:19 - 2015-08-27 15:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-01-18 18:19 - 2015-08-27 15:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-01-18 18:19 - 2015-08-27 15:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-01-18 18:19 - 2015-04-24 16:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-01-18 18:19 - 2015-04-24 15:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-01-18 18:19 - 2014-06-18 00:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-01-18 18:19 - 2014-06-17 23:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-01-18 18:19 - 2012-06-06 04:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-01-18 18:19 - 2012-06-06 03:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-01-18 18:00 - 2016-01-18 18:00 - 00000000 ____D C:\Users\amilton\AppData\Local\FluxSoftware
2016-01-18 17:52 - 2016-01-18 17:53 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-18 17:52 - 2016-01-18 17:52 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-01-18 17:52 - 2016-01-18 17:52 - 00000000 ____D C:\Users\amilton\AppData\Roaming\LAN Messenger
2016-01-18 17:38 - 2012-07-26 01:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-01-18 17:38 - 2012-07-26 01:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-01-18 17:38 - 2012-07-26 01:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-01-18 17:38 - 2012-07-26 01:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-01-18 17:38 - 2012-07-26 01:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-01-18 17:38 - 2012-07-26 00:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-01-18 17:38 - 2012-07-26 00:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-01-18 17:38 - 2012-06-02 12:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-01-18 17:36 - 2012-03-01 04:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-01-18 17:36 - 2012-03-01 04:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-01-18 17:36 - 2012-03-01 03:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-01-18 17:35 - 2015-11-13 21:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-01-18 17:35 - 2015-11-13 21:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-01-18 17:35 - 2015-11-13 21:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-01-18 17:35 - 2015-11-13 20:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-01-18 17:35 - 2015-11-13 20:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-01-18 17:35 - 2015-11-13 20:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-01-18 17:35 - 2015-11-05 17:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-01-18 17:35 - 2015-11-05 17:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-01-18 17:35 - 2015-11-05 17:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-01-18 17:35 - 2015-11-05 17:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-01-18 17:35 - 2015-11-05 07:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-01-18 17:35 - 2015-08-05 15:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-01-18 17:35 - 2015-07-18 11:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-01-18 17:35 - 2015-07-04 16:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-01-18 17:35 - 2015-07-04 15:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-01-18 17:35 - 2015-07-01 18:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-01-18 17:35 - 2015-07-01 18:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-01-18 17:35 - 2015-07-01 18:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-01-18 17:35 - 2015-07-01 18:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-01-18 17:35 - 2015-06-25 08:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-01-18 17:35 - 2015-06-25 08:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-01-18 17:35 - 2015-06-25 08:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-01-18 17:35 - 2015-06-25 07:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-01-18 17:35 - 2015-06-01 22:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-01-18 17:35 - 2015-06-01 21:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-01-18 17:35 - 2015-02-03 01:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-01-18 17:35 - 2015-02-03 01:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-01-18 17:35 - 2015-01-29 01:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-01-18 17:35 - 2015-01-29 01:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-01-18 17:35 - 2015-01-09 01:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-01-18 17:35 - 2015-01-09 01:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-01-18 17:35 - 2015-01-09 01:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-01-18 17:35 - 2015-01-09 00:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-01-18 17:35 - 2014-12-19 01:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-01-18 17:35 - 2014-12-18 23:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-01-18 17:35 - 2014-12-08 01:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-01-18 17:35 - 2014-12-08 00:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-01-18 17:35 - 2014-12-06 02:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-01-18 17:35 - 2014-12-06 01:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-01-18 17:35 - 2014-12-06 01:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-01-18 17:35 - 2014-08-01 09:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-01-18 17:35 - 2014-08-01 09:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-01-18 17:35 - 2014-06-18 20:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-01-18 17:35 - 2014-06-18 20:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-01-18 17:35 - 2014-06-18 20:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-01-18 17:35 - 2014-06-18 20:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-01-18 17:35 - 2014-06-18 20:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-01-18 17:35 - 2014-06-18 20:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-01-18 17:35 - 2014-04-05 00:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-01-18 17:35 - 2014-04-05 00:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-01-18 17:35 - 2014-02-04 00:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-01-18 17:35 - 2014-02-04 00:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-01-18 17:35 - 2014-02-04 00:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-01-18 17:35 - 2014-02-04 00:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-01-18 17:35 - 2014-02-04 00:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-01-18 17:35 - 2013-11-26 09:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-01-18 17:35 - 2013-10-30 00:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-01-18 17:35 - 2013-10-30 00:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-01-18 17:35 - 2013-10-19 00:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-01-18 17:35 - 2013-10-18 23:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-01-18 17:35 - 2013-10-04 00:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-01-18 17:35 - 2013-10-04 00:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-01-18 17:35 - 2013-10-03 23:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-01-18 17:35 - 2013-10-03 23:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-01-18 17:35 - 2013-09-08 00:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-01-18 17:35 - 2013-09-08 00:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-01-18 17:35 - 2013-08-05 00:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-01-18 17:35 - 2013-07-12 08:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-01-18 17:35 - 2013-06-25 20:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-01-18 17:35 - 2013-05-10 03:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-01-18 17:35 - 2013-05-10 01:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-01-18 17:35 - 2013-04-25 21:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-01-18 17:35 - 2013-03-31 20:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-01-18 17:35 - 2012-10-09 16:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-01-18 17:35 - 2012-10-09 16:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-01-18 17:35 - 2012-10-09 15:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-01-18 17:35 - 2012-10-09 15:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-01-18 17:35 - 2012-10-03 15:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-01-18 17:35 - 2012-10-03 15:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-01-18 17:35 - 2012-08-21 19:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-01-18 17:35 - 2011-12-30 04:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-01-18 17:35 - 2011-12-30 03:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-01-18 17:35 - 2011-11-17 04:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-01-18 17:35 - 2011-11-17 03:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-01-18 17:35 - 2011-06-16 03:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-01-18 17:35 - 2011-06-16 02:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2016-01-18 17:35 - 2011-06-15 08:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-01-18 17:35 - 2011-06-15 08:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-01-18 17:35 - 2011-06-15 08:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-01-18 17:35 - 2011-06-15 08:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-01-18 17:35 - 2011-06-15 06:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-01-18 17:35 - 2011-06-15 06:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-01-18 17:35 - 2011-06-15 06:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-01-18 17:35 - 2011-06-15 06:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-01-18 17:35 - 2011-06-15 06:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-01-18 17:35 - 2011-04-29 01:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-01-18 17:35 - 2011-04-29 01:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-01-18 17:35 - 2011-04-29 01:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-01-18 17:35 - 2011-03-11 04:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-01-18 17:35 - 2011-03-11 04:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-01-18 17:35 - 2011-03-11 03:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-01-18 17:35 - 2011-03-11 03:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-01-18 17:34 - 2015-12-08 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-18 17:34 - 2015-12-08 19:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-01-18 17:34 - 2015-12-08 19:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-01-18 17:34 - 2015-12-08 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-18 17:34 - 2015-12-08 17:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-18 17:34 - 2015-12-08 17:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-01-18 17:34 - 2015-12-08 17:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-18 17:34 - 2015-12-08 17:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-01-18 17:34 - 2015-12-08 15:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-01-18 17:34 - 2015-11-11 16:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-01-18 17:34 - 2015-11-11 16:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-01-18 17:34 - 2015-11-11 16:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-01-18 17:34 - 2015-11-11 16:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-01-18 17:34 - 2015-11-03 17:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-01-18 17:34 - 2015-11-03 17:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-01-18 17:34 - 2015-11-03 16:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-01-18 17:34 - 2015-11-03 16:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-01-18 17:34 - 2015-10-13 14:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-01-18 17:34 - 2015-10-13 14:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-01-18 17:34 - 2015-10-13 02:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-01-18 17:34 - 2015-07-09 15:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-01-18 17:34 - 2015-07-09 15:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-01-18 17:34 - 2015-07-09 15:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-01-18 17:34 - 2015-07-09 15:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-01-18 17:34 - 2015-07-09 15:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-01-18 17:34 - 2015-07-09 15:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-01-18 17:34 - 2015-07-09 15:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-01-18 17:34 - 2015-04-13 01:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-01-18 17:34 - 2015-04-11 01:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-01-18 17:34 - 2015-03-04 02:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-01-18 17:34 - 2015-03-04 02:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-01-18 17:34 - 2015-03-04 02:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-01-18 17:34 - 2015-02-25 01:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-01-18 17:34 - 2015-01-17 00:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-01-18 17:34 - 2015-01-17 00:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-01-18 17:34 - 2014-11-26 01:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-01-18 17:34 - 2014-11-26 01:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-01-18 17:34 - 2014-10-30 00:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-01-18 17:34 - 2014-10-29 23:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-01-18 17:34 - 2014-10-24 23:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-01-18 17:34 - 2014-10-24 23:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-01-18 17:34 - 2014-10-03 00:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-01-18 17:34 - 2014-10-03 00:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-01-18 17:34 - 2014-10-03 00:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-01-18 17:34 - 2014-10-03 00:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-01-18 17:34 - 2014-10-03 00:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-01-18 17:34 - 2014-10-02 23:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-01-18 17:34 - 2014-10-02 23:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-01-18 17:34 - 2014-10-02 23:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-01-18 17:34 - 2014-10-02 23:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-01-18 17:34 - 2014-10-02 23:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-01-18 17:34 - 2014-09-04 03:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-01-18 17:34 - 2014-09-04 03:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-01-18 17:34 - 2014-08-12 00:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-01-18 17:34 - 2014-08-11 23:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-01-18 17:34 - 2014-06-16 00:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-01-18 17:34 - 2014-01-29 00:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-01-18 17:34 - 2014-01-29 00:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-01-18 17:34 - 2014-01-28 00:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-01-18 17:34 - 2014-01-24 00:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-01-18 17:34 - 2013-11-26 23:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-01-18 17:34 - 2013-11-26 23:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-01-18 17:34 - 2013-11-26 23:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-01-18 17:34 - 2013-11-26 23:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-01-18 17:34 - 2013-11-26 23:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-01-18 17:34 - 2013-10-12 00:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-01-18 17:34 - 2013-10-12 00:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-01-18 17:34 - 2013-10-12 00:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-01-18 17:34 - 2013-10-12 00:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-01-18 17:34 - 2013-10-12 00:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-01-18 17:34 - 2013-10-12 00:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-01-18 17:34 - 2013-10-12 00:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-01-18 17:34 - 2013-10-12 00:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-01-18 17:34 - 2013-10-12 00:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-01-18 17:34 - 2013-10-11 23:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-01-18 17:34 - 2013-10-11 23:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-01-18 17:34 - 2013-10-11 23:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-01-18 17:34 - 2013-10-11 23:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-01-18 17:34 - 2013-07-03 02:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-01-18 17:34 - 2013-07-03 02:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-01-18 17:34 - 2013-04-26 03:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-01-18 17:34 - 2013-04-26 02:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-01-18 17:34 - 2013-04-10 04:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-01-18 17:34 - 2013-03-19 03:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-01-18 17:34 - 2013-02-12 02:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-01-18 17:34 - 2013-01-24 04:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-01-18 17:34 - 2012-11-23 01:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-01-18 17:34 - 2012-11-02 03:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-01-18 17:34 - 2012-11-02 03:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-01-18 17:34 - 2012-09-25 20:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-01-18 17:34 - 2012-09-25 20:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-01-18 17:34 - 2012-07-04 20:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-01-18 17:34 - 2012-07-04 20:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-01-18 17:34 - 2012-07-04 20:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-01-18 17:34 - 2012-07-04 19:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-01-18 17:34 - 2012-07-04 19:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-01-18 17:34 - 2012-07-04 18:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-01-18 17:34 - 2012-05-14 03:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-01-18 17:34 - 2012-04-26 03:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-01-18 17:34 - 2012-04-26 03:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-01-18 17:34 - 2012-03-17 05:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-01-18 17:34 - 2012-02-17 04:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-01-18 17:34 - 2012-02-17 03:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-01-18 17:34 - 2012-02-17 02:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-01-18 17:34 - 2011-12-16 06:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-01-18 17:34 - 2011-12-16 05:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-01-18 17:34 - 2011-08-27 03:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-01-18 17:34 - 2011-08-27 02:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-01-18 17:34 - 2011-08-17 03:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-01-18 17:34 - 2011-08-17 03:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-01-18 17:34 - 2011-08-17 02:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-01-18 17:34 - 2011-08-17 02:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-01-18 17:34 - 2011-05-24 09:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-01-18 17:34 - 2011-05-24 08:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-01-18 17:34 - 2011-05-24 08:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-01-18 17:34 - 2011-05-24 08:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-01-18 17:34 - 2011-05-24 08:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-01-18 17:34 - 2011-05-03 03:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-01-18 17:34 - 2011-05-03 02:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-01-18 17:34 - 2011-03-03 04:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-01-18 17:34 - 2011-03-03 04:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-01-18 17:34 - 2011-03-03 04:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2016-01-18 17:34 - 2011-03-03 03:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-01-18 17:34 - 2011-03-03 03:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2016-01-18 17:34 - 2011-02-23 02:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-01-18 17:34 - 2011-02-18 08:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2016-01-18 17:34 - 2011-02-18 03:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2016-01-18 17:34 - 2011-02-12 09:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2016-01-18 17:34 - 2011-02-05 15:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2016-01-18 17:34 - 2011-02-05 15:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2016-01-18 17:34 - 2011-02-05 15:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2016-01-18 17:34 - 2011-02-03 09:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-01-18 17:33 - 2015-09-02 01:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-01-18 17:33 - 2015-09-02 01:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-01-18 17:33 - 2015-09-02 01:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-01-18 17:33 - 2015-09-02 01:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-01-18 17:33 - 2015-09-02 00:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-01-18 17:33 - 2015-09-02 00:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-01-18 17:33 - 2015-09-02 00:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-01-18 17:33 - 2015-09-02 00:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-01-18 17:33 - 2015-09-01 23:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-01-18 17:33 - 2015-09-01 23:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-01-18 17:32 - 2013-08-27 23:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-01-18 17:32 - 2011-10-15 04:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-01-18 17:32 - 2011-10-15 03:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-01-18 15:53 - 2016-01-18 15:53 - 00000000 ____D C:\Users\amilton\AppData\Local\LAN Messenger
2016-01-18 15:40 - 2016-01-18 15:40 - 00000000 ____D C:\Users\amilton\AppData\Roaming\Adobe
2016-01-18 15:40 - 2016-01-18 15:40 - 00000000 ____D C:\Users\amilton\AppData\LocalLow\Adobe
2016-01-18 15:40 - 2016-01-18 15:40 - 00000000 ____D C:\Users\amilton\AppData\Local\Adobe
2016-01-18 15:31 - 2016-01-18 15:38 - 00000000 ____D C:\Users\amilton\AppData\Local\Mozilla
2016-01-18 15:31 - 2016-01-18 15:31 - 00000000 ____D C:\Users\amilton\AppData\Roaming\Mozilla
2016-01-18 15:30 - 2016-01-18 15:30 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\LAN Messenger
2016-01-18 15:29 - 2016-01-18 15:29 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-01-18 15:29 - 2016-01-18 15:29 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2016-01-18 15:29 - 2016-01-18 15:29 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-01-18 15:29 - 2016-01-18 15:29 - 00000000 ____D C:\ProgramData\Adobe
2016-01-18 15:29 - 2016-01-18 15:29 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-01-18 15:28 - 2016-01-19 13:43 - 00001139 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-18 15:28 - 2016-01-19 13:43 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-18 15:28 - 2016-01-18 21:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-01-18 15:17 - 2016-01-19 13:43 - 00002372 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-18 15:17 - 2016-01-18 15:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-18 15:16 - 2016-01-20 09:43 - 00001078 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-18 15:16 - 2016-01-20 09:22 - 00001082 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-18 15:16 - 2016-01-18 16:20 - 00000000 ____D C:\Users\amilton\AppData\Local\Google
2016-01-18 15:16 - 2016-01-18 15:17 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-18 15:16 - 2016-01-18 15:16 - 00004078 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-01-18 15:16 - 2016-01-18 15:16 - 00003826 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-18 15:15 - 2016-01-18 15:16 - 00000000 ____D C:\Users\amilton\AppData\Local\Deployment
2016-01-18 15:15 - 2016-01-18 15:15 - 00000000 ____D C:\Users\amilton\AppData\Local\Apps\2.0
2016-01-18 15:13 - 2016-01-20 09:39 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{0FFE84FF-B6E9-4241-9ADC-9A920E1F130F}
2016-01-18 15:04 - 2016-01-18 21:38 - 00109672 _____ C:\Users\amilton\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-18 14:59 - 2016-01-18 14:59 - 00000000 ____D C:\Users\Administrador\Documents\Received Files
2016-01-18 14:59 - 2016-01-18 14:59 - 00000000 ____D C:\Users\Administrador\AppData\Local\LAN Messenger
2016-01-18 14:59 - 2016-01-18 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAN Messenger
2016-01-18 14:59 - 2016-01-18 14:59 - 00000000 ____D C:\Program Files (x86)\LAN Messenger
2016-01-18 14:55 - 2016-01-20 09:43 - 00000000 __SHD C:\Users\amilton\IntelGraphicsProfiles
2016-01-18 14:55 - 2016-01-18 14:55 - 00000000 ____D C:\Users\Todos os Usuários\GroupPolicy
2016-01-18 14:55 - 2016-01-18 14:55 - 00000000 ____D C:\Users\amilton\AppData\Local\VirtualStore
2016-01-18 14:55 - 2016-01-18 14:55 - 00000000 ____D C:\ProgramData\GroupPolicy
2016-01-18 14:54 - 2016-01-18 14:55 - 00000000 ____D C:\Users\amilton
2016-01-18 14:54 - 2016-01-18 14:54 - 00017872 __RSH C:\Users\amilton\ntuser.pol
2016-01-18 14:54 - 2016-01-18 14:54 - 00000020 ___SH C:\Users\amilton\ntuser.ini
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Modelos
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Meus documentos
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Menu Iniciar
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Dados de aplicativos
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Configurações locais
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\AppData\Local\Histórico
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\AppData\Local\Dados de aplicativos
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Ambiente de rede
2016-01-18 14:54 - 2016-01-18 14:54 - 00000000 _SHDL C:\Users\amilton\Ambiente de impressão
2016-01-18 14:54 - 2011-04-12 12:20 - 00000000 ____D C:\Users\amilton\AppData\Roaming\Media Center Programs
2016-01-18 14:51 - 2016-01-18 14:52 - 00001998 ____H C:\Users\Administrador\Documents\Default.rdp
2016-01-18 14:44 - 2016-01-18 14:44 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-01-18 14:44 - 2016-01-18 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2016-01-18 14:44 - 2016-01-18 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Windows\PCHEALTH
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Users\Administrador\AppData\Local\Microsoft Help
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-01-18 14:43 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-01-18 14:42 - 2016-01-20 09:41 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-01-18 14:42 - 2016-01-18 14:43 - 00000000 ____D C:\Program Files\Microsoft Office
2016-01-18 14:42 - 2016-01-18 14:42 - 00000000 __RHD C:\MSOCache
2016-01-18 14:38 - 2016-01-18 21:09 - 00109672 _____ C:\Users\Administrador\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-18 14:34 - 2016-01-20 09:48 - 00000000 ____D C:\Amilton
2016-01-18 14:33 - 2016-01-18 14:33 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\WinRAR
2016-01-18 14:26 - 2016-01-19 10:04 - 00001287 _____ C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-01-18 14:25 - 2016-01-20 09:43 - 00000128 _____ C:\Windows\system32\config\netlogon.ftl
2016-01-18 14:25 - 2016-01-19 13:44 - 00000000 ____D C:\Users\Administrador
2016-01-18 14:25 - 2016-01-19 13:43 - 00001309 _____ C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-18 14:25 - 2016-01-19 10:05 - 00000000 __SHD C:\Users\Administrador\IntelGraphicsProfiles
2016-01-18 14:25 - 2016-01-18 14:25 - 00003086 __RSH C:\Users\Todos os Usuários\ntuser.pol
2016-01-18 14:25 - 2016-01-18 14:25 - 00003086 __RSH C:\ProgramData\ntuser.pol
2016-01-18 14:25 - 2016-01-18 14:25 - 00000020 ___SH C:\Users\Administrador\ntuser.ini
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Modelos
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Meus documentos
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Menu Iniciar
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Documents\Minhas músicas
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Documents\Minhas imagens
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Documents\Meus vídeos
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Dados de aplicativos
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Configurações locais
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\AppData\Local\Histórico
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\AppData\Local\Dados de aplicativos
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Ambiente de rede
2016-01-18 14:25 - 2016-01-18 14:25 - 00000000 _SHDL C:\Users\Administrador\Ambiente de impressão
2016-01-18 14:25 - 2011-04-12 12:20 - 00000000 ____D C:\Users\Administrador\AppData\Roaming\Media Center Programs
2016-01-18 14:22 - 2016-01-18 14:22 - 00022280 _____ (ASRock Incorporation) C:\Windows\SysWOW64\Drivers\AsrDrv101.sys
2016-01-18 14:22 - 2016-01-18 14:22 - 00001267 _____ C:\Users\Public\Desktop\A-Tuning.lnk
2016-01-18 14:22 - 2016-01-18 14:22 - 00000000 ____D C:\Windows\ASRock
2016-01-18 14:22 - 2016-01-18 14:22 - 00000000 ____D C:\Program Files (x86)\ASRock Utility
2016-01-18 14:22 - 2013-05-28 17:58 - 00613640 _____ C:\Windows\system32\USBKeyCredentialProvider.dll
2016-01-18 14:22 - 2013-05-09 16:50 - 00040200 _____ (ASRock Inc.) C:\Windows\system32\Drivers\AsrRamDisk.sys
2016-01-18 14:19 - 2011-11-07 10:13 - 00017192 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\AsrAppCharger.sys
2016-01-18 14:17 - 2016-01-18 14:17 - 00069344 _____ (FNet Co., Ltd.) C:\Windows\system32\TurboShell_105.dll
2016-01-18 14:17 - 2016-01-18 14:17 - 00000000 ____D C:\Users\Todos os Usuários\FNET
2016-01-18 14:17 - 2016-01-18 14:17 - 00000000 ____D C:\Users\Amilton2\AppData\Roaming\FNET
2016-01-18 14:17 - 2016-01-18 14:17 - 00000000 ____D C:\ProgramData\FNET
2016-01-18 14:16 - 2016-01-18 14:22 - 00057952 _____ C:\Users\Amilton2\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-18 14:16 - 2016-01-18 14:16 - 00042465 _____ C:\Windows\cFosSpeed_Setup_Log.txt
2016-01-18 14:16 - 2016-01-18 14:16 - 00002029 _____ C:\Users\Amilton2\Desktop\XFast LAN.lnk
2016-01-18 14:16 - 2016-01-18 14:16 - 00000000 ____D C:\Users\Todos os Usuários\cFos
2016-01-18 14:16 - 2016-01-18 14:16 - 00000000 ____D C:\Users\Amilton2\AppData\Roaming\WinRAR
2016-01-18 14:16 - 2016-01-18 14:16 - 00000000 ____D C:\Users\Amilton2\AppData\Local\cFos
2016-01-18 14:16 - 2016-01-18 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast LAN
2016-01-18 14:16 - 2016-01-18 14:16 - 00000000 ____D C:\ProgramData\cFos
2016-01-18 14:16 - 2016-01-18 14:16 - 00000000 ____D C:\Program Files\ASRock
2016-01-18 14:16 - 2016-01-18 13:38 - 00000000 ____D C:\Windows\Panther
2016-01-18 14:16 - 2013-05-31 16:23 - 01814880 _____ (cFos Software GmbH) C:\Windows\system32\Drivers\cfosspeed6.sys
2016-01-18 14:15 - 2016-01-18 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-18 14:15 - 2016-01-18 14:16 - 00000000 ____D C:\Program Files\WinRAR
2016-01-18 14:15 - 2016-01-18 14:15 - 00000000 ____D C:\Users\Amilton2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-18 14:14 - 2016-01-18 14:14 - 00015452 _____ C:\Windows\system32\results.xml
2016-01-18 14:12 - 2016-01-18 14:20 - 00000000 __SHD C:\Users\Amilton2\IntelGraphicsProfiles
2016-01-18 14:12 - 2016-01-18 14:12 - 00000401 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-01-18 14:11 - 2016-01-18 14:11 - 00000704 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2016-01-18 14:11 - 2015-09-04 01:40 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2016-01-18 14:11 - 2015-09-04 01:40 - 00082432 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2016-01-18 14:09 - 2016-01-18 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
2016-01-18 14:09 - 2016-01-18 14:39 - 00000000 ____D C:\Program Files\ASRock Utility
2016-01-18 14:09 - 2016-01-18 14:09 - 00000000 ____D C:\Users\Amilton2\Intel
2016-01-18 14:08 - 2016-01-18 14:11 - 00000000 ____D C:\Program Files\Intel
2016-01-18 14:08 - 2016-01-18 14:08 - 00000000 ____D C:\Users\Todos os Usuários\Intel
2016-01-18 14:08 - 2016-01-18 14:08 - 00000000 ____D C:\ProgramData\Intel
2016-01-18 14:08 - 2013-09-03 16:52 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2016-01-18 14:07 - 2016-01-18 14:07 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf
2016-01-18 14:07 - 2016-01-18 14:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-01-18 14:07 - 2014-12-10 03:39 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2016-01-18 14:07 - 2013-09-03 16:52 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2016-01-18 14:07 - 2013-09-03 16:52 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2016-01-18 14:07 - 2013-02-01 16:46 - 00819784 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-01-18 14:07 - 2012-07-26 02:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-01-18 14:07 - 2012-07-26 00:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-01-18 14:07 - 2012-06-02 12:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-01-18 14:06 - 2016-01-18 14:22 - 00000000 ____D C:\Program Files (x86)\Intel
2016-01-18 14:06 - 2016-01-18 14:12 - 00000000 ____D C:\Intel
2016-01-18 14:06 - 2013-08-05 12:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2016-01-18 14:05 - 2016-01-18 14:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-18 14:05 - 2016-01-18 14:07 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-01-18 14:05 - 2016-01-18 14:05 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-01-18 14:05 - 2016-01-18 14:05 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-01-18 14:05 - 2016-01-18 14:05 - 00000000 ____D C:\Program Files\Realtek
2016-01-18 14:05 - 2013-03-29 22:42 - 03379272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-01-18 14:05 - 2013-03-29 18:10 - 00449481 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-01-18 14:05 - 2013-03-27 17:57 - 00135240 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-01-18 14:05 - 2013-03-26 18:06 - 02797128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-01-18 14:05 - 2013-03-26 18:04 - 02734624 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-01-18 14:05 - 2013-03-26 16:40 - 03693128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2016-01-18 14:05 - 2013-03-26 15:38 - 01659464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-01-18 14:05 - 2013-03-25 18:32 - 03180264 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-01-18 14:05 - 2013-03-23 04:43 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-01-18 14:05 - 2013-03-20 14:16 - 02102040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-01-18 14:05 - 2013-03-20 14:16 - 00910104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-01-18 14:05 - 2013-03-12 19:16 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-01-18 14:05 - 2013-02-28 14:10 - 02032408 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-01-18 14:05 - 2013-02-20 19:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-01-18 14:05 - 2013-02-19 19:52 - 00991816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-01-18 14:05 - 2013-01-16 16:02 - 02079816 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2016-01-18 14:05 - 2013-01-11 16:27 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2016-01-18 14:05 - 2013-01-11 16:27 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2016-01-18 14:05 - 2012-06-20 18:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-01-18 14:05 - 2012-06-08 17:23 - 00083072 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2016-01-18 14:05 - 2012-06-08 17:21 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2016-01-18 14:05 - 2012-06-08 17:21 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2016-01-18 14:05 - 2012-03-08 12:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-01-18 14:05 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-01-18 14:05 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-01-18 14:05 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-01-18 14:05 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-01-18 14:05 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-01-18 14:05 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-01-18 14:05 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-01-18 14:05 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-01-18 14:05 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-01-18 14:05 - 2010-09-27 10:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-01-18 14:05 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-01-18 14:05 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-01-18 14:05 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-01-18 14:05 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-01-18 14:05 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2016-01-18 14:04 - 2016-01-18 14:04 - 00000000 ____D C:\Users\Amilton2\Desktop\SmartConnect(v5.0.10.2907_64bit)
2016-01-18 14:04 - 2016-01-18 14:04 - 00000000 ____D C:\Users\Amilton2\Desktop\SmartConnect(v1.0.7)
2016-01-18 14:04 - 2016-01-18 14:04 - 00000000 ____D C:\Users\Amilton2\Desktop\RapidStorage(v13.1.0.1058)
2016-01-18 14:04 - 2015-09-04 01:40 - 24849272 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 24050504 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 17808192 _____ C:\Windows\system32\igd11dxva64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 17331808 _____ C:\Windows\SysWOW64\igd11dxva32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 15981056 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 10852352 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 09533952 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 09480608 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 08683376 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 07508480 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 06725162 _____ C:\Windows\system32\igdclbif.bin
2016-01-18 14:04 - 2015-09-04 01:40 - 06189800 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 04918160 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-01-18 14:04 - 2015-09-04 01:40 - 04876008 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 03590656 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 03325440 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 02813952 _____ C:\Windows\system32\iglhxa64.cpa
2016-01-18 14:04 - 2015-09-04 01:40 - 02039808 _____ (Intel Corporation) C:\Windows\system32\igfxLHM.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01402336 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01399240 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01370624 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01277224 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01131008 _____ (Intel Corporation) C:\Windows\system32\GfxResources.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01064448 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 01036904 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 01033832 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 01019664 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00699392 _____ (Intel Corporation) C:\Windows\system32\igfxDH.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00641530 _____ C:\Windows\system32\FilmModeDetection.wmv
2016-01-18 14:04 - 2015-09-04 01:40 - 00624128 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00460048 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2016-01-18 14:04 - 2015-09-04 01:40 - 00448104 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00425472 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00403671 _____ C:\Windows\system32\ImageStabilization.wmv
2016-01-18 14:04 - 2015-09-04 01:40 - 00393320 _____ C:\Windows\system32\igfxTray.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00385024 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00375173 _____ C:\Windows\system32\ColorImageEnhancement.wmv
2016-01-18 14:04 - 2015-09-04 01:40 - 00374272 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00372224 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00344168 _____ (Intel Corporation) C:\Windows\system32\igfxCUIService.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00339048 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00338536 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00313448 _____ (Intel Corporation) C:\Windows\system32\igfxEM.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00304128 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00286720 _____ (Intel Corporation) C:\Windows\system32\igfxDI.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00282696 _____ (Intel Corporation) C:\Windows\system32\igd10idpp64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00279144 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00263120 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10idpp32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00256000 _____ C:\Windows\system32\igfxCPL.cpl
2016-01-18 14:04 - 2015-09-04 01:40 - 00248424 _____ (Intel Corporation) C:\Windows\system32\igfxHK.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00231424 _____ (Intel Corporation) C:\Windows\system32\igfxDTCM.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00220432 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00218728 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00214016 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00213192 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00206848 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v4280.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00192000 _____ C:\Windows\system32\igdde64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00184352 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00179200 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00178672 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00169984 _____ (Intel Corporation) C:\Windows\system32\igdail64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00156264 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-01-18 14:04 - 2015-09-04 01:40 - 00153088 _____ C:\Windows\SysWOW64\igdde32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00152064 _____ (Intel Corporation) C:\Windows\SysWOW64\igdail32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00086528 _____ C:\Windows\system32\igfxCUIServicePS.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00086528 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00082432 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00073728 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00060928 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00044025 _____ C:\Windows\system32\iglhxo64.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00043816 _____ C:\Windows\system32\iglhxc64_dev.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00043494 _____ C:\Windows\system32\iglhxc64.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00043298 _____ C:\Windows\system32\iglhxg64_dev.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00043256 _____ C:\Windows\system32\iglhxg64.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00042079 _____ C:\Windows\system32\iglhxo64_dev.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00036616 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00035328 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00011264 _____ ( ) C:\Windows\system32\igfxDILib.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00010752 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00004040 _____ C:\Windows\system32\iglhxs64.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00001125 _____ C:\Windows\system32\iglhxa64.vp
2016-01-18 14:04 - 2015-09-04 01:40 - 00000935 _____ C:\Windows\system32\Gfxv4_0.exe.config
2016-01-18 14:04 - 2015-09-04 01:40 - 00000935 _____ C:\Windows\system32\DPTopologyApp.exe.config
2016-01-18 14:04 - 2015-09-04 01:40 - 00000895 _____ C:\Windows\system32\Gfxv2_0.exe.config
2016-01-18 14:04 - 2015-09-04 01:40 - 00000895 _____ C:\Windows\system32\DPTopologyAppv2_0.exe.config
2016-01-18 13:38 - 2016-01-19 13:43 - 00001313 _____ C:\Users\Amilton2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-01-18 13:38 - 2016-01-18 21:33 - 00001291 _____ C:\Users\Amilton2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-01-18 13:38 - 2016-01-18 14:20 - 00000000 ____D C:\Users\Amilton2\AppData\Local\VirtualStore
2016-01-18 13:38 - 2016-01-18 14:12 - 00000000 ____D C:\Users\Amilton2
2016-01-18 13:38 - 2016-01-18 13:38 - 00000020 ___SH C:\Users\Amilton2\ntuser.ini
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Modelos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Modelos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Meus documentos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Menu Iniciar
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Documents\Minhas músicas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Documents\Minhas imagens
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Documents\Meus vídeos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Configurações locais
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\AppData\Local\Histórico
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\AppData\Local\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Ambiente de rede
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Users\Amilton2\Ambiente de impressão
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\ProgramData\Modelos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\ProgramData\Documentos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-01-18 13:38 - 2016-01-18 13:38 - 00000000 _SHDL C:\Arquivos de Programas
2016-01-18 13:38 - 2011-04-12 12:20 - 00000000 ____D C:\Users\Amilton2\AppData\Roaming\Media Center Programs
2016-01-18 13:18 - 2016-01-18 13:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-01-18 13:18 - 2016-01-18 13:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-01-18 13:17 - 2016-01-18 13:17 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-01-20 09:47 - 2011-04-12 11:40 - 00705070 _____ C:\Windows\system32\prfh0416.dat
2016-01-20 09:47 - 2011-04-12 11:40 - 00146910 _____ C:\Windows\system32\prfc0416.dat
2016-01-20 09:47 - 2009-07-14 03:13 - 01633534 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-20 09:47 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-01-20 09:47 - 2009-07-14 01:20 - 00000000 ____D C:\Windows
2016-01-20 09:42 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-20 09:42 - 2009-07-14 02:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-20 09:42 - 2009-07-14 02:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-20 09:42 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-01-20 09:42 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\Dism
2016-01-20 09:29 - 2009-07-14 00:34 - 00000478 _____ C:\Windows\win.ini
2016-01-19 09:39 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\AppCompat
2016-01-18 21:04 - 2009-07-14 02:45 - 00409752 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-18 20:01 - 2009-07-14 02:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-18 20:00 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-18 18:21 - 2011-04-12 12:22 - 00000000 ____D C:\Program Files\Windows Journal
2016-01-18 17:52 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-01-18 17:52 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-01-18 17:52 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\tracing
2016-01-18 17:52 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-01-18 17:52 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-01-18 14:44 - 2011-04-12 12:21 - 00000000 ____D C:\Windows\ShellNew
2016-01-18 14:44 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-01-18 14:43 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-01-18 14:16 - 2009-07-14 03:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-01-18 13:38 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\rescache
2016-01-18 13:38 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Windows NT
2016-01-18 13:18 - 2009-07-14 03:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-18 13:17 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-01-18 13:16 - 2011-04-12 12:21 - 00000000 ____D C:\Windows\CSC

Alguns arquivos em TEMP:
====================
C:\Users\Administrador\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-01-18 13:16

==================== Fim de FRST.txt ============================

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,029 posts
  • MVP

I need the addition.txt file to help you.  If you didn't get one when you ran FRST, run it again and check the Addition.txt box then Scan.  Then copy and paste the text into a reply and post it.  Do not click on the Code button ( <> ) as it makes the text hard to read.


  • 0

#3
furlano

furlano

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts

I tried to block access to hao123.com through host.txt but it didn't work, so now I'm blocking it through opendns.

There you go.

 

Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:18-01-2016
Executado por Administrador (2016-01-20 09:48:31)
Executando a partir de C:\Amilton
Windows 7 Ultimate Service Pack 1 (X64) (2016-01-18 15:38:44)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-1005245018-3217937200-3886577389-500 - Administrator - Disabled)
Amilton2 (S-1-5-21-1005245018-3217937200-3886577389-1000 - Administrator - Enabled) => C:\Users\Amilton2
Convidado (S-1-5-21-1005245018-3217937200-3886577389-501 - Limited - Disabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

Adobe Reader XI (11.0.01) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.01 - Adobe Systems Incorporated)
ASRock App Charger v1.0.6 (HKLM\...\ASRock App Charger_is1) (Version: 1.0.6 - ASRock Inc.)
ASRock XFast RAM v3.0.2 (HKLM\...\ASRock XFast RAM_is1) (Version:  - ASRock Inc.)
A-Tuning v2.0.40 (HKLM-x32\...\A-Tuning_is1) (Version: 2.0.40 - )
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
f.lux (HKU\S-1-5-21-1791303942-176834493-2395421313-1105\...\Flux) (Version:  - )
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4280 - Intel Corporation)
LAN Messenger (HKLM-x32\...\LAN Messenger) (Version: 1.2.35 - LAN Messenger)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 43.0.4 (x64 pt-BR) (HKLM\...\Mozilla Firefox 43.0.4 (x64 pt-BR)) (Version: 43.0.4 - Mozilla)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.68.201.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
XFast LAN v9.05 (HKLM\...\XFast LAN) (Version: 9.05 - cFos Software GmbH, Bonn)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {2342D877-1F11-475C-9205-50A2EC60EC8A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-01-20] (AVAST Software)
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {8E53FCD1-1608-4802-AD7C-BB99E6321984} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {8FC63594-8CDD-495F-9342-49BA57D788F6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-18] (Google Inc.)
Task: {96BCB9E2-23F8-4BFA-BD24-EF1F091C67BA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-01-19] (AVAST Software)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E2B77E01-FA7D-4753-88BC-8A41815CCCDE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-18] (Google Inc.)
Task: {FFFF8170-DF82-4332-B6F4-719EAA6FF6E1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Administrador\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://hao.169x.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://hao.169x.cn/

==================== Módulos Carregados (Whitelisted) ==============

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2015-10-16 08:02 - 2015-10-16 08:02 - 00043480 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2016-01-18 14:04 - 2015-09-04 01:40 - 00393320 _____ () C:\Windows\system32\igfxTray.exe
2016-01-18 15:17 - 2016-01-12 13:43 - 01978184 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libglesv2.dll
2016-01-18 15:17 - 2016-01-12 13:43 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libegl.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2015-11-11 02:49 - 2015-11-11 02:49 - 01557160 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2016-01-19 12:00 - 2016-01-19 12:00 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-01-19 12:00 - 2016-01-19 12:00 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-01-20 08:32 - 2016-01-20 08:32 - 02818048 _____ () C:\Program Files\AVAST Software\Avast\defs\16012000\algo.dll
2016-01-19 12:00 - 2016-01-19 12:00 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2009-01-10 17:32 - 2009-01-10 17:32 - 00011362 _____ () C:\Program Files (x86)\LAN Messenger\mingwm10.dll
2009-06-23 00:42 - 2009-06-23 00:42 - 00043008 _____ () C:\Program Files (x86)\LAN Messenger\libgcc_s_dw2-1.dll
2016-01-19 12:00 - 2016-01-19 12:00 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-01-18 14:07 - 2013-09-03 16:52 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)


==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)


==================== EXE Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)


==================== Hosts Conteúdo: ==========================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-14 00:34 - 2016-01-20 08:40 - 00000908 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1    http://www.hao123.co...94189094_hao_pg
127.0.0.1    http://hao.169x.cn/

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-1791303942-176834493-2395421313-1105\Control Panel\Desktop\\Wallpaper -> C:\Users\amilton\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1791303942-176834493-2395421313-500\Control Panel\Desktop\\Wallpaper -> C:\Users\Administrador\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.2 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

(Atualmente não há nenhuma correção automática para esta seção.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: ASRockIOMon => 2
MSCONFIG\Services: cFosSpeedS => 2
MSCONFIG\startupreg: XFast LAN => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe
MSCONFIG\startupreg: XFastUSB => "C:\Program Files (x86)\XFastUSB\XFastUsb.exe"

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{B7767BCC-AB1C-4AB8-AE86-9CC313A2BE73}] => (Allow) C:\Program Files (x86)\LAN Messenger\lmc.exe
FirewallRules: [{7867DF35-C870-4B58-9F4D-1AABDC271381}] => (Allow) C:\Program Files (x86)\LAN Messenger\lmc.exe
FirewallRules: [{E85CAE9E-1C70-46A3-A352-410FCFF43CEE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2B9906D2-CE75-42EC-92D2-12A69215C27A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{0B240D89-2AE3-46CF-B91E-4C75E29ECE04}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{0BC17D03-B67B-4054-821E-870D01E32151}C:\program files (x86)\lan messenger\lmc.exe] => (Allow) C:\program files (x86)\lan messenger\lmc.exe
FirewallRules: [UDP Query User{6B190D86-99B5-42E4-B7CD-52C3B1FE6358}C:\program files (x86)\lan messenger\lmc.exe] => (Allow) C:\program files (x86)\lan messenger\lmc.exe
FirewallRules: [{16CFC45B-9AA6-41F0-A480-83782CB91F67}] => (Allow) LPort=1688

==================== Pontos de Restauração =========================

18-01-2016 21:41:27 Windows Update
19-01-2016 10:52:41 JRT Pre-Junkware Removal
19-01-2016 12:58:58 JRT Pre-Junkware Removal
19-01-2016 13:41:57 Ponto de verificação por HitmanPro
20-01-2016 09:27:01 Windows Update
20-01-2016 09:36:30 Windows Update

==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name: Controlador USB (Universal Serial Bus)
Description: Controlador USB (Universal Serial Bus)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (01/20/2016 09:43:34 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2016 09:30:33 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/20/2016 08:32:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2016 01:43:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2016 01:17:56 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: ehshell, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil . Error code = 0x80070020

Error: (01/19/2016 12:57:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2016 12:23:50 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2016 11:00:48 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/19/2016 10:13:42 AM) (Source: Group Policy Printers) (EventID: 8194) (User: AUTORIDADE NT)
Description: A extensão do lado do cliente não pôde definir as configurações da diretiva aplicar usuário para 'Impressora {3022876F-F0D3-455B-861A-EE2F17C13EDE}' porque falhou com o código de erro: '0x80070005 Acesso negado.'%aplicar00790275

Error: (01/19/2016 10:13:18 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Erros de Sistema:
=============
Error: (01/20/2016 09:42:49 AM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: Este computador não pôde configurar uma sessão segura com um
controlador de domínio no domínio CAMERGE devido ao seguinte:
%%1311

Isso pode causar problemas de autenticação. Certifique-se de
que o computador está conectado à rede. Se o problema persistir,
contate o administrador do domínio.



INFORMAÇÕES ADICIONAIS

Se este computador for um controlador de domínio para o
domínio especificado, ele configura a sessão segura para o
emulador de controlador de domínio primário no domínio
especificado. Caso contrário, este computador configura a
sessão segura para qualquer controlador de domínio no
domínio especificado.

Error: (01/20/2016 09:42:11 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Instalador de Módulos do Windows terminou com o erro:
%%34

Error: (01/20/2016 09:30:33 AM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: AUTORIDADE NT)
Description: O processamento da Diretiva de Grupo falhou devido à falta de conectividade de rede com um controlador de domínio. Talvez seja uma condição temporária. Uma mensagem êxito seria gerada assim que a máquina se conectasse ao controlador de domínio e a Diretiva de Grupo fosse processada com êxito. Se a mensagem de erro não for exibida por várias horas, contate o administrador.

Error: (01/20/2016 09:30:31 AM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: Este computador não pôde configurar uma sessão segura com um
controlador de domínio no domínio CAMERGE devido ao seguinte:
%%1311

Isso pode causar problemas de autenticação. Certifique-se de
que o computador está conectado à rede. Se o problema persistir,
contate o administrador do domínio.



INFORMAÇÕES ADICIONAIS

Se este computador for um controlador de domínio para o
domínio especificado, ele configura a sessão segura para o
emulador de controlador de domínio primário no domínio
especificado. Caso contrário, este computador configura a
sessão segura para qualquer controlador de domínio no
domínio especificado.

Error: (01/20/2016 08:36:44 AM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: CAMERGE)
Description: O processamento da Diretiva de Grupo falhou devido à falta de conectividade de rede com um controlador de domínio. Talvez seja uma condição temporária. Uma mensagem êxito seria gerada assim que a máquina se conectasse ao controlador de domínio e a Diretiva de Grupo fosse processada com êxito. Se a mensagem de erro não for exibida por várias horas, contate o administrador.

Error: (01/20/2016 08:32:29 AM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: AUTORIDADE NT)
Description: O processamento da Diretiva de Grupo falhou devido à falta de conectividade de rede com um controlador de domínio. Talvez seja uma condição temporária. Uma mensagem êxito seria gerada assim que a máquina se conectasse ao controlador de domínio e a Diretiva de Grupo fosse processada com êxito. Se a mensagem de erro não for exibida por várias horas, contate o administrador.

Error: (01/20/2016 08:32:24 AM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: Este computador não pôde configurar uma sessão segura com um
controlador de domínio no domínio CAMERGE devido ao seguinte:
%%1311

Isso pode causar problemas de autenticação. Certifique-se de
que o computador está conectado à rede. Se o problema persistir,
contate o administrador do domínio.



INFORMAÇÕES ADICIONAIS

Se este computador for um controlador de domínio para o
domínio especificado, ele configura a sessão segura para o
emulador de controlador de domínio primário no domínio
especificado. Caso contrário, este computador configura a
sessão segura para qualquer controlador de domínio no
domínio especificado.

Error: (01/19/2016 01:43:13 PM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: Este computador não pôde configurar uma sessão segura com um
controlador de domínio no domínio CAMERGE devido ao seguinte:
%%1311

Isso pode causar problemas de autenticação. Certifique-se de
que o computador está conectado à rede. Se o problema persistir,
contate o administrador do domínio.



INFORMAÇÕES ADICIONAIS

Se este computador for um controlador de domínio para o
domínio especificado, ele configura a sessão segura para o
emulador de controlador de domínio primário no domínio
especificado. Caso contrário, este computador configura a
sessão segura para qualquer controlador de domínio no
domínio especificado.

Error: (01/19/2016 12:57:10 PM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: Este computador não pôde configurar uma sessão segura com um
controlador de domínio no domínio CAMERGE devido ao seguinte:
%%1311

Isso pode causar problemas de autenticação. Certifique-se de
que o computador está conectado à rede. Se o problema persistir,
contate o administrador do domínio.



INFORMAÇÕES ADICIONAIS

Se este computador for um controlador de domínio para o
domínio especificado, ele configura a sessão segura para o
emulador de controlador de domínio primário no domínio
especificado. Caso contrário, este computador configura a
sessão segura para qualquer controlador de domínio no
domínio especificado.

Error: (01/19/2016 12:56:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Instalador de Módulos do Windows foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 120000 milissegundos: Reiniciar o serviço.


==================== Informações da Memória ===========================

Processador: Intel® Celeron® CPU G1820 @ 2.70GHz
Percentagem de memória em uso: 67%
RAM física total: 3769.35 MB
RAM física disponível: 1230.34 MB
Virtual Total: 7536.9 MB
Virtual disponível: 5152.63 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:62.67 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00F61431)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================


  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,029 posts
  • MVP

You have several programs that I'm not familiar with and that look like they are fairly new:

 

ASRock App Charger v1.0.6 
ASRock XFast RAM v3.0.2
A-Tuning v2.0.40 

LAN Messenger

XFast LAN v9.05 

 

Your infection is often a rider on other software so if you have installed any of these about the time of the start of your infection then first uninstall them.

 

Also WinRar is sometimes offered with other programs so if your infection was about the time you installed WinRar  uninstall it.

 

 
Download the attached fixlist.txt to the same location as FRST
[attachment=80060:fixlist.txt]
Run FRST and press Fix.  System will reboot.
A fix log will be generated please post that.  Run FRST again, check the Additions box and then Scan.  You will get two logs.  Post them both.
 
 
Let's see if an Avast boot-time scan finds anything.  You will probably want to let this run while you sleep as it can take 6 hours.  (Mute the speakers so Windows doesn't wake you up when it finally starts).
 
Make sure you have the latest definitions then follow these instructions:
 
Click on the Avast ball in systray or the Avast shortcut on your desktop or All Programs, Avast Software, Avast Free Anti-virus.
 
Click on Scan then Scan for Viruses.  In the box under the monitor icon, click on the down arrow and select Boot-time Scan.
 
Click on Scan Settings
 
Change System Drive to All hard drives
 
 
Under Heuristics click on the gray box to the left of Normal. It should turn Orange and now say High
 
Make sure the two boxes are checked.  Where it says 
 
When a threat is found... change it to Move to Chest.  OK.  Start.
 
The next time you reboot the scan will start.  I usually let it run while I sleep because it can take 6 hours.  (Good idea to mute the speakers so windows won't wake you when it finally boots up)
 
It normally stores its log in C:\ProgramData\AVAST Software\Avast\report\aswBoot.txt but it might change but last time I ran it it told you where to look for the log when it first started up.
 
Once it finishes copy and paste the log into a replay.  (if it says it found anything)
 

 


  • 0

#5
furlano

furlano

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts

i'm fairly sure how I got infected, but i'm not sure if I can write it down here (did it in other forum and got kicked). Let's just say that it involves an alternate way to activate windows 7 ultimate. is it okay if I pm you with it?

 

about the software:

ASRock App Charger v1.0.6  - app from the motherboard manufacturer
ASRock XFast RAM v3.0.2  - app from the motherboard manufacturer
A-Tuning v2.0.40  - app from the motherboard manufacturer

LAN Messenger - we use on our local lan to text eachother

XFast LAN v9.05  - app from the motherboard manufacturer


Edited by furlano, 20 January 2016 - 08:36 AM.

  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,029 posts
  • MVP

No need.  If you know when you got  infected that would be useful.  Go ahead and run the other stuff.


  • 0






Similar Topics


Also tagged with one or more of these keywords: hao123

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP