[tink03]

Hi,

I'm running Windows 7 Home Premium 32 bit on a Dell Inspiron 1200. I bought this on Craigslist and it obviously has some serious problems. This is not the 1st laptop I've had that has had these types of virus problems. I never seem to be able to get rid of them! My house has crazy things going on (that's another story entirely!), hence the Possessed house=Possessed computer title. Here's what's been happening...

 

I am connected to my router (AT & T) for a wireless connection. The network connection steps at the bottom of the computer only show 1 bar. I've had many laptops and this is the 1st time I don't have a good connection. All of the cell phones in the house have no trouble with internet connections (we all have iphones). The network troubleshooter says it can't find any problems. The computer runs slow and frequently freezes. I've run sfc /scannow in safe mode and it never finds any integrity violations. Here's the thing...no matter how many problems this laptop has, none of the troubleshooting or fix programs ever find anything wrong. I looked up Black Viper's list of services that should and shouldn't be running for this system and when I try to stop something, such as Application Information Service, I get an error (Error 1061) that says "The service cannot accept control messages at this time". I installed Avast and tried to run it, but it won't run. I went to Program Files and checked the properties on the Avast folder and noticed that it had no inherited permissions from Program Files. I tried checking the box for include inheritable permissions from this object's parent, but I was denied access. When I bring up Task Manager to look at what's running, I see a lot of services with an N/A for the group description, including Microsoft .NET Framework NGEN v4.0.30319_x86. Malwarebytes shows "starting", but never actually starts. That's another program I've run many times that has never once found a problem, yet the computer runs like [bleep]. Program Data files are also locked. I tried changing the permissoins on it to inheritable permissions, and I get the denied error. Bottom line is, something is controlling this laptop, but it's not me! Please help?

 

Btw...I have tried to post this 3 times now and each time it told me there was an error and I should check my proxy settings??? Then it said there were site problems or errors and when I clicked on diagnose error, it said troubleshooting couldn't identify the problem.  I have no idea what that means. I opened Task Manager and mscorsvw.exe was using 98% of the cpu. I went to service and it was for clr_optimization_v.4.0.30319_32, which is located in C:\Windows\Microsoft.NET\Framework. There are 6 other versions in there, along with a bunch of sbs_xxxx.dll files (iehost, etc...), netfxsbs12.hkf, SharedReg12.dll, and others. Also, Avast is now running at 90% cpu and when I tried to stop running it, I was given the error "Operation could not be completed. Access is denied." I had to delete it from the Add/Remove Programs. 

 

When I ran FRST, I noticed a couple of things. One, when it got to Windows/Service/App ID, the computer froze and the computer became unresponsive. It eventually started again, but this time I noticed that it posted the FRST.txt and Addition.txt to my desktop well before the scan was finished. Apparently it has psychic powers and can just guess what the rest of the scan will show! Any help you could give me would be appreciated.

 

Thank You!

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-06-2016 02

Ran by new (administrator) on POS (27-06-2016 19:32:39)

Running from C:\Users\new\Desktop

Loaded Profiles: new (Available Profiles: new)

Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Microsoft Corporation) C:\Windows\System32\mmc.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

 

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [igfxhkcmd] => C:\Windows\system32\hkcmd.exe [77824 2006-06-06] (Intel Corporation)

HKLM\...\Run: [igfxpers] => C:\Windows\system32\igfxpers.exe [118784 2006-06-06] (Intel Corporation)

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-06-13] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{E45C84F5-C547-4E64-8F84-AE5EFCFEF4C2}: [DhcpNameServer] 192.168.1.254

 

Internet Explorer:

==================

 

FireFox:

========

FF ProfilePath: C:\Users\new\AppData\Roaming\Mozilla\Firefox\Profiles\23swmhxa.default

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-24] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-24] (Google Inc.)

 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://google.com/"

CHR Profile: C:\Users\new\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-26]

CHR Extension: (Google Docs) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-26]

CHR Extension: (Google Drive) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-24]

CHR Extension: (YouTube) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-24]

CHR Extension: (Adblock Plus) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-26]

CHR Extension: (Google Sheets) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-26]

CHR Extension: (Chrome Remote Desktop) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-06-26]

CHR Extension: (Google Docs Offline) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-26]

CHR Extension: (Chrome Web Store Payments) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-26]

CHR Extension: (Gmail) - C:\Users\new\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-24]

 

==================== Services (Whitelisted) ========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S3 chromoting; C:\Program Files\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe [68488 2016-04-14] (Google Inc.)

S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)

U2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

 

===================== Drivers (Whitelisted) ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-06-25] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)

R3 STAC97; C:\Windows\System32\drivers\STAC97.sys [273168 2005-03-10] (SigmaTel, Inc.)

R3 VSTHWICH; C:\Windows\System32\DRIVERS\VSTICH3.SYS [242176 2009-07-13] (Conexant Systems, Inc.)

R3 WirelessKeyboardFilter; C:\Windows\System32\DRIVERS\WirelessKeyboardFilter.sys [44776 2016-03-30] (Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2016-06-27 19:32 - 2016-06-27 19:34 - 00006212 _____ C:\Users\new\Desktop\FRST.txt

2016-06-27 19:32 - 2016-06-27 19:32 - 00000000 ____D C:\Users\new\Desktop\FRST-OlderVersion

2016-06-27 19:30 - 2016-06-27 19:32 - 01739776 _____ (Farbar) C:\Users\new\Desktop\FRST.exe

2016-06-27 19:26 - 2016-06-27 19:19 - 00004804 _____ C:\Users\new\Desktop\route.print.txt

2016-06-27 19:26 - 2016-06-27 19:19 - 00004580 _____ C:\Users\new\Desktop\ipconfig.all.txt

2016-06-27 18:15 - 2012-07-25 23:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2016-06-27 18:15 - 2012-07-25 23:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2016-06-27 18:15 - 2012-07-25 23:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2016-06-27 18:15 - 2012-07-25 23:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2016-06-27 18:15 - 2012-07-25 23:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2016-06-27 18:15 - 2012-07-25 22:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2016-06-27 18:15 - 2012-07-25 22:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2016-06-27 18:15 - 2012-06-02 10:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2016-06-27 18:13 - 2014-06-30 18:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2016-06-27 18:13 - 2014-06-06 02:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2016-06-27 18:13 - 2014-03-09 17:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2016-06-27 18:13 - 2014-03-09 17:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2016-06-27 13:25 - 2015-01-08 22:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll

2016-06-27 13:25 - 2015-01-08 22:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll

2016-06-27 13:25 - 2015-01-08 22:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll

2016-06-27 12:38 - 2011-03-11 01:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2016-06-27 12:38 - 2011-03-11 01:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2016-06-27 12:38 - 2011-03-11 01:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2016-06-27 12:38 - 2011-03-11 01:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2016-06-27 12:38 - 2011-03-11 01:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2016-06-27 12:38 - 2011-03-11 01:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2016-06-27 12:38 - 2011-03-11 01:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2016-06-27 12:28 - 2016-06-27 19:32 - 00000000 ____D C:\FRST

2016-06-27 12:20 - 2014-12-11 13:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2016-06-27 12:19 - 2012-06-06 01:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2016-06-27 12:19 - 2011-05-04 00:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2016-06-27 12:19 - 2011-05-04 00:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2016-06-27 12:19 - 2011-05-04 00:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2016-06-27 12:19 - 2011-05-04 00:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2016-06-27 12:19 - 2011-05-04 00:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2016-06-27 12:19 - 2011-05-04 00:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2016-06-27 12:19 - 2011-05-04 00:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2016-06-27 12:19 - 2011-05-04 00:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2016-06-27 12:19 - 2011-05-04 00:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2016-06-27 12:15 - 2015-07-16 15:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2016-06-27 12:15 - 2015-07-16 15:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2016-06-27 12:15 - 2015-07-16 15:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2016-06-27 12:15 - 2015-07-16 11:14 - 00355840 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2016-06-27 12:14 - 2015-04-17 22:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2016-06-27 12:09 - 2016-04-09 02:54 - 12881408 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2016-06-27 12:09 - 2016-04-09 02:54 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2016-06-27 12:09 - 2016-04-09 01:44 - 02973184 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2016-06-27 12:09 - 2016-02-03 13:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2016-06-27 12:09 - 2013-02-11 23:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2016-06-27 12:08 - 2016-04-14 09:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2016-06-27 12:07 - 2016-02-09 05:50 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll

2016-06-27 12:07 - 2016-02-02 14:48 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll

2016-06-27 12:07 - 2015-11-11 14:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2016-06-27 12:07 - 2015-11-11 14:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll

2016-06-27 11:56 - 2015-07-09 13:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2016-06-27 11:56 - 2015-07-09 13:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2016-06-27 11:50 - 2015-07-30 13:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2016-06-27 11:50 - 2015-07-30 13:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2016-06-27 11:50 - 2015-07-30 13:57 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2016-06-27 11:50 - 2012-07-04 17:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2016-06-27 11:50 - 2012-07-04 17:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2016-06-27 11:50 - 2012-07-04 17:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2016-06-27 11:49 - 2015-05-25 14:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll

2016-06-27 11:49 - 2015-05-25 14:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe

2016-06-27 11:49 - 2015-05-25 14:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe

2016-06-27 11:49 - 2015-05-25 14:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe

2016-06-27 11:49 - 2015-05-25 14:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe

2016-06-27 11:49 - 2015-05-25 14:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe

2016-06-27 11:48 - 2016-01-22 02:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2016-06-27 11:48 - 2016-01-22 02:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2016-06-27 11:38 - 2014-08-01 07:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2016-06-27 11:35 - 2014-10-29 21:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2016-06-27 11:34 - 2014-07-08 21:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL

2016-06-27 11:34 - 2014-07-08 21:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL

2016-06-27 11:34 - 2014-07-08 21:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL

2016-06-27 11:34 - 2014-07-08 21:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL

2016-06-27 11:34 - 2014-07-08 21:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL

2016-06-27 11:25 - 2016-06-27 11:25 - 00000000 ____D C:\Users\new\AppData\Local\CEF

2016-06-27 10:41 - 2013-10-11 22:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2016-06-27 10:41 - 2013-10-11 22:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2016-06-27 10:41 - 2013-10-11 22:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2016-06-27 10:30 - 2015-04-27 15:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2016-06-27 10:30 - 2015-04-27 15:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2016-06-27 10:30 - 2015-04-27 15:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2016-06-27 10:30 - 2015-04-27 15:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2016-06-27 10:25 - 2014-06-18 18:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2016-06-27 10:25 - 2014-06-18 18:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2016-06-27 10:25 - 2014-06-18 18:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2016-06-27 10:25 - 2012-12-07 08:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2016-06-27 10:25 - 2012-12-07 08:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2016-06-27 10:25 - 2012-12-07 06:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2016-06-27 10:25 - 2012-12-07 06:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2016-06-27 10:20 - 2016-06-27 10:20 - 00000000 ____D C:\Program Files\Common Files\AV

2016-06-27 10:18 - 2016-06-27 10:15 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll

2016-06-27 10:13 - 2011-12-16 03:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2016-06-27 10:09 - 2015-02-02 23:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2016-06-27 10:09 - 2013-08-04 21:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2016-06-27 10:09 - 2012-03-17 03:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2016-06-27 10:09 - 2012-02-17 01:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2016-06-27 10:09 - 2012-02-17 00:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2016-06-27 09:52 - 2016-06-27 18:54 - 00000000 ____D C:\ProgramData\AVAST Software

2016-06-27 09:49 - 2016-06-27 09:51 - 06253640 _____ (AVAST Software) C:\Users\new\Downloads\avast_free_antivirus_setup_online_cnet_2.exe

2016-06-26 01:55 - 2016-06-26 01:55 - 00000000 ____D C:\Users\new\AppData\Local\GWX

2016-06-25 22:03 - 2016-06-25 22:03 - 00000000 ___SD C:\Windows\system32\CompatTel

2016-06-25 22:03 - 2016-06-25 22:03 - 00000000 ____D C:\Windows\system32\appraiser

2016-06-25 22:02 - 2016-06-25 22:12 - 00000000 ___SD C:\Windows\system32\GWX

2016-06-25 19:19 - 2013-10-01 20:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2016-06-25 19:19 - 2013-10-01 20:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2016-06-25 19:19 - 2013-10-01 20:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2016-06-25 19:19 - 2013-10-01 20:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2016-06-25 19:19 - 2013-10-01 20:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2016-06-25 19:19 - 2013-10-01 19:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2016-06-25 19:19 - 2013-10-01 18:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2016-06-25 18:52 - 2016-06-25 18:52 - 00000000 ____H C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Coinstaller_Critical.Wdf

2016-06-25 18:52 - 2016-06-25 18:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf

2016-06-25 18:34 - 2016-06-25 18:34 - 00002590 _____ C:\Users\new\Desktop\Google Docs.lnk

2016-06-25 16:36 - 2016-06-25 16:36 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf

2016-06-25 15:57 - 2015-07-30 09:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2016-06-25 15:33 - 2016-03-17 18:30 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-06-25 15:33 - 2016-03-17 18:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2016-06-25 15:33 - 2016-03-17 18:26 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-06-25 15:33 - 2016-03-17 18:26 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 18:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 17:36 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-06-25 15:33 - 2016-03-17 17:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 17:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 17:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-06-25 15:33 - 2016-03-17 17:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-06-25 15:33 - 2015-12-16 14:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll

2016-06-25 15:33 - 2015-12-16 14:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll

2016-06-25 15:33 - 2015-12-16 14:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL

2016-06-25 15:33 - 2015-12-16 14:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL

2016-06-25 15:33 - 2015-12-16 10:38 - 00419928 _____ C:\Windows\system32\locale.nls

2016-06-25 15:33 - 2014-07-16 21:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2016-06-25 15:33 - 2014-07-16 21:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2016-06-25 15:33 - 2014-07-16 21:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2016-06-25 15:33 - 2014-07-16 21:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2016-06-25 15:33 - 2014-07-16 21:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2016-06-25 15:33 - 2012-04-26 00:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2016-06-25 15:33 - 2012-04-26 00:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2016-06-25 15:32 - 2016-06-06 11:26 - 00037096 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-06-25 15:32 - 2016-06-06 11:23 - 01001472 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-06-25 15:32 - 2016-06-03 09:04 - 01225216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-06-25 15:32 - 2016-05-27 09:05 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-06-25 15:32 - 2016-05-27 09:05 - 00461824 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-06-25 15:32 - 2016-05-27 09:05 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-06-25 15:32 - 2016-05-27 09:05 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll

2016-06-25 15:32 - 2016-05-22 09:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-06-25 15:32 - 2016-03-23 18:39 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2016-06-25 15:32 - 2016-03-23 18:39 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-06-25 15:32 - 2015-07-15 13:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2016-06-25 15:32 - 2015-07-15 13:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2016-06-25 15:32 - 2015-07-15 13:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2016-06-25 15:31 - 2015-10-29 13:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll

2016-06-25 15:31 - 2015-10-29 13:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2016-06-25 15:31 - 2015-10-29 13:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll

2016-06-25 15:31 - 2015-10-29 13:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe

2016-06-25 15:31 - 2015-07-14 22:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll

2016-06-25 15:30 - 2015-12-08 17:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-06-25 15:30 - 2015-12-08 17:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2016-06-25 15:30 - 2015-12-08 17:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL

2016-06-25 15:30 - 2015-12-08 17:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax

2016-06-25 15:30 - 2015-12-08 17:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL

2016-06-25 15:30 - 2015-12-08 17:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll

2016-06-25 15:30 - 2015-12-08 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2016-06-25 15:30 - 2015-12-08 17:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2016-06-25 15:30 - 2015-12-08 17:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll

2016-06-25 15:30 - 2015-12-08 17:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2016-06-25 15:30 - 2015-12-08 17:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2016-06-25 15:30 - 2015-12-08 17:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2016-06-25 15:30 - 2015-12-08 17:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys

2016-06-25 15:30 - 2015-07-22 13:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2016-06-25 15:30 - 2015-07-22 13:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2016-06-25 15:30 - 2015-07-22 12:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll

2016-06-25 15:29 - 2015-11-19 10:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll

2016-06-25 15:29 - 2014-11-10 22:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2016-06-25 15:28 - 2016-04-09 02:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2016-06-25 15:28 - 2016-04-09 02:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-06-25 15:28 - 2016-04-09 02:57 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-06-25 15:28 - 2016-04-09 02:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-06-25 15:28 - 2016-04-09 01:42 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-06-25 15:28 - 2016-04-09 01:42 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-06-25 15:28 - 2016-04-09 01:42 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-06-25 15:28 - 2016-04-09 01:42 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-06-25 15:28 - 2016-04-09 01:40 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-06-25 15:28 - 2016-04-09 01:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-06-25 15:28 - 2016-03-23 18:42 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2016-06-25 15:28 - 2016-03-23 18:39 - 00534816 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2016-06-25 15:28 - 2016-03-23 18:39 - 00470704 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2016-06-25 15:28 - 2013-08-27 20:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2016-06-25 15:27 - 2015-07-01 16:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2016-06-25 15:27 - 2015-07-01 16:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2016-06-25 15:27 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2016-06-25 15:27 - 2013-05-12 23:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2016-06-25 15:27 - 2013-05-12 23:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2016-06-25 15:27 - 2012-10-03 12:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2016-06-25 15:27 - 2012-10-03 12:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2016-06-25 15:27 - 2012-08-21 16:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2016-06-25 15:26 - 2016-05-12 11:22 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-06-25 15:26 - 2016-05-12 11:22 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-06-25 15:26 - 2016-05-12 11:18 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL

2016-06-25 15:26 - 2016-05-12 11:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-06-25 15:26 - 2016-05-12 11:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-06-25 15:26 - 2016-05-12 10:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-06-25 15:26 - 2016-05-12 10:52 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2016-06-25 15:26 - 2016-05-12 10:52 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2016-06-25 15:26 - 2016-05-12 10:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-06-25 15:26 - 2016-05-12 10:52 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-06-25 15:26 - 2016-05-12 10:52 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2016-06-25 15:26 - 2016-05-12 10:52 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-06-25 15:26 - 2016-05-12 10:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-06-25 15:26 - 2016-05-12 10:51 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-06-25 15:26 - 2016-05-12 10:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-06-25 15:26 - 2016-05-12 09:04 - 00370784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2016-06-25 15:26 - 2016-05-12 09:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll

2016-06-25 15:26 - 2016-04-14 11:38 - 00105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2016-06-25 15:26 - 2016-04-14 11:33 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2016-06-25 15:26 - 2016-04-14 11:33 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2016-06-25 15:26 - 2016-04-14 11:33 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2016-06-25 15:26 - 2016-04-14 11:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2016-06-25 15:26 - 2016-04-14 11:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2016-06-25 15:26 - 2016-04-14 11:11 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2016-06-25 15:26 - 2016-04-06 06:36 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2016-06-25 15:26 - 2016-03-15 19:53 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll

2016-06-25 15:26 - 2016-03-15 19:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll

2016-06-25 15:26 - 2016-03-09 14:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2016-06-25 15:26 - 2015-08-05 13:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2016-06-25 15:26 - 2014-12-05 23:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2016-06-25 15:26 - 2012-10-03 12:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2016-06-25 15:26 - 2012-10-03 12:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2016-06-25 15:26 - 2012-10-03 12:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2016-06-25 15:26 - 2012-10-03 11:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2016-06-25 15:25 - 2016-02-05 14:44 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll

2016-06-25 15:25 - 2016-02-05 13:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll

2016-06-25 15:25 - 2015-06-03 16:22 - 00355456 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2016-06-25 15:25 - 2014-03-04 05:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll

2016-06-25 15:24 - 2015-02-18 03:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2016-06-25 15:24 - 2014-04-04 22:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2016-06-25 15:24 - 2014-04-04 22:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2016-06-25 15:24 - 2013-11-26 07:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2016-06-25 15:24 - 2011-05-03 00:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2016-06-25 15:24 - 2010-12-23 01:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2016-06-25 15:24 - 2010-12-23 01:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2016-06-25 15:23 - 2016-02-12 14:39 - 02956288 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2016-06-25 15:23 - 2016-02-12 14:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2016-06-25 15:23 - 2016-02-12 14:26 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2016-06-25 15:23 - 2016-02-12 14:07 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2016-06-25 15:23 - 2016-02-12 14:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2016-06-25 15:23 - 2016-02-12 14:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2016-06-25 15:23 - 2016-02-12 14:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2016-06-25 15:23 - 2016-02-12 14:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2016-06-25 15:23 - 2016-02-12 14:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2016-06-25 15:23 - 2016-02-12 14:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2016-06-25 15:23 - 2016-02-12 14:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2016-06-25 15:23 - 2016-01-07 13:35 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2016-06-25 15:23 - 2015-08-27 13:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2016-06-25 15:23 - 2015-08-27 13:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2016-06-25 15:22 - 2016-03-16 14:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll

2016-06-25 15:22 - 2016-03-16 14:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll

2016-06-25 15:22 - 2014-02-03 22:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2016-06-25 15:22 - 2014-02-03 22:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2016-06-25 15:22 - 2014-02-03 22:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2016-06-25 15:22 - 2014-02-03 22:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll

2016-06-25 15:22 - 2011-03-03 01:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2016-06-25 15:22 - 2011-03-03 01:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2016-06-25 15:22 - 2011-03-03 01:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2016-06-25 15:20 - 2016-03-09 14:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2016-06-25 15:20 - 2016-01-20 20:51 - 00057280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys

2016-06-25 15:20 - 2015-07-09 13:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2016-06-25 15:20 - 2015-07-09 13:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2016-06-25 15:20 - 2013-05-09 23:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2016-06-25 15:20 - 2013-01-24 00:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2016-06-25 15:20 - 2011-12-30 01:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2016-06-25 15:20 - 2011-05-24 06:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2016-06-25 15:19 - 2016-02-09 05:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2016-06-25 15:19 - 2016-02-09 05:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2016-06-25 15:19 - 2016-02-09 05:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2016-06-25 15:19 - 2016-02-09 05:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2016-06-25 15:19 - 2016-02-09 05:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2016-06-25 15:19 - 2016-02-04 14:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2016-06-25 15:19 - 2016-02-03 14:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2016-06-25 15:19 - 2016-02-03 14:49 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll

2016-06-25 15:19 - 2016-02-03 14:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll

2016-06-25 15:19 - 2015-12-08 17:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2016-06-25 15:19 - 2015-11-13 18:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll

2016-06-25 15:19 - 2015-11-13 18:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll

2016-06-25 15:19 - 2015-11-13 18:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe

2016-06-25 15:19 - 2015-11-03 14:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2016-06-25 15:19 - 2015-06-01 19:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll

2016-06-25 15:19 - 2015-04-12 23:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2016-06-25 15:19 - 2015-02-24 23:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2016-06-25 15:19 - 2015-01-16 22:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2016-06-25 15:19 - 2014-08-11 21:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2016-06-25 15:19 - 2013-10-18 21:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2016-06-25 15:19 - 2013-07-12 06:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2016-06-25 15:19 - 2012-11-02 01:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2016-06-25 15:19 - 2012-03-01 01:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2016-06-25 15:19 - 2012-03-01 01:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2016-06-25 15:19 - 2011-06-16 00:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2016-06-25 15:18 - 2016-05-11 11:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll

2016-06-25 15:18 - 2016-05-11 11:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2016-06-25 15:18 - 2016-05-11 11:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll

2016-06-25 15:18 - 2016-05-11 11:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe

2016-06-25 15:18 - 2016-05-11 10:52 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys

2016-06-25 15:18 - 2014-09-04 01:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2016-06-25 15:18 - 2014-01-28 22:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2016-06-25 15:16 - 2015-02-02 23:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll

2016-06-25 15:16 - 2015-02-02 23:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2016-06-25 15:16 - 2015-02-02 23:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe

2016-06-25 15:16 - 2015-02-02 23:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe

2016-06-25 15:16 - 2015-02-02 23:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll

2016-06-25 15:16 - 2015-02-02 23:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2016-06-25 15:16 - 2013-11-26 04:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2016-06-25 15:15 - 2016-05-13 17:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2016-06-25 15:15 - 2016-05-13 17:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2016-06-25 15:15 - 2016-05-13 17:49 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2016-06-25 15:15 - 2016-05-13 17:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2016-06-25 15:15 - 2016-05-13 17:27 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2016-06-25 15:15 - 2016-05-12 11:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-06-25 15:15 - 2016-04-09 00:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2016-06-25 15:15 - 2013-06-25 18:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2016-06-25 15:15 - 2012-11-28 18:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2016-06-25 15:15 - 2012-11-28 18:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2016-06-25 15:15 - 2012-11-28 18:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2016-06-25 15:15 - 2012-10-09 13:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2016-06-25 15:15 - 2012-10-09 13:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2016-06-25 15:15 - 2012-01-04 04:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2016-06-25 15:15 - 2011-03-11 01:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2016-06-25 15:15 - 2011-03-11 01:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2016-06-25 15:14 - 2016-03-06 14:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2016-06-25 15:14 - 2016-03-06 14:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2016-06-25 15:14 - 2015-02-03 22:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2016-06-25 15:14 - 2014-12-18 22:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2016-06-25 15:14 - 2012-09-25 18:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2016-06-25 15:14 - 2012-05-14 00:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2016-06-25 15:14 - 2011-06-15 04:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll

2016-06-25 15:14 - 2011-06-15 04:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2016-06-25 15:14 - 2011-06-15 04:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2016-06-25 15:14 - 2011-06-15 04:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2016-06-25 15:14 - 2011-06-15 04:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2016-06-25 15:14 - 2011-02-23 00:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2016-06-25 15:13 - 2014-10-24 21:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2016-06-25 15:11 - 2016-05-12 10:54 - 02397696 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-06-25 15:11 - 2015-11-03 14:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll

2016-06-25 15:11 - 2015-10-13 12:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2016-06-25 15:11 - 2015-10-13 12:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2016-06-25 15:11 - 2015-10-13 00:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2016-06-25 15:11 - 2015-04-10 23:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys

2016-06-25 15:11 - 2015-03-04 00:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2016-06-25 15:11 - 2015-03-04 00:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2016-06-25 15:11 - 2014-01-27 22:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2016-06-25 15:11 - 2013-10-29 22:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2016-06-25 15:11 - 2013-10-11 22:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2016-06-25 15:11 - 2013-10-11 22:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2016-06-25 15:11 - 2013-10-11 21:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2016-06-25 15:11 - 2013-10-11 21:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2016-06-25 15:11 - 2013-03-18 23:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2016-06-25 15:11 - 2011-08-27 00:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2016-06-25 15:11 - 2011-08-17 00:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2016-06-25 15:11 - 2011-08-17 00:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2016-06-25 15:11 - 2011-02-12 01:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2016-06-25 15:10 - 2011-02-18 01:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2016-06-25 15:09 - 2015-11-05 15:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll

2016-06-25 15:09 - 2015-11-05 05:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2016-06-25 15:09 - 2013-04-26 00:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2016-06-25 14:55 - 2016-05-23 18:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-06-25 14:55 - 2016-05-21 12:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-06-25 14:55 - 2016-05-20 18:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-06-25 14:55 - 2016-05-20 18:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-06-25 14:55 - 2016-05-20 17:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-06-25 14:55 - 2016-05-20 17:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-06-25 14:55 - 2016-05-20 17:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-06-25 14:55 - 2016-05-20 17:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-06-25 14:55 - 2016-05-20 17:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-06-25 14:55 - 2016-05-20 17:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-06-25 14:55 - 2016-05-20 17:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-06-25 14:55 - 2016-05-20 17:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-06-25 14:55 - 2016-05-20 17:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-06-25 14:55 - 2016-05-20 17:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-06-25 14:55 - 2016-05-20 17:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-06-25 14:55 - 2016-05-20 17:44 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-06-25 14:55 - 2016-05-20 17:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-06-25 14:55 - 2016-05-20 17:36 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-06-25 14:55 - 2016-05-20 17:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-06-25 14:55 - 2016-05-20 17:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-06-25 14:55 - 2016-05-20 17:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-06-25 14:55 - 2016-05-20 17:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-06-25 14:55 - 2016-05-20 17:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-06-25 14:55 - 2016-05-20 17:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-06-25 14:55 - 2016-05-20 17:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-06-25 14:55 - 2016-05-20 17:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-06-25 14:55 - 2016-05-20 17:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-06-25 14:55 - 2016-05-20 17:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-06-25 14:55 - 2016-05-20 17:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-06-25 14:55 - 2016-05-20 17:09 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-06-25 14:55 - 2016-05-20 17:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-06-25 14:55 - 2016-05-20 17:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-06-25 14:55 - 2016-05-20 16:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-06-25 14:55 - 2016-05-20 16:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-06-25 14:55 - 2016-05-20 16:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-06-25 14:28 - 2013-12-03 22:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2016-06-25 14:28 - 2013-12-03 22:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2016-06-25 14:28 - 2013-12-03 22:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2016-06-25 14:28 - 2013-12-03 22:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2016-06-25 14:28 - 2013-12-03 22:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2016-06-25 14:28 - 2013-12-03 21:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2016-06-25 14:28 - 2013-12-03 21:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2016-06-25 14:28 - 2013-12-03 21:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2016-06-25 14:28 - 2013-12-03 21:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2016-06-25 14:27 - 2014-10-13 21:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2016-06-25 14:25 - 2014-10-02 21:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2016-06-25 14:25 - 2014-10-02 21:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2016-06-25 14:25 - 2014-10-02 21:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2016-06-25 14:25 - 2014-10-02 21:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2016-06-25 14:25 - 2014-10-02 21:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2016-06-25 14:22 - 2013-02-27 00:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2016-06-25 14:19 - 2016-04-09 02:59 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-06-25 14:19 - 2016-04-09 02:59 - 00218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-06-25 14:19 - 2016-04-09 02:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2016-06-25 14:18 - 2015-04-24 13:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2016-06-25 14:18 - 2013-11-26 21:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2016-06-25 14:18 - 2013-11-26 21:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2016-06-25 14:18 - 2013-11-26 21:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2016-06-25 14:18 - 2013-11-26 21:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2016-06-25 14:18 - 2013-11-26 21:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2016-06-25 14:18 - 2013-11-26 21:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2016-06-25 14:18 - 2013-11-26 21:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2016-06-25 14:12 - 2016-01-11 14:54 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2016-06-25 14:12 - 2014-12-07 22:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2016-06-25 14:06 - 2016-05-18 12:10 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-06-25 00:41 - 2016-06-25 00:41 - 02751664 _____ C:\Users\new\Downloads\Windows6.1-KB3102810-x86.msu

2016-06-24 17:39 - 2016-06-24 17:43 - 10072064 _____ C:\Users\new\Downloads\chromeremotedesktophost.msi

2016-06-24 17:36 - 2016-06-26 23:09 - 00000000 ____D C:\Users\new\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

2016-06-24 17:31 - 2016-06-24 17:31 - 00002217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-06-24 17:31 - 2016-06-24 17:31 - 00002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-06-24 17:31 - 2016-06-24 17:31 - 00002205 _____ C:\ProgramData\Desktop\Google Chrome.lnk

2016-06-24 17:27 - 2016-06-27 19:14 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-06-24 17:27 - 2016-06-27 18:49 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-06-24 17:26 - 2016-06-26 23:09 - 00000000 ____D C:\Users\new\AppData\Local\Apps\2.0

2016-06-24 17:26 - 2016-06-26 22:58 - 00000000 ____D C:\Users\new\AppData\Local\Google

2016-06-24 17:26 - 2016-06-24 17:44 - 00000000 ____D C:\Program Files\Google

2016-06-24 17:26 - 2016-06-24 17:26 - 00000000 ____D C:\Users\new\AppData\Local\Deployment

2016-06-24 16:16 - 2006-06-06 20:05 - 00139264 _____ (Intel Corporation) C:\Windows\system32\igfxres.dll

2016-06-24 15:52 - 2016-06-25 22:17 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-06-24 15:49 - 2016-06-26 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-06-24 15:49 - 2016-06-26 23:09 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware

2016-06-24 15:49 - 2016-06-26 22:58 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-06-24 15:49 - 2016-06-24 15:49 - 00001064 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2016-06-24 15:49 - 2016-06-24 15:49 - 00001064 _____ C:\ProgramData\Desktop\Malwarebytes Anti-Malware.lnk

2016-06-24 15:49 - 2016-03-10 17:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2016-06-24 15:49 - 2016-03-10 17:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2016-06-24 15:49 - 2016-03-10 17:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2016-06-24 14:57 - 2016-06-24 14:58 - 22851472 _____ (Malwarebytes ) C:\Users\new\Desktop\mbam-setup-2.2.1.1043.exe

2016-06-24 14:10 - 2016-06-24 14:10 - 00000000 ____D C:\f6a43185242780d893389c62d2a39a

2016-06-24 13:48 - 2016-06-24 13:48 - 00000000 ____D C:\Users\new\AppData\Roaming\Adobe

2016-06-24 13:41 - 2016-06-24 13:42 - 00000000 ___HD C:\Windows\msdownld.tmp

2016-06-24 13:38 - 2016-06-24 13:38 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2016-06-24 13:38 - 2016-06-24 13:38 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2016-06-24 13:38 - 2016-06-24 13:38 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2016-06-24 13:38 - 2016-06-24 13:38 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2016-06-24 13:38 - 2016-06-24 13:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2016-06-24 13:38 - 2016-06-24 13:38 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2016-06-24 13:38 - 2016-06-24 13:38 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2016-06-24 13:37 - 2016-06-24 13:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2016-06-24 13:37 - 2016-06-24 13:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2016-06-24 13:37 - 2016-06-24 13:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2016-06-24 13:37 - 2016-06-24 13:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2016-06-24 13:37 - 2016-06-24 13:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2016-06-24 13:37 - 2016-06-24 13:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2016-06-24 13:34 - 2016-06-24 13:34 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2016-06-24 13:30 - 2016-06-24 13:30 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2016-06-24 13:30 - 2016-06-24 13:30 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2016-06-24 13:26 - 2016-06-24 13:26 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2016-06-24 12:54 - 2016-06-24 17:20 - 00000000 ____D C:\Users\new\AppData\Local\ElevatedDiagnostics

2016-06-24 12:53 - 2016-06-24 14:10 - 00000000 ____D C:\Windows\SoftwareDistribution.old

2016-06-24 11:51 - 2016-06-27 16:10 - 00511222 _____ C:\Windows\ntbtlog.txt

2016-06-13 08:31 - 2016-06-13 08:31 - 00000000 ____D C:\Windows\system32\SPReview

2016-06-13 08:30 - 2016-06-13 08:30 - 00000000 ____D C:\Windows\system32\EventProviders

2016-06-13 08:26 - 2016-06-27 09:52 - 00058016 _____ C:\Users\new\AppData\Local\GDIPFONTCACHEV1.DAT

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2016-06-27 19:20 - 2009-07-14 00:34 - 00017216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-06-27 19:20 - 2009-07-14 00:34 - 00017216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-06-27 19:19 - 2016-05-06 23:07 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI

2016-06-27 19:19 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\NDF

2016-06-27 19:19 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\inf

2016-06-27 19:14 - 2009-07-14 00:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-06-27 19:13 - 2009-07-14 00:53 - 00010118 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2016-06-27 18:52 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\Dism

2016-06-26 23:10 - 2009-07-14 00:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2016-06-26 23:10 - 2009-07-14 00:52 - 00000000 ____D C:\Program Files\Windows Defender

2016-06-26 23:10 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\security

2016-06-26 23:09 - 2016-05-06 21:32 - 00000000 ____D C:\Users\new\AppData\Roaming\Mozilla

2016-06-26 23:09 - 2016-05-06 21:32 - 00000000 ____D C:\Users\new\AppData\Local\Mozilla

2016-06-26 23:09 - 2016-05-06 21:32 - 00000000 ____D C:\Program Files\Mozilla Firefox

2016-06-26 23:09 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\AppCompat

2016-06-26 23:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\registration

2016-06-26 23:06 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\PolicyDefinitions

2016-06-26 22:59 - 2009-07-14 03:48 - 00000000 ___RD C:\Users\Public\Recorded TV

2016-06-26 22:57 - 2016-05-06 21:39 - 00000000 ____D C:\dell

2016-06-26 22:19 - 2016-05-06 23:03 - 00000000 ____D C:\Users\new

2016-06-26 00:15 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\tracing

2016-06-25 22:15 - 2009-07-14 00:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2016-06-25 22:07 - 2009-07-14 00:33 - 00267016 _____ C:\Windows\system32\FNTCACHE.DAT

2016-06-25 22:02 - 2009-07-14 03:49 - 00000000 ____D C:\Program Files\Windows Journal

2016-06-25 22:02 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers

2016-06-25 22:02 - 2009-07-13 22:37 - 00000000 ____D C:\Program Files\Common Files\System

2016-06-25 19:03 - 2016-05-07 02:36 - 139785240 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-06-25 19:03 - 2016-05-07 02:36 - 00000000 ____D C:\Windows\system32\MRT

2016-06-24 13:37 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\Catroot2.old

2016-06-24 01:18 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\Msdtc

2016-06-13 22:31 - 2016-05-07 02:30 - 00400040 _____ (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2016-06-13 09:07 - 2009-07-14 00:52 - 00000000 ____D C:\Program Files\Windows Sidebar

2016-06-13 09:07 - 2009-07-14 00:52 - 00000000 ____D C:\Program Files\Windows Portable Devices

2016-06-13 09:07 - 2009-07-14 00:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2016-06-13 09:07 - 2009-07-14 00:52 - 00000000 ____D C:\Program Files\DVD Maker

2016-06-13 09:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\sysprep

2016-06-13 09:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\Setup

2016-06-13 09:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\oobe

2016-06-13 09:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\migwiz

2016-06-13 09:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\system32\manifeststore

2016-06-13 09:07 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\servicing

2016-06-13 08:43 - 2009-07-13 22:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll

 

==================== Bamital & volsnap =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2016-05-06 22:52

 

==================== End of FRST.txt ============================

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 26-06-2016 02

Ran by new (2016-06-27 19:35:45)

Running from C:\Users\new\Desktop

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2016-05-07 03:03:17)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-4106137048-1712752688-1968715575-500 - Administrator - Enabled)

Guest (S-1-5-21-4106137048-1712752688-1968715575-501 - Limited - Disabled)

new (S-1-5-21-4106137048-1712752688-1968715575-1000 - Administrator - Enabled) => C:\Users\new

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Chrome Remote Desktop Host (HKLM\...\{95EB2FCC-AE0B-40E9-B804-347C6358923B}) (Version: 51.0.2704.7 - Google Inc.)

C-Major Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 42xx - SigmaTel)

Google Chrome (HKLM\...\Google Chrome) (Version: 51.0.2704.106 - Google Inc.)

Google Update Helper (Version: 1.3.30.3 - Google Inc.) Hidden

Intel® Graphics Media Accelerator Driver for Mobile (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: 6.14.10.4609 - )

Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Mozilla Firefox 46.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 46.0.1 (x86 en-US)) (Version: 46.0.1 - Mozilla)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {1A8DB34A-11D7-4080-A26E-EA516383EFAB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-24] (Google Inc.)

Task: {1CF011FA-6986-4C2F-9FB9-31B820FFB80D} - System32\Tasks\{AA1B56FB-B1C7-4E59-99A0-844BF504B4F5} => C:\Program Files\AVAST Software\Avast\AvastUI.exe

Task: {59E984E2-2F4E-49C6-BC7D-41DCE1930ADA} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-27] (AVAST Software)

Task: {8657C7DB-7592-4378-9E36-03E310815544} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-24] (Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

 

==================== Shortcuts =============================

 

(The entries could be listed to be restored or removed.)

 

==================== Loaded Modules (Whitelisted) ==============

 

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

 

 

==================== Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Hosts content: ===============================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2009-07-13 22:04 - 2009-06-10 17:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-4106137048-1712752688-1968715575-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\new\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [{6C03F202-C134-4510-9340-7A9C8332F74C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{95C9FA2D-BE71-4DEF-A4CE-08B0411C94D7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{932E4537-3626-4E66-BA80-898F70C44FB5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

FirewallRules: [{700810D9-0486-43AF-BCE1-76CFCF82ECA1}] => (Allow) C:\Program Files\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe

FirewallRules: [{4941001E-8640-4D70-8FAD-F56596D8740B}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

 

==================== Restore Points =========================

 

24-06-2016 13:24:50 Windows Modules Installer

24-06-2016 17:43:51 Installed Chrome Remote Desktop Host

25-06-2016 01:00:48 Windows Update

25-06-2016 15:37:00 Windows Update

25-06-2016 22:34:46 Windows Update

27-06-2016 14:01:39 Windows Update

27-06-2016 18:01:33 Windows Update

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (06/27/2016 07:14:01 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 . Error code = 0x800706be

 

Error: (06/26/2016 09:44:45 PM) (Source: Windows Search Service) (EventID: 1006) (User: )

Description: The Windows Search Service has failed to create the new search index. Internal error <1, 0x80070003, Failed to create application directory: C:\ProgramData\Microsoft\Search\Data\Applications\>.

 

Error: (06/26/2016 09:44:45 PM) (Source: Windows Search Service) (EventID: 3030) (User: )

Description: The gatherer service cannot be initialized.

 

Details:

The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.  (HRESULT : 0x80070660) (0x80070660)

 

Error: (06/26/2016 09:40:42 PM) (Source: Windows Search Service) (EventID: 1006) (User: )

Description: The Windows Search Service has failed to create the new search index. Internal error <1, 0x80070003, Failed to create application directory: C:\ProgramData\Microsoft\Search\Data\Applications\>.

 

Error: (06/26/2016 09:40:42 PM) (Source: Windows Search Service) (EventID: 3030) (User: )

Description: The gatherer service cannot be initialized.

 

Details:

The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.  (HRESULT : 0x80070660) (0x80070660)

 

Error: (06/26/2016 09:40:36 PM) (Source: Windows Search Service) (EventID: 1006) (User: )

Description: The Windows Search Service has failed to create the new search index. Internal error <1, 0x80070003, Failed to create application directory: C:\ProgramData\Microsoft\Search\Data\Applications\>.

 

Error: (06/26/2016 09:40:36 PM) (Source: Windows Search Service) (EventID: 3030) (User: )

Description: The gatherer service cannot be initialized.

 

Details:

The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.  (HRESULT : 0x80070660) (0x80070660)

 

Error: (06/26/2016 09:40:32 PM) (Source: Windows Search Service) (EventID: 1006) (User: )

Description: The Windows Search Service has failed to create the new search index. Internal error <1, 0x80070003, Failed to create application directory: C:\ProgramData\Microsoft\Search\Data\Applications\>.

 

Error: (06/26/2016 09:40:32 PM) (Source: Windows Search Service) (EventID: 3030) (User: )

Description: The gatherer service cannot be initialized.

 

Details:

The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.  (HRESULT : 0x80070660) (0x80070660)

 

Error: (06/26/2016 09:40:26 PM) (Source: Windows Search Service) (EventID: 1006) (User: )

Description: The Windows Search Service has failed to create the new search index. Internal error <1, 0x80070003, Failed to create application directory: C:\ProgramData\Microsoft\Search\Data\Applications\>.

 

 

System errors:

=============

Error: (06/27/2016 07:15:21 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: 

%%1056 = An instance of the service is already running.

 

 

Error: (06/27/2016 07:15:21 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Computer Browser service, but this action failed with the following error: 

%%1056 = An instance of the service is already running.

 

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Update service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Management Instrumentation service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Themes service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Shell Hardware Detection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The System Event Notification Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Task Scheduler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The User Profile Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

 

Error: (06/27/2016 07:13:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Multimedia Class Scheduler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

 

 

CodeIntegrity:

===================================

  Date: 2016-06-27 17:53:26.734

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2016-06-27 17:53:26.390

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2016-06-27 11:13:55.562

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

 

  Date: 2016-06-27 10:21:57.144

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

 

 

==================== Memory info =========================== 

 

Processor: Intel® Pentium® M processor 1500MHz

Percentage of memory in use: 66%

Total physical RAM: 1271.44 MB

Available physical RAM: 427.04 MB

Total Virtual: 2542.88 MB

Available Virtual: 1670.02 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:37.16 GB) (Free:13.83 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 37.3 GB) (Disk ID: D0F4738C)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=37.2 GB) - (Type=07 NTFS)

 

==================== End of Addition.txt ============================

 

[Advertisements]

Hi tink03,

The laptop shows no sign of infection...

Contact the seller and get your money back. This laptop was released for retail back in 2005 (11 years old) and designed to run Windows XP, not Windows 7 Home Premium, and was suitable for running basic business applications. See here.

The article I found here about the Dell Inspiron 1200, points out the following:
 

Connections are somewhat limited, though you do get ethernet and modem jacks, a VGA port, headphone and microphone mini-jacks, and one PC Card slot. Built-in Wi-Fi is not an option.

That info was found in the 3rd paragraph, 2nd sentence after the specs of the hardware. It appears that some of the hardware has been upgraded. Honestly, I am surprised that Windows 7 Home Premium works at all with the wee bit amount of RAM that is installed.

Donna

[DonnaB]

Hi tink03,

The laptop shows no sign of infection...

Contact the seller and get your money back. This laptop was released for retail back in 2005 (11 years old) and designed to run Windows XP, not Windows 7 Home Premium, and was suitable for running basic business applications. See here.

The article I found here about the Dell Inspiron 1200, points out the following:
 

Connections are somewhat limited, though you do get ethernet and modem jacks, a VGA port, headphone and microphone mini-jacks, and one PC Card slot. Built-in Wi-Fi is not an option.

That info was found in the 3rd paragraph, 2nd sentence after the specs of the hardware. It appears that some of the hardware has been upgraded. Honestly, I am surprised that Windows 7 Home Premium works at all with the wee bit amount of RAM that is installed.

Donna