Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

mbamswissarmy.sys problem[Solved]

Started by xhappybunnyx , Jun 16 2017 12:49 AM

This topic is locked

#1
xhappybunnyx

Posted 16 June 2017 - 12:49 AM

New Member

Member
7 posts

Hello! I think my computer might be infected. The computer does not boot up properly. Through some digging, it says that mbamswissarmy.sys is corrupted or something. I did some Google searching and it wanted me to run FRST program or something. Well I followed the instructions and I got this. Please help! I don't want to lose everything

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-06-2017 01

Ran by SYSTEM on MININT-LP9OM7C (16-06-2017 01:47:32)

Running from G:\

Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11

Boot Mode: Recovery

Default: ControlSet001

ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [477600 2013-01-24] (Adobe Systems Incorporated)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10801944 2014-07-28] (Logitech Inc.)

HKLM\...\Run: [Malwarebytes TrayApp] => E:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2017-04-13] (Razer Inc.)

HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [170360 2017-06-07] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [148016 2017-06-07] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli E:\Program Files\ASUS\Bluetooth Software\BtwProximityCP.dll

Startup: C:\Users\Cin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-06-14]

ShortcutTarget: Dropbox.lnk -> (No File)

BootExecute: autocheck autochk * sdnclean64.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1522184 2017-05-15] ()

S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)

S2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [132048 2017-02-21] (Micro-Star INT'L CO., LTD.)

S2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [75192 2017-04-12] (Micro-Star INT'L CO., LTD.)

S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)

S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3472368 2014-11-30] (INCA Internet Co., Ltd.)

S2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-06-07] (NVIDIA Corporation)

S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-12-19] ()

S2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-24] ()

S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

S2 Bonjour Service; "E:\Program Files\Bonjour\mDNSResponder.exe" [X]

S2 btwdins; E:\Program Files\ASUS\Bluetooth Software\btwdins.exe [X]

S2 FoxitReaderService; "E:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe" [X]

S2 GamingApp_Service; "E:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe" [X]

S2 GamingHotkey_Service; E:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [X]

S2 MBAMService; "E:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe" [X]

S2 MSI_LiveUpdate_Service; "E:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe" [X]

S2 NvContainerLocalSystem; "E:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "E:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000

S3 NvContainerNetworkService; "E:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "E:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000

S2 NVDisplay.ContainerLocalSystem; "E:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "E:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

S3 NvStreamNetworkSvc; "E:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" [X]

S2 NvStreamSvc; "E:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" [X]

S3 Origin Client Service; "E:\Program Files (x86)\Origin\OriginClientService.exe" [X]

S2 Origin Web Helper Service; "E:\Program Files (x86)\Origin\OriginWebHelperService.exe" [X]

S2 ss_conn_service; "E:\Program Files (x86)\USB Drivers\27_ssconn\conn\ss_conn_service.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)

S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [165688 2012-09-24] (Broadcom Corporation.)

S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-30] (Windows ® Win 7 DDK provider)

S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)

S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-12-09] (DT Soft Ltd)

S1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-04-14] ()

S3 I2cHkBurn; C:\Windows\System32\drivers\I2cHkBurn.sys [41760 2015-07-26] (FINTEK Corp.)

S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-18] ()

S2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [186304 2017-04-05] (Malwarebytes)

S3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-06-15] (Malwarebytes)

S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [0 2017-06-15] () <==== ATTENTION (zero byte File/Folder)

S0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [0 2017-06-15] () <==== ATTENTION (zero byte File/Folder)

S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-06-15] (Malwarebytes)

S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)

S1 MpKsl197fdb54; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B8DA0397-F4E5-430A-A394-7C7D832DFFA1}\MpKsl197fdb54.sys [44928 2017-06-15] (Microsoft Corporation)

S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)

S2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)

S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-05-03] (NVIDIA Corporation)

S3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-06-07] (NVIDIA Corporation)

S3 rzdaendpt; C:\Windows\System32\DRIVERS\rzdaendpt.sys [43720 2015-08-13] (Razer Inc)

S3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [50392 2015-08-13] (Razer Inc)

S2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-16] (Razer, Inc.)

S2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137840 2016-09-07] (Razer, Inc.)

S3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [44232 2015-08-13] (Razer Inc)

S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-06-03] (Anchorfree Inc.)

S3 AsrIbDrv; \??\C:\Windows\SysWOW64\Drivers\AsrIbDrv.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 MSICDSetup; \??\D:\CDriver64.sys [X]

S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

S3 NTIOLib_MBAPI; \??\E:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [X]

S3 NvStreamKms; \??\E:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]

S3 WinRing0_1_2_0; \??\E:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-16 01:29 - 2017-06-16 01:47 - 00000000 ____D C:\FRST

2017-06-15 21:26 - 2017-06-15 21:26 - 00000000 _____ C:\Windows\System32\Drivers\60FA216E.sys

2017-06-15 00:49 - 2017-06-15 00:49 - 00000000 ____D C:\Users\Cin\AppData\Roaming\ModLauncherWPF

2017-06-14 23:18 - 2017-06-15 00:42 - 00000000 ____D C:\Users\Cin\AppData\Roaming\FiraxisLive

2017-06-14 21:38 - 2017-06-14 23:29 - 00000717 _____ C:\Users\Public\Desktop\qBittorrent.lnk

2017-06-13 13:58 - 2017-06-02 00:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\System32\tquery.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\System32\mssrch.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\System32\mssvp.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\System32\mssph.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\System32\mssphtb.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\System32\mssitlb.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\mssprxy.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\System32\msscntrs.dll

2017-06-13 13:58 - 2017-06-02 00:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\msshooks.dll

2017-06-13 13:58 - 2017-06-02 00:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe

2017-06-13 13:58 - 2017-06-02 00:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe

2017-06-13 13:58 - 2017-06-02 00:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe

2017-06-13 13:58 - 2017-06-02 00:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe

2017-06-13 13:58 - 2017-06-02 00:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2017-06-13 13:58 - 2017-06-02 00:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll

2017-06-13 13:58 - 2017-06-01 23:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2017-06-13 13:58 - 2017-06-01 23:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2017-06-13 13:58 - 2017-06-01 23:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2017-06-13 13:58 - 2017-06-01 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll

2017-06-13 13:58 - 2017-05-20 20:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys

2017-06-13 13:58 - 2017-05-20 20:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys

2017-06-13 13:58 - 2017-05-20 20:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\System32\certcli.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\System32\rpchttp.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\System32\bcrypt.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll

2017-06-13 13:58 - 2017-05-20 20:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2017-06-13 13:58 - 2017-05-20 20:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2017-06-13 13:58 - 2017-05-20 19:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe

2017-06-13 13:58 - 2017-05-20 19:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys

2017-06-13 13:58 - 2017-05-20 19:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys

2017-06-13 13:58 - 2017-05-20 19:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys

2017-06-13 13:58 - 2017-05-20 19:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe

2017-06-13 13:58 - 2017-05-20 19:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2017-06-13 13:58 - 2017-05-20 19:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2017-06-13 13:58 - 2017-05-16 10:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll

2017-06-13 13:58 - 2017-05-16 09:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2017-06-13 13:58 - 2017-05-14 12:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2017-06-13 13:58 - 2017-05-14 12:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll

2017-06-13 13:58 - 2017-05-14 12:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2017-06-13 13:58 - 2017-05-14 12:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\System32\html.iec

2017-06-13 13:58 - 2017-05-14 12:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll

2017-06-13 13:58 - 2017-05-14 12:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll

2017-06-13 13:58 - 2017-05-14 12:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2017-06-13 13:58 - 2017-05-14 12:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2017-06-13 13:58 - 2017-05-14 12:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2017-06-13 13:58 - 2017-05-14 12:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2017-06-13 13:58 - 2017-05-14 12:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2017-06-13 13:58 - 2017-05-14 12:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll

2017-06-13 13:58 - 2017-05-14 12:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll

2017-06-13 13:58 - 2017-05-14 12:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll

2017-06-13 13:58 - 2017-05-14 12:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2017-06-13 13:58 - 2017-05-14 12:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe

2017-06-13 13:58 - 2017-05-14 12:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

2017-06-13 13:58 - 2017-05-14 11:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll

2017-06-13 13:58 - 2017-05-14 11:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2017-06-13 13:58 - 2017-05-14 11:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll

2017-06-13 13:58 - 2017-05-14 11:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx

2017-06-13 13:58 - 2017-05-14 11:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll

2017-06-13 13:58 - 2017-05-14 11:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll

2017-06-13 13:58 - 2017-05-14 11:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2017-06-13 13:58 - 2017-05-14 11:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll

2017-06-13 13:58 - 2017-05-14 11:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2017-06-13 13:58 - 2017-05-14 11:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll

2017-06-13 13:58 - 2017-05-14 11:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll

2017-06-13 13:58 - 2017-05-14 11:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2017-06-13 13:58 - 2017-05-14 11:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2017-06-13 13:58 - 2017-05-14 11:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2017-06-13 13:58 - 2017-05-14 11:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2017-06-13 13:58 - 2017-05-14 11:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2017-06-13 13:58 - 2017-05-14 11:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2017-06-13 13:58 - 2017-05-14 11:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2017-06-13 13:58 - 2017-05-14 11:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll

2017-06-13 13:58 - 2017-05-14 11:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2017-06-13 13:58 - 2017-05-14 11:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2017-06-13 13:58 - 2017-05-14 11:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2017-06-13 13:58 - 2017-05-14 11:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2017-06-13 13:58 - 2017-05-14 11:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2017-06-13 13:58 - 2017-05-14 11:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2017-06-13 13:58 - 2017-05-14 11:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2017-06-13 13:58 - 2017-05-14 11:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2017-06-13 13:58 - 2017-05-14 11:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2017-06-13 13:58 - 2017-05-14 11:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2017-06-13 13:58 - 2017-05-14 10:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2017-06-13 13:58 - 2017-05-14 10:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2017-06-13 13:58 - 2017-05-14 10:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2017-06-13 13:58 - 2017-05-14 10:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2017-06-13 13:58 - 2017-05-14 10:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2017-06-13 13:58 - 2017-05-14 10:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll

2017-06-13 13:58 - 2017-05-14 10:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2017-06-13 13:58 - 2017-05-14 10:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2017-06-13 13:58 - 2017-05-14 10:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2017-06-13 13:58 - 2017-05-14 10:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2017-06-13 13:58 - 2017-05-14 10:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2017-06-13 13:58 - 2017-05-14 10:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2017-06-13 13:58 - 2017-05-14 10:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2017-06-13 13:58 - 2017-05-14 10:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2017-06-13 13:58 - 2017-05-14 10:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2017-06-13 13:58 - 2017-05-14 10:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2017-06-13 13:58 - 2017-05-14 10:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll

2017-06-13 13:58 - 2017-05-14 10:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2017-06-13 13:58 - 2017-05-14 10:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2017-06-13 13:58 - 2017-05-14 10:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2017-06-13 13:58 - 2017-05-12 10:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi

2017-06-13 13:58 - 2017-05-12 10:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2017-06-13 13:58 - 2017-05-12 10:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi

2017-06-13 13:58 - 2017-05-12 10:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll

2017-06-13 13:58 - 2017-05-12 10:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\System32\usp10.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\System32\setbcdlocale.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\System32\appidapi.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\System32\appidsvc.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2017-06-13 13:58 - 2017-05-12 10:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2017-06-13 13:58 - 2017-05-12 10:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2017-06-13 13:58 - 2017-05-12 10:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 10:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 09:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\System32\appidpolicyconverter.exe

2017-06-13 13:58 - 2017-05-12 09:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\appid.sys

2017-06-13 13:58 - 2017-05-12 09:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\System32\appidcertstorecheck.exe

2017-06-13 13:58 - 2017-05-12 09:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys

2017-06-13 13:58 - 2017-05-12 09:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe

2017-06-13 13:58 - 2017-05-12 09:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe

2017-06-13 13:58 - 2017-05-12 09:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe

2017-06-13 13:58 - 2017-05-12 09:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2017-06-13 13:58 - 2017-05-12 09:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2017-06-13 13:58 - 2017-05-12 09:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2017-06-13 13:58 - 2017-05-12 09:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2017-06-13 13:58 - 2017-05-12 09:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2017-06-13 13:58 - 2017-05-12 09:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 09:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 09:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 09:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2017-06-13 13:58 - 2017-05-12 08:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2017-06-13 13:58 - 2017-05-12 07:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll

2017-06-13 13:58 - 2017-05-12 07:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll

2017-06-13 13:58 - 2017-05-10 07:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\System32\MigAutoPlay.exe

2017-06-13 13:58 - 2017-05-10 07:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll

2017-06-13 13:58 - 2017-05-10 07:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll

2017-06-13 13:58 - 2017-05-10 07:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll

2017-06-13 13:58 - 2017-05-10 07:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll

2017-06-13 13:58 - 2017-05-10 07:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll

2017-06-13 13:58 - 2017-05-10 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll

2017-06-13 13:58 - 2017-05-10 07:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe

2017-06-13 13:58 - 2017-05-10 07:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll

2017-06-13 13:58 - 2017-05-10 07:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll

2017-06-13 13:58 - 2017-05-10 07:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe

2017-06-13 13:58 - 2017-05-10 07:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll

2017-06-13 13:58 - 2017-05-10 07:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe

2017-06-13 13:58 - 2017-05-10 07:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll

2017-06-13 13:58 - 2017-05-10 07:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\System32\wu.upgrade.ps.dll

2017-06-13 13:58 - 2017-05-10 07:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2017-06-13 13:58 - 2017-05-10 07:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2017-06-13 13:58 - 2017-05-10 07:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2017-06-13 13:58 - 2017-05-10 07:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2017-06-13 13:58 - 2017-05-10 07:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2017-06-13 13:58 - 2017-05-10 07:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2017-06-13 13:58 - 2017-05-10 07:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2017-06-13 13:58 - 2017-05-10 06:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tdx.sys

2017-06-13 13:58 - 2017-05-09 07:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2017-06-13 13:58 - 2017-05-09 07:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll

2017-06-13 13:58 - 2017-05-09 07:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2017-06-13 13:58 - 2017-05-07 07:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mountmgr.sys

2017-06-13 13:58 - 2017-05-07 07:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\System32\msmmsp.dll

2017-06-13 13:58 - 2017-05-03 07:34 - 00094952 _____ (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe

2017-06-13 13:58 - 2017-05-03 07:29 - 01206272 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 01555968 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 00620544 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 00535552 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 00325632 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 00311296 _____ (Microsoft Corporation) C:\Windows\System32\centel.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 00217088 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll

2017-06-13 13:58 - 2017-05-03 05:05 - 00127488 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll

2017-06-13 13:58 - 2017-03-30 07:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\System32\rundll32.exe

2017-06-13 13:58 - 2017-03-30 06:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

2017-06-13 13:58 - 2017-03-22 18:06 - 01691136 _____ (Microsoft Corporation) C:\Windows\System32\aitstatic.exe

2017-06-10 15:24 - 2017-06-12 19:45 - 00000000 ____D C:\Users\Cin\AppData\Roaming\NVIDIA

2017-06-09 18:19 - 2017-06-09 18:19 - 00000000 ____D C:\Program Files (x86)\VulkanRT

2017-06-09 18:19 - 2017-06-07 17:35 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat

2017-06-09 18:19 - 2017-06-07 15:38 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2017-06-09 18:19 - 2017-03-10 13:17 - 00536864 _____ C:\Windows\System32\vulkan-1.dll

2017-06-09 18:19 - 2017-03-10 13:17 - 00525600 _____ C:\Windows\SysWOW64\vulkan-1.dll

2017-06-09 18:19 - 2017-03-10 13:17 - 00254240 _____ C:\Windows\System32\vulkaninfo.exe

2017-06-09 18:19 - 2017-03-10 13:17 - 00233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2017-06-09 18:18 - 2017-06-07 16:01 - 00001951 _____ C:\Windows\NvContainerRecovery.bat

2017-06-09 18:18 - 2017-06-07 15:55 - 06467008 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll

2017-06-09 18:18 - 2017-06-07 15:55 - 02479552 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll

2017-06-09 18:18 - 2017-06-07 15:55 - 01762936 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll

2017-06-09 18:18 - 2017-06-07 15:55 - 00549312 _____ (NVIDIA Corporation) C:\Windows\System32\nv3dappshext.dll

2017-06-09 18:18 - 2017-06-07 15:55 - 00392312 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll

2017-06-09 18:18 - 2017-06-07 15:55 - 00082040 _____ (NVIDIA Corporation) C:\Windows\System32\nv3dappshextr.dll

2017-06-09 18:18 - 2017-06-07 15:55 - 00069568 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll

2017-06-09 18:18 - 2017-06-07 04:42 - 08075477 _____ C:\Windows\System32\nvcoproc.bin

2017-06-09 18:16 - 2017-06-07 17:35 - 35350136 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 28593272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 20064880 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 17424984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 14276216 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys

2017-06-09 18:16 - 2017-06-07 17:35 - 11056272 _____ (NVIDIA Corporation) C:\Windows\System32\nvptxJitCompiler.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 10551072 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 09014976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 08808488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 01615448 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdagenco6420103.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 01056192 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00993728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00964032 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00914880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00609728 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00491024 _____ (NVIDIA Corporation) C:\Windows\System32\nvumdshimx.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00406552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00218712 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvhda64v.sys

2017-06-09 18:16 - 2017-06-07 17:35 - 00170360 _____ (NVIDIA Corporation) C:\Windows\System32\nvinitx.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00153184 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00057792 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvhci.sys

2017-06-09 18:16 - 2017-06-07 17:35 - 00045976 _____ (NVIDIA Corporation) C:\Windows\System32\nvhdap64.dll

2017-06-09 18:16 - 2017-06-07 17:35 - 00042999 _____ C:\Windows\System32\nvinfo.pb

2017-06-09 18:15 - 2017-06-07 17:35 - 40201664 _____ (NVIDIA Corporation) C:\Windows\System32\nvcompiler.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 35281344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 16436488 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 13402816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 11027968 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 09248144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 04090528 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 03604368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 03437504 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 03020920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 01988216 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6438253.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 01606776 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6438253.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 00688784 _____ (NVIDIA Corporation) C:\Windows\System32\nvfatbinaryLoader.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 00577728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 00507688 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 00426128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2017-06-09 18:15 - 2017-06-07 17:35 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json

2017-06-09 18:15 - 2017-06-07 17:35 - 00000669 _____ C:\Windows\System32\nv-vk64.json

2017-05-26 13:37 - 2017-05-26 13:37 - 00000000 ____D C:\Users\Cin\AppData\Roaming\MSI

2017-05-26 13:32 - 2017-05-26 13:32 - 00003134 _____ C:\Windows\System32\Tasks\MSIGH_Host

2017-05-26 13:32 - 2017-05-26 13:32 - 00000000 ____D C:\Program Files (x86)\MSI

2017-05-26 13:26 - 2017-03-17 12:35 - 00000000 ____D C:\Windows\SysWOW64\LiveUpdate

2017-05-26 13:26 - 2017-03-07 13:46 - 00002491 _____ C:\Windows\SysWOW64\LiveUpdate 6.2 ReleaseNote.txt

2017-05-26 13:22 - 2014-04-30 13:23 - 00011248 _____ (Windows ® Win 7 DDK provider) C:\Windows\acpimof.dll

2017-05-26 13:21 - 2017-05-26 13:21 - 00003068 _____ C:\Windows\System32\Tasks\MSIOSDx86_Host

2017-05-26 13:21 - 2017-05-26 13:21 - 00003068 _____ C:\Windows\System32\Tasks\MSIOSDx64_Host

2017-05-26 13:21 - 2017-05-26 13:21 - 00003002 _____ C:\Windows\System32\Tasks\MSISW_Host

2017-05-26 13:21 - 2015-08-18 06:51 - 01692840 _____ (MSI) C:\Windows\SysWOW64\muachost.exe

2017-05-26 13:21 - 2015-07-26 22:37 - 00041760 _____ (FINTEK Corp.) C:\Windows\System32\Drivers\I2cHkBurn.sys

2017-05-26 13:21 - 2015-07-26 22:37 - 00031520 _____ (TODO: <公司名稱>) C:\Windows\System32\FintekIcon1.dll

2017-05-26 13:20 - 2017-05-26 13:31 - 00000000 ____D C:\MSI

2017-05-26 12:53 - 2017-05-26 12:53 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:53 - 2017-05-26 12:53 - 00003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:53 - 2017-05-26 12:53 - 00003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:53 - 2017-05-26 12:53 - 00001262 _____ C:\Users\Public\Desktop\GeForce Experience.lnk

2017-05-26 12:53 - 2017-05-03 12:16 - 01893312 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll

2017-05-26 12:53 - 2017-05-03 12:16 - 01755072 _____ (NVIDIA Corporation) C:\Windows\System32\nvspbridge64.dll

2017-05-26 12:53 - 2017-05-03 12:16 - 01477056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2017-05-26 12:53 - 2017-05-03 12:16 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2017-05-26 12:53 - 2017-05-03 12:16 - 00121280 _____ C:\Windows\System32\NvRtmpStreamer64.dll

2017-05-26 12:45 - 2017-05-26 12:53 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:45 - 2017-05-26 12:53 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:45 - 2017-05-26 12:53 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:45 - 2017-05-26 12:53 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:45 - 2017-05-26 12:53 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2017-05-26 12:45 - 2017-05-03 12:16 - 00175552 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll

2017-05-26 12:45 - 2017-05-03 12:16 - 00143296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2017-05-26 12:45 - 2017-05-03 12:16 - 00048064 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys

2017-05-25 21:15 - 2017-05-25 21:52 - 00000000 ____D C:\Users\Cin\AppData\Roaming\discord

2017-05-25 21:15 - 2017-05-25 21:15 - 00000000 ____D C:\Users\Cin\AppData\Local\SquirrelTemp

2017-05-25 21:15 - 2017-05-25 21:15 - 00000000 ____D C:\Users\Cin\AppData\Local\Discord

2017-05-23 16:42 - 2017-05-23 16:42 - 00000000 ____D C:\Users\Cin\AppData\Roaming\Kalypso Media

2017-05-23 16:42 - 2017-05-23 16:42 - 00000000 ____D C:\Users\Cin\AppData\Roaming\.mono

2017-05-23 16:42 - 2017-05-23 16:42 - 00000000 ____D C:\ProgramData\.mono

2017-05-23 13:03 - 2017-04-27 14:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll

2017-05-23 13:03 - 2017-04-12 05:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_47.dll

2017-05-22 17:29 - 2017-05-22 20:25 - 01006273 ____N C:\Windows\Minidump\052317-31403-01.dmp

2017-05-21 23:20 - 2017-05-21 23:20 - 01408216 ____N C:\Windows\Minidump\052217-31090-01.dmp

2017-05-21 20:51 - 2017-05-21 20:51 - 00000595 _____ C:\Users\Public\Desktop\NieR - Automata.lnk

2017-05-21 17:02 - 2017-06-15 00:03 - 00000000 ____D C:\Users\Cin\AppData\Roaming\qBittorrent

2017-05-21 17:02 - 2017-05-21 17:02 - 00000000 ____D C:\Users\Cin\AppData\Local\qBittorrent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-15 21:31 - 2012-12-17 13:52 - 00000000 ____D C:\ProgramData\NVIDIA

2017-06-15 21:28 - 2016-11-04 11:12 - 00000910 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-709221880-3219919037-1249648889-1000UA1d236cf5caadf91.job

2017-06-15 21:26 - 2014-04-07 17:18 - 00000000 _____ C:\Windows\System32\Drivers\MBAMSwissArmy.sys

2017-06-15 21:26 - 2012-12-17 13:43 - 00000000 _____ C:\Windows\System32\Drivers\mbam.sys

2017-06-15 20:20 - 2017-03-17 13:25 - 00082720 _____ (Malwarebytes) C:\Windows\System32\Drivers\mwac.sys

2017-06-15 16:39 - 2016-11-04 11:12 - 00000858 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-709221880-3219919037-1249648889-1000Core1d236cf5c9c877b.job

2017-06-15 12:31 - 2009-07-13 20:45 - 00029136 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2017-06-15 12:31 - 2009-07-13 20:45 - 00029136 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2017-06-15 12:14 - 2009-07-13 21:13 - 00782470 _____ C:\Windows\System32\PerfStringBackup.INI

2017-06-15 12:14 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\inf

2017-06-15 12:08 - 2017-03-17 13:25 - 00111544 _____ (Malwarebytes) C:\Windows\System32\Drivers\farflt.sys

2017-06-15 12:07 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2017-06-15 01:29 - 2014-10-14 10:50 - 00000000 ____D C:\Users\Cin\AppData\Local\Spotify

2017-06-15 00:42 - 2016-12-09 04:06 - 00000000 ____D C:\Users\Cin\AppData\Local\CrashDumps

2017-06-14 23:19 - 2014-10-14 10:50 - 00000000 ____D C:\Users\Cin\AppData\Roaming\Spotify

2017-06-14 22:58 - 2012-12-09 15:11 - 00000000 ____D C:\Users\Cin\AppData\Roaming\DAEMON Tools Lite

2017-06-14 17:02 - 2013-07-16 20:30 - 00000000 ____D C:\Users\Cin\AppData\Local\Warframe

2017-06-14 12:31 - 2014-07-21 12:58 - 00000000 ____D C:\Users\Cin\AppData\Roaming\Dropbox

2017-06-14 12:30 - 2015-06-16 21:05 - 00000000 ____D C:\Users\Cin\AppData\Local\Dropbox

2017-06-14 12:02 - 2009-07-13 20:45 - 00382960 _____ C:\Windows\System32\FNTCACHE.DAT

2017-06-14 12:01 - 2014-12-11 01:21 - 00000000 ____D C:\Windows\System32\appraiser

2017-06-14 12:01 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz

2017-06-14 12:01 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\migwiz

2017-06-13 14:14 - 2013-07-17 19:36 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2017-06-13 14:14 - 2013-07-10 22:43 - 00000000 ____D C:\Windows\System32\MRT

2017-06-13 14:09 - 2012-12-06 17:26 - 133627792 ____C (Microsoft Corporation) C:\Windows\System32\MRT.exe

2017-06-13 14:03 - 2012-12-06 04:35 - 00774592 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2017-06-09 18:19 - 2012-12-17 13:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2017-06-09 18:19 - 2012-12-17 13:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2017-06-09 18:18 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\Help

2017-06-08 16:21 - 2015-12-26 19:34 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2017-06-08 13:57 - 2012-12-02 10:08 - 00000000 ____D C:\users\Cin

2017-06-08 13:45 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2017-06-08 13:36 - 2014-07-01 20:44 - 00000699 _____ C:\Users\Public\Desktop\CCleaner.lnk

2017-05-30 12:45 - 2010-11-20 19:27 - 00565416 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe

2017-05-26 13:40 - 2013-01-17 15:07 - 00000000 ____D C:\Windows\SysWOW64\directx

2017-05-26 12:53 - 2014-08-20 18:49 - 00000000 ____D C:\Users\Cin\AppData\Local\NVIDIA Corporation

2017-05-26 12:53 - 2013-07-17 14:08 - 00000000 ____D C:\Users\Cin\AppData\Local\NVIDIA

2017-05-23 12:55 - 2015-12-05 15:54 - 00000000 ____D C:\Windows\Minidump

2017-05-22 17:17 - 2015-06-05 13:30 - 00000000 ____D C:\Users\Cin\AppData\Local\Battle.net

2017-05-22 16:55 - 2016-11-19 16:08 - 00000776 _____ C:\Users\Public\Desktop\Twitch Launcher.lnk

Some files in TEMP:

====================

2017-05-26 12:35 - 2017-05-17 21:21 - 0754864 _____ (NVIDIA Corporation) C:\Users\Cin\AppData\Local\Temp\nvSCPAPI.dll

2017-05-26 12:35 - 2017-05-17 21:21 - 0869200 _____ (NVIDIA Corporation) C:\Users\Cin\AppData\Local\Temp\nvSCPAPI64.dll

2017-05-26 13:01 - 2017-05-17 21:21 - 0367552 _____ (NVIDIA Corporation) C:\Users\Cin\AppData\Local\Temp\nvStInst.exe

2017-04-16 13:13 - 2017-04-16 13:13 - 57547224 _____ (Skype Technologies S.A.) C:\Users\Cin\AppData\Local\Temp\SkypeSetup.exe

2017-05-22 16:54 - 2017-05-22 16:54 - 133537600 _____ (Twitch) C:\Users\Cin\AppData\Local\Temp\TwitchLauncherInstaller.exe

2017-04-16 13:18 - 2017-04-16 13:18 - 14456872 _____ (Microsoft Corporation) C:\Users\Cin\AppData\Local\Temp\vc_redist.x86.exe

==================== Known DLLs (Whitelisted) =========================

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll

[2017-05-14 12:01] - [2017-04-17 07:37] - 0512000 _____ (Microsoft Corporation) 5E9F8D029D9B03110D835CBFC058068B

C:\Windows\System32\dnsapi.dll => MD5 is legit

C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============

==================== Restore Points =========================

==================== Memory info ===========================

Percentage of memory in use: 7%

Total physical RAM: 16269.7 MB

Available physical RAM: 15027.75 MB

Total Virtual: 16267.9 MB

Available Virtual: 15041.46 MB

==================== Drives ================================

Drive c: (SSD) (Fixed) (Total:119.14 GB) (Free:0.08 GB) NTFS

Drive d: (2TB Seagate) (Fixed) (Total:1863.01 GB) (Free:1141.35 GB) NTFS

Drive g: (TOSHIBA) (Removable) (Total:14.43 GB) (Free:13.74 GB) FAT32

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 6B9CF8CC)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: C825614D)

Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================

Disk: 2 (Size: 14.4 GB) (Disk ID: 063E2A97)

Partition 1: (Not Active) - (Size=14.4 GB) - (Type=0B)

LastRegBack: 2015-11-29 23:46

==================== End of FRST.txt ============================

#2
RKinner

Posted 16 June 2017 - 07:07 AM

Malware Expert

Expert
24,625 posts

Download the attached fixlist.txt to the same location as FRST

Run FRST and press Fix

A fix log will be generated please post that

Reboot. Does it boot into regular mode now?

Run FRST again as before. If in regular mode Make sure Addition.txt is checked before you hit Scan. Post both logs.

#3
xhappybunnyx

Posted 16 June 2017 - 09:03 PM

New Member

Topic Starter
Member
7 posts

OMG It's working! Thanks!!!! Here are the files you wanted.

Attached Files

Fixlog.txt 2.12KB 637 downloads
Addition.txt 112.05KB 703 downloads
FRST.txt 77.25KB 629 downloads

#4
RKinner

Posted 16 June 2017 - 09:22 PM

Malware Expert

Expert
24,625 posts

Let's remove the 3 zero-byte files that FRST flagged then see if they come back.

Download the attached fixlist.txt to the same location as FRST

Run FRST and press Fix

A fix log will be generated please post that

Reboot

Run FRST again as before. Make sure Addition.txt is checked and hit Scan. Post both logs.

Would probably be wise to run an ESET online scan. Takes a while but is very thorough.

Use IE and go to http://eset.com/onlinescan and click on ESET online Scanner. Accept the terms then press Start (If you get a warning from your browser tell it you want to run it).

# Check Scan Archives

# Push the Start button.

# ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.

# When the scan completes, push LIST OF THREATS FOUND

# Push EXPORT TO TEXT FILE , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

# Push the BACK button.

# Push Finish

# Once the scan is completed, you may close the window.

# Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt

# Copy and paste that log as a reply.

#5
xhappybunnyx

Posted 17 June 2017 - 08:32 AM

New Member

Topic Starter
Member
7 posts

The ESETScan took a while, but here is everything!

Attached Files

Fixlog.txt 865bytes 647 downloads
FRST.txt 76.56KB 659 downloads
Addition.txt 102.91KB 1522 downloads
ESETScan.txt 1.93KB 769 downloads

#6
RKinner

Posted 17 June 2017 - 09:37 AM

Malware Expert

Expert
24,625 posts

Download the attached fixlist.txt to the same location as FRST

Run FRST and press Fix

A fix log will be generated please post that

Run FRST again as before. Make sure Addition.txt is checked and hit Scan. Post both logs.

#7
xhappybunnyx

Posted 18 June 2017 - 01:31 AM

New Member

Topic Starter
Member
7 posts

Done and done!

Attached Files

Addition.txt 100.77KB 664 downloads
Fixlog.txt 10.22KB 686 downloads
FRST.txt 75.62KB 713 downloads

#8
RKinner

Posted 18 June 2017 - 05:05 AM

Malware Expert

Expert
24,625 posts

I've seen MBAM have problems before with systems with file system errors. Let's run a disk check to rule out file system problems:

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:

2. Click Properties, and then click Tools.

3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,

4. Check both boxes and then click Start.

You will receive the following message:

The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?

Click Yes to schedule the disk check, but don't restart yet.

Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application.

Reboot.

The disk check will run and can take hours to finish so you may want to run it while you sleep.

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then type (with an Enter after each line).

sfc /scannow

(SPACE after sfc. This will check your critical system files. Does this finish without complaint? IF it says it couldn't fix everything then:

Copy the next two lines:

findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \junk.txt

notepad \junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear.

Hit Enter if notepad does not open. Copy and paste the text from notepad into a reply. Close nOtepad. Close the Command Window.

1. Please download the Event Viewer Tool by Vino Rosso

http://images.malwar...om/vino/VEW.exe

and save it to your Desktop:

2. Right-click VEW.exe and Run AS Administrator

3. Under 'Select log to query', select:

* System

4. Under 'Select type to list', select:

* Error

* Warning

Then use the 'Number of events' as follows:

1. Click the radio button for 'Number of events'

Type 20 in the 1 to 20 box

Then click the Run button.

Notepad will open with the output log.

Please post the Output log in your next reply then repeat but select Application. (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

#9
xhappybunnyx

Posted 19 June 2017 - 03:28 PM

New Member

Topic Starter
Member
7 posts

Here you go!

Attached Files

junk.txt 753.05KB 646 downloads
VEW1.txt 1.36KB 643 downloads
VEW2.txt 4.18KB 642 downloads

#10
RKinner

Posted 19 June 2017 - 03:58 PM

Malware Expert

Expert
24,625 posts

Lot of errors found and corrected by SFC. It seems happy tho. You mighttrun it again after rebooting to make sure it stays happy.

I would also check the RAM to make sure it is healthy:

https://www.howtogee...m-for-problems/

VEW doesn't show anything to worry about tho you might want to try updating your nvidia driver.

We can fix this one easily:

Log: 'System' Date/Time: 19/06/2017 9:45:30 AM

Type: Warning Category: 212

Event: 219 Source: Microsoft-Windows-Kernel-PnP

The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_TOSHIBA&PROD_TRANSMEMORY&REV_1.00#8E88CCD6E32FCD913737C629&0#.

Search for

services.msc

hit Enter

Scroll down to Windows Driver Foundation - User-mode Driver Framework

right click and select Properties then change the Startup Type: from Manual to Automatic. OK

Log: 'Application' Date/Time: 19/06/2017 9:45:30 AM

Type: Error Category: 0

Event: 10 Source: Microsoft-Windows-WMI

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

This one has its own article https://support.micr...-server-2008-r2

but I have an easier way:

Download the attached fix10.zip file.

Save it then right click on it and Extract All. Extract. Right click on fix10.vbs and Run As Administrator.

#11
xhappybunnyx

Posted 19 June 2017 - 06:43 PM

New Member

Topic Starter
Member
7 posts

Ran everything and even sfc again (which showed no errors this time).

Everything seems good!

Thank you very much!

#12
RKinner

Posted 19 June 2017 - 06:54 PM

Malware Expert

Expert
24,625 posts

Time to clean up:

To delete the Quarantine Folder used by FRST create a fixlist.txt file with just the following line:

DeleteQuarantine:

Save the fixlist.txt to the same folder as FRST then run FRST and hit Fix. You can easily delete any other folders and logs.

If we installed Speccy it needs to be uninstalled. Process Explorer, VEW, AdwCleaner, JRT and their logs and Speccy's log can just be deleted.

Also make sure you have the latest versions of any adobe.com products you use like Shockwave, Flash or Acrobat. Flash is now the most malware targeted program so it must be kept up to date. Be careful with Adobe. They are fond of offering optional downloads like yahoo or Ask toolbars or that worthless McAfee Security Scan. Go slow and uncheck the optional stuff.

Whether you use adobe reader, acrobat or fox-it to read pdf files you need to disable Javascript in the program. There is an exploit out there now that can use it to get on your PC. For Adobe Reader: Start, All Programs, Adobe Reader, Edit, Preferences, Click on Javascript in the left column and uncheck Enable Acrobat Javascript. OK Close program. It's the same for Foxit reader except you uncheck Enable Javascript Actions.

If you use Chrome/Firefoxthen get the Ublock Origin Add-on from .https://www.ublock.org/ For IE go to adblockplus.org and get the add-on. (It's actually a program for IE)

If Chrome/Firefox is slow loading make sure it only has the current Java add-on. Then download and run Speedy Fox.

http://www.crystalidea.com/speedyfox. Close Chrome/Firefox/Skpe. Hit Optimize. You can run it any time that Chrome/Firefox seems slow starting..

To prevent a relatively new phishing attack: In Firefox, type:

about:config

in the URL box and hit Enter. You should get a new page of options (if you get a notice about voiding the warranty just cancel the warning). In the Search box put in

puny

You should only get one option:

network.IDN_show_punycode

We want it to say True but by default it is False so double click on it to toggle from False to True.

Close and restart firefox.

To test it you can go to:

https://www.xn--80ak6aa92e.com/

If the value is false you will see https://www.apple.cominstead of the correct value

If you are a Facebook user get the FB Purity extension for your browser:

http://www.fbpurity.com/

This will stop all of the suggested pages and ads so that Facebook loads much quicker.

Be warned: If you use Limewire, utorrent or any of the other P2P programs you will probably be coming back to the Malware Removal forum. If you must use P2P then submit any files you get to http://virustotal.combeforeyou open them.

Due to a recent rise in the number of Crytolocker infections I am now recommending you install:

CryptoPrevent

http://www.foolishIT.../cryptoprevent/

The free version does not update on its own so you should check for updated versions once in a while. When you install it the default is NONE which is kind of worthless so change it to Standard or default. If you have problems after installing CryptoPrevent you can just uninstall it.

If you have a router, log on to it today and change the default password! If using a Wireless router you really should be using encryption on the link. Use the strongest (newest) encryption method that your router and PC wireless adapter support especially if you own a business. See http://www.king5.com...0637284.htmland http://www.seattlepi...ted-1344185.php for why encryption is important. If you don't know how, visit the router maker's website. They all have detailed step by step instructions or a wizard you can download.

Special note on Java. Old Java versions should be removed after first clearing the Java Cache by following the instructions in:

http://www.java.com/...lugin_cache.xml

Then remove the old versions by going to Control Panel, Programs and Features and Uninstall all Java programs which are not Java Version 7 update 25 or better. These may call themselves: Java Runtime, Runtime Environment, Runtime, JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, J2RE, J2SE. Get the latest version from Java.com. They will usually attempt to foist some garbage like the Ask toolbar, Yahoo toolbar or McAfee Security Scan on you as part of the download. Just uncheck the garbage before the download (or install) starts. If you use a 64-bit browser and want the 64-bit version of Java you need to use it to visit java.com.

Due to multiple security problems with Java we are now recommending that it not be installed unless you absolutely know you need it. IF that is the case then go to Control Panel, Java, Security and slide it up to the highest level. OK.