cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 24/09/2015 23:32:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\user\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18015)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,89 Gb Total Physical Memory | 1,99 Gb Available Physical Memory | 51,08% Memory free
7,78 Gb Paging File | 4,99 Gb Available in Paging File | 64,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 906,15 Gb Total Space | 575,18 Gb Free Space | 63,47% Space Free | Partition Type: NTFS
Drive D: | 25,26 Gb Total Space | 9,76 Gb Free Space | 38,63% Space Free | Partition Type: NTFS
Drive F: | 931,48 Gb Total Space | 135,53 Gb Free Space | 14,55% Space Free | Partition Type: NTFS

Computer Name: USER-HP | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe File not found
PRC - C:\Users\user\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe (Kaspersky Lab ZAO)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe (Kaspersky Lab ZAO)
PRC - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe (Western Digital Technologies, Inc.)
PRC - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (Western Digital Technologies, Inc.)
PRC - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe (Western Digital Technologies, Inc.)
PRC - C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe (Western Digital Technologies, Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe ()
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe (Hewlett-Packard)
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe (Hewlett-Packard)
PRC - C:\Program Files (x86)\PDF Complete\pdfsvc.exe (PDF Complete Inc)
PRC - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe (Symantec Corporation)
PRC - C:\ProgramData\DatacardService\DCSHelper.exe (Huawei Technologies Co., Ltd.)
PRC - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Intel Corporation)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Windows\SysWOW64\ezSharedSvcHost.exe (EasyBits Software AS)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\dd832cf73f5ca20ada3d8e71688685af\ReachFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\e70d04fdf08f67f2acc45f499d1bbb56\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\09e9b52418dba5729ace249cf0487675\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\82ecf48db57ddf66f74fca17b0f99453\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\9e77f5e3c772f01c7a4760b4dcde70f4\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\0fa731ea0ae5de79fe1c1ab061d82fd1\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\d20cf89ac216e2348b1067752960e758\System.IdentityModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\dda205128364510499bff84e347d0d28\System.ServiceModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\8115eb34e0d122591c2a9595cfff225e\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5023210ae4242a319712718fc6a23848\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\d2acb5226fa8916ef6417139a742a09d\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\006d28e7c86f3e70db90ce06ea2f33fb\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f9f13cd8fe1cefaad78579a7c3a41464\System.Runtime.Serialization.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\35d3a1b878542de59cb4fc0593992404\System.ServiceModel.Internals.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\046058f81b039ab6fd839e03e67595f8\SMDiagnostics.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\7147fa233a070283dba824da40089bf1\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\17a393b77ae757f0768501fb95ff5af6\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\a2d3a02bcdcde54273082a136c158140\CustomMarshalers.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\0483c93466914f3fbd5b44454b0c8a98\Accessibility.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll ()
MOD - C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll ()
MOD - C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll ()
MOD - C:\Program Files (x86)\Windows Live\Writer\fr\WindowsLive.Writer.Localization.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll ()


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:[b]64bit:[/b] - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV:[b]64bit:[/b] - (Intel(R) -- c:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV:[b]64bit:[/b] - (HPClientSvc) -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company)
SRV - (TeamViewer8) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AVP15.0.2) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe (Kaspersky Lab ZAO)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (WDBackup) -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe (Western Digital Technologies, Inc.)
SRV - (WDDriveService) -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe (Western Digital Technologies, Inc.)
SRV - (GamesAppIntegrationService) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (WildTangent)
SRV - (HP Support Assistant Service) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Hewlett-Packard Company)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (ICCS) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe ()
SRV - (CalendarSynchService) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe (Hewlett-Packard)
SRV - (pdfcDispatcher) -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe (PDF Complete Inc)
SRV - (VIPAppService) -- C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe (Symantec Corporation)
SRV - (HWDeviceService64.exe) -- C:\ProgramData\DatacardService\HWDeviceService64.exe ()
SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Intel Corporation)
SRV - (GamesAppService) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (WildTangent, Inc.)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - (TrueSight) -- C:\Windows\SysNative\drivers\TrueSight.sys ()
DRV:[b]64bit:[/b] - (kneps) -- C:\Windows\SysNative\drivers\kneps.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (Klwtp) -- C:\Windows\SysNative\drivers\klwtp.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (kltdi) -- C:\Windows\SysNative\drivers\kltdi.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (klkbdflt) -- C:\Windows\SysNative\drivers\klkbdflt.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (klpd) -- C:\Windows\SysNative\drivers\klpd.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (kl1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (cm_km_w) -- C:\Windows\SysNative\drivers\cm_km_w.sys (Kaspersky Lab UK Ltd)
DRV:[b]64bit:[/b] - (klhk) -- C:\Windows\SysNative\drivers\klhk.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (klflt) -- C:\Windows\SysNative\drivers\klflt.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (kldisk) -- C:\Windows\SysNative\drivers\kldisk.sys (Kaspersky Lab ZAO)
DRV:[b]64bit:[/b] - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:[b]64bit:[/b] - (Point64) -- C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (huawei_cdcecm) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys (Huawei Technologies Co., Ltd.)
DRV:[b]64bit:[/b] - (usbrndis6) -- C:\Windows\SysNative\drivers\usb80236.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (huawei_cdcacm) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys (Huawei Technologies Co., Ltd.)
DRV:[b]64bit:[/b] - (ew_hwusbdev) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys (Huawei Technologies Co., Ltd.)
DRV:[b]64bit:[/b] - (huawei_enumerator) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV:[b]64bit:[/b] - (huawei_ext_ctrl) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys (Huawei Technologies Co., Ltd.)
DRV:[b]64bit:[/b] - (ew_usbenumfilter) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys (Huawei Technologies Co., Ltd.)
DRV:[b]64bit:[/b] - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (WDC_SAM) -- C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:[b]64bit:[/b] - (pmxdrv) -- C:\Windows\SysNative\drivers\pmxdrv.sys ()
DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:[b]64bit:[/b] - (tixhci) -- C:\Windows\SysNative\drivers\tixhci.sys (Texas Instruments Incorporated)
DRV:[b]64bit:[/b] - (tihub3) -- C:\Windows\SysNative\drivers\tihub3.sys (Texas Instruments Incorporated)
DRV:[b]64bit:[/b] - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (pwdrvio) -- C:\Windows\SysNative\pwdrvio.sys ()
DRV:[b]64bit:[/b] - (pwdspio) -- C:\Windows\SysNative\pwdspio.sys ()
DRV:[b]64bit:[/b] - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:[b]64bit:[/b] - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (netr28x) -- C:\Windows\SysNative\drivers\netr28x.sys (Ralink Technology, Corp.)
DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPDSK/3
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.facebook.com/https:// [Binary data over 200 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://webmail1n.orange.fr/webmail/fr_FR/inbox.html?&FromSubmit=true&PAGE=1&dub=1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\..\SearchScopes\{2EE443BE-BDDB-49AC-A4A5-C6DBCB1EA18E}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========[/color]

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015/07/31 15:40:47 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@kaspersky.com/online_banking_08806E753BE44495B44E90AA2513BDC5: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015/07/31 15:40:48 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015/07/31 15:40:50 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\VIP@verisign.com: C:\Program Files (x86)\Symantec\VIP Access Client\ [2015/07/31 22:53:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014/06/28 16:27:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015/07/31 15:40:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015/07/31 15:40:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking_08806E753BE44495B44E90AA2513BDC5@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015/07/31 15:40:48 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014/06/28 16:27:08 | 000,000,000 | ---D | M]


[color=#E56717]========== Chrome ==========[/color]


O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | RHS- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2:[b]64bit:[/b] - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2:[b]64bit:[/b] - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2:[b]64bit:[/b] - BHO: (Symantec VIP Access Add-On) - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
O2:[b]64bit:[/b] - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Symantec VIP Access Add-On) - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll File not found
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll File not found
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [WD Drive Unlocker] C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe (Western Digital Technologies, Inc.)
O4 - HKLM..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (Western Digital Technologies, Inc.)
O4 - HKCU..\Run: [Facebook Update] C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [Mobile Partner] C:\Program Files (x86)\Wi-Fi Modem\Wi-Fi Modem File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O9:[b]64bit:[/b] - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9:[b]64bit:[/b] - Extra Button: Clavier virtuel - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Clavier virtuel - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{039B9987-033C-403B-BE6B-8DE69636AAC8}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6DCFCEF8-4430-4BFF-8D3E-78D3DCAC266D}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E40CF612-FBB5-40A3-AB73-33AAE75E2EA5}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\SYSWOW64\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2015/09/15 15:51:10 | 000,000,000 | ---D | M] - D:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2015/09/15 15:51:10 | 000,000,000 | ---D | M] - F:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{85a03c04-67e5-11e4-9aa1-24be0506ed83}\Shell - "" = AutoRun
O33 - MountPoints2\{85a03c04-67e5-11e4-9aa1-24be0506ed83}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{92ffec8a-6739-11e4-a3fa-24be0506ed83}\Shell - "" = AutoRun
O33 - MountPoints2\{92ffec8a-6739-11e4-a3fa-24be0506ed83}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)



SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {7D715857-A67C-4C2F-A929-038448584D63} - C:\Windows\System32\ie4uinit.exe -DisableSSL3
ActiveX:[b]64bit:[/b] {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} - .NET Framework
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {7DEBE4EB-6B40-3766-BB35-5CBBC385DA37} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.99\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec /fu {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} /qn
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/09/24 20:42:48 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe
[2015/09/24 11:56:56 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2015/09/20 22:31:56 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2015/09/20 22:29:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
[2015/09/20 22:29:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZHPFix
[2015/09/15 15:23:54 | 000,000,000 | ---D | C] -- C:\Pre_Scan
[2015/09/10 23:00:01 | 000,000,000 | ---D | C] -- C:\KVRT_Data
[2015/09/10 20:42:42 | 097,264,800 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\user\Desktop\KVRT.exe
[2015/09/10 02:23:55 | 000,000,000 | ---D | C] -- C:\Device
[2015/09/09 20:44:04 | 000,000,000 | ---D | C] -- C:\Users\user\Doctor Web
[2015/09/09 09:30:35 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InkEd.dll
[2015/09/09 09:30:35 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InkEd.dll
[2015/09/09 09:30:34 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jnwmon.dll
[2015/09/09 09:30:28 | 000,692,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2015/09/09 09:30:28 | 000,616,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2015/09/09 09:30:28 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
[2015/09/09 09:30:28 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
[2015/09/09 09:30:27 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
[2015/09/09 09:30:26 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
[2015/09/09 09:30:25 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2015/09/09 09:29:02 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2015/09/09 09:29:01 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2015/09/09 09:29:01 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2015/09/09 09:29:01 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2015/09/09 09:29:01 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2015/09/09 09:29:01 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2015/09/09 09:29:00 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2015/09/09 09:29:00 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2015/09/09 09:29:00 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2015/09/09 09:29:00 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2015/09/09 09:28:58 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2015/09/09 09:28:58 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2015/09/09 09:28:58 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2015/09/09 09:28:57 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2015/09/09 09:28:57 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2015/09/09 09:28:57 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2015/09/09 09:28:57 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2015/09/09 09:28:57 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2015/09/09 09:28:57 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2015/09/09 09:28:57 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2015/09/09 09:28:57 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2015/09/09 09:28:56 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2015/09/09 09:28:56 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2015/09/09 09:28:55 | 002,126,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2015/09/09 09:28:54 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2015/09/09 09:28:54 | 000,585,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2015/09/09 09:28:53 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2015/09/09 09:28:53 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2015/09/09 09:28:53 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2015/09/09 09:28:53 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2015/09/09 09:28:53 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2015/09/09 09:28:52 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2015/09/09 09:28:52 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2015/09/09 09:28:52 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2015/09/09 09:28:52 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2015/09/09 09:28:51 | 005,923,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015/09/09 09:28:50 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2015/09/09 09:28:50 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2015/09/09 09:28:50 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2015/09/09 09:27:34 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2015/09/09 09:27:34 | 001,372,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2015/09/09 09:27:34 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmapi.dll
[2015/09/09 09:26:32 | 001,390,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2015/09/09 09:26:32 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2015/09/09 09:26:31 | 005,568,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015/09/09 09:26:30 | 003,989,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015/09/09 09:26:30 | 003,934,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015/09/09 09:26:30 | 001,730,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2015/09/09 09:26:30 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2015/09/09 09:26:30 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2015/09/09 09:26:29 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015/09/09 09:26:29 | 000,879,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2015/09/09 09:26:29 | 000,635,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2015/09/09 09:26:29 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2015/09/09 09:26:28 | 001,216,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2015/09/09 09:26:28 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015/09/09 09:26:28 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2015/09/09 09:26:28 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2015/09/09 09:26:28 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2015/09/09 09:26:28 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015/09/09 09:26:28 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2015/09/09 09:26:28 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2015/09/09 09:26:28 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2015/09/09 09:26:28 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2015/09/09 09:26:28 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2015/09/09 09:26:28 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015/09/09 09:26:28 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2015/09/09 09:26:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
[2015/09/09 09:26:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2015/09/09 09:26:28 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2015/09/09 09:26:28 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2015/09/09 09:26:28 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2015/09/09 09:26:28 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2015/09/09 09:26:28 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2015/09/09 09:26:28 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2015/09/09 09:26:27 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2015/09/09 09:26:27 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2015/09/09 09:26:27 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2015/09/09 09:26:27 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2015/09/09 09:26:27 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2015/09/09 09:26:27 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2015/09/09 09:26:27 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2015/09/09 09:26:27 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2015/09/09 09:26:27 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2015/09/09 09:26:27 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015/09/09 09:26:27 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015/09/09 09:26:27 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015/09/09 09:26:27 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015/09/09 09:26:27 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2015/09/09 09:26:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015/09/09 09:26:27 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015/09/09 09:26:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015/09/09 09:26:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2015/09/09 09:25:45 | 001,941,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2015/09/09 09:25:45 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2015/09/09 09:25:45 | 000,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2015/09/09 09:25:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll
[2015/09/09 09:25:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll
[2015/09/09 09:25:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2015/09/09 09:25:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2015/09/09 09:23:52 | 000,372,736 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2015/09/09 09:23:51 | 000,299,520 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2015/09/09 09:23:51 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2015/09/09 09:23:51 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2015/09/09 09:23:51 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2015/09/09 09:23:51 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2015/09/09 09:23:51 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2015/09/09 09:23:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2015/09/09 09:23:48 | 003,165,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2015/09/09 09:23:48 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2015/09/09 09:23:48 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2015/09/09 09:23:48 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2015/09/09 09:23:48 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2015/09/09 09:23:48 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2015/09/09 09:23:48 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2015/09/09 09:23:48 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2015/09/09 09:23:48 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2015/09/09 09:23:48 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2015/09/09 09:23:48 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2015/09/09 09:23:48 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2015/09/09 09:23:48 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2015/09/09 09:23:48 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2015/09/09 09:23:48 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
[2015/09/08 18:29:48 | 000,000,000 | ---D | C] -- C:\Users\user\Documents\REGIMES
[2015/09/08 05:48:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2015/09/08 05:48:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2015/09/03 21:33:38 | 000,000,000 | ---D | C] -- C:\FRST

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/09/24 23:48:57 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/09/24 23:48:01 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/09/24 23:47:00 | 001,546,163 | ---- | M] () -- C:\Users\user\Desktop\photo 4.JPG
[2015/09/24 23:47:00 | 001,520,553 | ---- | M] () -- C:\Users\user\Desktop\photo 5.JPG
[2015/09/24 23:47:00 | 001,393,971 | ---- | M] () -- C:\Users\user\Desktop\photo 3.JPG
[2015/09/24 23:46:59 | 001,469,407 | ---- | M] () -- C:\Users\user\Desktop\photo 2.JPG
[2015/09/24 23:43:37 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/09/24 23:30:08 | 000,037,624 | ---- | M] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/09/24 23:21:13 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HP Photo Creations Communicator.job
[2015/09/24 21:17:08 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-25632774-675092321-2677815123-1000UA.job
[2015/09/24 20:44:06 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe
[2015/09/24 18:43:13 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/09/24 18:16:09 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-25632774-675092321-2677815123-1000Core.job
[2015/09/24 16:01:19 | 000,005,120 | ---- | M] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/09/24 15:48:01 | 001,669,584 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/09/24 15:48:01 | 000,747,644 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2015/09/24 15:48:01 | 000,654,254 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/09/24 15:48:01 | 000,150,168 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2015/09/24 15:48:01 | 000,122,126 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/09/24 08:36:14 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/09/24 08:36:14 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/09/24 08:22:02 | 000,008,192 | ---- | M] () -- C:\Windows\SysWow64\WDPABKP.dat
[2015/09/24 08:20:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/09/23 22:48:04 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForuser.job
[2015/09/22 18:48:07 | 000,780,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/09/22 18:48:07 | 000,142,536 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/09/19 15:18:49 | 001,934,848 | ---- | M] () -- C:\Users\user\ZHPDiag3.exe
[2015/09/11 16:24:16 | 000,053,192 | ---- | M] () -- C:\Users\user\Desktop\CDiscount.PNG
[2015/09/10 20:42:47 | 097,264,800 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\user\Desktop\KVRT.exe
[2015/09/10 18:21:20 | 000,042,968 | ---- | M] () -- C:\Users\user\Desktop\connexion.pdf
[2015/09/10 08:48:17 | 000,309,456 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/09/08 20:52:39 | 000,425,118 | ---- | M] () -- C:\Users\user\Desktop\Salon Zen 1 au 4 oct.pdf
[2015/09/02 05:04:49 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2015/09/02 05:04:46 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2015/09/02 05:04:44 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2015/09/02 05:04:42 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2015/09/02 04:48:31 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2015/09/02 04:48:25 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2015/09/02 03:47:08 | 000,372,736 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2015/09/02 03:33:48 | 000,299,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2015/08/27 20:13:03 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll
[2015/08/27 20:13:03 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2015/08/27 19:51:26 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll
[2015/08/27 19:51:26 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2015/08/27 07:11:22 | 000,003,327 | ---- | M] () -- C:\Users\user\Desktop\poeme aug 15 - Raccourci.lnk
[2015/08/26 20:07:11 | 003,165,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2015/08/26 20:07:11 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2015/08/26 20:07:11 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2015/08/26 20:07:11 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2015/08/26 20:07:11 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2015/08/26 20:07:10 | 000,696,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2015/08/26 20:06:43 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2015/08/26 20:06:33 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
[2015/08/26 20:06:30 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2015/08/26 20:06:30 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2015/08/26 19:56:25 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2015/08/26 19:56:25 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2015/08/26 19:56:25 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2015/08/26 19:56:24 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2015/08/26 19:55:37 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/09/24 16:01:18 | 000,005,120 | ---- | C] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/09/24 11:56:59 | 000,037,624 | ---- | C] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/09/22 07:22:07 | 000,000,328 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForuser.job
[2015/09/20 22:37:31 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\WDPABKP.dat
[2015/09/19 15:18:49 | 001,934,848 | ---- | C] () -- C:\Users\user\ZHPDiag3.exe
[2015/09/11 16:24:15 | 000,053,192 | ---- | C] () -- C:\Users\user\Desktop\CDiscount.PNG
[2015/09/10 18:21:13 | 000,042,968 | ---- | C] () -- C:\Users\user\Desktop\connexion.pdf
[2015/09/08 20:52:28 | 000,425,118 | ---- | C] () -- C:\Users\user\Desktop\Salon Zen 1 au 4 oct.pdf
[2015/08/27 07:11:22 | 000,003,327 | ---- | C] () -- C:\Users\user\Desktop\poeme aug 15 - Raccourci.lnk
[2014/01/23 18:31:08 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2014/01/23 18:31:08 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2014/01/23 18:31:08 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2014/01/23 18:31:08 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2013/10/05 18:54:34 | 000,188,304 | ---- | C] () -- C:\Windows\hpoins36.dat
[2013/10/05 13:15:06 | 000,183,567 | ---- | C] () -- C:\Windows\hpoins36.dat.temp
[2013/10/04 19:22:17 | 000,000,652 | ---- | C] () -- C:\Windows\hpomdl36.dat.temp

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/07/10 19:51:25 | 014,177,280 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/07/10 19:34:07 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2015/09/09 04:23:42 | 000,067,558 | ---- | M] () -- C:\AdsFix.txt
[2010/11/21 05:23:51 | 000,383,786 | RHS- | M] () -- C:\bootmgr
[2011/02/11 19:00:42 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2015/04/13 13:36:30 | 000,029,521 | ---- | M] () -- C:\ComboFix.txt
[2015/04/10 16:31:01 | 000,002,888 | ---- | M] () -- C:\MLWB 10 avr 15.xml
[2015/04/10 16:34:30 | 000,001,442 | ---- | M] () -- C:\MLWB 2 10 avr.xml
[2012/04/23 21:34:07 | 000,000,000 | R-S- | M] () -- C:\OS
[2015/09/24 08:20:54 | 4175,429,632 | -HS- | M] () -- C:\pagefile.sys
[2015/03/16 11:03:31 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin
[2015/09/24 23:48:57 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/09/15 16:06:41 | 000,016,415 | R--- | M] () -- C:\Pre_Scan_15_09_2015_16_06_41.txt

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2009/07/14 06:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2015/07/31 22:53:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2015/07/31 22:53:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Calibre2
[2015/09/08 05:48:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2012/04/23 22:12:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cyberlink
[2015/07/31 22:53:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dropbox
[2012/04/23 22:13:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EasyBits For Kids
[2014/05/07 23:17:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2014/01/18 13:46:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hewlett-Packard
[2014/08/30 12:21:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hp
[2012/04/23 22:17:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Games
[2015/07/31 22:53:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP Photo Creations
[2015/07/31 22:41:31 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2013/09/27 12:08:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2015/09/10 08:46:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2015/07/31 15:41:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Kaspersky Lab
[2014/07/06 21:43:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2014/05/11 15:05:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MarkAny
[2014/01/23 12:52:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2012/06/21 09:14:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft DirectX SDK (June 2010)
[2012/06/21 08:38:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Mathematics
[2013/10/27 15:17:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2015/08/12 13:07:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2013/10/04 19:27:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SkyDrive
[2012/04/23 22:21:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2013/10/05 00:06:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
[2013/10/03 14:33:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2014/11/16 21:19:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\monAlbumPhoto
[2009/07/14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2013/10/05 00:07:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2015/07/31 22:53:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NewspaperDirect
[2012/06/21 09:02:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2012/06/21 08:38:53 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Online Services
[2015/07/31 22:54:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PDF Complete
[2012/04/23 22:06:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2009/07/14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2015/07/31 22:41:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Samsung
[2015/09/08 05:48:44 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2013/10/27 15:11:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Symantec
[2012/04/23 22:23:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SymSilent
[2013/10/03 21:11:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TeamViewer
[2012/04/23 22:06:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Temp
[2013/09/27 11:02:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Texas Instruments Inc
[2009/07/14 06:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2014/04/24 20:47:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Western Digital
[2014/11/08 13:32:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wi-Fi Modem
[2013/11/16 15:01:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildGames
[2014/01/30 23:39:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WildTangent Games
[2013/09/27 14:26:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2013/10/04 19:29:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2013/09/27 10:52:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2015/08/01 08:55:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009/07/14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2013/09/27 10:52:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2010/11/21 05:31:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2013/09/27 10:52:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2013/10/27 15:21:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WordBiz
[2015/09/06 21:00:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Yahoo!
[2015/07/31 22:52:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ZHPDiag
[2015/09/20 22:30:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ZHPFix
[2012/04/23 22:18:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Zinio Reader 4

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
[2015/07/10 12:30:50 | 000,063,328 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\AGP440.sys
[2015/07/10 12:30:50 | 000,063,328 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_c357541563097b98\AGP440.sys
[2015/07/10 12:30:50 | 000,063,328 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_10.0.10240.16384_none_c2135eea595e241e\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) MD5=4ABA3E75A76195A3E38ED2766C962899 -- C:\Windows\winsxs\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_ddc3da0b75baa7e0\appmgmts.dll
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_e818845daa1b69db\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys
[2015/07/10 12:30:51 | 000,028,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\atapi.sys
[2015/07/10 12:30:51 | 000,028,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_5689072091519d03\atapi.sys
[2015/07/10 12:30:51 | 000,028,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.10240.16384_none_e53899c8bc371940\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2010/11/21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe
[2015/07/10 12:30:55 | 000,944,640 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\autochk.exe
[2015/07/10 12:30:55 | 000,944,640 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.10240.16384_none_e9f45ef85c6e6d93\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009/07/14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\SysNative\drivers\beep.sys
[2009/07/14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2012/04/23 21:49:30 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2012/04/23 21:49:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2012/04/23 21:49:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2012/04/23 21:49:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2012/04/23 21:49:30 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2012/04/23 21:49:30 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\SysWOW64\hidserv.dll
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_3cf5e466d58070d9\hidserv.dll
[2009/07/14 03:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) MD5=BD9EB3958F213F96B97B1D897DEE006D -- C:\Windows\SysNative\hidserv.dll
[2009/07/14 03:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) MD5=BD9EB3958F213F96B97B1D897DEE006D -- C:\Windows\winsxs\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_32a13a14a11faede\hidserv.dll
[2015/07/10 12:30:53 | 000,034,304 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\hidserv.dll
[2015/07/10 12:30:53 | 000,034,304 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_10.0.10240.16384_none_deacba1c221bf2db\hidserv.dll

[color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
[2011/11/15 11:38:56 | 000,557,848 | ---- | M] (Intel Corporation) MD5=2FDAEC4B02729C48C0FD1B0B4695995B -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\iaStor.sys
[2011/11/15 11:38:56 | 000,557,848 | ---- | M] (Intel Corporation) MD5=2FDAEC4B02729C48C0FD1B0B4695995B -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\iaahci.inf_amd64_e6913aab23ea9a9c\iaStor.sys
[2011/11/15 11:38:56 | 000,557,848 | ---- | M] (Intel Corporation) MD5=2FDAEC4B02729C48C0FD1B0B4695995B -- C:\SWSETUP\DRV\Storage\Intel\IntelRST\10.6.0.1002\src\iaStor.sys
[2011/11/15 11:38:56 | 000,557,848 | ---- | M] (Intel Corporation) MD5=2FDAEC4B02729C48C0FD1B0B4695995B -- C:\Windows\SysNative\drivers\iaStor.sys
[2011/11/15 11:38:56 | 000,557,848 | ---- | M] (Intel Corporation) MD5=2FDAEC4B02729C48C0FD1B0B4695995B -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_e6913aab23ea9a9c\iaStor.sys
[2011/11/15 11:38:56 | 000,557,848 | ---- | M] (Intel Corporation) MD5=2FDAEC4B02729C48C0FD1B0B4695995B -- C:\Windows\SysNative\DriverStore\FileRepository\iastor.inf_amd64_neutral_b8d31a7001998667\iaStor.sys

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2010/11/21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2012/04/23 21:55:08 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2012/04/23 21:55:08 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2012/04/23 21:55:08 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2012/04/23 21:55:08 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2015/07/10 12:30:50 | 000,412,000 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\iaStorV.sys
[2015/07/10 12:30:50 | 000,412,000 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_5069105fb236ae4b\iaStorV.sys
[2015/07/10 12:30:50 | 000,412,000 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_10.0.10240.16384_none_b711c42722754533\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2010/11/21 05:24:25 | 000,119,808 | ---- | M] (Microsoft Corporation) MD5=A6F09E5669D9A19035F6D942CAA15882 -- C:\Windows\SysWOW64\imm32.dll
[2010/11/21 05:24:25 | 000,119,808 | ---- | M] (Microsoft Corporation) MD5=A6F09E5669D9A19035F6D942CAA15882 -- C:\Windows\winsxs\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_c4d0cdd7c56b493e\imm32.dll
[2009/07/14 03:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) MD5=AA2C08CE85653B1A0D2E4AB407FA176C -- C:\Windows\SysNative\imm32.dll
[2009/07/14 03:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) MD5=AA2C08CE85653B1A0D2E4AB407FA176C -- C:\Windows\winsxs\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_b84b0fbd941c03a9\imm32.dll
[2015/07/10 12:30:51 | 000,211,288 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\imm32.dll
[2015/07/10 12:30:51 | 000,211,288 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_10.0.10240.16384_none_64568fc5151847a6\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2015/07/15 05:20:03 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=093861BB2A36B95CE824683714737CAD -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23126_none_f2648115860f42d7\kernel32.dll
[2015/07/22 19:52:03 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=1E679BB6671C67B2097A5E53D884D4D0 -- C:\Windows\SysWOW64\kernel32.dll
[2015/07/22 19:52:03 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=1E679BB6671C67B2097A5E53D884D4D0 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18939_none_fc27e76ca15799bc\kernel32.dll
[2015/07/23 00:03:57 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=313D319AB74D0218F44CC66BE393E38A -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23142_none_f24ae0158623155d\kernel32.dll
[2015/05/25 20:22:03 | 001,163,776 | ---- | M] (Microsoft Corporation) MD5=3A2E4CB43CC4AE0195F686146ADCAD3D -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23072_none_f22a6e6b863b6c09\kernel32.dll
[2015/07/15 19:48:28 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=50159C0AEE9029D43B7E27022B6C0B37 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23136_none_fcae5b7bba7820c3\kernel32.dll
[2015/05/25 20:05:29 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=5EA4D6D52DB2679B8F9DE67A7F8BC41A -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23072_none_fc7f18bdba9c2e04\kernel32.dll
[2012/11/30 07:41:07 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=65C113214F7B05820F6D8A65B1485196 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_f1e4cab46cea5424\kernel32.dll
[2015/07/23 01:56:40 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=6F5C056D1AEB8713E403259B5FB38EE8 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23142_none_fc9f8a67ba83d758\kernel32.dll
[2015/05/25 20:19:02 | 001,162,752 | ---- | M] (Microsoft Corporation) MD5=6FDF03A3B110C5264F52F979335AE301 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18869_none_f1b2cb706d0f2e6d\kernel32.dll
[2015/07/15 20:10:48 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=72585BDAF2EC5237EBD71D540657D6A2 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18933_none_f1cd3b5e6cfc3fb7\kernel32.dll
[2014/03/04 11:16:17 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=76161B9D78A275F8F28DD67436013110 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_fc484db2a13f5426\kernel32.dll
[2014/04/12 04:32:01 | 001,164,800 | ---- | M] (Microsoft Corporation) MD5=77BBBF70BCE286CD19E1E68F248363FA -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_f24130b9862a22c7\kernel32.dll
[2010/11/21 05:24:07 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=7A6326D96D53048FDEC542DF23D875A0 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_f1e3eab06ceb12ef\kernel32.dll
[2015/07/23 02:02:40 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=9C261AB78DE420AA52FC08D69FD5745D -- C:\Windows\SysNative\kernel32.dll
[2015/07/23 02:02:40 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=9C261AB78DE420AA52FC08D69FD5745D -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18939_none_f1d33d1a6cf6d7c1\kernel32.dll
[2012/11/30 06:57:47 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=9CC2571E3646B9A24296AD7ADCC71682 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_fc8432ddba97903d\kernel32.dll
[2015/07/15 05:19:54 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=9D0A88DF1CCB89596DDB876093CD16A4 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18923_none_f1d80b4a6cf423c6\kernel32.dll
[2015/07/15 19:53:35 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=A38E10B4143A19F32D64517B6A1FCB98 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18933_none_fc21e5b0a15d01b2\kernel32.dll
[2015/07/15 20:09:09 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=A3A71E4BEE2BA121C969B39AD1EB30FC -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23136_none_f259b12986175ec8\kernel32.dll
[2012/11/30 06:53:59 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=AC0B6F41882FC6ED186962D770EBF1D2 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_fc397506a14b161f\kernel32.dll
[2012/11/30 07:52:53 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=B3BEA6420D482356E53B7C728E05C637 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_f22f888b8636ce42\kernel32.dll
[2015/07/15 04:54:33 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=C3856345C4FB053140237236D1146242 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18923_none_fc2cb59ca154e5c1\kernel32.dll
[2014/04/12 04:05:53 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=C8C41EBEE097FEB29FB816854D3AD1E7 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_fc95db0bba8ae4c2\kernel32.dll
[2015/07/15 04:58:52 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=CA1A5EE549FE248BC127C1A5CAB72B70 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23126_none_fcb92b67ba7004d2\kernel32.dll
[2014/03/04 11:44:00 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=D2A513EE880D71BDE7F0257F38B9D019 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_f1f3a3606cde922b\kernel32.dll
[2015/08/04 20:12:26 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=E58CB7F258EDD938CEC4CFE44ABEC764 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23153_none_f2411073862a4aa5\kernel32.dll
[2010/11/21 05:24:15 | 000,837,632 | ---- | M] (Microsoft Corporation) MD5=E80758CF485DB142FCA1EE03A34EAD05 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_fc389502a14bd4ea\kernel32.dll
[2015/08/04 19:51:12 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=F7C976A71C09A6B4141CC5C8097DE81C -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23153_none_fc95bac5ba8b0ca0\kernel32.dll
[2015/05/25 19:59:51 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=F81920ADB15012CF4E9FF8238C85686A -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18869_none_fc0775c2a16ff068\kernel32.dll
[2015/07/10 12:30:55 | 000,702,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\kernel32.dll
[2015/07/10 12:30:55 | 000,702,512 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_10.0.10240.16384_none_9bbe56eff0f8d352\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2010/11/21 05:24:00 | 000,326,144 | ---- | M] (Microsoft Corporation) MD5=1D5185A4C7E6695431AE4B55C3D7D333 -- C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_16795c7543eb48cf\mswsock.dll
[2013/09/07 04:04:16 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=6547D445C4B69DC0083B619AC642DF04 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_bac3d364a4c3ea89\mswsock.dll
[2010/11/21 05:24:09 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll
[2013/09/08 04:27:14 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=9A9F9F1A77D6A80EE28B57664F00013E -- C:\Windows\SysNative\mswsock.dll
[2013/09/08 04:27:14 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=9A9F9F1A77D6A80EE28B57664F00013E -- C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_164e004b440bdabf\mswsock.dll
[2013/09/07 04:24:39 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=BDDB1FD258B92DEE00F222D3304B5D9C -- C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_16e26ee85d215bbf\mswsock.dll
[2013/09/08 04:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\SysWOW64\mswsock.dll
[2013/09/08 04:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_ba2f64c78bae6989\mswsock.dll
[2015/07/10 12:30:54 | 000,364,384 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\mswsock.dll
[2015/07/10 12:30:54 | 000,364,384 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_10.0.10240.16384_none_c053c8b4c7f90932\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2012/08/22 20:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\SysNative\drivers\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010/11/21 05:23:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2015/07/10 12:30:57 | 001,168,736 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\ndis.sys
[2015/07/10 12:30:57 | 001,168,736 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.10240.16384_none_6155efe3c2b95661\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2015/07/10 12:30:56 | 000,836,096 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\netlogon.dll
[2015/07/10 12:30:56 | 000,836,096 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.10240.16384_none_05b828f1d2a732fb\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2010/11/21 05:23:55 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=05D78AA5CB5F3F5C31160BDB955D0B7C -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_04972f2c338b23d4\ntfs.sys
[2014/01/24 04:37:55 | 001,684,928 | ---- | M] (Microsoft Corporation) MD5=1A29A59A4C5BA6F8C85062A613B7E2B2 -- C:\Windows\SysNative\drivers\ntfs.sys
[2014/01/24 04:37:55 | 001,684,928 | ---- | M] (Microsoft Corporation) MD5=1A29A59A4C5BA6F8C85062A613B7E2B2 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18378_none_045a363833b85029\ntfs.sys
[2014/01/24 04:40:06 | 001,684,416 | ---- | M] (Microsoft Corporation) MD5=48B6047F82D5A8D0AEC71593F4ACD79B -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22580_none_04d102ad4ce53e53\ntfs.sys
[2012/04/23 21:55:08 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=87B104128D4D3BA3C13098BAEBF38082 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.21680_none_04d11b5b4ce521d9\ntfs.sys
[2012/04/23 21:55:08 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=A2F74975097F52A00745F9637451FDD8 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17577_none_0459508233b9177f\ntfs.sys
[2012/08/31 19:57:17 | 001,687,408 | ---- | M] (Microsoft Corporation) MD5=B2746D84DDF68D09B41B72DF745CCBA6 -- C:\Windows\SoftwareDistribution\Download\071741e3379d4324d5c6c3e7b5b64229\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22104_none_052b7b9d4ca0cf8b\ntfs.sys
[2012/08/31 20:19:35 | 001,659,760 | ---- | M] (Microsoft Corporation) MD5=E453ACF4E7D44E5530B5D5F2B9CA8563 -- C:\Windows\SoftwareDistribution\Download\071741e3379d4324d5c6c3e7b5b64229\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17945_none_0477c74a33a2859a\ntfs.sys
[2015/07/10 12:30:56 | 002,117,472 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\ntfs.sys
[2015/07/10 12:30:56 | 002,117,472 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_10.0.10240.16384_none_ae719b6bb798e437\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2012/04/23 21:55:08 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2012/04/23 21:55:08 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2012/04/23 21:55:08 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2012/04/23 21:55:08 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
[2015/07/10 12:30:51 | 000,166,240 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\nvstor.sys
[2015/07/10 12:30:51 | 000,166,240 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_3ee6d81b22b3ea66\nvstor.sys
[2015/07/10 12:30:51 | 000,166,240 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_10.0.10240.16384_none_41db34d659abef0b\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2010/11/21 05:24:32 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\SysWOW64\proquota.exe
[2010/11/21 05:24:32 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe
[2010/11/21 05:24:16 | 000,031,744 | ---- | M] (Microsoft Corporation) MD5=C6C83C0DF40E11FA1F06625E95E41DE7 -- C:\Windows\SysNative\proquota.exe
[2010/11/21 05:24:16 | 000,031,744 | ---- | M] (Microsoft Corporation) MD5=C6C83C0DF40E11FA1F06625E95E41DE7 -- C:\Windows\winsxs\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_85ecfd46a904b22a\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2010/11/21 05:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\SysNative\qmgr.dll
[2010/11/21 05:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\winsxs\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_81b6ca5c101195cd\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2010/11/21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
[2015/07/10 12:30:56 | 000,284,672 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\scecli.dll
[2015/07/10 12:30:56 | 000,284,672 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.10240.16384_none_400e540a73c8b9b6\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2012/02/11 08:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=85DAA09A98C9286D4EA2BA8D0E644377 -- C:\Windows\SysNative\spoolsv.exe
[2012/02/11 08:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=85DAA09A98C9286D4EA2BA8D0E644377 -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17777_none_3433cdb2d8563d50\spoolsv.exe
[2010/11/21 05:24:27 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=B96C17B5DC1424D56EEA3A99E97428CD -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_3471a890d8284f57\spoolsv.exe
[2012/02/11 08:20:28 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=B9D7A4858CF32A6A15D2763F1DE47E0E -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.21921_none_34ed7a43f150b682\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2015/05/06 01:04:06 | 000,518,144 | ---- | M] (SteelWerX) MD5=A46842C9B0C567A5A9584E83A163560C -- C:\AdsFix\svchost.exe
[2014/10/22 16:50:40 | 000,518,144 | ---- | M] (SteelWerX) MD5=A46842C9B0C567A5A9584E83A163560C -- C:\Pre_Scan\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
[2015/07/10 12:30:56 | 000,039,856 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\svchost.exe
[2015/07/10 12:30:56 | 000,039,856 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.10240.16384_none_bdbbcb4f9ffb0889\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2014/10/14 04:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows\SysNative\termsrv.dll
[2014/10/14 04:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_ecb2935b6af13c52\termsrv.dll
[2010/11/21 05:24:07 | 000,680,960 | ---- | M] (Microsoft Corporation) MD5=2E648163254233755035B46DD7B89123 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll
[2014/07/17 04:07:44 | 000,681,984 | ---- | M] (Microsoft Corporation) MD5=4FC4C50985E5B840F4D72E57286887B8 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_eca0bf836affa9bb\termsrv.dll
[2014/10/14 04:16:40 | 000,686,592 | ---- | M] (Microsoft Corporation) MD5=6A5B600AD0041E9AF564DE73B716F3D2 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_ed2d60f8841a8fd8\termsrv.dll
[2014/07/16 05:23:41 | 000,686,080 | ---- | M] (Microsoft Corporation) MD5=F4D7114060C034134A440846F411BB7F -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_ed1f8e488425629d\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
[2015/07/10 12:30:56 | 000,030,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\userinit.exe
[2015/07/10 12:30:56 | 000,030,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.10240.16384_none_e4292bc46c5d42af\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2010/11/21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volsnap.sys
[2010/11/21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_73dcbcf012b4850e\volsnap.sys
[2012/04/23 21:48:08 | 000,296,320 | ---- | M] (Microsoft Corporation) MD5=879CE6AEA3FE874AD4C500B6B6198EB0 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.21668_none_74344b472bf715e9\volsnap.sys
[2012/04/23 21:48:08 | 000,296,320 | ---- | M] (Microsoft Corporation) MD5=DF8126BD41180351A093A3AD2FC8903B -- C:\Windows\SysNative\drivers\volsnap.sys
[2012/04/23 21:48:08 | 000,296,320 | ---- | M] (Microsoft Corporation) MD5=DF8126BD41180351A093A3AD2FC8903B -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_e7c4cd5b40e03494\volsnap.sys
[2012/04/23 21:48:08 | 000,296,320 | ---- | M] (Microsoft Corporation) MD5=DF8126BD41180351A093A3AD2FC8903B -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17567_none_73a9ae3212da5cc8\volsnap.sys
[2015/07/10 12:30:51 | 000,378,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\volsnap.sys
[2015/07/10 12:30:51 | 000,378,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_b017de7f410d7e0a\volsnap.sys
[2015/07/10 12:30:51 | 000,378,720 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_10.0.10240.16384_none_1db7292f96c24571\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2015/07/16 20:42:02 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=0AC8CD2138FD10C4A0E2FF08F892359C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_87ee4767fea9c0d8\wininet.dll
[2014/02/06 11:24:52 | 002,334,208 | ---- | M] (Microsoft Corporation) MD5=263B6E451526A90FF8B1CEC759F22956 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16518_none_e4343655b6ea4626\wininet.dll
[2014/06/19 00:58:27 | 002,266,112 | ---- | M] (Microsoft Corporation) MD5=2EE102DF0EDD8A1EDD3D1E9B99A91BEC -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_e453be7db6d2bc82\wininet.dll
[2014/08/18 23:15:13 | 002,310,656 | ---- | M] (Microsoft Corporation) MD5=39EBB9708453036A74C30C9A294023FF -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17280_none_e45c6045b6cad3d3\wininet.dll
[2014/05/30 09:56:56 | 002,266,112 | ---- | M] (Microsoft Corporation) MD5=40BFD9D6EC8E174145F012246CA73CCD -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_e460a5c5b6c8b99e\wininet.dll
[2010/11/21 05:24:08 | 000,980,992 | ---- | M] (Microsoft Corporation) MD5=44214C94911C7CFB1D52CB64D5E8368D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
[2015/06/19 19:15:43 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=63B01F72FD727D5736DBEF54174D8F93 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_87eab827feacdb57\wininet.dll
[2014/11/06 03:52:35 | 001,892,864 | ---- | M] (Microsoft Corporation) MD5=6DD7D61A8EF3DFEC4FAEFEB395E77424 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17420_none_8822232dfe830275\wininet.dll
[2014/11/06 04:17:24 | 002,365,440 | ---- | M] (Microsoft Corporation) MD5=6FC2819A4F80AAB2DADEDFC1EFEE3C3F -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17420_none_e440beb1b6e073ab\wininet.dll
[2014/05/30 09:21:10 | 001,790,976 | ---- | M] (Microsoft Corporation) MD5=771CDBC3D62437D6DB070820BB1EDCCF -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_88420a41fe6b4868\wininet.dll
[2014/09/19 01:59:11 | 001,810,944 | ---- | M] (Microsoft Corporation) MD5=7AE80F921027CF88CB9D0433088A3E55 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17358_none_882f3db7fe78ff91\wininet.dll
[2014/07/25 12:52:06 | 002,266,624 | ---- | M] (Microsoft Corporation) MD5=8E71A5CB5312B8392D4DA4CA37BB5868 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17239_none_e45691cbb6d03bc9\wininet.dll
[2013/11/26 08:33:33 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=927FA6456AD6D7630F6854828D2FD16B -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16476_none_88269a09fe7f1dc7\wininet.dll
[2013/11/26 09:07:57 | 002,334,208 | ---- | M] (Microsoft Corporation) MD5=9B6678DB9C6A232C5A84D2FDFFF8B0E1 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16476_none_e445358db6dc8efd\wininet.dll
[2014/02/06 10:41:35 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=9C89246184979A070B0C6CCF61C68136 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16518_none_88159ad1fe8cd4f0\wininet.dll
[2014/09/19 02:33:18 | 002,309,632 | ---- | M] (Microsoft Corporation) MD5=9D98D4F390F0B14A782F3B931E613A1A -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17358_none_e44dd93bb6d670c7\wininet.dll
[2015/08/15 07:07:28 | 002,427,392 | ---- | M] (Microsoft Corporation) MD5=A55305B1CACD38EAC176CC532B2053AC -- C:\Windows\SysNative\wininet.dll
[2015/08/15 07:07:28 | 002,427,392 | ---- | M] (Microsoft Corporation) MD5=A55305B1CACD38EAC176CC532B2053AC -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18015_none_e46a8e15b6c167dc\wininet.dll
[2015/08/15 06:43:00 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=A8C80A92549AFDD6891C8159D4C0A107 -- C:\Windows\SysWOW64\wininet.dll
[2015/08/15 06:43:00 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=A8C80A92549AFDD6891C8159D4C0A107 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18015_none_884bf291fe63f6a6\wininet.dll
[2014/03/01 04:32:16 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=AAFEAB4FC9D70253F8C7E353E879E8A2 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16521_none_88173a93fe8b3ae0\wininet.dll
[2013/11/26 09:33:43 | 001,818,112 | ---- | M] (Microsoft Corporation) MD5=B5EB5BD3066959611E1F7A80FD6CC172 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_88216b07fe83d256\wininet.dll
[2014/07/25 12:05:23 | 001,792,512 | ---- | M] (Microsoft Corporation) MD5=B945BAA81B4805AD6BDDF4D026DCFB47 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17239_none_8837f647fe72ca93\wininet.dll
[2015/07/16 21:12:42 | 002,427,904 | ---- | M] (Microsoft Corporation) MD5=C555B5C8142844DED9E3BD94E6313000 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_e40ce2ebb707320e\wininet.dll
[2014/06/19 00:13:59 | 001,791,488 | ---- | M] (Microsoft Corporation) MD5=CCC198257901BEEA2FBF8EB1E7678356 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_883522f9fe754b4c\wininet.dll
[2014/08/18 22:46:48 | 001,812,992 | ---- | M] (Microsoft Corporation) MD5=D58988722C72D265B51A54103DFC2C6F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17280_none_883dc4c1fe6d629d\wininet.dll
[2014/03/01 05:10:28 | 002,334,208 | ---- | M] (Microsoft Corporation) MD5=DF79CE9B950C62677D232154E93A81C7 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16521_none_e435d617b6e8ac16\wininet.dll
[2015/06/20 20:26:01 | 002,427,392 | ---- | M] (Microsoft Corporation) MD5=E066FDC3A2074D926903B8C31EF3B347 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_e40953abb70a4c8d\wininet.dll
[2014/03/06 07:41:49 | 001,789,440 | ---- | M] (Microsoft Corporation) MD5=E4E829EE073E046B0EB19B5FECB19B8C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_884f4ca9fe60df00\wininet.dll
[2013/11/26 09:33:42 | 002,332,160 | ---- | M] (Microsoft Corporation) MD5=E6CB36B85BE59095337427E853A5B65A -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_e440068bb6e1438c\wininet.dll
[2014/03/06 08:22:40 | 002,260,480 | ---- | M] (Microsoft Corporation) MD5=F220BA78AB542C70211D73AE4729B2CD -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_e46de82db6be5036\wininet.dll
[2010/11/21 05:23:55 | 001,188,864 | ---- | M] (Microsoft Corporation) MD5=F6C5302E1F4813D552F41A0AC82455E5 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_7ac940242f7494a4\wininet.dll
[2015/07/10 12:30:56 | 002,741,248 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\wininet.dll
[2015/07/10 12:30:56 | 002,741,248 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.0.10240.16384_none_4da1791f65f4f473\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2015/05/06 01:04:06 | 000,518,144 | ---- | M] (SteelWerX) MD5=A46842C9B0C567A5A9584E83A163560C -- C:\AdsFix\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
[2015/07/10 12:30:56 | 000,290,304 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\wininit.exe
[2015/07/10 12:30:56 | 000,290,304 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.10240.16384_none_38f32a7d9efdf146\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2015/09/03 22:48:21 | 000,038,400 | ---- | M] () MD5=098D1E9C1B749142F999973C794BE54D -- C:\AdsFix\winlogon.exe
[2015/09/03 22:48:21 | 000,038,400 | ---- | M] () MD5=098D1E9C1B749142F999973C794BE54D -- C:\AdsFix\winlogon.exe
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2014/03/04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/03/04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
[2014/07/16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
[2015/07/10 12:30:56 | 000,578,048 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\winlogon.exe
[2015/07/10 12:30:56 | 000,578,048 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\winlogon.exe
[2015/07/10 12:30:56 | 000,578,048 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe
[2015/07/10 12:30:56 | 000,578,048 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.10240.16384_none_77c372c56f9ec699\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2015/07/10 12:30:57 | 000,422,560 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\ws2_32.dll
[2015/07/10 12:30:57 | 000,422,560 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\$Windows.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_10.0.10240.16384_none_fab8227169035068\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr ?entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2015/08/15 07:04:30 | 012,857,344 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\ieframe.dll
[2013/11/26 09:33:43 | 000,116,736 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\iepeers.dll

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ ?*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* ?.sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2015/09/21 09:37:55 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-20\desktop.ini
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I0QZ45L.jpg
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I1MZV3H.jpg
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I1PHMJ5.mp4
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I1Q6XP1.mp4
[2015/09/21 09:34:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I2ZQ3ZZ.jpg
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I34X1XK.jpg
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I399N4P.JPG
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I5G7CY2.avi
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I815SME.jpg
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I8A3ZVM.mp4
[2015/09/22 23:58:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I9II2Q8.exe
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I9JY2R8.jpg
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I9L61EN.avi
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$I9O7JMB.JPG
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IAKID4Z.avi
[2015/09/22 23:58:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IB88PWC.txt
[2015/09/22 23:58:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IBGEYR7.lnk
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IBOEGHK.JPG
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IC0YGP9.JPG
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ICWXW3E.avi
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IDM3A8P.jpg
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IDS2QVA.avi
[2015/09/20 23:10:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IEJ5BOW.lnk
[2015/09/21 09:57:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IFQKC45
[2015/09/20 23:10:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IG63J7W.exe
[2015/09/24 23:46:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IGKF5YH.exe
[2015/09/20 23:11:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IGVO20I.lnk
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IH4OSH3.jpg
[2015/09/21 10:04:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$II327MU
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IIAWJP1.avi
[2015/09/21 09:34:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IINK4NL.jpg
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IIRK0PL.mkv
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IJ64GVB.mkv
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IJG18SO.mp4
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ILGQS55.JPG
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ILKPZNS.JPG
[2015/09/20 23:10:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ILU5992.txt
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IMKR6SX.avi
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IO12SOX.mp4
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IP28CN4.JPG
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IPXKKHB.JPG
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IPYKGM1.JPG
[2015/09/20 23:11:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IQ6TGS0.exe
[2015/09/20 22:31:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IQD6SOR
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IQGG4SG.avi
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IR43RKR.jpg
[2015/09/21 10:04:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ISETZ2S
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ISFC94M.jpg
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ISYYWYI.avi
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ITGS6LK.avi
[2015/09/21 09:34:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ITPNL9Y.jpg
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$ITTXZQA.avi
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IU5DZ6B.avi
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IVCOI7H.jpg
[2015/09/21 09:34:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IVJ90EU.jpg
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IVSC92W.jpg
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IW46SJM.jpg
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IWGK8BZ.jpg
[2015/09/21 09:54:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IX6AHDJ.mp4
[2015/09/24 16:02:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IXXKL8T.avi
[2015/09/24 11:55:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IZ36P5O.pdf
[2015/09/21 09:34:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IZ4T0V0.jpg
[2015/09/24 23:48:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IZLD8WT.zip
[2015/09/21 09:34:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$IZTIYG0.jpg
[2013/12/31 00:51:08 | 000,171,429 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R0QZ45L.jpg
[2013/12/31 00:43:54 | 000,150,921 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R1MZV3H.jpg
[2008/10/01 13:56:34 | 010,091,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R1PHMJ5.mp4
[2008/10/01 13:59:12 | 014,712,715 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R1Q6XP1.mp4
[2013/12/08 14:09:24 | 000,087,215 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R2ZQ3ZZ.jpg
[2009/05/19 11:10:00 | 000,082,430 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R34X1XK.jpg
[2008/10/16 20:20:40 | 000,019,047 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R399N4P.JPG
[2012/03/31 10:19:50 | 737,132,862 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R5G7CY2.avi
[2013/12/31 00:46:18 | 000,219,867 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R815SME.jpg
[2008/10/01 13:58:52 | 012,210,121 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R8A3ZVM.mp4
[2015/09/20 22:28:12 | 003,521,472 | ---- | M] (Nicolas Coolman ) -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R9II2Q8.exe
[2013/12/31 00:48:20 | 000,205,741 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R9JY2R8.jpg
[2014/03/18 00:15:28 | 733,810,688 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R9L61EN.avi
[2008/10/16 20:20:40 | 000,017,687 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$R9O7JMB.JPG
[2012/03/08 21:37:52 | 733,503,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RAKID4Z.avi
[2015/09/20 22:31:56 | 000,003,382 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RB88PWC.txt
[2015/09/20 22:29:03 | 000,001,847 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RBGEYR7.lnk
[2008/10/16 20:20:40 | 000,026,637 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RBOEGHK.JPG
[2008/10/16 20:20:40 | 000,019,323 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RC0YGP9.JPG
[2013/08/04 23:43:38 | 731,731,978 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RCWXW3E.avi
[2013/12/31 00:44:26 | 000,134,091 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RDM3A8P.jpg
[2012/07/13 17:09:22 | 734,846,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RDS2QVA.avi
[2015/09/19 15:19:38 | 000,000,822 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$REJ5BOW.lnk
[2015/09/19 13:09:18 | 001,934,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RG63J7W.exe
[2015/09/23 23:37:21 | 022,748,744 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RGKF5YH.exe
[2015/09/08 05:48:44 | 000,002,697 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RGVO20I.lnk
[2009/05/19 11:10:00 | 000,087,761 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RH4OSH3.jpg
[2014/05/22 01:29:12 | 737,024,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RIAWJP1.avi
[2013/12/08 14:09:04 | 000,102,546 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RINK4NL.jpg
[2014/08/12 00:28:24 | 1101,013,686 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RIRK0PL.mkv
[2014/07/14 23:35:20 | 414,061,743 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RJ64GVB.mkv
[2008/10/01 14:22:32 | 016,806,859 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RJG18SO.mp4
[2008/10/16 20:20:40 | 000,019,114 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RLGQS55.JPG
[2008/10/16 20:20:40 | 000,020,857 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RLKPZNS.JPG
[2015/09/19 15:26:17 | 000,106,558 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RLU5992.txt
[2014/12/07 22:06:22 | 2063,655,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RMKR6SX.avi
[2008/10/01 13:57:42 | 011,730,712 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RO12SOX.mp4
[2008/10/16 20:20:40 | 000,020,876 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RP28CN4.JPG
[2008/10/16 20:20:40 | 000,030,767 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RPXKKHB.JPG
[2008/10/16 20:20:40 | 000,025,741 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RPYKGM1.JPG
[2013/12/15 18:25:51 | 001,226,750 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQ6TGS0.exe
[2011/12/03 11:42:56 | 734,636,032 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQGG4SG.avi
[2009/02/09 19:32:08 | 000,056,747 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RR43RKR.jpg
[2013/12/31 00:50:20 | 000,197,753 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RSFC94M.jpg
[2014/06/27 18:20:04 | 735,089,634 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RSYYWYI.avi
[2012/03/06 00:17:48 | 734,760,102 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RTGS6LK.avi
[2013/12/12 11:24:12 | 000,107,543 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RTPNL9Y.jpg
[2013/01/29 14:39:28 | 734,857,233 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RTTXZQA.avi
[2014/05/10 00:44:50 | 736,938,746 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RU5DZ6B.avi
[2009/05/19 11:10:00 | 000,125,116 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RVCOI7H.jpg
[2013/12/31 00:39:50 | 000,151,725 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RVJ90EU.jpg
[2009/05/19 11:10:00 | 000,093,718 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RVSC92W.jpg
[2013/12/31 00:41:10 | 000,201,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RW46SJM.jpg
[2013/12/31 00:46:56 | 000,227,570 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RWGK8BZ.jpg
[2008/10/01 14:19:28 | 011,068,887 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RX6AHDJ.mp4
[2014/03/16 02:01:08 | 1478,958,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RXXKL8T.avi
[2015/09/19 11:49:27 | 000,081,406 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RZ36P5O.pdf
[2013/12/31 00:47:44 | 000,174,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RZ4T0V0.jpg
[2015/09/18 17:59:13 | 005,776,492 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RZLD8WT.zip
[2013/12/12 11:24:40 | 000,145,054 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RZTIYG0.jpg
[2015/09/15 16:10:17 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\desktop.ini
[2012/08/29 22:23:46 | 000,349,184 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RFQKC45\Thumbs.db
[2014/08/17 19:19:14 | 000,002,685 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArtSmall.jpg
[2014/08/17 19:19:15 | 000,009,894 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArt_{5DBF13E1-5712-4446-B673-DCB05F7EC2EB}_Large.jpg
[2014/08/17 19:19:14 | 000,002,685 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArt_{5DBF13E1-5712-4446-B673-DCB05F7EC2EB}_Small.jpg
[2014/08/17 19:18:47 | 000,005,379 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArt_{C8C1D82E-2891-4008-A00C-0264635F01A6}_Large.jpg
[2014/08/17 19:18:47 | 000,001,440 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArt_{C8C1D82E-2891-4008-A00C-0264635F01A6}_Small.jpg
[2014/08/17 19:18:51 | 000,011,830 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArt_{F57EC579-9105-459D-A789-FC2902C80C83}_Large.jpg
[2014/08/17 19:18:51 | 000,002,861 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\AlbumArt_{F57EC579-9105-459D-A789-FC2902C80C83}_Small.jpg
[2011/08/02 16:17:24 | 000,782,418 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Bamboos_love_song_126380.mp3
[2011/07/26 19:07:34 | 000,335,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Bébé.mp3
[2012/02/26 12:24:04 | 006,192,109 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\DC-Back_In_Black.mp3
[2012/02/26 12:25:02 | 003,334,939 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\DC-Highway_To_Hell.mp3
[2014/08/17 19:19:15 | 000,000,403 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\desktop.ini
[2014/08/17 19:19:15 | 000,009,894 | --S- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Folder.jpg
[2011/07/26 19:09:20 | 001,209,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\happydays-theme.mp3
[2011/07/26 19:07:02 | 000,001,075 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Harry Potter.mid
[2011/07/26 19:06:12 | 000,108,756 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\jack bauer.mp3
[2014/08/17 19:19:25 | 001,405,265 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\kill bill - nurse whistle.mp3
[2011/07/26 19:05:10 | 000,180,258 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Les_Tontons_Flingueurs__them.mp3
[2011/07/26 19:03:08 | 000,208,143 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\r2d2 long!.mp3
[2011/07/26 19:02:36 | 000,044,610 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\R2D2.wav
[2011/07/26 19:04:44 | 001,571,998 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Rabbi Jacob.mp3
[2011/07/26 19:04:08 | 000,069,552 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Renc.3ème type.mp3
[2011/07/26 19:03:38 | 000,044,269 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Ringtone - Star Wars - Darth Vader - 'yes, Master'.mp3
[2011/07/26 19:02:08 | 000,213,614 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Spidercochon.mp3
[2011/07/26 19:01:38 | 000,047,974 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Tarzan jungle.amr
[2015/09/21 10:04:40 | 000,084,992 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Thumbs.db
[2012/04/08 16:12:34 | 003,029,089 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\undertaker's original wwe entrance music.mp3
[2011/07/26 19:01:04 | 000,122,167 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Youpi .EXT
[2010/01/01 11:00:00 | 000,002,763 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RI327MU\Sonneries\+ de Sonneries.bmk
[2015/09/19 23:20:17 | 000,078,324 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ACRORD32.EXE-D066635E.pf
[2015/09/20 20:11:24 | 000,067,840 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ADOBEARM.EXE-7105D3A2.pf
[2015/09/20 20:11:31 | 000,024,056 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ADOBEARMHELPER.EXE-DF32211A.pf
[2015/09/15 16:09:33 | 000,334,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgAppLaunch.db
[2015/09/17 07:42:22 | 000,214,765 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgCx_SC4.db
[2015/09/20 21:11:17 | 000,545,828 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgGlFaultHistory.db
[2015/09/20 21:11:17 | 001,046,884 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgGlFgAppHistory.db
[2015/09/20 21:11:17 | 003,388,802 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgGlGlobalHistory.db
[2015/09/20 22:26:49 | 001,124,756 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgGlUAD_P_S-1-5-21-25632774-675092321-2677815123-1000.db
[2015/09/20 22:26:49 | 001,117,825 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgGlUAD_S-1-5-21-25632774-675092321-2677815123-1000.db
[2015/09/20 21:11:17 | 000,705,456 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AgRobust.db
[2015/09/20 22:28:52 | 000,026,552 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AUDIODG.EXE-BDFD3029.pf
[2015/09/20 21:36:32 | 000,247,986 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\AVP.EXE-F7A42A2E.pf
[2015/09/20 22:27:11 | 000,101,856 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CHROME.EXE-D999B1BA.pf
[2015/09/20 22:31:25 | 000,007,436 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CMD.EXE-4A81B364.pf
[2015/09/20 22:31:45 | 000,137,198 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CMD.EXE-AC113AA8.pf
[2015/09/20 22:21:06 | 000,016,386 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\COMMUNICATOR.EXE-DBCABFD0.pf
[2015/09/20 09:34:46 | 000,001,934 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\COMPATTELRUNNER.EXE-DB97728F.pf
[2015/09/20 22:31:25 | 000,014,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CONHOST.EXE-1F3E9D7E.pf
[2015/09/20 22:28:44 | 000,084,554 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CONSENT.EXE-531BD9EA.pf
[2015/09/20 11:42:37 | 000,049,766 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CSC.EXE-BE9AC2DF.pf
[2015/09/20 11:42:37 | 000,012,910 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\CVTRES.EXE-2B9D810D.pf
[2015/09/20 09:31:56 | 000,021,794 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DAEMONU.EXE-79EAD54C.pf
[2015/09/19 21:52:51 | 000,033,244 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DEFRAG.EXE-588F90AD.pf
[2015/09/20 13:44:04 | 000,020,916 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DINOTIFY.EXE-35A869D6.pf
[2015/09/20 09:30:48 | 000,054,658 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-40DD444D.pf
[2015/09/20 22:29:10 | 000,031,874 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-5E46FA0D.pf
[2015/09/20 22:28:49 | 000,020,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-766398D2.pf
[2015/09/20 22:28:17 | 000,096,578 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-76936ED5.pf
[2015/09/20 22:28:19 | 000,029,706 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-A8DE6D5B.pf
[2015/09/20 22:31:35 | 000,045,208 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-B2EB1806.pf
[2015/09/20 09:44:24 | 000,026,366 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-E7777CC4.pf
[2015/09/19 21:34:54 | 000,022,898 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DLLHOST.EXE-ECB71776.pf
[2015/09/20 13:44:12 | 000,073,852 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\DRVINST.EXE-4CB4314A.pf
[2015/09/19 17:47:13 | 000,028,164 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\EXPLORER.EXE-A80E4F97.pf
[2015/09/20 21:17:01 | 000,049,976 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\FACEBOOKUPDATE.EXE-7D0CC52C.pf
[2015/09/20 21:48:00 | 000,026,602 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\FLASHPLAYERUPDATESERVICE.EXE-216D9C35.pf
[2015/09/20 09:31:26 | 000,098,052 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\GCALSERVICE.EXE-DFE129C6.pf
[2015/09/20 21:43:00 | 000,071,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\GOOGLEUPDATE.EXE-B95715F5.pf
[2015/09/20 09:34:32 | 000,037,714 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\GREENLIST.EXE-E11B1FBA.pf
[2015/09/20 09:42:00 | 000,114,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\GWXUX.EXE-B61BB889.pf
[2015/09/20 09:31:28 | 000,042,564 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\HPSA_SERVICE.EXE-AD6579F0.pf
[2015/09/20 11:41:17 | 000,000,708 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\HPSFDETECT.EXE-BB7BD191.pf
[2015/09/20 09:42:23 | 000,003,500 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\HPSFREPORT.EXE-F3375220.pf
[2015/09/20 09:39:30 | 000,003,048 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\HPSFUPDATER.EXE-85E87A15.pf
[2015/09/20 09:31:30 | 000,099,514 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\HPTOUCHSMARTSYNCCALREMINDERAP-5716B3B4.pf
[2015/09/20 18:05:27 | 000,023,322 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\HPUSERINFO64.EXE-C5B6C7DA.pf
[2015/09/20 15:35:14 | 000,000,964 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\IELOWUTIL.EXE-3885C25E.pf
[2015/09/19 21:34:56 | 000,197,934 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\IGFXSRVC.EXE-96A493A4.pf
[2015/09/20 21:28:10 | 000,793,372 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\Layout.ini
[2015/09/20 09:31:53 | 000,021,014 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\LMS.EXE-8C70F87D.pf
[2015/09/19 23:22:03 | 000,048,328 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\LOGONUI.EXE-09140401.pf
[2015/09/20 09:29:55 | 000,012,378 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\LPKSETUP.EXE-90F505D8.pf
[2015/09/20 09:31:17 | 000,012,164 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\MSCORSVW.EXE-57D17DAF.pf
[2015/09/20 09:31:17 | 000,013,880 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\MSCORSVW.EXE-C3C515BD.pf
[2015/09/15 16:09:33 | 001,512,076 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\NTOSBOOT-B00DFAAD.pf
[2015/09/19 23:22:30 | 000,000,584 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\PfSvPerfStats.bin
[2015/09/20 11:42:51 | 000,016,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\PING.EXE-7E94E73E.pf
[2015/09/20 09:33:48 | 000,026,960 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\PLUGIN-NM-SERVER.EXE-D5289AFA.pf
[2015/09/20 22:31:38 | 000,019,526 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\REGEDIT.EXE-2023FAA8.pf
[2015/09/19 21:35:05 | 000,044,710 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-4E886E67.pf
[2015/09/20 09:42:23 | 000,038,012 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-A3E35360.pf
[2015/09/20 13:43:56 | 000,008,390 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-B3F6E9E8.pf
[2015/09/20 13:44:05 | 000,012,944 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-B674A67F.pf
[2015/09/19 17:49:33 | 000,057,014 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-C7720EEA.pf
[2015/09/20 13:43:39 | 000,010,338 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-DE9673F9.pf
[2015/09/20 11:35:41 | 000,084,554 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\RUNDLL32.EXE-F54415A0.pf
[2015/09/20 09:33:12 | 000,001,564 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SC.EXE-945D79AE.pf
[2015/09/20 09:42:12 | 000,014,058 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SCHTASKS.EXE-5CA45734.pf
[2015/09/20 21:31:17 | 000,054,938 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SCRNSAVE.SCR-51176AA7.pf
[2015/09/20 10:00:45 | 000,044,448 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SDCLT.EXE-E10B972A.pf
[2015/09/20 11:42:41 | 000,155,194 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SDIAGNHOST.EXE-8D72177C.pf
[2015/09/20 22:31:47 | 000,017,018 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SEARCHFILTERHOST.EXE-77482212.pf
[2015/09/20 22:31:40 | 000,018,538 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
[2015/09/19 11:47:39 | 000,035,946 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SPLWOW64.EXE-297C4568.pf
[2015/09/20 22:10:14 | 000,240,810 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SPPSVC.EXE-B0F8131B.pf
[2015/09/19 21:52:53 | 000,020,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SVCHOST.EXE-7AC6742A.pf
[2015/09/20 22:31:37 | 000,022,178 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SVCHOST.EXE-7CFEDEA3.pf
[2015/09/20 09:35:59 | 000,035,410 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\SVCHOST.EXE-E2C2633A.pf
[2015/09/20 22:21:10 | 000,022,846 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\TASKENG.EXE-48D4E289.pf
[2015/09/20 22:14:44 | 000,166,792 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\TASKHOST.EXE-7238F31D.pf
[2015/09/20 09:35:10 | 000,026,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\UNS.EXE-E6E49771.pf
[2015/09/20 20:16:33 | 000,033,768 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\VDS.EXE-6E7946F9.pf
[2015/09/20 20:16:30 | 000,018,060 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\VDSLDR.EXE-6B089E8B.pf
[2015/09/20 09:32:26 | 000,017,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\VIPAPPSERVICE.EXE-D24F84DE.pf
[2015/09/20 22:31:37 | 000,036,894 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\VSSVC.EXE-B8AFC319.pf
[2015/09/20 11:42:42 | 000,015,588 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\W32TM.EXE-1101AF41.pf
[2015/09/20 20:16:30 | 000,025,088 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WBENGINE.EXE-28FD7E8B.pf
[2015/09/20 09:47:39 | 000,024,298 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WDLOCKEDFILES.EXE-2ED373DB.pf
[2015/09/20 22:21:06 | 000,039,180 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WERFAULT.EXE-37549B7E.pf
[2015/09/20 19:04:22 | 000,025,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WERMGR.EXE-0F2AC88C.pf
[2015/09/20 09:34:32 | 000,038,318 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WHITELIST.EXE-F3D2C582.pf
[2015/09/19 11:47:37 | 000,200,106 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WINWORD.EXE-CEA9B574.pf
[2015/09/20 14:30:27 | 000,343,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WLXPHOTOGALLERY.EXE-F184FD87.pf
[2015/09/20 13:45:10 | 000,019,712 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WMIADAP.EXE-F8DFDFA2.pf
[2015/09/20 09:29:55 | 000,021,992 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WMIAPSRV.EXE-29F35ED0.pf
[2015/09/20 20:16:36 | 000,045,572 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WMIPRVSE.EXE-1628051C.pf
[2015/09/20 09:29:55 | 000,038,200 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WMPNSCFG.EXE-FC0D39BF.pf
[2015/09/20 18:00:02 | 000,001,568 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WSQMCONS.EXE-118B52B7.pf
[2015/09/20 19:03:25 | 000,021,364 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\WUDFHOST.EXE-AFFEF87C.pf
[2015/09/20 22:30:23 | 000,046,914 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ZHPFIX.EXE-96DB37DB.pf
[2015/09/20 22:28:57 | 000,019,726 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ZHPFIX.EXE-DC8E29EF.pf
[2015/09/20 22:30:13 | 000,041,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ZHPHEP.EXE-6862BD29.pf
[2015/09/20 09:36:21 | 005,829,553 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ReadyBoot\Trace1.fx
[2015/09/19 10:09:41 | 003,952,921 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ReadyBoot\Trace10.fx
[2015/09/17 07:35:00 | 004,990,589 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ReadyBoot\Trace7.fx
[2015/09/17 17:10:33 | 004,332,321 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ReadyBoot\Trace8.fx
[2015/09/18 12:54:22 | 004,675,631 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-25632774-675092321-2677815123-1000\$RQD6SOR\ReadyBoot\Trace9.fx

[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2014/10/27 00:08:16 | 005,849,088 | ---- | M] ()(C:\Windows\SysWow64\????????????????????????????????) -- C:\Windows\SysWow64\c:\programdata\kaspersky lab\avp14.0.0\data\modules_inventory.da
[2014/04/13 11:56:41 | 005,849,088 | ---- | C] ()(C:\Windows\SysWow64\????????????????????????????????) -- C:\Windows\SysWow64\c:\programdata\kaspersky lab\avp14.0.0\data\modules_inventory.da

< End of report >

Publicité


Signaler le contenu de ce document

Publicité