OTL logfile created on: 8/7/2015 1:16:12 PM - Run OTLPE by OldTimer - Version 3.1.29.0 Folder = Y:\Programs\OTLPE 64bit-Windows 8.1 (Version = 6.3.9600) - Type = System Internet Explorer (Version = 9.11.9600.17905) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 74.00% Memory free 4.00 Gb Paging File | 1.00 Gb Available in Paging File | 35.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 922.76 Gb Total Space | 729.01 Gb Free Space | 79.00% Space Free | Partition Type: NTFS Drive D: | 924.01 Gb Total Space | 861.76 Gb Free Space | 93.26% Space Free | Partition Type: NTFS Drive E: | 14.46 Gb Total Space | 13.68 Gb Free Space | 94.65% Space Free | Partition Type: FAT32 F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive X: | 246.35 Mb Total Space | 243.92 Mb Free Space | 99.01% Space Free | Partition Type: NTFS Drive Y: | 427.75 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: MININT-PERP33 Current User Name: SYSTEM Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard Using ControlSet: ControlSet001 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2015/05/30 12:36:24 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2015/05/25 06:07:50 | 001,430,528 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack) SRV:[b]64bit:[/b] - [2015/05/12 06:19:37 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2015/05/07 08:21:51 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\GeofenceMonitorService.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2015/04/09 17:50:48 | 001,387,008 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV:[b]64bit:[/b] - [2015/02/20 16:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2015/02/03 16:58:28 | 000,366,520 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:[b]64bit:[/b] - [2015/02/03 16:58:28 | 000,023,792 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2014/11/20 19:12:40 | 000,244,736 | ---- | M] (AMD) [Auto] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2014/11/20 13:23:06 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto] -- C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2014/10/30 21:51:25 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\WINDOWS\System32\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2014/10/28 20:59:51 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2014/10/28 20:50:11 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2014/10/28 19:42:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2014/10/28 19:34:51 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2014/10/28 19:34:22 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV:[b]64bit:[/b] - [2014/10/28 19:33:55 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2014/10/28 19:29:22 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2014/10/28 19:17:31 | 000,039,424 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc) SRV:[b]64bit:[/b] - [2014/10/28 19:11:18 | 000,243,200 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV:[b]64bit:[/b] - [2014/10/28 18:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\BthHFSrv.dll -- (BthHFSrv) SRV:[b]64bit:[/b] - [2014/10/28 18:48:20 | 000,166,400 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2014/10/28 18:45:18 | 000,658,944 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\FXSSVC.exe -- (Fax) SRV:[b]64bit:[/b] - [2014/10/28 18:43:33 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2014/10/28 18:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2014/10/28 18:39:15 | 001,571,328 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\WINDOWS\System32\wbengine.exe -- (wbengine) SRV:[b]64bit:[/b] - [2014/10/28 18:29:06 | 000,365,056 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp) SRV:[b]64bit:[/b] - [2014/10/28 18:28:47 | 000,080,896 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper) SRV:[b]64bit:[/b] - [2014/10/28 18:27:40 | 000,080,384 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\umpo.dll -- (Power) SRV:[b]64bit:[/b] - [2014/10/28 18:27:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2014/10/28 18:26:29 | 000,059,392 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\themeservice.dll -- (Themes) SRV:[b]64bit:[/b] - [2014/10/28 18:24:37 | 000,131,072 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2014/10/28 18:22:05 | 000,465,920 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc) SRV:[b]64bit:[/b] - [2014/10/28 18:20:03 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2014/10/28 18:19:20 | 000,550,912 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2014/10/28 18:19:16 | 000,026,624 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg) SRV:[b]64bit:[/b] - [2014/10/28 18:18:21 | 000,094,720 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\bthserv.dll -- (bthserv) SRV:[b]64bit:[/b] - [2014/10/28 18:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2014/10/28 18:16:15 | 000,348,672 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\bdesvc.dll -- (BDESVC) SRV:[b]64bit:[/b] - [2014/10/28 18:13:24 | 000,374,784 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2014/10/28 18:12:45 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\defragsvc.dll -- (defragsvc) SRV:[b]64bit:[/b] - [2014/10/28 18:12:36 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2014/10/28 18:12:22 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2014/10/28 18:11:10 | 001,639,424 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2014/10/28 18:05:32 | 000,380,416 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc) SRV:[b]64bit:[/b] - [2014/10/28 18:05:32 | 000,380,416 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc) SRV:[b]64bit:[/b] - [2014/10/28 18:05:09 | 000,206,848 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2014/10/28 18:02:08 | 000,513,536 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc) SRV:[b]64bit:[/b] - [2014/10/28 17:57:18 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2014/10/28 17:54:23 | 000,275,968 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener) SRV:[b]64bit:[/b] - [2014/10/28 17:51:53 | 000,445,952 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider) SRV:[b]64bit:[/b] - [2014/10/28 17:49:29 | 000,300,032 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2014/10/28 17:48:52 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2014/10/28 17:46:48 | 001,348,096 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2014/10/28 17:35:51 | 001,668,096 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2014/10/15 03:42:46 | 002,820,424 | ---- | M] (CybelSoft) [Auto] -- C:\Program Files\ma-config.com\MaConfigAgent.exe -- (MaConfigAgent) SRV:[b]64bit:[/b] - [2014/09/24 08:34:59 | 006,353,960 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\System32\sppsvc.exe -- (sppsvc) SRV:[b]64bit:[/b] - [2014/07/21 03:25:26 | 003,272,656 | ---- | M] (Paramount Software UK Ltd) [Auto] -- C:\Program Files\Macrium\Reflect\ReflectService.exe -- (ReflectService.exe) SRV:[b]64bit:[/b] - [2012/08/22 21:02:36 | 000,658,576 | ---- | M] (Acer Incorporated) [On_Demand] -- C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe -- (ePowerSvc) SRV - [2015/07/14 11:06:17 | 000,268,976 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2015/07/08 01:14:22 | 000,148,136 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2015/05/20 04:38:09 | 000,373,824 | ---- | M] (WildTangent) [Auto] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService) SRV - [2015/05/07 08:05:40 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2014/12/22 04:51:57 | 000,265,808 | ---- | M] (WildTangent, Inc.) [On_Demand] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) SRV - [2014/10/28 18:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2014/10/28 18:05:58 | 000,292,864 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp) SRV - [2014/10/28 18:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2014/10/28 17:42:30 | 000,366,080 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider) SRV - [2013/08/22 08:36:31 | 000,000,000 | ---D | M] [On_Demand] -- C:\Windows\SysWOW64\MsDtc -- (MSDTC) SRV - [2013/08/22 08:36:30 | 000,000,000 | ---D | M] [On_Demand] -- C:\Windows\Vss -- (VSS) SRV - [2013/08/21 16:45:58 | 000,061,056 | ---- | M] () [On_Demand] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds) SRV - [2013/06/08 09:47:14 | 000,116,648 | ---- | M] (Google Inc.) [On_Demand] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdatem) Service Google Update (gupdatem) SRV - [2013/06/08 09:47:14 | 000,116,648 | ---- | M] (Google Inc.) [Auto] -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe -- (gupdate) Service Google Update (gupdate) SRV - [2012/10/09 06:55:18 | 002,449,552 | ---- | M] (Acer Incorporated) [Auto] -- C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe -- (CCDMonitorService) SRV - [2012/08/21 05:43:58 | 000,794,272 | ---- | M] (PC Tools) [Auto] -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc) SRV - [2012/07/13 02:02:16 | 002,451,456 | ---- | M] (Realsil Microelectronics Inc.) [Auto] -- C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe -- (IconMan_R) SRV - [2012/07/11 21:10:24 | 000,174,160 | ---- | M] (Egis Technology Inc. ) [On_Demand] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service) SRV - [2011/11/25 17:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2015/06/27 22:07:11 | 000,178,008 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\ksecpkg.sys -- (KSecPkg) DRV:[b]64bit:[/b] - [2015/04/15 23:17:07 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2015/03/29 22:47:00 | 000,561,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\cng.sys -- (CNG) DRV:[b]64bit:[/b] - [2015/03/19 18:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\Windows\System32\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2015/03/17 10:26:06 | 000,467,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\UsbHub3.sys -- (USBHUB3) DRV:[b]64bit:[/b] - [2015/03/12 21:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2015/03/08 19:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2015/03/04 03:25:11 | 000,377,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2015/02/03 16:58:33 | 000,264,000 | ---- | M] (Microsoft Corporation) [File_System | Boot] -- C:\Windows\System32\drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2015/02/03 16:58:33 | 000,114,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:[b]64bit:[/b] - [2015/02/03 16:58:04 | 000,044,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2014/12/21 04:11:11 | 000,129,752 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- C:\Windows\System32\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy) DRV:[b]64bit:[/b] - [2014/11/20 19:40:00 | 018,959,360 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2014/11/20 19:08:54 | 000,589,312 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2014/10/28 21:09:06 | 000,033,600 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- C:\Windows\System32\drivers\wimmount.sys -- (WIMMount) DRV:[b]64bit:[/b] - [2014/10/28 20:59:47 | 000,415,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2014/10/28 20:59:12 | 000,136,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2014/10/28 20:57:42 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2014/10/28 20:56:50 | 000,097,048 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2014/10/28 20:56:50 | 000,049,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2014/10/28 20:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2014/10/28 19:46:57 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\scfilter.sys -- (scfilter) DRV:[b]64bit:[/b] - [2014/10/28 19:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\ndiscap.sys -- (NdisCap) DRV:[b]64bit:[/b] - [2014/10/28 19:46:43 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2014/10/28 19:46:27 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WUDFPf.sys -- (WudfPf) DRV:[b]64bit:[/b] - [2014/10/28 19:46:09 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\netvsc63.sys -- (netvsc) DRV:[b]64bit:[/b] - [2014/10/28 19:46:07 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\appid.sys -- (AppID) DRV:[b]64bit:[/b] - [2014/10/28 19:45:54 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2014/10/28 19:45:39 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2014/10/28 19:45:16 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\Windows\System32\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2014/10/15 01:32:36 | 000,921,920 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- C:\Windows\System32\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2014/10/15 01:32:36 | 000,551,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\vhdmp.sys -- (vhdmp) DRV:[b]64bit:[/b] - [2014/10/15 01:32:36 | 000,061,248 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- C:\Windows\System32\drivers\fsdepends.sys -- (FsDepends) DRV:[b]64bit:[/b] - [2014/10/12 19:43:17 | 000,086,336 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2014/10/12 19:43:17 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\intelpep.sys -- (intelpep) @intelpep.inf,%INTELPEP.SVCDESC%;Intel(R) DRV:[b]64bit:[/b] - [2014/10/06 23:54:45 | 000,189,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\ucx01000.sys -- (UCX01000) DRV:[b]64bit:[/b] - [2014/10/06 23:44:39 | 000,069,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2014/09/24 09:30:40 | 000,589,656 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\fvevol.sys -- (fvevol) DRV:[b]64bit:[/b] - [2014/09/24 09:30:31 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\xusb22.sys -- (xusb22) DRV:[b]64bit:[/b] - [2014/09/24 09:03:16 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot] -- C:\Windows\System32\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2014/09/24 08:34:55 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2014/09/24 08:34:49 | 000,249,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\rdyboost.sys -- (rdyboost) DRV:[b]64bit:[/b] - [2014/09/24 08:34:37 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2014/09/24 08:34:36 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2014/09/24 08:34:36 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2014/09/24 08:34:36 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2014/09/24 08:03:40 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2014/08/25 23:31:52 | 000,874,712 | ---- | M] (Realtek ) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2014/08/14 17:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2014/06/21 10:02:02 | 000,223,232 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AtihdWB6.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2014/02/24 09:33:46 | 000,017,568 | ---- | M] (CybelSoft) [Kernel | On_Demand] -- C:\Program Files\ma-config.com\Drivers\ma-config_amd64.sys -- (ma-config_amd64) DRV:[b]64bit:[/b] - [2013/08/22 08:35:09 | 000,023,040 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto] -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv) DRV:[b]64bit:[/b] - [2013/08/22 06:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2013/08/22 06:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot] -- C:\Windows\System32\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2013/08/22 05:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\Windows\System32\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2013/08/22 05:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2013/08/22 05:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2013/08/22 05:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2013/08/22 05:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,575,840 | ---- | M] (LSI Corporation, Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\megasr.sys -- (megasr) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,412,000 | ---- | M] (Intel Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\iaStorV.sys -- (iaStorV) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot] -- C:\Windows\System32\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2013/08/22 05:43:45 | 000,056,672 | ---- | M] (LSI Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\megasas.sys -- (megasas) DRV:[b]64bit:[/b] - [2013/08/22 05:43:44 | 000,109,408 | ---- | M] (LSI Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\lsi_sas.sys -- (LSI_SAS) DRV:[b]64bit:[/b] - [2013/08/22 05:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot] -- C:\Windows\System32\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,114,016 | ---- | M] (PMC-Sierra, Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\arcsas.sys -- (arcsas) DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot] -- C:\Windows\System32\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2013/08/22 05:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot] -- C:\Windows\System32\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2013/08/22 05:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2013/08/22 05:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2013/08/22 05:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot] -- C:\Windows\System32\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2013/08/22 05:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2013/08/22 05:43:34 | 000,168,800 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Boot] -- C:\Windows\System32\drivers\vsmraid.sys -- (vsmraid) DRV:[b]64bit:[/b] - [2013/08/22 05:43:34 | 000,019,808 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\viaide.sys -- (viaide) DRV:[b]64bit:[/b] - [2013/08/22 05:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\uaspstor.sys -- (UASPStor) @uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) DRV:[b]64bit:[/b] - [2013/08/22 05:43:32 | 000,168,288 | ---- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\nvstor.sys -- (nvstor) DRV:[b]64bit:[/b] - [2013/08/22 05:43:32 | 000,081,760 | ---- | M] (Silicon Integrated Systems) [Kernel | Boot] -- C:\Windows\System32\drivers\sisraid4.sys -- (SiSRaid4) DRV:[b]64bit:[/b] - [2013/08/22 05:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,150,368 | ---- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\nvraid.sys -- (nvraid) DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2013/08/22 05:43:31 | 000,044,896 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot] -- C:\Windows\System32\drivers\sisraid2.sys -- (SiSRaid2) DRV:[b]64bit:[/b] - [2013/08/22 05:39:47 | 000,024,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\hwpolicy.sys -- (hwpolicy) DRV:[b]64bit:[/b] - [2013/08/22 05:39:15 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\pcw.sys -- (pcw) DRV:[b]64bit:[/b] - [2013/08/22 05:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\UEFI.sys -- (UEFI) DRV:[b]64bit:[/b] - [2013/08/22 05:37:27 | 000,037,728 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\vdrvroot.sys -- (vdrvroot) DRV:[b]64bit:[/b] - [2013/08/22 05:36:48 | 000,045,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2013/08/22 05:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2013/08/22 04:40:24 | 000,007,680 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\Windows\System32\drivers\beep.sys -- (Beep) DRV:[b]64bit:[/b] - [2013/08/22 04:39:43 | 000,025,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\CmBatt.sys -- (CmBatt) DRV:[b]64bit:[/b] - [2013/08/22 04:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2013/08/22 04:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2013/08/22 04:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2013/08/22 04:39:06 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\mshidkmdf.sys -- (mshidkmdf) DRV:[b]64bit:[/b] - [2013/08/22 04:39:01 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\HidBatt.sys -- (HidBatt) DRV:[b]64bit:[/b] - [2013/08/22 04:39:00 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\vwifibus.sys -- (vwifibus) DRV:[b]64bit:[/b] - [2013/08/22 04:38:58 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\umpass.sys -- (UmPass) DRV:[b]64bit:[/b] - [2013/08/22 04:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2013/08/22 04:38:53 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\acpipmi.sys -- (AcpiPmi) DRV:[b]64bit:[/b] - [2013/08/22 04:38:52 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\rdpbus.sys -- (rdpbus) DRV:[b]64bit:[/b] - [2013/08/22 04:38:48 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\CompositeBus.sys -- (CompositeBus) DRV:[b]64bit:[/b] - [2013/08/22 04:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2013/08/22 04:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013/08/22 04:38:37 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2013/08/22 04:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\DRIVERS\kdnic.sys -- (kdnic) @kdnic.inf,%KdNic.Service.DispName%;Miniport réseau de débogage du noyau Microsoft (NDIS 6.20) DRV:[b]64bit:[/b] - [2013/08/22 04:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2013/08/22 04:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2013/08/22 04:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\BthHFHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2013/08/22 04:38:15 | 000,231,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\1394ohci.sys -- (1394ohci) DRV:[b]64bit:[/b] - [2013/08/22 04:37:50 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2013/08/22 04:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2013/08/22 04:37:36 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\MTConfig.sys -- (MTConfig) DRV:[b]64bit:[/b] - [2013/08/22 04:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013/08/22 04:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2013/08/22 04:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2013/08/22 04:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2013/08/22 01:46:35 | 000,098,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\amdppm.sys -- (AmdPPM) DRV:[b]64bit:[/b] - [2013/08/22 01:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2013/08/12 16:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2013/08/09 17:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\iaStorAV.sys -- (iaStorAV) @iastorav.inf,%iaStorAV.DeviceDesc%;Intel(R) DRV:[b]64bit:[/b] - [2013/07/30 11:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) @ialpssi_gpio.inf,%iaLPSSi_GPIO.SVCDESC%;Intel(R) DRV:[b]64bit:[/b] - [2013/07/25 12:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) @ialpssi_i2c.inf,%iaLPSSi_I2C.SVCDESC%;Intel(R) DRV:[b]64bit:[/b] - [2013/02/19 04:55:14 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\mferkdet.sys -- (mferkdet) DRV:[b]64bit:[/b] - [2012/11/22 05:56:02 | 000,062,776 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys -- (mwlPSDVDisk) DRV:[b]64bit:[/b] - [2012/11/22 05:56:02 | 000,022,648 | ---- | M] (Egis Technology Inc.) [File_System | System] -- C:\Windows\System32\drivers\mwlPSDFilter.sys -- (mwlPSDFilter) DRV:[b]64bit:[/b] - [2012/11/22 05:56:02 | 000,020,520 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys -- (mwlPSDNServ) DRV:[b]64bit:[/b] - [2012/09/22 16:17:24 | 000,021,160 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\amdkmafd.sys -- (amdkmafd) DRV:[b]64bit:[/b] - [2012/07/10 03:30:44 | 004,083,600 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RTKVHD64.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV:[b]64bit:[/b] - [2012/06/14 22:50:46 | 000,315,536 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\RtsUVStor.sys -- (RSUSBVSTOR) DRV:[b]64bit:[/b] - [2012/04/20 07:40:58 | 000,196,440 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\HipShieldK.sys -- (HipShieldK) DRV - [2014/10/28 19:00:24 | 000,014,336 | ---- | M] (Microsoft Corporation) [File_System | System] -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS) DRV - [2013/06/18 05:18:45 | 000,003,066 | ---- | M] () [Kernel | Boot] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>; IE - HKU\Jean-Claude_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\Jean-Claude_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\Jean-Claude_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = IE - HKU\Lolin_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com IE - HKU\Lolin_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com IE - HKU\Lolin_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = [2015/07/08 01:14:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2015/07/08 01:14:25 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} O1 HOSTS File: ([2013/08/22 06:25:41 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Logitech Download Assistant] C:\Windows\System32\LogiLDA.DLL (Logitech, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation) O4 - HKLM..\Run: [Raptr] C:\Program Files (x86)\Raptr\raptrstub.exe (Raptr, Inc) O4 - HKLM..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation) O4 - HKU\Jean-Claude_ON_C..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) O4 - HKU\Jean-Claude_ON_C..\Run: [Google Update] C:\Users\Jean-Claude\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.) O4 - HKU\Jean-Claude_ON_C..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKU\Jean-Claude_ON_C..\Run: [Spotify Web Helper] C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SafeModeBlockNonAdmins = 1 O7 - HKU\Jean-Claude_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Lolin_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecycleFiles = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogOff = 1 O13:[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15:[b]64bit:[/b] - Jean-Claude_ON_C\..Trusted Domains: ma-config.com ([]http in Trusted sites) O15:[b]64bit:[/b] - Jean-Claude_ON_C\..Trusted Domains: ma-config.com ([]https in Trusted sites) O15:[b]64bit:[/b] - Jean-Claude_ON_C\..Trusted Domains: touslesdrivers.com ([]http in Trusted sites) O15 - HKU\Jean-Claude_ON_C\..Trusted Domains: 3 domain(s) and sub-domain(s) not assigned to a zone. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\WINDOWS\System32\pku2u.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - C:\WINDOWS\System32\livessp.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\WINDOWS\SysWow64\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013/05/30 13:25:00 | 000,000,182 | R--- | M] () - Y:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{9c62cdc0-8cbf-11e2-be68-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{9c62cdc0-8cbf-11e2-be68-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - exefile [open] -- "%1" %* File not found O35 - comfile [open] -- Reg Error: Key error. O35 - exefile [open] -- Reg Error: Key error. NetSvcs:[b]64bit:[/b] BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\System32\wlidsvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\System32\DeviceSetupManager.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\System32\NcaSvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Ias - C:\Windows\System32\ias [2013/08/22 08:36:41 | 000,000,000 | ---D | M] NetSvcs:[b]64bit:[/b] Irmon - C:\Windows\System32\irmon.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation) NetSvcs: Ias - C:\Windows\SysWOW64\ias.dll (Microsoft Corporation) NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - Service SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\WINDOWS\System32\drivers\BasicDisplay.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\WINDOWS\System32\drivers\BasicRender.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\System32\bisrv.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] FsDepends.sys - C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\System32\lsm.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Power - C:\Windows\System32\umpo.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] sermouse.sys - Driver SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] SystemEventsBroker - C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] TBS - Service SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] WudfPf - C:\Windows\System32\drivers\WUDFPf.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: System Bus Extender - Driver Group SafeBootMin: TBS - Service SafeBootMin: VDS - C:\Windows\SysWOW64\wbem\vds.mof () SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - Service SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\WINDOWS\System32\drivers\BasicDisplay.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\WINDOWS\System32\drivers\BasicRender.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\System32\bisrv.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Dhcp - C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] FsDepends.sys - C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\System32\lsm.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] ndiscap - C:\WINDOWS\system32\DRIVERS\ndiscap.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\System32\netprofmsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Power - C:\Windows\System32\umpo.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] sermouse.sys - Driver SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] SystemEventsBroker - C:\Windows\System32\SystemEventsBrokerServer.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] TBS - Service SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\System32\wcmsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfPf - C:\Windows\System32\drivers\WUDFPf.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: Dhcp - C:\Windows\SysWOW64\dhcpcore.dll (Microsoft Corporation) SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOS - C:\Windows\SysWOW64\netbios.dll (Microsoft Corporation) SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdpencdd.sys - Driver SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: SmartcardSimulator - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TBS - Service SafeBootNet: Tcpip - C:\Windows\SysWOW64\wbem\tcpip.mof () SafeBootNet: TDI - Driver Group SafeBootNet: VDS - C:\Windows\SysWOW64\wbem\vds.mof () SafeBootNet: VirtualSmartcardReader - Driver SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:[b]64bit:[/b] {78E345F7-E976-3595-9C30-2458D6A8EC32} - .NET Framework ActiveX:[b]64bit:[/b] {7D715857-A67C-4C2F-A929-038448584D63} - C:\WINDOWS\System32\ie4uinit.exe -DisableSSL3 ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - U ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {78E345F7-E976-3595-9C30-2458D6A8EC32} - .NET Framework ActiveX: {7D715857-A67C-4C2F-A929-038448584D63} - C:\WINDOWS\System32\ie4uinit.exe -DisableSSL3 ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - U ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP Drivers32:[b]64bit:[/b] aux - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] aux1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midi - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midi1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midimapper - C:\WINDOWS\System32\midimap.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] mixer - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] mixer1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.imaadpcm - C:\WINDOWS\System32\imaadp32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32:[b]64bit:[/b] msacm.msadpcm - C:\WINDOWS\System32\msadp32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.msg711 - C:\WINDOWS\System32\msg711.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.msgsm610 - C:\WINDOWS\System32\msgsm32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.i420 - C:\WINDOWS\System32\iyuv_32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.iyuv - C:\WINDOWS\System32\iyuv_32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.mrle - C:\WINDOWS\System32\msrle32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.msvc - C:\WINDOWS\System32\msvidc32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.uyvy - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.yuy2 - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.yvu9 - C:\WINDOWS\System32\tsbyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.yvyu - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] wave - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] wave1 - wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] wavemapper - msacm32.drv (Microsoft Corporation) Drivers32: aux - wdmaud.drv (Microsoft Corporation) Drivers32: aux1 - wdmaud.drv (Microsoft Corporation) Drivers32: midi - wdmaud.drv (Microsoft Corporation) Drivers32: midi1 - wdmaud.drv (Microsoft Corporation) Drivers32: mixer - wdmaud.drv (Microsoft Corporation) Drivers32: mixer1 - wdmaud.drv (Microsoft Corporation) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: wave - wdmaud.drv (Microsoft Corporation) Drivers32: wave1 - wdmaud.drv (Microsoft Corporation) Drivers32: wavemapper - msacm32.drv (Microsoft Corporation) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2015/08/07 12:56:19 | 000,232,728 | ---- | C] (Comfort Software Group) -- X:\Users\Default\Desktop\FreeVK(1).exe [2015/08/07 12:56:13 | 001,673,216 | ---- | C] (Farbar) -- X:\Users\Default\Desktop\FRST.exe [2015/08/01 17:22:10 | 000,000,000 | ---D | C] -- C:\FRST [2015/07/28 00:33:44 | 001,084,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\appraiser.dll [2015/07/25 19:53:13 | 000,029,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aspnet_counters.dll [2015/07/25 19:53:08 | 000,028,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aspnet_counters.dll [2015/07/20 10:51:32 | 000,358,912 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\atmfd.dll [2015/07/20 10:51:32 | 000,301,056 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll [2015/07/20 10:51:32 | 000,044,032 | ---- | C] (Adobe Systems) -- C:\WINDOWS\System32\atmlib.dll [2015/07/20 10:51:32 | 000,035,840 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll [2015/07/18 04:44:47 | 002,885,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iertutil.dll [2015/07/18 04:41:39 | 002,880,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\actxprxy.dll [2015/07/18 04:41:38 | 002,427,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wininet.dll [2015/07/18 04:41:36 | 001,951,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wininet.dll [2015/07/18 04:41:32 | 001,048,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\actxprxy.dll [2015/07/18 04:41:32 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vbscript.dll [2015/07/18 04:41:31 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieapfltr.dll [2015/07/18 04:41:31 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vbscript.dll [2015/07/18 04:41:30 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieui.dll [2015/07/18 04:41:30 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MshtmlDac.dll [2015/07/18 04:41:29 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl [2015/07/18 04:41:29 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll [2015/07/18 04:41:29 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MshtmlDac.dll [2015/07/18 04:41:28 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieui.dll [2015/07/18 04:41:27 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msfeeds.dll [2015/07/18 04:41:26 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxtrans.dll [2015/07/18 04:41:26 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msrating.dll [2015/07/18 04:41:26 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdc.ocx [2015/07/18 04:41:25 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl [2015/07/18 04:41:25 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll [2015/07/18 04:41:23 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msrating.dll [2015/07/18 04:41:22 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtmled.dll [2015/07/18 04:41:19 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tdc.ocx [2015/07/18 04:41:18 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll [2015/07/18 04:41:17 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxtrans.dll [2015/07/18 04:41:16 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iedkcs32.dll [2015/07/18 04:41:16 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll [2015/07/18 04:41:15 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript.dll [2015/07/18 04:41:15 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2015/07/18 04:41:15 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll [2015/07/18 04:24:59 | 005,923,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll [2015/07/18 04:24:36 | 004,520,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9.dll [2015/07/17 04:06:50 | 001,145,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aeinv.dll [2015/07/17 04:06:50 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\generaltel.dll [2015/07/17 04:06:49 | 000,764,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\invagent.dll [2015/07/17 04:06:49 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devinv.dll [2015/07/17 04:06:49 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acmigration.dll [2015/07/17 04:06:49 | 000,026,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\CompatTelRunner.exe [2015/07/17 04:06:48 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aepdu.dll [2015/07/16 09:46:38 | 000,792,568 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2015/07/16 09:46:38 | 000,178,168 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [2015/07/16 09:34:08 | 000,891,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2015/07/16 09:34:08 | 000,721,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll [2015/07/16 09:34:08 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapp.exe [2015/07/16 09:34:08 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll [2015/07/16 09:34:07 | 002,229,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltux.dll [2015/07/16 09:34:07 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSetupUI.dll [2015/07/16 09:34:07 | 000,136,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe [2015/07/16 09:34:07 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll [2015/07/16 09:34:06 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUSettingsProvider.dll [2015/07/16 09:34:06 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuwebv.dll [2015/07/16 09:34:06 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll [2015/07/16 09:34:06 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wudriver.dll [2015/07/16 09:34:06 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe [2015/07/16 09:34:05 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll [2015/07/16 09:34:05 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll [2015/07/16 09:33:04 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WiFiDisplay.dll [2015/07/16 09:33:02 | 001,311,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rpcrt4.dll [2015/07/16 09:33:00 | 001,441,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lsasrv.dll [2015/07/16 09:33:00 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\certcli.dll [2015/07/16 09:33:00 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\certcli.dll [2015/07/16 09:33:00 | 000,178,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ksecpkg.sys [2015/07/16 09:32:50 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\AudioEndpointBuilder.dll [2015/07/16 09:32:50 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\werdiagcontroller.dll [2015/07/16 09:32:46 | 003,320,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msi.dll [2015/07/16 09:32:46 | 002,774,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authui.dll [2015/07/16 09:32:46 | 002,460,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll [2015/07/16 09:32:45 | 003,607,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msi.dll [2015/07/16 09:32:42 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\GeofenceMonitorService.dll [2015/07/16 09:32:42 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GeofenceMonitorService.dll [2015/07/16 09:32:38 | 003,109,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ExplorerFrame.dll [2015/07/16 09:32:38 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll [2015/07/16 09:32:23 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys [2015/07/16 09:30:53 | 000,971,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSShared.dll [2015/07/16 09:30:52 | 000,811,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll [2015/07/16 09:30:52 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.ApplicationModel.Store.TestingFramework.dll [2015/07/16 09:30:51 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2015/07/15 06:50:55 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fhcpl.dll [2015/07/15 06:50:50 | 001,380,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdi32.dll [2015/07/15 06:50:42 | 001,661,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ole32.dll [2015/07/15 06:50:40 | 003,084,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msftedit.dll [2015/07/15 06:50:39 | 002,471,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll [2015/07/15 06:50:14 | 000,564,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\apphelp.dll [2015/07/15 06:49:58 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemEventsBrokerServer.dll [2015/07/15 06:49:57 | 007,784,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Data.Pdf.dll [2015/07/15 06:49:54 | 005,264,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll [2015/07/14 11:04:49 | 018,524,336 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerInstaller.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2015/08/07 12:58:28 | 000,000,153 | ---- | M] () -- X:\Users\Default\Desktop\FreeVK.ini [2015/08/07 12:53:26 | 000,001,681 | ---- | M] () -- X:\Users\Default\Desktop\Explorer++.lnk [2015/08/07 12:53:26 | 000,001,663 | ---- | M] () -- X:\Users\Default\Desktop\PENetwork.lnk [2015/08/07 12:53:26 | 000,001,605 | ---- | M] () -- X:\Users\Default\Desktop\WinDlg.lnk [2015/08/07 12:53:26 | 000,001,560 | ---- | M] () -- X:\Users\Default\Desktop\Command Prompt.lnk [2015/08/07 12:53:26 | 000,000,625 | ---- | M] () -- X:\Users\Default\Desktop\Opera12.lnk [2015/08/07 12:53:25 | 000,001,879 | ---- | M] () -- X:\Users\Default\Desktop\Malwarebytes' Anti-Malware (Scan - pas de maj).lnk [2015/08/07 12:53:25 | 000,001,735 | ---- | M] () -- X:\Users\Default\Desktop\MyEventViewer.lnk [2015/08/07 12:53:25 | 000,001,717 | ---- | M] () -- X:\Users\Default\Desktop\FileASSASSIN.lnk [2015/08/07 12:53:25 | 000,001,717 | ---- | M] () -- X:\Users\Default\Desktop\CapperKiller.lnk [2015/08/07 12:53:25 | 000,001,681 | ---- | M] () -- X:\Users\Default\Desktop\HijackThis.lnk [2015/08/07 12:53:25 | 000,001,645 | ---- | M] () -- X:\Users\Default\Desktop\Unlocker.lnk [2015/08/07 12:53:25 | 000,000,891 | ---- | M] () -- X:\Users\Default\Desktop\OTLPE.lnk [2015/08/07 12:53:25 | 000,000,697 | ---- | M] () -- X:\Users\Default\Desktop\RogueKiller.lnk [2015/08/07 03:49:55 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2015/08/07 03:48:15 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2015/08/07 03:48:13 | 3187,650,560 | -HS- | M] () -- C:\hiberfil.sys [2015/08/02 13:14:54 | 000,232,728 | ---- | M] (Comfort Software Group) -- X:\Users\Default\Desktop\FreeVK(1).exe [2015/08/01 17:14:12 | 001,673,216 | ---- | M] (Farbar) -- X:\Users\Default\Desktop\FRST.exe [2015/07/31 11:14:31 | 000,001,108 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2015/07/31 11:05:42 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2015/07/31 11:03:00 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2015/07/29 10:21:00 | 000,000,322 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job [2015/07/29 09:14:00 | 000,001,104 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2015/07/25 06:34:01 | 001,084,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\appraiser.dll [2015/07/22 04:22:39 | 000,000,322 | ---- | M] () -- C:\WINDOWS\tasks\RMAutoUpdate.job [2015/07/20 14:18:38 | 000,484,144 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2015/07/20 14:15:43 | 000,112,002 | -H-- | M] () -- C:\Users\Jean-Claude\AppData\Local\IconCache.db [2015/07/17 10:01:17 | 000,001,448 | ---- | M] () -- C:\Users\Jean-Claude\Desktop\ROBLOX Player.lnk [2015/07/17 09:37:14 | 460,775,991 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP [2015/07/16 09:08:00 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3053974345-2293372465-1268832192-1001UA.job [2015/07/16 09:07:59 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3053974345-2293372465-1268832192-1001Core.job [2015/07/15 10:55:04 | 000,010,501 | ---- | M] () -- C:\Users\Jean-Claude\Documents\cheat code gta 5.docx 2.docx [2015/07/14 12:19:04 | 000,010,764 | ---- | M] () -- C:\Users\Jean-Claude\Documents\cheat code gta 5.docx [2015/07/14 11:05:05 | 018,524,336 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerInstaller.exe [2015/07/14 07:14:06 | 000,301,056 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll [2015/07/14 07:14:02 | 000,035,840 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll [2015/07/14 07:14:00 | 000,358,912 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\atmfd.dll [2015/07/14 07:13:55 | 000,044,032 | ---- | M] (Adobe Systems) -- C:\WINDOWS\System32\atmlib.dll [2015/07/13 14:10:13 | 000,792,568 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2015/07/13 14:10:13 | 000,178,168 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [2015/07/09 12:51:16 | 000,136,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe [2015/07/09 11:40:34 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\WinSetupUI.dll [2015/07/09 08:54:39 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapp.exe [2015/07/09 08:53:47 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuwebv.dll [2015/07/09 08:50:26 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\WUSettingsProvider.dll [2015/07/09 08:50:06 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wudriver.dll [2015/07/09 08:48:47 | 000,891,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2015/07/09 08:46:59 | 002,229,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltux.dll [2015/07/09 08:38:21 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe [2015/07/09 08:37:44 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll [2015/07/09 08:35:19 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll [2015/07/09 08:34:40 | 000,721,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015/08/07 12:58:25 | 000,000,153 | ---- | C] () -- X:\Users\Default\Desktop\FreeVK.ini [2015/08/07 12:53:26 | 000,001,681 | ---- | C] () -- X:\Users\Default\Desktop\Explorer++.lnk [2015/08/07 12:53:26 | 000,001,663 | ---- | C] () -- X:\Users\Default\Desktop\PENetwork.lnk [2015/08/07 12:53:26 | 000,001,605 | ---- | C] () -- X:\Users\Default\Desktop\WinDlg.lnk [2015/08/07 12:53:26 | 000,001,560 | ---- | C] () -- X:\Users\Default\Desktop\Command Prompt.lnk [2015/08/07 12:53:26 | 000,000,625 | ---- | C] () -- X:\Users\Default\Desktop\Opera12.lnk [2015/08/07 12:53:25 | 000,001,879 | ---- | C] () -- X:\Users\Default\Desktop\Malwarebytes' Anti-Malware (Scan - pas de maj).lnk [2015/08/07 12:53:25 | 000,001,735 | ---- | C] () -- X:\Users\Default\Desktop\MyEventViewer.lnk [2015/08/07 12:53:25 | 000,001,717 | ---- | C] () -- X:\Users\Default\Desktop\FileASSASSIN.lnk [2015/08/07 12:53:25 | 000,001,717 | ---- | C] () -- X:\Users\Default\Desktop\CapperKiller.lnk [2015/08/07 12:53:25 | 000,001,681 | ---- | C] () -- X:\Users\Default\Desktop\HijackThis.lnk [2015/08/07 12:53:25 | 000,001,645 | ---- | C] () -- X:\Users\Default\Desktop\Unlocker.lnk [2015/08/07 12:53:25 | 000,000,891 | ---- | C] () -- X:\Users\Default\Desktop\OTLPE.lnk [2015/08/07 12:53:25 | 000,000,697 | ---- | C] () -- X:\Users\Default\Desktop\RogueKiller.lnk [2015/07/17 10:01:17 | 000,001,448 | ---- | C] () -- C:\Users\Jean-Claude\Desktop\ROBLOX Player.lnk [2015/07/16 09:09:32 | 000,001,108 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2015/07/16 09:09:31 | 000,001,104 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2015/07/16 09:08:00 | 000,001,128 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3053974345-2293372465-1268832192-1001UA.job [2015/07/16 09:07:59 | 000,001,076 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3053974345-2293372465-1268832192-1001Core.job [2015/07/15 10:55:04 | 000,010,501 | ---- | C] () -- C:\Users\Jean-Claude\Documents\cheat code gta 5.docx 2.docx [2015/07/15 06:50:46 | 000,513,480 | ---- | C] () -- C:\WINDOWS\SysWow64\locale.nls [2015/07/15 06:50:46 | 000,513,480 | ---- | C] () -- C:\WINDOWS\System32\locale.nls [2015/07/15 06:49:59 | 000,410,739 | ---- | C] () -- C:\WINDOWS\System32\ApnDatabase.xml [2015/07/14 11:23:31 | 000,010,764 | ---- | C] () -- C:\Users\Jean-Claude\Documents\cheat code gta 5.docx [2015/03/11 15:13:25 | 000,107,008 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll [2015/03/11 15:10:56 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2014/11/20 19:25:30 | 000,123,392 | ---- | C] () -- C:\WINDOWS\SysWow64\amdhdl32.dll [2014/11/20 13:35:00 | 000,038,912 | ---- | C] () -- C:\WINDOWS\SysWow64\kdbsdk32.dll [2014/09/24 08:35:16 | 000,002,255 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2013/08/21 18:43:12 | 000,197,632 | ---- | C] () -- C:\WINDOWS\SysWow64\ir32_32original.dll [2013/08/21 16:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2011/09/28 08:44:14 | 000,179,271 | ---- | C] () -- C:\WINDOWS\SysWow64\xlive.dll.cat [color=#E56717]========== LOP Check ==========[/color] [2015/07/27 09:31:19 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\.minecraft [2015/01/17 11:18:37 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\AMD [2015/05/30 10:13:48 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\com.pinpinteam.pyrojumpdesktop [2015/02/27 07:25:07 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\java [2015/01/15 07:11:43 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\library_dir [2013/05/23 08:44:51 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\MusE [2015/07/27 07:13:43 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\Raptr [2015/02/05 07:39:44 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\Registry Mechanic [2015/04/28 11:15:10 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\Spotify [2013/06/19 03:26:31 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\Unity [2013/09/06 23:33:00 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\WildTangent [2015/02/05 07:40:40 | 000,000,000 | ---D | M] -- C:\Users\Jean-Claude\AppData\Roaming\ZHP [2015/04/24 08:35:36 | 000,000,000 | ---D | M] -- C:\Users\Lolin\AppData\Roaming\Raptr [2015/04/24 08:53:15 | 000,000,000 | ---D | M] -- C:\Users\Lolin\AppData\Roaming\Unity [2015/07/22 04:22:39 | 000,000,322 | ---- | M] () -- C:\Windows\Tasks\RMAutoUpdate.job [2015/07/29 10:21:00 | 000,000,322 | ---- | M] () -- C:\Windows\Tasks\RMSchedule.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] Invalid Environment Variable: %ALLUSERSPROFILE%\Application Data\*. Invalid Environment Variable: %ALLUSERSPROFILE%\Application Data\*.exe Invalid Environment Variable: %APPDATA%\*. Invalid Environment Variable: %APPDATA%\*.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2013/08/22 05:43:41 | 000,026,464 | ---- | M] (Microsoft Corporation) MD5=74B14192CF79A72F7536B27CB8814FBD -- C:\WINDOWS\SysWow64\drivers\atapi.sys [2013/08/22 05:43:41 | 000,026,464 | ---- | M] (Microsoft Corporation) MD5=74B14192CF79A72F7536B27CB8814FBD -- C:\WINDOWS\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_64aa4354da84c2df\atapi.sys [2013/08/22 05:43:41 | 000,026,464 | ---- | M] (Microsoft Corporation) MD5=74B14192CF79A72F7536B27CB8814FBD -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.3.9600.16384_none_cdf68824f580d510\atapi.sys [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2015/03/19 14:16:24 | 000,087,190 | ---- | M] () MD5=1BF154F7BFAE2B9E0545FB09946C1817 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17415_none_42bfa1f94d79e1bb\explorer.exe [2015/03/19 14:16:15 | 000,396,313 | ---- | M] () MD5=426AEABD8DD389A65A8EE92AB5936153 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17284_none_4272ee6f4db391ad\explorer.exe [2015/03/25 06:46:49 | 000,107,122 | ---- | M] () MD5=52063502D4A2E28FEBEA781D0EE5C453 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17415_none_4d144c4b81daa3b6\explorer.exe [2015/01/27 16:41:17 | 002,207,488 | ---- | M] (Microsoft Corporation) MD5=91E24273FCA076EA9E65DAFA98901225 -- C:\Windows\SysWOW64\explorer.exe [2015/01/27 16:41:17 | 002,207,488 | ---- | M] (Microsoft Corporation) MD5=91E24273FCA076EA9E65DAFA98901225 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17667_none_4ce0410f82015c67\explorer.exe [2014/11/20 15:13:34 | 000,219,647 | ---- | M] () MD5=B75E9C8434D53F8C187D352FA7F692D4 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17249_none_4cf7d9e381ef6297\explorer.exe [2015/01/27 16:47:12 | 002,501,368 | ---- | M] (Microsoft Corporation) MD5=C10A66189DC8C090E7C84873EDCEBC88 -- C:\Windows\explorer.exe [2015/01/27 16:47:12 | 002,501,368 | ---- | M] (Microsoft Corporation) MD5=C10A66189DC8C090E7C84873EDCEBC88 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17667_none_428b96bd4da09a6c\explorer.exe [2014/11/17 09:32:15 | 000,270,403 | ---- | M] () MD5=C20A0C44E241606430009E7F126A1125 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17249_none_42a32f914d8ea09c\explorer.exe [2015/03/25 06:46:33 | 000,338,943 | ---- | M] () MD5=E4FD740C3316F1D1C8322471553466C7 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.3.9600.17284_none_4cc798c1821453a8\explorer.exe [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color] [2015/03/20 12:12:14 | 000,099,046 | ---- | M] () MD5=6B5BDEEB170D0DA2C56753F0347809DD -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.17084_none_2fd708ffd09a6815\services.exe [2015/05/15 06:36:16 | 000,073,764 | ---- | M] () MD5=AB48952896280CE4CF1048334F6463DC -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.17415_none_3023c055d060b271\services.exe [2015/04/08 15:55:21 | 000,410,128 | ---- | M] (Microsoft Corporation) MD5=E0C7813A97CA7947FF5C18A8F3B61A45 -- C:\WINDOWS\SysWow64\services.exe [2015/04/08 15:55:21 | 000,410,128 | ---- | M] (Microsoft Corporation) MD5=E0C7813A97CA7947FF5C18A8F3B61A45 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_6.3.9600.17794_none_2fcc465dd0a27017\services.exe [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color] [2014/11/20 12:58:46 | 000,448,879 | ---- | M] () MD5=36778C2B390B4142867DCD12BBB71416 -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.3.9600.17136_none_a41467f93a330db6\tcpip.sys [2014/10/28 20:52:15 | 002,485,056 | ---- | M] (Microsoft Corporation) MD5=468273F7089A3A33D149955F0F203FA4 -- C:\WINDOWS\SysWow64\drivers\tcpip.sys [2014/10/28 20:52:15 | 002,485,056 | ---- | M] (Microsoft Corporation) MD5=468273F7089A3A33D149955F0F203FA4 -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.3.9600.17415_none_a4290d393a23b3f2\tcpip.sys [2014/11/20 12:59:12 | 000,447,132 | ---- | M] () MD5=B4928ED9B47948E7D4C22D3B0916FCC4 -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.3.9600.17238_none_a4166a733a313d8b\tcpip.sys [2015/03/20 14:54:39 | 000,409,864 | ---- | M] () MD5=D0C41590A1BCB4C0BD592D8AB976FE2F -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.3.9600.17336_none_a4146bc53a330804\tcpip.sys [2014/11/20 12:59:41 | 000,241,540 | ---- | M] () MD5=E7D9CAEE2A6C4007CB85632A13D4EEF3 -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.3.9600.17278_none_a3eb2ac33a51ad4f\tcpip.sys [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2015/03/20 14:57:52 | 000,002,671 | ---- | M] () MD5=061AC3BD7ADC5DCBA6AC0F23895266F8 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.16384_none_cce71a20a5a6fe7f\userinit.exe [2015/03/27 12:10:44 | 000,004,269 | ---- | M] () MD5=1AE98168631581DE1343C3A87A6CBCA9 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.16384_none_70c87e9ced498d49\userinit.exe [2014/10/28 18:28:08 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=5C131534A3EA4A461A793FB507A8004F -- C:\Windows\SysWOW64\userinit.exe [2014/10/28 18:28:08 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=5C131534A3EA4A461A793FB507A8004F -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.17415_none_cd33b4fca56d6b07\userinit.exe [2014/10/28 18:05:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=D10643FC0095434C819316CA6CD748C0 -- C:\Windows\SysWOW64\userinit.exe [2014/10/28 18:05:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=D10643FC0095434C819316CA6CD748C0 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.3.9600.17415_none_71151978ed0ff9d1\userinit.exe [color=#A23BEC]< MD5 for: WININIT.EXE >[/color] [2014/10/28 18:25:54 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=A570A64292214C43E0BA50E6A72A6380 -- C:\WINDOWS\SysWow64\wininit.exe [2014/10/28 18:25:54 | 000,145,920 | ---- | M] (Microsoft Corporation) MD5=A570A64292214C43E0BA50E6A72A6380 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.3.9600.17415_none_21fdb3b5d80e199e\wininit.exe [2015/03/21 07:19:34 | 000,026,215 | ---- | M] () MD5=DCF5C72FC1D8BE1165975F1339DC92DA -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.3.9600.16384_none_21b118d9d847ad16\wininit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2014/11/20 22:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe [2015/03/21 07:20:16 | 000,100,951 | ---- | M] () MD5=A176623494AF009927242266EF51DCFB -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.17031_none_60b45365a8c2ccdb\winlogon.exe [2014/10/28 18:22:52 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\WINDOWS\SysWow64\winlogon.exe [2014/10/28 18:22:52 | 000,572,416 | ---- | M] (Microsoft Corporation) MD5=EC498BAE1F0D3E0E401C963F8D76C437 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.3.9600.17415_none_60cdfbfda8aeeef1\winlogon.exe [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color] < End of report >