Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-04-2016 Ran by MjAbu (administrator) on DESKTOP-D0L9FDO (28-04-2016 17:06:43) Running from C:\Users\MjAbu\Desktop Loaded Profiles: MjAbu (Available Profiles: MjAbuZayed & MjAbu) Platform: Windows 10 Education (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Autodesk Inc.) C:\Users\MjAbu\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE16\CSISYNCCLIENT.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe () C:\Users\MjAbu\jagexcache\jagexlauncher\bin\JagexLauncher.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23248560 2016-04-08] (Dropbox, Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7390608 2016-04-26] (AVAST Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-04-26] (AVAST Software) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{749f9e42-601d-458c-a308-c36adac54ade}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation) Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation) FireFox: ======== FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-13] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-13] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-04-26] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR Profile: C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-27] CHR Extension: (Google Drive) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-27] CHR Extension: (YouTube) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-27] CHR Extension: (Google Sheets) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-27] CHR Extension: (Google Docs Offline) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-27] CHR Extension: (Avast Online Security) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-27] CHR Extension: (Chrome Web Store Payments) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-27] CHR Extension: (Gmail) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-27] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-04-26] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.) R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-04-26] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [370656 2016-04-26] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [5570272 2016-04-26] (Avast Software) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-26] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-26] (Dropbox, Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes) S4 mi-raysat_3dsmax2016_64; C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-04-26] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-04-26] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-04-26] (AVAST Software) R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [536312 2016-04-26] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-04-26] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-04-26] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-04-26] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-04-26] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-04-26] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-04-26] (AVAST Software) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-28] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [195336 2016-02-13] (Intel Corporation) R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [161760 2016-04-26] (AVAST Software) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [45720 2016-02-13] (Toshiba Corporation) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [323392 2016-04-26] (Avast Software) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) U0 Partizan; system32\drivers\Partizan.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-04-28 16:28 - 2016-04-28 16:28 - 00016148 _____ C:\Windows\system32\DESKTOP-D0L9FDO_MjAbu_HistoryPrediction.bin 2016-04-28 16:09 - 2016-04-28 16:42 - 00000024 _____ C:\Users\MjAbu\jagexappletviewer.preferences 2016-04-28 16:09 - 2016-04-28 16:40 - 00000044 _____ C:\Users\MjAbu\jagex_cl_runescape_LIVE.dat 2016-04-28 16:09 - 2016-04-28 16:40 - 00000024 _____ C:\Users\MjAbu\random.dat 2016-04-28 16:08 - 2016-04-28 16:09 - 00000000 ____D C:\Users\MjAbu\jagexcache 2016-04-28 16:08 - 2016-04-28 16:08 - 00002110 _____ C:\Users\MjAbu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk 2016-04-28 16:08 - 2016-04-28 16:08 - 00002080 _____ C:\Users\MjAbu\Desktop\RuneScape.lnk 2016-04-28 16:08 - 2016-04-28 16:08 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape 2016-04-28 16:06 - 2016-04-28 16:08 - 24223744 _____ C:\Users\MjAbu\Downloads\RuneScape.msi 2016-04-28 16:00 - 2016-04-28 16:00 - 00000000 ___HD C:\OneDriveTemp 2016-04-28 15:59 - 2016-04-28 15:59 - 00006680 _____ C:\Users\MjAbu\Desktop\Fixlog.txt 2016-04-28 09:54 - 2016-04-28 09:54 - 00038534 _____ C:\Users\MjAbu\Desktop\Addition.txt 2016-04-28 09:53 - 2016-04-28 17:06 - 00015092 _____ C:\Users\MjAbu\Desktop\FRST.txt 2016-04-28 09:52 - 2016-04-28 17:06 - 00000000 ____D C:\FRST 2016-04-28 09:51 - 2016-04-28 09:52 - 02376704 _____ (Farbar) C:\Users\MjAbu\Desktop\FRST64.exe 2016-04-27 20:14 - 2016-04-27 20:14 - 00000000 ____D C:\Users\MjAbu\AppData\LocalLow\Adobe 2016-04-27 19:05 - 2016-04-27 19:07 - 00000000 ____D C:\Users\MjAbu\OneDrive\Documents\RegRun2 2016-04-27 19:05 - 2016-04-27 19:06 - 00000000 ____D C:\ProgramData\RegRun 2016-04-27 19:05 - 2016-04-27 19:05 - 00000002 RSHOT C:\Windows\winstart.bat 2016-04-27 19:05 - 2016-04-27 19:05 - 00000002 RSHOT C:\Windows\SysWOW64\CONFIG.NT 2016-04-27 19:05 - 2016-04-27 19:05 - 00000002 RSHOT C:\Windows\SysWOW64\AUTOEXEC.NT 2016-04-27 19:04 - 2016-04-27 19:20 - 00000000 ____D C:\Program Files (x86)\UnHackMe 2016-04-27 19:04 - 2016-04-27 19:04 - 00000000 ____D C:\Users\MjAbu\Downloads\unhackme 2016-04-27 19:01 - 2016-04-27 19:03 - 17475297 _____ C:\Users\MjAbu\Downloads\unhackme.zip 2016-04-27 18:52 - 2016-04-27 18:52 - 00380928 _____ C:\Users\MjAbu\Downloads\9eke8pt4.exe 2016-04-27 18:51 - 2016-04-27 18:51 - 00589528 _____ (Microsoft Corporation) C:\Users\MjAbu\Downloads\mssstool64.exe 2016-04-27 18:38 - 2016-04-27 18:51 - 00503452 _____ C:\TDSSKiller.3.1.0.9_27.04.2016_18.38.11_log.txt 2016-04-27 18:36 - 2016-04-28 16:00 - 00038488 _____ C:\Windows\ntbtlog.txt 2016-04-27 18:34 - 2016-04-27 18:36 - 00258284 _____ C:\TDSSKiller.3.1.0.9_27.04.2016_18.34.15_log.txt 2016-04-27 18:33 - 2016-04-27 18:34 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\MjAbu\Downloads\tdsskiller.exe 2016-04-27 18:30 - 2016-04-27 18:30 - 00000000 ____D C:\Windows\pss 2016-04-27 18:19 - 2016-04-27 18:19 - 00231390 _____ C:\Users\MjAbu\Downloads\RootkitRevealer.zip 2016-04-27 18:19 - 2016-04-27 18:19 - 00000000 ____D C:\Users\MjAbu\Downloads\RootkitRevealer 2016-04-27 18:14 - 2016-04-27 18:14 - 00277707 _____ C:\Users\MjAbu\Downloads\rkhunter-1.4.2 (1).tar.gz 2016-04-27 18:13 - 2016-04-27 18:13 - 00277707 _____ C:\Users\MjAbu\Downloads\rkhunter-1.4.2.tar.gz 2016-04-27 18:13 - 2016-04-27 18:13 - 00000000 ____D C:\Users\MjAbu\Downloads\rkhunter-1.4.2 2016-04-27 18:13 - 2016-04-27 18:13 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\WinRAR 2016-04-27 17:15 - 2016-04-27 17:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\NetworkTiles 2016-04-27 16:00 - 2016-04-27 16:00 - 00086573 _____ C:\Users\MjAbu\Desktop\ZHPDiag1.txt 2016-04-27 15:59 - 2016-04-27 15:59 - 00086570 _____ C:\Users\MjAbu\Desktop\ZHPDiag.txt 2016-04-27 15:59 - 2016-04-27 15:59 - 00000000 ____D C:\Users\MjAbu\AppData\Local\MicrosoftEdge 2016-04-27 15:57 - 2016-04-28 16:00 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-04-27 15:57 - 2016-04-27 18:40 - 00001169 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-04-27 15:57 - 2016-04-27 18:39 - 00000865 _____ C:\Users\MjAbu\Desktop\ZHPDiag.lnk 2016-04-27 15:57 - 2016-04-27 16:47 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\ZHP 2016-04-27 15:57 - 2016-04-27 15:57 - 02195456 _____ C:\Users\MjAbu\Downloads\ZHPDiag3.exe 2016-04-27 15:57 - 2016-04-27 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-04-27 15:57 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-04-27 15:57 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-04-27 15:57 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-04-27 15:34 - 2016-04-27 15:34 - 00000000 ____D C:\Users\MjAbu\AppData\Local\PeerDistRepub 2016-04-27 15:27 - 2016-04-27 15:56 - 22851472 _____ (Malwarebytes ) C:\Users\MjAbu\Downloads\mbam-setup-2.2.1.1043.exe 2016-04-27 14:19 - 2016-04-28 16:00 - 00000000 ___RD C:\Users\MjAbu\OneDrive 2016-04-27 14:19 - 2016-04-27 18:41 - 00002365 _____ C:\Users\MjAbu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\AVAST Software 2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\Autodesk 2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Dropbox 2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Autodesk 2016-04-27 14:17 - 2016-04-27 18:39 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Comms 2016-04-27 14:15 - 2016-04-28 16:09 - 00000000 ____D C:\Users\MjAbu 2016-04-27 14:15 - 2016-04-27 20:14 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\Adobe 2016-04-27 14:15 - 2016-04-27 15:19 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Google 2016-04-27 14:15 - 2016-04-27 14:33 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Packages 2016-04-27 14:15 - 2016-04-27 14:15 - 00016148 _____ C:\Windows\system32\DESKTOP-D0L9FDO_MjAbuZayed_HistoryPrediction.bin 2016-04-27 14:15 - 2016-04-27 14:15 - 00000020 ___SH C:\Users\MjAbu\ntuser.ini 2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 _SHDL C:\Users\MjAbu\My Documents 2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\VirtualStore 2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\TileDataLayer 2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Publishers 2016-04-27 08:23 - 2016-04-27 08:27 - 33815395 _____ C:\Users\MjAbuZayed\Downloads\Codes.rar 2016-04-27 00:21 - 2016-04-27 00:21 - 00000000 ____D C:\Windows\SysWOW64\vbox 2016-04-27 00:21 - 2016-04-27 00:21 - 00000000 ____D C:\Windows\system32\vbox 2016-04-26 22:24 - 2016-04-27 18:40 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2016-04-26 22:24 - 2016-04-27 18:40 - 00001204 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk 2016-04-26 22:24 - 2016-04-26 22:24 - 00003178 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1461698645 2016-04-26 22:23 - 2016-04-26 22:23 - 00161760 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys 2016-04-26 22:23 - 2016-04-26 22:23 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2016-04-26 22:09 - 2016-04-27 18:40 - 00002011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premier.lnk 2016-04-26 22:09 - 2016-04-27 18:40 - 00002005 _____ C:\Users\Public\Desktop\Avast Premier.lnk 2016-04-26 22:09 - 2016-04-26 22:09 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\AVAST Software 2016-04-26 22:08 - 2016-04-26 22:09 - 00287528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00536312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00465792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2016-04-26 22:08 - 2016-04-26 22:08 - 00166432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr 2016-04-26 22:08 - 2016-04-26 22:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2016-04-26 22:08 - 2016-04-26 22:08 - 00004006 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2016-04-26 22:01 - 2016-04-26 22:23 - 00000000 ____D C:\ProgramData\AVAST Software 2016-04-26 22:01 - 2016-04-26 22:23 - 00000000 ____D C:\Program Files\AVAST Software 2016-04-26 22:00 - 2016-04-26 22:00 - 05139184 _____ (AVAST Software) C:\Users\MjAbuZayed\Downloads\avast_premier_antivirus_setup_online.exe 2016-04-26 22:00 - 2016-04-26 22:00 - 00027623 _____ C:\ProgramData\1461697240.bdinstall.bin 2016-04-26 21:59 - 2016-04-26 21:59 - 00236471 _____ C:\ProgramData\1461697099.bdinstall.bin 2016-04-26 21:51 - 2016-04-27 15:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-04-26 21:51 - 2016-04-26 21:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-04-26 21:48 - 2016-04-26 21:50 - 22851472 _____ (Malwarebytes ) C:\Users\MjAbuZayed\Downloads\mbam-setup-2.2.1.1043.exe 2016-04-26 21:37 - 2016-04-26 21:37 - 00041990 _____ C:\Users\MjAbuZayed\Downloads\dhcpfind.zip 2016-04-26 21:37 - 2016-04-26 21:37 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\dhcpfind 2016-04-26 21:17 - 2016-04-26 21:17 - 05509632 _____ (Microsoft Corporation) C:\Windows\system32\gppref.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 05096960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gppref.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 03399680 _____ (Microsoft Corporation) C:\Windows\system32\propshts.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 02602496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propshts.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\gpprefbr.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefbr.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\gpregistrybrowser.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpregistrybrowser.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcn.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcn.dll 2016-04-26 21:17 - 2016-04-26 21:17 - 00001315 _____ C:\Windows\DfsrAdmin.exe.config 2016-04-26 21:17 - 2016-04-26 21:17 - 00001311 _____ C:\Windows\SysWOW64\DfsMgmt.dll.config 2016-04-26 21:17 - 2016-04-26 21:17 - 00001311 _____ C:\Windows\system32\DfsMgmt.dll.config 2016-04-26 21:17 - 2016-04-26 21:17 - 00000764 _____ C:\Windows\system32\dsac.exe.config 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\SysWOW64\ipam 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\ServerManagerInternal 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\ipam 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\HardenedFabric 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\BestPractices 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\Cluster 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\ADFS 2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Program Files\Update Services 2016-04-26 21:15 - 2016-04-26 21:15 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\MjAbuZayed\Downloads\WinPcap_4_1_3.exe 2016-04-26 21:15 - 2016-04-26 21:15 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\Wireshark 2016-04-26 21:06 - 2015-10-29 07:13 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\LbfoAdminLib.dll 2016-04-26 21:06 - 2015-10-29 07:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\VLHelper.dll 2016-04-26 21:06 - 2015-10-29 06:00 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpfixup.exe 2016-04-26 21:06 - 2015-10-29 06:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\redirusr.exe 2016-04-26 21:06 - 2015-10-29 06:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\redircmp.exe 2016-04-26 21:06 - 2015-10-29 06:00 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nfsclusrc.dll 2016-04-26 21:06 - 2015-10-29 05:59 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rendom.exe 2016-04-26 21:06 - 2015-10-29 05:58 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsacls.exe 2016-04-26 21:06 - 2015-10-29 05:56 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SVMProvisioning.dll 2016-04-26 21:06 - 2015-10-29 05:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\rrasprxy.dll 2016-04-26 21:06 - 2015-10-29 05:55 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\SusNativeCommon.dll 2016-04-26 21:06 - 2015-10-29 05:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\gpfixup.exe 2016-04-26 21:06 - 2015-10-29 05:54 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\redircmp.exe 2016-04-26 21:06 - 2015-10-29 05:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\BdeAducExt.dll 2016-04-26 21:06 - 2015-10-29 05:53 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\redirusr.exe 2016-04-26 21:06 - 2015-10-29 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\nfsclusrc.dll 2016-04-26 21:06 - 2015-10-29 05:52 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\rendom.exe 2016-04-26 21:06 - 2015-10-29 05:52 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\rtrfiltr.dll 2016-04-26 21:06 - 2015-10-29 05:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\dsacls.exe 2016-04-26 21:06 - 2015-10-29 05:51 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\dsuiwiz.dll 2016-04-26 21:06 - 2015-10-29 05:51 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\domadmin.dll 2016-04-26 21:06 - 2015-10-29 05:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\LicMgr.exe 2016-04-26 21:06 - 2015-10-29 05:48 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\schmmgmt.dll 2016-04-26 21:06 - 2015-10-29 05:26 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\certpdef.dll 2016-04-26 21:06 - 2015-10-29 05:25 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\TlsBrand.dll 2016-04-26 21:06 - 2015-04-20 18:21 - 00151743 _____ C:\Windows\system32\FailoverClusters.SnapInHelper.msc 2016-04-26 21:06 - 2015-04-20 18:18 - 00146019 _____ C:\Windows\system32\gptedit.msc 2016-04-26 21:06 - 2015-04-20 18:17 - 00034000 _____ C:\Windows\system32\rrasmgmt.msc 2016-04-26 21:06 - 2015-04-20 18:12 - 00115237 _____ C:\Windows\system32\lsdiag.msc 2016-04-26 21:06 - 2015-04-04 01:29 - 00146019 _____ C:\Windows\SysWOW64\gptedit.msc 2016-04-26 21:05 - 2016-04-27 18:40 - 00001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Server Manager.lnk 2016-04-26 21:05 - 2015-10-29 07:26 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Interop.DfsrHelper.dll 2016-04-26 21:05 - 2015-10-29 07:24 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmlib.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 09647104 _____ (Microsoft Corporation) C:\Windows\system32\damgmt.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 05720576 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.Plugins.Ipam.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 04208128 _____ (Microsoft Corporation) C:\Windows\system32\dsac.exe 2016-04-26 21:05 - 2015-10-29 07:13 - 02302976 _____ (Microsoft Corporation) C:\Windows\system32\ipamapi.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.IdentityServer.ApplicationProxy.Management.ViewModel.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\ClusterUpdateUI.exe 2016-04-26 21:05 - 2015-10-29 07:13 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.NPASRole.Plugin.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.DeploymentServices.ServerManager.Plugin.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\lsdiag.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00236544 _____ (Microsoft Corporation) C:\Windows\DfsrAdmin.exe 2016-04-26 21:05 - 2015-10-29 07:13 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.DhcpServer.Plugin.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\HgsClientWmi.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\LbfoAdmin.exe 2016-04-26 21:05 - 2015-10-29 07:13 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\mtedit.exe 2016-04-26 21:05 - 2015-10-29 07:13 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.IdentityServer.ApplicationProxy.Management.Utils.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.IdentityServer.ApplicationProxy.Management.Common.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.NetworkController.Plugin.dll 2016-04-26 21:05 - 2015-10-29 07:13 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\Interop.DfsrHelper.dll 2016-04-26 21:05 - 2015-10-29 07:12 - 00458240 _____ (Microsoft Corporation) C:\Windows\system32\Vmw.exe 2016-04-26 21:05 - 2015-10-29 07:12 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\ServerManager.exe 2016-04-26 21:05 - 2015-10-29 07:12 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\ShieldingDataFileWizard.exe 2016-04-26 21:05 - 2015-10-29 07:12 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\ServerTelemetryConfig.exe 2016-04-26 21:05 - 2015-10-29 07:12 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\TemplateDiskWizard.exe 2016-04-26 21:05 - 2015-10-29 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\CSDeployRes.dll 2016-04-26 21:05 - 2015-10-29 07:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srmlib.dll 2016-04-26 21:05 - 2015-10-29 06:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DfsRes.dll 2016-04-26 21:05 - 2015-10-29 06:04 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srm_ps.dll 2016-04-26 21:05 - 2015-10-29 06:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmtrace.dll 2016-04-26 21:05 - 2015-10-29 06:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FcSrv_ps.dll 2016-04-26 21:05 - 2015-10-29 06:00 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srm.dll 2016-04-26 21:05 - 2015-10-29 06:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdom.exe 2016-04-26 21:05 - 2015-10-29 06:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfsfrsHost.exe 2016-04-26 21:05 - 2015-10-29 05:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ldifde.exe 2016-04-26 21:05 - 2015-10-29 05:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\csvde.exe 2016-04-26 21:05 - 2015-10-29 05:57 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmstormod.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmshell.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adrclient.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\DfsRes.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\srm_ps.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\HgsClientInterop.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lstelemetry.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\srvtelres.dll 2016-04-26 21:05 - 2015-10-29 05:57 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\fssmres.dll 2016-04-26 21:05 - 2015-10-29 05:56 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\damgmtres.dll 2016-04-26 21:05 - 2015-10-29 05:56 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\ipamres.dll 2016-04-26 21:05 - 2015-10-29 05:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\WSEDeployRes.dll 2016-04-26 21:05 - 2015-10-29 05:56 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\FSDeployRes.dll 2016-04-26 21:05 - 2015-10-29 05:56 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\DsDeployRes.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00181760 _____ C:\Windows\system32\PtpTemplateNative.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\srmtrace.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dsacn.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\EssentialsConfigPluginNative.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\FcSrv_ps.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\HostGuardianServiceClientResources.dll 2016-04-26 21:05 - 2015-10-29 05:55 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\BPAInst.dll 2016-04-26 21:05 - 2015-10-29 05:54 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\srm.dll 2016-04-26 21:05 - 2015-10-29 05:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\svrmgrnc.dll 2016-04-26 21:05 - 2015-10-29 05:54 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\SrvMgrInst.dll 2016-04-26 21:05 - 2015-10-29 05:54 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\MuxInst.dll 2016-04-26 21:05 - 2015-10-29 05:54 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\dfscmd.exe 2016-04-26 21:05 - 2015-10-29 05:54 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\FssmInst.dll 2016-04-26 21:05 - 2015-10-29 05:53 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmscan.dll 2016-04-26 21:05 - 2015-10-29 05:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\netdom.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\ldifde.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\dsmod.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wlbs.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\nlb.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\csvde.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\dsrm.exe 2016-04-26 21:05 - 2015-10-29 05:53 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\dfsfrsHost.exe 2016-04-26 21:05 - 2015-10-29 05:52 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\vmclusex.dll 2016-04-26 21:05 - 2015-10-29 05:52 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ippromon.dll 2016-04-26 21:05 - 2015-10-29 05:52 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\dsadd.exe 2016-04-26 21:05 - 2015-10-29 05:52 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\dsmove.exe 2016-04-26 21:05 - 2015-10-29 05:51 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\srmstormod.dll 2016-04-26 21:05 - 2015-10-29 05:51 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\srmshell.dll 2016-04-26 21:05 - 2015-10-29 05:51 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\adrclient.dll 2016-04-26 21:05 - 2015-10-29 05:51 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\dsget.exe 2016-04-26 21:05 - 2015-10-29 05:51 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\dsquery.exe 2016-04-26 21:05 - 2015-10-29 05:50 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\lrwizdll.dll 2016-04-26 21:05 - 2015-10-29 05:50 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\filescrn.exe 2016-04-26 21:05 - 2015-10-29 05:50 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\storrept.exe 2016-04-26 21:05 - 2015-10-29 05:49 - 00957440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll 2016-04-26 21:05 - 2015-10-29 05:49 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ipmontr.dll 2016-04-26 21:05 - 2015-10-29 05:49 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdminCommon.dll 2016-04-26 21:05 - 2015-10-29 05:49 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPrepSrv.dll 2016-04-26 21:05 - 2015-10-29 05:48 - 00580608 _____ (Microsoft Corporation) C:\Windows\system32\certtmpl.dll 2016-04-26 21:05 - 2015-10-29 05:48 - 00475648 _____ (Microsoft Corporation) C:\Windows\system32\nlbmgr.exe 2016-04-26 21:05 - 2015-10-29 05:48 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\dirquota.exe 2016-04-26 21:05 - 2015-10-29 05:47 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll 2016-04-26 21:05 - 2015-10-29 05:46 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\ipsnap.dll 2016-04-26 21:05 - 2015-10-29 05:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdminCommon.dll 2016-04-26 21:05 - 2015-10-29 05:43 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\CPrepSrv.dll 2016-04-26 21:05 - 2015-10-29 05:42 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll 2016-04-26 21:05 - 2015-10-29 05:30 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\mprsnap.dll 2016-04-26 21:05 - 2015-10-29 05:27 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\ocsprevp.dll 2016-04-26 21:05 - 2015-10-29 05:26 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\pkiview.dll 2016-04-26 21:05 - 2015-10-29 05:26 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\certadm.dll 2016-04-26 21:05 - 2015-10-29 05:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\OCSPAdminNative.dll 2016-04-26 21:05 - 2015-10-29 05:26 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\capesnpn.dll 2016-04-26 21:05 - 2015-10-29 05:26 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\certxds.dll 2016-04-26 21:05 - 2015-10-29 05:25 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll 2016-04-26 21:05 - 2015-10-29 05:25 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\lsdiagres.dll 2016-04-26 21:05 - 2015-10-29 05:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\AagMmcRes.dll 2016-04-26 21:05 - 2015-10-29 05:25 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\RdmsInst.dll 2016-04-26 21:05 - 2015-10-29 05:25 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\rdmsres.dll 2016-04-26 21:05 - 2015-10-29 05:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\tsPubIconHelper.dll 2016-04-26 21:05 - 2015-04-20 18:31 - 00268640 _____ C:\Windows\system32\dfsrHealthReport.xsl 2016-04-26 21:05 - 2015-04-20 18:31 - 00155741 _____ C:\Windows\system32\dfsrPropagationReport.xsl 2016-04-26 21:05 - 2015-04-20 18:31 - 00055953 _____ C:\Windows\system32\dfsmgmt.msc 2016-04-26 21:05 - 2015-04-20 18:30 - 00145293 _____ C:\Windows\system32\certtmpl.msc 2016-04-26 21:05 - 2015-04-20 18:30 - 00144354 _____ C:\Windows\system32\pkiview.msc 2016-04-26 21:05 - 2015-04-20 18:30 - 00108461 _____ C:\Windows\system32\fsrm.msc 2016-04-26 21:05 - 2015-04-20 18:30 - 00092853 _____ C:\Windows\system32\certsrv.msc 2016-04-26 21:05 - 2015-04-20 18:30 - 00092554 _____ C:\Windows\system32\ocsp.msc 2016-04-26 21:05 - 2015-04-20 18:21 - 00150924 _____ C:\Windows\system32\CluAdmin.msc 2016-04-26 21:05 - 2015-04-20 18:18 - 00146712 _____ C:\Windows\system32\gpme.msc 2016-04-26 21:05 - 2015-04-20 18:18 - 00146446 _____ C:\Windows\system32\gpmc.msc 2016-04-26 21:05 - 2015-04-20 18:18 - 00003034 _____ C:\Windows\system32\DefaultParameters.xml 2016-04-26 21:05 - 2015-04-20 18:18 - 00001151 _____ C:\Windows\system32\ClusterUpdateUI.exe.config 2016-04-26 21:05 - 2015-04-20 18:17 - 00146654 _____ C:\Windows\system32\dhcpmgmt.msc 2016-04-26 21:05 - 2015-04-20 18:16 - 00145867 _____ C:\Windows\system32\dnsmgmt.msc 2016-04-26 21:05 - 2015-04-20 18:16 - 00145017 _____ C:\Windows\system32\dsa.msc 2016-04-26 21:05 - 2015-04-20 18:16 - 00144951 _____ C:\Windows\system32\domain.msc 2016-04-26 21:05 - 2015-04-20 18:14 - 00054530 _____ C:\Windows\system32\LServer_PKConfig.xml 2016-04-26 21:05 - 2015-04-20 18:12 - 00115860 _____ C:\Windows\system32\tsgateway.msc 2016-04-26 21:05 - 2015-04-04 01:38 - 00268640 _____ C:\Windows\SysWOW64\dfsrHealthReport.xsl 2016-04-26 21:05 - 2015-04-04 01:38 - 00155741 _____ C:\Windows\SysWOW64\dfsrPropagationReport.xsl 2016-04-26 21:05 - 2015-04-04 01:38 - 00055953 _____ C:\Windows\SysWOW64\dfsmgmt.msc 2016-04-26 21:05 - 2015-04-04 01:29 - 00146712 _____ C:\Windows\SysWOW64\gpme.msc 2016-04-26 21:05 - 2015-04-04 01:29 - 00146446 _____ C:\Windows\SysWOW64\gpmc.msc 2016-04-26 21:04 - 2016-04-26 21:09 - 47590392 _____ (Wireshark development team) C:\Users\MjAbuZayed\Downloads\Wireshark-win64-2.0.3.exe 2016-04-26 21:04 - 2015-10-29 07:12 - 08694784 _____ (Microsoft Corporation) C:\Windows\system32\RAMgmtUI.exe 2016-04-26 21:04 - 2015-10-29 05:57 - 00248320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpmon.dll 2016-04-26 21:04 - 2015-10-29 05:57 - 00177152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsmgmt.exe 2016-04-26 21:04 - 2015-10-29 05:56 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ldp.exe 2016-04-26 21:04 - 2015-10-29 05:55 - 00734208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpme.dll 2016-04-26 21:04 - 2015-10-29 05:55 - 00263680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\repadmin.exe 2016-04-26 21:04 - 2015-10-29 05:55 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsdbutil.exe 2016-04-26 21:04 - 2015-10-29 05:54 - 00475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPRSoP.dll 2016-04-26 21:04 - 2015-10-29 05:54 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcdiag.exe 2016-04-26 21:04 - 2015-10-29 05:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdsutil.exe 2016-04-26 21:04 - 2015-10-29 05:51 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DfsrHelper.dll 2016-04-26 21:04 - 2015-10-29 05:51 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\dhcpmon.dll 2016-04-26 21:04 - 2015-10-29 05:51 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\dsmgmt.exe 2016-04-26 21:04 - 2015-10-29 05:51 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\dfsutil.exe 2016-04-26 21:04 - 2015-10-29 05:51 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\dfsncimprov.dll 2016-04-26 21:04 - 2015-10-29 05:50 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\dnscmd.exe 2016-04-26 21:04 - 2015-10-29 05:50 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\ldp.exe 2016-04-26 21:04 - 2015-10-29 05:49 - 01721344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpmgmt.dll 2016-04-26 21:04 - 2015-10-29 05:49 - 00963584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdminCustom.dll 2016-04-26 21:04 - 2015-10-29 05:49 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\repadmin.exe 2016-04-26 21:04 - 2015-10-29 05:49 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\dsdbutil.exe 2016-04-26 21:04 - 2015-10-29 05:49 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\DfsDiag.exe 2016-04-26 21:04 - 2015-10-29 05:48 - 01483776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdmin.dll 2016-04-26 21:04 - 2015-10-29 05:48 - 00785408 _____ (Microsoft Corporation) C:\Windows\system32\adsiedit.dll 2016-04-26 21:04 - 2015-10-29 05:48 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\gpme.dll 2016-04-26 21:04 - 2015-10-29 05:48 - 00612864 _____ (Microsoft Corporation) C:\Windows\system32\dcdiag.exe 2016-04-26 21:04 - 2015-10-29 05:48 - 00501760 _____ (Microsoft Corporation) C:\Windows\system32\GPRSoP.dll 2016-04-26 21:04 - 2015-10-29 05:48 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\ntdsutil.exe 2016-04-26 21:04 - 2015-10-29 05:45 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\dsadmin.dll 2016-04-26 21:04 - 2015-10-29 05:45 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\DfsrHelper.dll 2016-04-26 21:04 - 2015-10-29 05:44 - 01749504 _____ (Microsoft Corporation) C:\Windows\system32\dnsmgr.dll 2016-04-26 21:04 - 2015-10-29 05:44 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\adprop.dll 2016-04-26 21:04 - 2015-10-29 05:43 - 02031616 _____ (Microsoft Corporation) C:\Windows\system32\gpmgmt.dll 2016-04-26 21:04 - 2015-10-29 05:43 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdminCustom.dll 2016-04-26 21:04 - 2015-10-29 05:43 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2016-04-26 21:04 - 2015-10-29 05:42 - 01902592 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdmin.dll 2016-04-26 21:04 - 2015-10-29 05:42 - 01669632 _____ (Microsoft Corporation) C:\Windows\system32\dcpromoui.dll 2016-04-26 21:04 - 2015-10-29 05:42 - 01034752 _____ (Microsoft Corporation) C:\Windows\system32\wvrcimprov.dll 2016-04-26 21:04 - 2015-10-29 05:42 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2016-04-26 21:04 - 2015-10-29 05:41 - 04017152 _____ (Microsoft Corporation) C:\Windows\system32\dhcpsnap.dll 2016-04-26 21:04 - 2015-10-29 05:35 - 02436608 _____ (Microsoft Corporation) C:\Windows\system32\dfsrdiag.exe 2016-04-26 21:04 - 2015-10-29 05:33 - 01332224 _____ (Microsoft Corporation) C:\Windows\system32\dcpromocmd.dll 2016-04-26 21:04 - 2015-10-29 05:27 - 01172992 _____ (Microsoft Corporation) C:\Windows\system32\certmmc.dll 2016-04-26 20:46 - 2016-04-26 20:46 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\RogueChecker 2016-04-26 20:45 - 2016-04-26 20:45 - 00032078 _____ C:\Users\MjAbuZayed\Downloads\RogueChecker.zip 2016-04-26 20:41 - 2016-04-26 21:04 - 96656098 _____ C:\Users\MjAbuZayed\Downloads\WindowsTH-KB2693643-x64.msu 2016-04-26 20:08 - 2016-04-26 20:08 - 00000000 ____D C:\$SysReset 2016-04-26 18:08 - 2016-04-26 18:13 - 06882840 _____ (Piriform Ltd) C:\Users\MjAbuZayed\Downloads\ccsetup517pro.exe 2016-04-26 17:33 - 2016-04-26 17:33 - 00635461 _____ C:\Users\MjAbuZayed\Downloads\Arch432_LA_HC-_20140414_CRM.pdf 2016-04-26 17:30 - 2016-04-26 17:30 - 02810954 _____ C:\Users\MjAbuZayed\Downloads\Arch333 Second Material.rar 2016-04-25 13:19 - 2016-04-25 13:50 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Game.of.Thrones.S06E01.INTERNAL.HDTV.x264-KILLERS[ettv] 2016-04-24 10:58 - 2016-04-27 18:40 - 00002229 _____ C:\Users\Public\Desktop\Style Builder 2016.lnk 2016-04-24 10:58 - 2016-04-27 18:40 - 00002143 _____ C:\Users\Public\Desktop\LayOut 2016.lnk 2016-04-24 10:58 - 2016-04-27 18:40 - 00002054 _____ C:\Users\Public\Desktop\SketchUp 2016.lnk 2016-04-24 10:58 - 2016-04-24 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2016 2016-04-24 07:16 - 2016-04-24 07:16 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\SketchUp Pro 2016 v16.0.19911 + Crack [FU] 2016-04-24 07:06 - 2016-04-26 22:43 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Sketchup pro 2016 Win32Win64 2016-04-24 07:05 - 2016-04-24 07:05 - 00019484 _____ C:\Users\MjAbuZayed\Downloads\[kat.cr]sketchup.pro.2016.win32win64.torrent 2016-04-24 06:55 - 2016-04-24 06:55 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\SketchUp Pro 2016 v16.0.19911 + Crack 2016-04-22 11:49 - 2016-04-22 11:49 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\Mom 2016-04-20 08:13 - 2016-04-27 18:40 - 00002644 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project 2016.lnk 2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools 2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Windows\PCHEALTH 2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files\Microsoft Analysis Services 2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services 2016-04-20 08:12 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files\Microsoft Office 2016-04-20 08:12 - 2016-04-20 08:12 - 00000000 __RHD C:\MSOCache 2016-04-20 07:46 - 2016-04-20 07:46 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Microsoft Project 2016 Professional 64 bit - appzdam.net 2016-04-19 21:58 - 2016-04-19 23:18 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Better.Call.Saul.S02E10.HDTV.x264-FUM[ettv] 2016-04-19 21:40 - 2016-04-19 21:59 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham.S02E18.HDTV.x264-LOL[ettv] 2016-04-18 19:26 - 2016-04-18 19:26 - 00002146 _____ C:\Users\MjAbuZayed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk 2016-04-18 19:26 - 2016-04-18 19:26 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape 2016-04-18 19:22 - 2016-04-18 19:26 - 24223744 _____ C:\Users\MjAbuZayed\Downloads\RuneScape.msi 2016-04-18 16:48 - 2016-04-18 16:48 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Comms 2016-04-18 14:38 - 2016-04-26 21:58 - 00003923 _____ C:\bdlog.txt 2016-04-18 14:26 - 2016-04-18 14:26 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Intel Components 2016-04-18 14:26 - 2016-04-18 14:26 - 00000000 ____D C:\ProgramData\IntelDLM 2016-04-18 14:23 - 2016-04-18 14:23 - 00000000 ____D C:\Windows\System32\Tasks\Intel 2016-04-18 14:22 - 2016-04-18 14:27 - 00000000 ____D C:\Program Files\Intel 2016-04-18 14:22 - 2015-06-04 14:33 - 00021984 _____ C:\Windows\system32\Drivers\semav6msr64.sys 2016-04-18 14:21 - 2016-04-18 14:22 - 05940136 _____ (Intel) C:\Users\MjAbuZayed\Downloads\Intel Driver Update Utility Installer (1).exe 2016-04-18 14:06 - 2016-04-18 14:06 - 00000000 ____D C:\VC 2016-04-16 21:10 - 2016-04-18 14:02 - 00000710 __RSH C:\ProgramData\ntuser.pol 2016-04-16 21:10 - 2016-04-16 21:10 - 00000000 ____D C:\extensions 2016-04-16 21:09 - 2016-04-16 21:09 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\vnlgp 2016-04-16 21:06 - 2016-04-25 00:12 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Vray 3.20 2016-04-16 19:04 - 2016-04-27 18:40 - 00002202 _____ C:\Users\Public\Desktop\Autodesk Flow Design.lnk 2016-04-16 19:03 - 2016-04-16 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw64 2016-04-16 19:03 - 2016-04-16 19:03 - 00000000 ____D C:\Program Files\x264vfw64 2016-04-16 17:22 - 2016-04-16 19:02 - 507011005 _____ (Autodesk, Inc.) C:\Users\MjAbuZayed\Downloads\Flow_Design_2014_English_WIN_64bit_R3_dlm.sfx.exe 2016-04-16 10:19 - 2016-04-16 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-04-16 00:26 - 2016-04-16 00:26 - 00316848 _____ C:\Users\MjAbuZayed\Downloads\Grid-1.dxf 2016-04-16 00:19 - 2016-04-16 00:19 - 01148646 _____ C:\Users\MjAbuZayed\Downloads\Untitled2.skp 2016-04-12 22:54 - 2016-03-29 09:40 - 03587584 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2016-04-12 22:54 - 2016-03-29 09:40 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2016-04-12 22:54 - 2016-03-25 10:38 - 24593408 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-04-12 22:54 - 2016-03-25 10:25 - 12505600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-04-12 22:54 - 2016-03-25 10:14 - 07525376 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2016-04-12 22:54 - 2016-03-25 10:13 - 19325440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-04-12 22:54 - 2016-03-25 09:55 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-04-12 22:54 - 2016-03-25 09:54 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2016-04-12 22:54 - 2016-03-16 07:56 - 03467784 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2016-04-12 22:54 - 2016-03-16 07:56 - 01022664 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-04-12 22:54 - 2016-03-16 07:56 - 00861512 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2016-04-12 22:54 - 2016-03-16 07:55 - 02495768 _____ C:\Windows\system32\CoreUIComponents.dll 2016-04-12 22:54 - 2016-03-16 07:55 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-04-12 22:54 - 2016-03-16 07:55 - 01299032 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-04-12 22:54 - 2016-03-16 07:55 - 01127024 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-04-12 22:54 - 2016-03-16 07:55 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-04-12 22:54 - 2016-03-16 07:54 - 00595016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll 2016-04-12 22:54 - 2016-03-16 07:47 - 22610328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-04-12 22:54 - 2016-03-16 07:47 - 03622272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-04-12 22:54 - 2016-03-16 07:47 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe 2016-04-12 22:54 - 2016-03-16 07:46 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll 2016-04-12 22:54 - 2016-03-16 07:45 - 00140536 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe 2016-04-12 22:54 - 2016-03-16 07:41 - 00607416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe 2016-04-12 22:54 - 2016-03-16 07:41 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll 2016-04-12 22:54 - 2016-03-16 07:39 - 00983904 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi 2016-04-12 22:54 - 2016-03-16 07:37 - 01010016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2016-04-12 22:54 - 2016-03-16 07:21 - 01767000 _____ C:\Windows\SysWOW64\CoreUIComponents.dll 2016-04-12 22:54 - 2016-03-16 07:21 - 01531888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-04-12 22:54 - 2016-03-16 07:11 - 21088728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2016-04-12 22:54 - 2016-03-16 07:11 - 02879024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-04-12 22:54 - 2016-03-16 07:11 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe 2016-04-12 22:54 - 2016-03-16 07:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe 2016-04-12 22:54 - 2016-03-16 07:05 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe 2016-04-12 22:54 - 2016-03-16 07:03 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll 2016-04-12 22:54 - 2016-03-16 07:00 - 21859840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2016-04-12 22:54 - 2016-03-16 06:56 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll 2016-04-12 22:54 - 2016-03-16 06:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll 2016-04-12 22:54 - 2016-03-16 06:55 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll 2016-04-12 22:54 - 2016-03-16 06:51 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll 2016-04-12 22:54 - 2016-03-16 06:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll 2016-04-12 22:54 - 2016-03-16 06:49 - 01416192 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-04-12 22:54 - 2016-03-16 06:49 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2016-04-12 22:54 - 2016-03-16 06:47 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2016-04-12 22:54 - 2016-03-16 06:47 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2016-04-12 22:54 - 2016-03-16 06:44 - 01016832 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll 2016-04-12 22:54 - 2016-03-16 06:43 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll 2016-04-12 22:54 - 2016-03-16 06:42 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll 2016-04-12 22:54 - 2016-03-16 06:42 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00931840 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll 2016-04-12 22:54 - 2016-03-16 06:40 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll 2016-04-12 22:54 - 2016-03-16 06:39 - 03363328 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2016-04-12 22:54 - 2016-03-16 06:39 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2016-04-12 22:54 - 2016-03-16 06:38 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll 2016-04-12 22:54 - 2016-03-16 06:37 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll 2016-04-12 22:54 - 2016-03-16 06:37 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll 2016-04-12 22:54 - 2016-03-16 06:37 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll 2016-04-12 22:54 - 2016-03-16 06:37 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll 2016-04-12 22:54 - 2016-03-16 06:37 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll 2016-04-12 22:54 - 2016-03-16 06:36 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll 2016-04-12 22:54 - 2016-03-16 06:35 - 01794560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll 2016-04-12 22:54 - 2016-03-16 06:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\AppxApplicabilityEngine.dll 2016-04-12 22:54 - 2016-03-16 06:35 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll 2016-04-12 22:54 - 2016-03-16 06:35 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll 2016-04-12 22:54 - 2016-03-16 06:34 - 01871872 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2016-04-12 22:54 - 2016-03-16 06:33 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll 2016-04-12 22:54 - 2016-03-16 06:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2016-04-12 22:54 - 2016-03-16 06:31 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll 2016-04-12 22:54 - 2016-03-16 06:27 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2016-04-12 22:54 - 2016-03-16 06:21 - 18796544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2016-04-12 22:54 - 2016-03-16 06:18 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll 2016-04-12 22:54 - 2016-03-16 06:17 - 03680256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2016-04-12 22:54 - 2016-03-16 06:17 - 00842240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll 2016-04-12 22:54 - 2016-03-16 06:17 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll 2016-04-12 22:54 - 2016-03-16 06:17 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll 2016-04-12 22:54 - 2016-03-16 06:17 - 00133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll 2016-04-12 22:54 - 2016-03-16 06:17 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll 2016-04-12 22:54 - 2016-03-16 06:16 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2016-04-12 22:54 - 2016-03-16 06:14 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll 2016-04-12 22:54 - 2016-03-16 06:14 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll 2016-04-12 22:54 - 2016-03-16 06:14 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00201216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll 2016-04-12 22:54 - 2016-03-16 06:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll 2016-04-12 22:54 - 2016-03-16 06:11 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2016-04-12 22:54 - 2016-03-16 06:10 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll 2016-04-12 22:53 - 2016-03-16 07:06 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll 2016-04-12 22:53 - 2016-03-16 07:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll 2016-04-12 22:53 - 2016-03-16 06:56 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll 2016-04-12 22:53 - 2016-03-16 06:55 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll 2016-04-12 22:53 - 2016-03-16 06:55 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll 2016-04-12 22:53 - 2016-03-16 06:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll 2016-04-12 22:53 - 2016-03-16 06:46 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll 2016-04-12 22:53 - 2016-03-16 06:43 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2016-04-12 22:53 - 2016-03-16 06:42 - 02180608 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2016-04-12 22:53 - 2016-03-16 06:41 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-04-12 22:53 - 2016-03-16 06:40 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2016-04-12 22:53 - 2016-03-16 06:39 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2016-04-12 22:53 - 2016-03-16 06:37 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll 2016-04-12 22:53 - 2016-03-16 06:36 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenanceClient.dll 2016-04-12 22:53 - 2016-03-16 06:35 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll 2016-04-12 22:53 - 2016-03-16 06:31 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll 2016-04-12 22:53 - 2016-03-16 06:31 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll 2016-04-12 22:53 - 2016-03-16 06:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwbase.dll 2016-04-12 22:53 - 2016-03-16 06:24 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2016-04-12 22:53 - 2016-03-16 06:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll 2016-04-12 22:53 - 2016-03-16 06:24 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll 2016-04-12 22:53 - 2016-03-16 06:20 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2016-04-12 22:53 - 2016-03-16 06:18 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-04-12 22:53 - 2016-03-16 06:13 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll 2016-04-12 22:53 - 2016-03-16 06:13 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PimIndexMaintenanceClient.dll 2016-04-12 22:53 - 2016-03-16 06:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll 2016-04-12 22:38 - 2016-04-12 22:38 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Temp 2016-04-12 20:58 - 2016-04-12 20:58 - 00000385 _____ C:\Users\MjAbuZayed\AppData\Roaminguser_gensett.xml 2016-04-12 20:57 - 2016-04-12 20:57 - 00000385 _____ C:\Windows\system32\user_gensett.xml 2016-04-12 20:56 - 2016-04-12 20:56 - 00000000 ____D C:\ProgramData\BDLogging 2016-04-12 20:56 - 2009-07-14 13:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2016-04-12 20:56 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll 2016-04-12 20:38 - 2016-04-12 20:38 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\QuickScan 2016-04-12 20:19 - 2016-04-12 20:19 - 00000000 ____D C:\ProgramData\Bitdefender Agent 2016-04-12 20:18 - 2016-04-12 20:19 - 10314888 _____ C:\Users\MjAbuZayed\Downloads\bitdefender_tsecurity.exe 2016-04-12 17:33 - 2016-04-12 18:25 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham.S02E17.HDTV.x264-LOL[ettv] 2016-04-12 17:33 - 2016-04-12 18:24 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Better.Call.Saul.S02E09.HDTV.x264-KILLERS[ettv] 2016-04-07 09:33 - 2016-04-07 09:34 - 04365589 _____ C:\Users\MjAbuZayed\Downloads\CW7.psd 2016-04-06 23:41 - 2016-04-06 23:41 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham S02E17 2015 HDTV x264 - CM 2016-04-04 15:32 - 2016-04-04 15:32 - 00026583 _____ C:\Users\MjAbuZayed\Desktop\idc_debug_log.txt 2016-04-01 14:53 - 2016-04-01 14:53 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\AAA_Internet_Publishing,_ 2016-04-01 14:53 - 2016-02-01 13:17 - 00027904 ____N (AAA Internet Publishing, Inc.) C:\Windows\system32\Drivers\WtfEngineDrv.sys 2016-04-01 14:48 - 2016-04-01 14:51 - 25914328 _____ (Initex & AAA Internet Publishing ) C:\Users\MjAbuZayed\Downloads\WTFastSetup.4.0.8.710.exe 2016-04-01 14:36 - 2016-04-27 18:40 - 00001046 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2016-04-01 14:36 - 2016-04-02 18:20 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\TS3Client 2016-04-01 14:36 - 2016-04-01 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2016-04-01 14:36 - 2016-04-01 14:36 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2016-04-01 14:34 - 2016-04-01 14:35 - 31017664 _____ (TeamSpeak Systems GmbH) C:\Users\MjAbuZayed\Downloads\TeamSpeak3-Client-win64-3.0.18.2.exe 2016-03-30 17:25 - 2016-03-30 17:25 - 00019472 _____ C:\Users\MjAbuZayed\Downloads\gotham-second-season_HI_english-1304415.zip 2016-03-30 16:28 - 2016-03-30 17:26 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham.S02E16.HDTV.x264-LOL[ettv] 2016-03-30 13:52 - 2016-03-30 13:54 - 06046176 _____ C:\Users\MjAbuZayed\Downloads\raidcall_v8.1.8.exe 2016-03-29 08:57 - 2016-04-26 18:45 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\Specs ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-04-28 16:28 - 2016-02-13 16:23 - 00000938 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-04-28 16:08 - 2016-03-26 17:03 - 00000948 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2016-04-28 16:08 - 2016-03-26 17:03 - 00000944 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2016-04-28 16:06 - 2016-02-13 16:14 - 00875126 _____ C:\Windows\system32\PerfStringBackup.INI 2016-04-28 16:06 - 2015-07-10 14:02 - 00000000 ____D C:\Windows\INF 2016-04-28 16:00 - 2016-02-13 16:23 - 00000934 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-04-28 16:00 - 2015-07-10 15:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-04-28 15:59 - 2016-02-13 16:11 - 00000000 ____D C:\Users\MjAbuZayed 2016-04-28 15:59 - 2015-07-10 12:05 - 00262144 ___SH C:\Windows\system32\config\BBI 2016-04-27 18:40 - 2016-03-25 22:52 - 00002033 _____ C:\Users\Public\Desktop\3ds Max 2016.lnk 2016-04-27 18:40 - 2016-02-28 07:53 - 00001137 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-04-27 18:40 - 2016-02-27 16:10 - 00002070 _____ C:\Users\Public\Desktop\A360 Desktop.lnk 2016-04-27 18:40 - 2016-02-27 16:09 - 00002151 _____ C:\Users\Public\Desktop\Autodesk ReCap 2016.lnk 2016-04-27 18:40 - 2016-02-27 16:08 - 00002165 _____ C:\Users\Public\Desktop\AutoCAD 2016 - English.lnk 2016-04-27 18:40 - 2016-02-24 18:50 - 00002595 _____ C:\Users\Public\Desktop\eQUEST 3-65.lnk 2016-04-27 18:40 - 2016-02-18 14:25 - 00002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk 2016-04-27 18:40 - 2016-02-14 08:13 - 00001528 _____ C:\Users\Public\Desktop\Climate Consultant 6.0.lnk 2016-04-27 18:40 - 2016-02-13 17:50 - 00001233 _____ C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.4.lnk 2016-04-27 18:40 - 2016-02-13 16:51 - 00002137 _____ C:\Users\Public\Desktop\meteonorm 7.lnk 2016-04-27 18:40 - 2016-02-13 16:33 - 00002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-04-27 18:40 - 2016-02-13 16:33 - 00002131 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-04-27 18:36 - 2015-07-10 16:15 - 00000000 ____D C:\Windows\OCR 2016-04-27 18:36 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\Help 2016-04-27 18:36 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\AppReadiness 2016-04-27 15:35 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\rescache 2016-04-27 14:15 - 2016-02-13 16:13 - 00000000 ___RD C:\Users\MjAbuZayed\OneDrive 2016-04-27 14:15 - 2016-02-13 16:11 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-04-27 13:23 - 2016-02-24 20:26 - 00004178 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{ED841FED-B7B6-454F-B006-059C5D4D369F} 2016-04-27 13:23 - 2016-02-13 16:11 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Packages 2016-04-26 23:55 - 2016-02-24 17:45 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\BitTorrent 2016-04-26 22:45 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\ELAMBKUP 2016-04-26 21:23 - 2015-07-10 12:05 - 00032768 ___SH C:\Windows\system32\config\ELAM 2016-04-26 21:10 - 2016-02-13 17:50 - 00000000 ____D C:\ProgramData\Package Cache 2016-04-26 21:07 - 2015-07-10 13:55 - 00000000 ____D C:\Windows\CbsTemp 2016-04-26 21:06 - 2015-07-10 14:00 - 00144646 _____ C:\Windows\system32\dssite.msc 2016-04-26 21:06 - 2015-07-10 14:00 - 00144380 _____ C:\Windows\system32\adsiedit.msc 2016-04-26 20:37 - 2016-02-13 17:27 - 00000024 _____ C:\Users\MjAbuZayed\random.dat 2016-04-26 17:28 - 2015-07-10 14:04 - 00000000 ___HD C:\Program Files\WindowsApps 2016-04-26 03:15 - 2016-03-26 17:16 - 00000000 ___RD C:\Users\MjAbuZayed\Dropbox 2016-04-25 21:32 - 2015-07-10 15:20 - 00415544 _____ C:\Windows\system32\FNTCACHE.DAT 2016-04-25 18:25 - 2016-02-28 07:54 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\vlc 2016-04-21 20:47 - 2016-02-13 16:13 - 00002382 _____ C:\Users\MjAbuZayed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-04-20 08:18 - 2016-03-07 09:44 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Microsoft Help 2016-04-20 08:13 - 2015-07-10 16:19 - 00000000 ____D C:\Windows\ShellNew 2016-04-20 08:13 - 2015-07-10 14:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-04-20 08:13 - 2015-07-10 14:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-04-20 08:12 - 2016-02-13 16:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-04-18 14:23 - 2016-02-13 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility 2016-04-18 14:23 - 2016-02-13 17:50 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility 2016-04-18 14:23 - 2016-02-13 16:50 - 00000000 ____D C:\Program Files (x86)\Intel 2016-04-17 11:29 - 2016-02-14 05:45 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\Design 6 2016-04-17 11:14 - 2016-02-27 16:08 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Autodesk 2016-04-16 21:10 - 2015-07-10 14:04 - 00000000 ___HD C:\Windows\system32\GroupPolicy 2016-04-16 21:10 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy 2016-04-16 19:04 - 2016-02-27 16:04 - 00000000 ____D C:\Program Files\Autodesk 2016-04-16 19:04 - 2016-02-24 18:03 - 00000000 ____D C:\ProgramData\Autodesk 2016-04-16 19:04 - 2016-02-24 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2016-04-16 19:02 - 2016-02-27 14:45 - 00000000 ____D C:\Autodesk 2016-04-16 10:19 - 2016-03-26 17:03 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-04-16 00:50 - 2016-02-13 16:44 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\MICROSOFT Office PRO Plus 2016 v16.0.4266.1003 RTM + Activator [TechTools.NET] 2016-04-16 00:49 - 2016-02-27 16:04 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2016-04-16 00:49 - 2016-02-13 17:14 - 00000000 ____D C:\ProgramData\KMSAuto 2016-04-14 00:38 - 2016-03-26 17:02 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Dropbox 2016-04-14 00:35 - 2015-07-10 12:05 - 00000000 ____D C:\Windows\SysWOW64\Dism 2016-04-12 23:24 - 2016-03-09 22:58 - 00000000 ____D C:\Windows\system32\MRT 2016-04-12 23:21 - 2016-03-09 22:58 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-04-12 22:35 - 2015-07-10 14:04 - 00000000 ___SD C:\Windows\Downloaded Program Files 2016-04-12 22:35 - 2015-07-10 14:04 - 00000000 ___RD C:\Windows\Offline Web Pages 2016-04-06 21:32 - 2015-07-10 14:06 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-04-06 21:32 - 2015-07-10 14:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-03-31 10:18 - 2016-02-18 16:50 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\test 2016-03-30 14:49 - 2016-02-26 00:02 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\ElevatedDiagnostics ==================== Files in the root of some directories ======= 2016-04-26 21:59 - 2016-04-26 21:59 - 0236471 _____ () C:\ProgramData\1461697099.bdinstall.bin 2016-04-26 22:00 - 2016-04-26 22:00 - 0027623 _____ () C:\ProgramData\1461697240.bdinstall.bin 2016-02-27 16:07 - 2016-02-27 16:07 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-04-21 16:37 ==================== End of FRST.txt ============================