OTL logfile created on: 17/10/2013 18:31:56 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\DBDesign\Desktop 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16721) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 8,00 Gb Total Physical Memory | 6,12 Gb Available Physical Memory | 76,52% Memory free 9,19 Gb Paging File | 7,03 Gb Available in Paging File | 76,57% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 292,87 Gb Total Space | 154,61 Gb Free Space | 52,79% Space Free | Partition Type: NTFS Drive D: | 465,76 Gb Total Space | 210,63 Gb Free Space | 45,22% Space Free | Partition Type: NTFS Drive E: | 638,54 Gb Total Space | 93,83 Gb Free Space | 14,69% Space Free | Partition Type: NTFS Drive F: | 931,51 Gb Total Space | 219,53 Gb Free Space | 23,57% Space Free | Partition Type: NTFS Computer Name: PC-DE-DANNY | User Name: DBDesign | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013/10/17 18:30:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DBDesign\Desktop\OTL.exe PRC - [2013/10/08 21:57:30 | 001,862,536 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe PRC - [2013/10/01 22:38:25 | 000,274,840 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2013/09/04 11:20:38 | 001,432,080 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgfws.exe PRC - [2013/08/26 23:11:31 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2013/08/19 17:54:02 | 003,106,318 | ---- | M] (ATI Technologies) -- C:\Users\DBDesign\AppData\Local\ATI Technologies\atiedxx.exe PRC - [2013/08/15 13:53:50 | 004,411,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe PRC - [2013/07/23 21:09:28 | 000,283,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe PRC - [2013/07/04 17:53:10 | 004,939,312 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe PRC - [2013/05/11 14:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013/04/25 02:10:06 | 000,659,224 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe PRC - [2013/04/04 16:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe PRC - [2009/12/28 23:33:00 | 000,096,896 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013/10/08 21:57:30 | 016,233,864 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll MOD - [2013/10/01 22:38:25 | 003,279,768 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2010/01/30 04:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2013/10/04 11:50:20 | 002,542,416 | ---- | M] (CybelSoft) [Auto | Running] -- C:\Program Files\ma-config.com\MaConfigAgent.exe -- (MaConfigAgent) SRV:[b]64bit:[/b] - [2013/09/27 00:22:34 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2013/09/26 16:32:00 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2013/08/16 09:39:26 | 002,371,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2013/07/02 04:44:21 | 000,016,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:[b]64bit:[/b] - [2013/06/25 02:54:45 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2013/06/01 13:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2013/05/04 10:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2013/05/04 10:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2013/04/09 08:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2013/03/02 06:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2013/03/02 06:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2013/01/10 03:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2013/01/10 03:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2012/09/20 10:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2012/07/26 07:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2012/07/26 07:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2012/07/26 07:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2012/07/26 07:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2012/07/26 07:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2012/07/26 07:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2012/07/26 07:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:[b]64bit:[/b] - [2012/07/26 07:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2012/07/26 07:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2012/07/26 07:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2012/07/26 07:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent) SRV:[b]64bit:[/b] - [2012/07/26 07:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2012/07/26 04:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2012/07/26 04:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2012/07/26 04:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2012/07/26 04:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2012/07/26 04:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2012/07/26 04:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV - [2013/10/09 06:19:14 | 000,565,672 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2013/10/08 21:57:31 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013/10/01 22:38:25 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013/10/01 15:51:14 | 002,746,704 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2013/09/04 11:20:38 | 001,432,080 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgfws.exe -- (avgfws) SRV - [2013/08/26 23:11:31 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2013/07/23 21:09:28 | 000,283,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe -- (avgwd) SRV - [2013/07/04 17:53:10 | 004,939,312 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent) SRV - [2013/06/21 11:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013/05/11 14:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013/04/04 16:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2013/04/04 16:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2012/07/26 07:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2012/07/26 07:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2009/12/28 23:33:00 | 000,096,896 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2013/09/27 01:18:38 | 012,760,576 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2013/09/26 23:49:46 | 000,619,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2013/09/05 18:51:45 | 000,231,376 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\truecrypt.sys -- (truecrypt) DRV:[b]64bit:[/b] - [2013/09/05 03:43:42 | 000,045,880 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\avgrkx64.sys -- (Avgrkx64) DRV:[b]64bit:[/b] - [2013/08/17 23:28:46 | 000,040,232 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wsadb.sys -- (androidusb) DRV:[b]64bit:[/b] - [2013/08/17 23:28:46 | 000,027,944 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\lgandbus.sys -- (Andbus) DRV:[b]64bit:[/b] - [2013/08/16 09:41:13 | 000,058,200 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2013/07/31 13:26:24 | 000,042,240 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys -- (AODDriver4.2.0) DRV:[b]64bit:[/b] - [2013/07/21 16:23:36 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2013/07/20 03:51:00 | 000,311,608 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\avgloga.sys -- (Avgloga) DRV:[b]64bit:[/b] - [2013/07/20 03:50:56 | 000,246,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\avgidsdrivera.sys -- (AVGIDSDriver) DRV:[b]64bit:[/b] - [2013/07/20 03:50:56 | 000,071,480 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\avgidsha.sys -- (AVGIDSHA) DRV:[b]64bit:[/b] - [2013/07/20 03:50:50 | 000,206,648 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\avgldx64.sys -- (Avgldx64) DRV:[b]64bit:[/b] - [2013/07/18 04:04:48 | 000,248,632 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avgwfpa.sys -- (Avgwfpa) DRV:[b]64bit:[/b] - [2013/07/09 12:04:07 | 000,120,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2013/07/05 12:40:42 | 000,129,536 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AtihdW86.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2013/07/03 18:12:32 | 000,046,136 | -H-- | M] (LogMeIn Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Hamdrv.sys -- (hamachi) DRV:[b]64bit:[/b] - [2013/07/02 05:41:47 | 000,447,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2013/07/02 05:41:47 | 000,337,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2013/07/02 05:41:47 | 000,213,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2013/07/02 04:44:14 | 000,036,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot) DRV:[b]64bit:[/b] - [2013/07/02 02:08:49 | 000,247,216 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter) DRV:[b]64bit:[/b] - [2013/07/01 03:45:28 | 000,116,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\avgmfx64.sys -- (Avgmfx64) DRV:[b]64bit:[/b] - [2013/06/29 10:15:54 | 000,195,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2013/06/11 01:17:46 | 000,096,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2013/06/04 11:15:02 | 000,103,448 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus) DRV:[b]64bit:[/b] - [2013/06/04 11:15:00 | 000,203,672 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudmdm.sys -- (ssudmdm) DRV:[b]64bit:[/b] - [2013/06/01 07:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013/05/17 13:13:26 | 000,017,280 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\ASACPI.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2013/05/04 11:34:15 | 000,284,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2013/04/04 16:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2013/03/02 14:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013/03/02 14:45:20 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2013/03/02 14:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2013/01/17 23:15:12 | 000,066,800 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\LGSHidFilt.Sys -- (LGSHidFilt) DRV:[b]64bit:[/b] - [2013/01/10 05:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2012/11/27 07:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2012/11/20 08:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2012/11/06 07:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2012/10/26 06:17:44 | 000,020,912 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\avgboota.sys -- (Avgboota) DRV:[b]64bit:[/b] - [2012/10/12 12:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2012/10/11 11:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2012/09/23 06:17:22 | 000,021,160 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\amdkmafd.sys -- (amdkmafd) DRV:[b]64bit:[/b] - [2012/09/20 11:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2012/09/20 11:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2012/09/17 17:05:26 | 000,123,704 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\jraid.sys -- (JRAID) DRV:[b]64bit:[/b] - [2012/09/04 12:39:32 | 000,050,296 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avgfwd6a.sys -- (Avgfwfd) DRV:[b]64bit:[/b] - [2012/08/21 15:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2012/07/26 09:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012/07/26 09:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2012/07/26 09:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2012/07/26 09:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2012/07/26 09:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2012/07/26 09:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2012/07/26 09:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2012/07/26 09:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2012/07/26 09:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2012/07/26 09:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2012/07/26 09:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2012/07/26 09:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2012/07/26 09:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2012/07/26 09:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2012/07/26 09:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2012/07/26 09:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2012/07/26 09:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2012/07/26 08:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2012/07/26 08:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2012/07/26 07:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2012/07/26 06:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2012/07/26 06:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2012/07/26 06:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2012/07/26 06:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2012/07/26 06:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2012/07/26 06:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2012/07/26 06:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2012/07/26 06:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2012/07/26 06:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2012/07/26 06:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2012/07/26 06:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2012/07/26 06:26:57 | 000,089,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\xusb22.sys -- (xusb22) DRV:[b]64bit:[/b] - [2012/07/26 06:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2012/07/26 06:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2012/07/26 06:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2012/07/26 06:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2012/07/26 06:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2012/07/26 06:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2012/07/26 06:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid) DRV:[b]64bit:[/b] - [2012/07/26 06:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp) DRV:[b]64bit:[/b] - [2012/07/26 06:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2012/07/26 06:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr) DRV:[b]64bit:[/b] - [2012/07/26 06:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp) DRV:[b]64bit:[/b] - [2012/07/26 06:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2012/07/26 06:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2012/07/26 06:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2012/06/02 18:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2011/07/21 20:55:50 | 000,016,640 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys -- (driverhardwarev2x64) DRV:[b]64bit:[/b] - [2009/11/24 04:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\LGVirHid.sys -- (LGVirHid) DRV:[b]64bit:[/b] - [2009/11/24 04:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\LGBusEnum.sys -- (LGBusEnum) DRV - [2012/12/30 00:59:38 | 000,028,664 | ---- | M] (Almico Software) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\speedfan.sys -- (speedfan) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.fr.msn.com/ IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BB 5B 6F 47 F2 AA CE 01 [binary data] IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-109731523-2391859423-767708429-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=;ftp=;https=; [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: "false" FF - prefs.js..extensions.enabledAddons: support%40easy-hideip.com:1.0 FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21 FF - prefs.js..extensions.enabledAddons: YouTubeAutoReplay%40arikv.com:2.84 FF - prefs.js..extensions.enabledAddons: ImagePicker%40topolog.org:1.8.0 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0 FF - prefs.js..network.proxy.gopher: "" FF - prefs.js..network.proxy.gopher_port: 0 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\3.0.40818.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\DBDesign\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/07/23 11:20:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DBDesign\AppData\Roaming\mozilla\Extensions [2013/10/10 19:47:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DBDesign\AppData\Roaming\mozilla\Firefox\Profiles\2d4o3qp4.default\extensions [2013/08/27 14:04:45 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\DBDesign\AppData\Roaming\mozilla\Firefox\Profiles\2d4o3qp4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013/09/07 13:56:58 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\DBDesign\AppData\Roaming\mozilla\Firefox\Profiles\2d4o3qp4.default\extensions\ich@maltegoetz.de [2013/09/28 11:15:29 | 000,000,000 | ---D | M] (Image Picker) -- C:\Users\DBDesign\AppData\Roaming\mozilla\Firefox\Profiles\2d4o3qp4.default\extensions\ImagePicker@topolog.org [2013/08/01 15:29:23 | 000,004,545 | ---- | M] () (No name found) -- C:\Users\DBDesign\AppData\Roaming\mozilla\firefox\profiles\2d4o3qp4.default\extensions\support@easy-hideip.com.xpi [2013/09/07 13:56:58 | 000,014,810 | ---- | M] () (No name found) -- C:\Users\DBDesign\AppData\Roaming\mozilla\firefox\profiles\2d4o3qp4.default\extensions\YouTubeAutoReplay@arikv.com.xpi [2013/10/10 19:47:53 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\DBDesign\AppData\Roaming\mozilla\firefox\profiles\2d4o3qp4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013/10/01 22:38:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2013/10/01 22:38:26 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: https://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll CHR - Extension: Entanglement Web App = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\2.7.9_0\ CHR - Extension: Entanglement Web App = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\3.4.9_0\ CHR - Extension: Beatlab = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\alnfdikmbdfgkcbdodjcbmedanjinmkk\1.0.1_0\ CHR - Extension: Documents Google = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Google\u00A0Drive = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Monster Dash = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknghehebaconkajgiobncfleofebcog\2.2_0\ CHR - Extension: Recherche Google = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Realm of the Mad God = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp\1.0.0.3_0\ CHR - Extension: Realm of the Mad God = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp\1.0.0.3_0\~ CHR - Extension: AdBlock = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0\ CHR - Extension: AdBlock = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.6_0\ CHR - Extension: Sigerson Morrison = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcpgmpfeoahblfncaooigccakcgngjbh\3_0\ CHR - Extension: YouTube Video Preview = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmggjocpafbpjdhoknaneokaklekakeh\2.0.0_0\ CHR - Extension: NTCreature2 = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjonlkfobmdbddoocochnajeokphipmj\1.1.1_0\ CHR - Extension: Auto Replay for YouTube = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb\1.9.26_0\ CHR - Extension: Auto Replay for YouTube = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb\1.9.28_0\ CHR - Extension: Drakensang Online = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgloifppaepihckkhiocnodicehjdoof\4.0.1_0\ CHR - Extension: Chrome In-App Payments service = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\ CHR - Extension: Bastion = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohphhdkahjlioohbalmicpokoefkgid\0.0.0.4_0\ CHR - Extension: Gmail = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: Canvas Rider = C:\Users\DBDesign\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk\0.71_0\ O1 HOSTS File: ([2012/07/26 09:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe () O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Wondershare Helper Compact] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare) O4 - HKU\S-1-5-21-109731523-2391859423-767708429-1001..\Run: [AtiDriverStart] C:\Users\DBDesign\AppData\Local\ATI Technologies\atidxx.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105 File not found O8:[b]64bit:[/b] - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000 File not found O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\.DEFAULT\..Trusted Domains: ma-config.com ([]http in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: ma-config.com ([]https in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: touslesdrivers.com ([]http in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: ma-config.com ([]http in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: ma-config.com ([]https in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: touslesdrivers.com ([]http in Trusted sites) O15 - HKU\S-1-5-21-109731523-2391859423-767708429-1001\..Trusted Domains: ma-config.com ([]http in Trusted sites) O15 - HKU\S-1-5-21-109731523-2391859423-767708429-1001\..Trusted Domains: ma-config.com ([]https in Trusted sites) O15 - HKU\S-1-5-21-109731523-2391859423-767708429-1001\..Trusted Domains: touslesdrivers.com ([]http in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8981E932-0B31-4499-90B4-D5146D7EB788}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011/09/15 08:12:14 | 000,000,080 | -H-- | M] () - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2012/09/12 19:18:03 | 000,000,000 | RH-D | M] - F:\autorun -- [ NTFS ] O32 - AutoRun File - [2012/05/01 12:01:59 | 000,000,048 | R--- | M] () - F:\autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation) NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] TBS - Service SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: TBS - Service SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TBS - Service SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: Hamachi2Svc - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdpencdd.sys - Driver SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: SmartcardSimulator - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TBS - Service SafeBootNet: TDI - Driver Group SafeBootNet: VirtualSmartcardReader - Driver SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:[b]64bit:[/b] {74166507-F39E-305E-A972-2C3478E47350} - .NET Framework ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {3A8403F3-90B5-35DC-8926-EB9B907209F9} - .NET Framework ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll",CreateReaderUserSettings ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013/10/17 18:30:11 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\DBDesign\Desktop\OTL.exe [2013/10/17 15:19:11 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan [2013/10/17 15:19:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan [2013/10/17 15:19:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan [2013/10/17 10:45:40 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2013/10/17 10:45:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies [2013/10/17 10:45:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT [2013/10/17 10:45:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center [2013/10/17 10:44:50 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2013/10/17 09:38:52 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Local\LogMeIn [2013/10/17 09:38:52 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn [2013/10/15 15:20:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin [2013/10/15 15:20:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin [2013/10/15 15:20:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2013/10/15 14:14:56 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\Documents\FIFA 14 [2013/10/15 13:51:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 14 Ultimate Edition 3DM [2013/10/13 19:00:31 | 001,374,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll [2013/10/13 19:00:31 | 001,245,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll [2013/10/13 19:00:31 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll [2013/10/13 19:00:31 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx [2013/10/13 19:00:31 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll [2013/10/13 19:00:31 | 000,399,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx [2013/10/13 19:00:23 | 010,116,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll [2013/10/13 19:00:20 | 008,858,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll [2013/10/13 19:00:20 | 001,125,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll [2013/10/13 19:00:15 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgr.dll [2013/10/13 19:00:13 | 002,304,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2013/10/13 19:00:13 | 002,035,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2013/10/13 19:00:13 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSync.dll [2013/10/13 19:00:13 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appmgr.dll [2013/10/13 19:00:13 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll [2013/10/13 19:00:12 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSync.dll [2013/10/13 19:00:12 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mbsmsapi.dll [2013/10/13 19:00:12 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mbsmsapi.dll [2013/10/13 19:00:12 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncInfo.dll [2013/10/10 18:24:17 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013/10/10 18:24:12 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll [2013/10/10 18:24:12 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013/10/10 18:24:12 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013/10/10 18:24:12 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013/10/10 18:24:11 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013/10/10 18:24:11 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013/10/10 18:24:11 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013/10/10 18:24:11 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013/10/10 18:24:11 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll [2013/10/10 18:24:11 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013/10/10 18:24:10 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013/10/10 18:24:10 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll [2013/10/10 18:24:10 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013/10/10 18:19:38 | 000,652,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2013/10/10 18:13:24 | 000,054,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys [2013/10/10 18:13:16 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys [2013/10/10 18:13:16 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys [2013/10/10 18:13:08 | 000,362,496 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2013/10/10 18:13:08 | 000,300,032 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2013/10/10 18:13:08 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2013/10/10 18:13:08 | 000,035,328 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2013/10/10 18:11:55 | 000,447,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBHUB3.SYS [2013/10/10 18:11:55 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS [2013/10/10 18:11:55 | 000,213,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS [2013/10/10 18:11:54 | 000,498,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2013/10/10 18:11:54 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll [2013/10/10 18:11:54 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2013/10/10 18:11:54 | 000,021,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2013/10/09 17:17:47 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\Documents\Klei [2013/10/08 11:07:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com [2013/10/06 14:21:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2013/10/06 14:21:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2013/10/03 21:32:51 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Roaming\Unity [2013/10/03 21:26:32 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Local\Unity [2013/10/03 19:06:30 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Roaming\TEdit [2013/10/01 22:38:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013/09/30 20:41:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft [2013/09/28 19:53:17 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokémon Gemme [2013/09/28 19:53:11 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\Desktop\Pokémon Gemme [2013/09/28 11:03:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\5th Cell Media [2013/09/27 19:24:50 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\Documents\SavedGames [2013/09/27 19:24:44 | 000,000,000 | ---D | C] -- C:\Users\DBDesign\AppData\Roaming\Rogue Legacy [2013/09/27 01:21:16 | 000,078,432 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atimpc64.dll [2013/09/27 01:21:16 | 000,071,704 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atimpc32.dll [2013/09/27 01:21:12 | 000,078,432 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\amdpcom64.dll [2013/09/27 01:21:12 | 000,071,704 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\amdpcom32.dll [2013/09/27 01:21:10 | 000,126,336 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiuxpag.dll [2013/09/27 01:20:58 | 008,228,328 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atidxx32.dll [2013/09/27 01:18:38 | 012,760,576 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\atikmdag.sys [2013/09/27 01:04:38 | 000,098,816 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\OpenVideo64.dll [2013/09/27 01:04:30 | 000,083,456 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\OpenVideo.dll [2013/09/27 01:04:24 | 000,086,528 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\OVDecode64.dll [2013/09/27 01:04:20 | 000,073,216 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\OVDecode.dll [2013/09/27 01:04:02 | 028,469,248 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\amdocl64.dll [2013/09/27 00:59:52 | 000,063,488 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2013/09/27 00:54:46 | 000,129,536 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst_13.20.16.dll [2013/09/27 00:45:12 | 000,368,640 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe [2013/09/27 00:45:00 | 000,062,464 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalrt64.dll [2013/09/27 00:44:58 | 000,052,224 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalrt.dll [2013/09/27 00:44:48 | 000,055,808 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalcl64.dll [2013/09/27 00:44:46 | 000,049,152 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalcl.dll [2013/09/27 00:44:30 | 015,716,352 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticaldd64.dll [2013/09/27 00:41:04 | 014,302,208 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticaldd.dll [2013/09/27 00:32:12 | 021,724,160 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atioglxx.dll [2013/09/27 00:23:36 | 000,031,232 | ---- | C] (AMD) -- C:\Windows\SysNative\atimuixx.dll [2013/09/27 00:23:30 | 000,580,608 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe [2013/09/27 00:22:34 | 000,239,616 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe [2013/09/27 00:20:54 | 000,190,976 | ---- | C] (AMD) -- C:\Windows\SysNative\atitmm64.dll [2013/09/26 23:50:10 | 000,069,632 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiglpxx.dll [2013/09/26 23:50:10 | 000,069,632 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiglpxx.dll [2013/09/26 23:49:46 | 000,619,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\atikmpag.sys [2013/09/26 23:46:22 | 000,043,520 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\ati2erec.dll [2013/09/25 23:20:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2013/09/25 23:20:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2013/09/25 23:20:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2013/09/25 21:49:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CI Games [2013/09/25 21:47:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CI Games [2013/09/25 20:01:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PAC-MAN Championship Edition DX+ [2013/09/25 20:00:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PAC-MAN Championship Edition DX+ [2013/09/21 13:45:36 | 000,115,512 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll [2013/09/21 13:44:40 | 007,139,552 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll [2013/09/21 13:44:36 | 007,751,408 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd64.dll [2013/09/21 13:20:10 | 024,008,192 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\amdocl.dll [2013/09/21 13:18:12 | 000,057,344 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2013/09/21 12:37:40 | 000,442,368 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atidemgy.dll [2013/09/21 12:06:52 | 000,819,712 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atiadlxy.dll [2013/09/21 12:06:14 | 000,096,768 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atigktxx.dll [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013/10/17 18:33:21 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2013/10/17 18:30:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DBDesign\Desktop\OTL.exe [2013/10/17 17:56:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013/10/17 17:54:15 | 001,793,362 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013/10/17 17:54:15 | 000,799,736 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat [2013/10/17 17:54:15 | 000,710,046 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013/10/17 17:54:15 | 000,155,444 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat [2013/10/17 17:54:15 | 000,132,416 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013/10/17 17:50:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013/10/17 17:49:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013/10/17 17:48:11 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013/10/17 17:47:57 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013/10/17 17:47:57 | 000,000,294 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job [2013/10/17 17:47:49 | 2575,450,111 | -HS- | M] () -- C:\hiberfil.sys [2013/10/17 15:19:11 | 000,001,007 | ---- | M] () -- C:\Users\DBDesign\Desktop\SpeedFan.lnk [2013/10/17 15:19:11 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo [2013/10/17 14:53:06 | 000,061,440 | ---- | M] ( ) -- C:\Users\DBDesign\Desktop\VEW.exe [2013/10/15 22:06:53 | 000,001,084 | ---- | M] () -- C:\Users\DBDesign\Desktop\Wow - Raccourci.lnk [2013/10/15 15:20:11 | 000,000,613 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk [2013/10/15 14:31:43 | 000,001,469 | ---- | M] () -- C:\Users\DBDesign\Desktop\Fifa 14.lnk [2013/10/15 10:42:25 | 000,395,908 | ---- | M] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104225.jpg [2013/10/15 10:42:05 | 000,441,341 | ---- | M] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104204.jpg [2013/10/15 10:40:51 | 000,566,381 | ---- | M] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104051.jpg [2013/10/15 10:40:22 | 000,575,610 | ---- | M] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104021.jpg [2013/10/15 10:40:15 | 000,567,052 | ---- | M] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104015.jpg [2013/10/15 09:37:44 | 000,424,328 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013/10/08 11:07:54 | 000,000,949 | ---- | M] () -- C:\Users\Public\Desktop\Ma-Config.com - Démarrer la détection.lnk [2013/10/02 19:52:52 | 000,001,511 | ---- | M] () -- C:\Users\DBDesign\Desktop\Terraria.lnk [2013/10/02 05:38:13 | 000,694,232 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013/10/02 05:38:13 | 000,078,296 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013/09/28 11:03:13 | 000,000,945 | ---- | M] () -- C:\Users\Public\Desktop\Scribblenauts Unmasked A DC Comics Adventure.lnk [2013/09/27 01:21:16 | 000,078,432 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atimpc64.dll [2013/09/27 01:21:16 | 000,071,704 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atimpc32.dll [2013/09/27 01:21:12 | 000,078,432 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\amdpcom64.dll [2013/09/27 01:21:12 | 000,071,704 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\amdpcom32.dll [2013/09/27 01:21:10 | 000,143,304 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiuxp64.dll [2013/09/27 01:21:10 | 000,126,336 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiuxpag.dll [2013/09/27 01:21:08 | 000,115,512 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll [2013/09/27 01:21:08 | 000,098,496 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiu9pag.dll [2013/09/27 01:21:06 | 001,311,360 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\aticfx64.dll [2013/09/27 01:21:04 | 001,094,000 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\aticfx32.dll [2013/09/27 01:21:00 | 009,571,960 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atidxx64.dll [2013/09/27 01:20:58 | 008,228,328 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atidxx32.dll [2013/09/27 01:20:52 | 006,512,312 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiumdva.dll [2013/09/27 01:20:48 | 006,630,232 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiumdag.dll [2013/09/27 01:20:42 | 007,139,552 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll [2013/09/27 01:20:40 | 007,751,408 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd64.dll [2013/09/27 01:18:38 | 012,760,576 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\atikmdag.sys [2013/09/27 01:04:56 | 000,229,888 | ---- | M] () -- C:\Windows\SysNative\clinfo.exe [2013/09/27 01:04:38 | 000,098,816 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\OpenVideo64.dll [2013/09/27 01:04:30 | 000,083,456 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\OpenVideo.dll [2013/09/27 01:04:24 | 000,086,528 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\OVDecode64.dll [2013/09/27 01:04:20 | 000,073,216 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\OVDecode.dll [2013/09/27 01:04:02 | 028,469,248 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\amdocl64.dll [2013/09/27 01:01:48 | 024,008,192 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\amdocl.dll [2013/09/27 00:59:52 | 000,063,488 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2013/09/27 00:59:46 | 000,057,344 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2013/09/27 00:54:46 | 000,129,536 | ---- | M] (AMD) -- C:\Windows\SysNative\coinst_13.20.16.dll [2013/09/27 00:51:52 | 025,828,864 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atio6axx.dll [2013/09/27 00:45:38 | 000,538,400 | ---- | M] () -- C:\Windows\SysWow64\atiapfxx.blb [2013/09/27 00:45:38 | 000,538,400 | ---- | M] () -- C:\Windows\SysNative\atiapfxx.blb [2013/09/27 00:45:12 | 000,368,640 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe [2013/09/27 00:45:00 | 000,062,464 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalrt64.dll [2013/09/27 00:44:58 | 000,052,224 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalrt.dll [2013/09/27 00:44:48 | 000,055,808 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalcl64.dll [2013/09/27 00:44:46 | 000,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalcl.dll [2013/09/27 00:44:30 | 015,716,352 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticaldd64.dll [2013/09/27 00:41:04 | 014,302,208 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticaldd.dll [2013/09/27 00:32:12 | 021,724,160 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atioglxx.dll [2013/09/27 00:23:46 | 000,442,368 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atidemgy.dll [2013/09/27 00:23:36 | 000,031,232 | ---- | M] (AMD) -- C:\Windows\SysNative\atimuixx.dll [2013/09/27 00:23:30 | 000,580,608 | ---- | M] (AMD) -- C:\Windows\SysNative\atieclxx.exe [2013/09/27 00:22:34 | 000,239,616 | ---- | M] (AMD) -- C:\Windows\SysNative\atiesrxx.exe [2013/09/27 00:20:54 | 000,190,976 | ---- | M] (AMD) -- C:\Windows\SysNative\atitmm64.dll [2013/09/27 00:07:54 | 003,399,312 | ---- | M] () -- C:\Windows\SysNative\atiumd6a.cap [2013/09/26 23:58:14 | 003,433,360 | ---- | M] () -- C:\Windows\SysWow64\atiumdva.cap [2013/09/26 23:50:48 | 001,133,568 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiadlxx.dll [2013/09/26 23:50:32 | 000,819,712 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atiadlxy.dll [2013/09/26 23:50:16 | 000,075,264 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6pxx.dll [2013/09/26 23:50:10 | 000,069,632 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiglpxx.dll [2013/09/26 23:50:10 | 000,069,632 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiglpxx.dll [2013/09/26 23:50:06 | 000,100,352 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6txx.dll [2013/09/26 23:49:56 | 000,096,768 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atigktxx.dll [2013/09/26 23:49:46 | 000,619,008 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\atikmpag.sys [2013/09/26 23:46:22 | 000,043,520 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\ati2erec.dll [2013/09/26 17:15:28 | 000,051,200 | ---- | M] () -- C:\Windows\SysNative\kdbsdk64.dll [2013/09/26 17:10:30 | 000,038,912 | ---- | M] () -- C:\Windows\SysWow64\kdbsdk32.dll [2013/09/25 23:22:15 | 000,002,239 | ---- | M] () -- C:\Users\DBDesign\Desktop\Alien Rage.lnk [2013/09/25 20:01:28 | 000,001,292 | ---- | M] () -- C:\Users\Public\Desktop\PAC-MAN Championship Edition DX+.lnk [2013/09/23 03:27:49 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013/09/23 02:55:16 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013/09/23 02:54:55 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013/09/23 02:54:51 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013/09/23 02:54:51 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013/09/18 15:31:59 | 000,100,083 | ---- | M] () -- C:\Users\DBDesign\Desktop\x_110862ee.jpg [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013/10/17 18:33:21 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2013/10/17 15:19:11 | 000,001,007 | ---- | C] () -- C:\Users\DBDesign\Desktop\SpeedFan.lnk [2013/10/17 15:19:11 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo [2013/10/17 14:53:07 | 000,061,440 | ---- | C] ( ) -- C:\Users\DBDesign\Desktop\VEW.exe [2013/10/17 10:45:28 | 000,002,094 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Feature Mananger.lnk [2013/10/15 22:06:56 | 000,001,084 | ---- | C] () -- C:\Users\DBDesign\Desktop\Wow - Raccourci.lnk [2013/10/15 15:20:11 | 000,000,613 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk [2013/10/15 14:42:32 | 000,441,341 | ---- | C] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104204.jpg [2013/10/15 14:41:43 | 000,575,610 | ---- | C] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104021.jpg [2013/10/15 14:41:28 | 000,567,052 | ---- | C] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104015.jpg [2013/10/15 14:41:10 | 000,566,381 | ---- | C] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104051.jpg [2013/10/15 14:40:55 | 000,395,908 | ---- | C] () -- C:\Users\DBDesign\Desktop\WoWScrnShot_101513_104225.jpg [2013/10/15 14:31:48 | 000,001,469 | ---- | C] () -- C:\Users\DBDesign\Desktop\Fifa 14.lnk [2013/10/15 09:37:36 | 000,424,328 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013/10/13 19:00:12 | 000,386,923 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml [2013/10/02 19:52:56 | 000,001,511 | ---- | C] () -- C:\Users\DBDesign\Desktop\Terraria.lnk [2013/09/28 11:03:13 | 000,000,945 | ---- | C] () -- C:\Users\Public\Desktop\Scribblenauts Unmasked A DC Comics Adventure.lnk [2013/09/27 01:04:56 | 000,229,888 | ---- | C] () -- C:\Windows\SysNative\clinfo.exe [2013/09/27 00:45:38 | 000,538,400 | ---- | C] () -- C:\Windows\SysWow64\atiapfxx.blb [2013/09/27 00:45:38 | 000,538,400 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb [2013/09/27 00:07:54 | 003,399,312 | ---- | C] () -- C:\Windows\SysNative\atiumd6a.cap [2013/09/26 23:58:14 | 003,433,360 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.cap [2013/09/26 17:15:28 | 000,051,200 | ---- | C] () -- C:\Windows\SysNative\kdbsdk64.dll [2013/09/26 17:10:30 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2013/09/25 23:22:15 | 000,002,239 | ---- | C] () -- C:\Users\DBDesign\Desktop\Alien Rage.lnk [2013/09/25 22:56:04 | 000,000,949 | ---- | C] () -- C:\Users\Public\Desktop\Ma-Config.com - Démarrer la détection.lnk [2013/09/25 20:01:28 | 000,001,292 | ---- | C] () -- C:\Users\Public\Desktop\PAC-MAN Championship Edition DX+.lnk [2013/09/18 15:31:58 | 000,100,083 | ---- | C] () -- C:\Users\DBDesign\Desktop\x_110862ee.jpg [2013/09/11 18:51:39 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll [2013/07/30 16:13:01 | 000,000,921 | ---- | C] () -- C:\Windows\ARPR.INI [2013/07/29 22:55:18 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\AsIO.dll [2013/07/29 22:55:18 | 000,013,440 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2013/07/29 00:03:34 | 000,021,007 | ---- | C] () -- C:\Windows\W2BNEUnin.dat [2013/07/23 15:34:35 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll [2013/07/21 19:39:20 | 000,291,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2013/07/21 19:39:18 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe [2013/07/21 19:39:18 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2013/07/21 12:42:28 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2013/06/05 02:51:06 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe [2013/06/05 02:51:06 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe [2013/06/05 02:03:28 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2013/06/05 02:03:28 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012/07/26 12:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2012/07/26 12:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2012/07/26 11:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2012/07/26 05:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2012/07/26 00:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2012/07/26 00:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2012/06/02 18:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2013/07/21 19:38:24 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013/08/02 10:28:20 | 019,758,080 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013/08/02 09:08:10 | 017,561,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 07:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 07:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 07:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013/09/24 23:52:36 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\.minecraft [2013/08/28 02:43:04 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\.minecraft - copie 2 [2013/08/28 11:43:25 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\.minecraft - piegue [2013/07/21 17:12:47 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\AVG [2013/07/21 15:24:34 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\AVG2013 [2013/09/05 00:20:04 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Battle.net [2013/10/17 09:28:07 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\DAEMON Tools Lite [2013/08/01 15:29:11 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\HideIPEasy [2013/08/17 14:06:41 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Kalypso Media [2013/07/21 14:32:22 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Leadertech [2013/07/22 01:38:16 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\library_dir [2013/08/12 00:59:59 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\LolClient [2013/07/21 18:45:20 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Mirillis [2013/10/17 09:28:04 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Notepad++ [2013/07/31 13:23:53 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\PlatinumHideIP [2013/10/11 18:59:39 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Raptr [2013/09/27 19:24:44 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Rogue Legacy [2013/10/06 17:07:59 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\TEdit [2013/07/21 16:46:10 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Theta [2013/09/05 19:05:18 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\TrueCrypt [2013/09/15 10:45:48 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\TS3Client [2013/07/21 15:24:07 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\TuneUp Software [2013/10/03 21:32:51 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Unity [2013/10/17 09:28:04 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\uTorrent [2013/08/17 23:31:00 | 000,000,000 | ---D | M] -- C:\Users\DBDesign\AppData\Roaming\Wondershare [2013/08/28 11:06:36 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software [2013/08/28 11:06:36 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color] [2012/07/26 07:44:30 | 000,398,156 | RHS- | M] () -- C:\bootmgr [2012/06/02 18:30:55 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT [2013/10/17 17:47:49 | 2575,450,111 | -HS- | M] () -- C:\hiberfil.sys [2013/10/17 17:47:51 | 1275,068,416 | -HS- | M] () -- C:\pagefile.sys [2013/10/17 18:33:21 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2013/10/17 17:47:57 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013/10/17 14:55:28 | 000,002,387 | ---- | M] () -- C:\VEW.txt [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color] [2012/07/26 12:11:35 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini [color=#A23BEC]< %PROGRAMFILES%\*. >[/color] [2013/07/23 18:51:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\2K Games [2013/07/22 15:31:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe [2013/07/29 10:36:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Age2HD [2013/09/25 23:20:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AGEIA Technologies [2013/10/17 10:45:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AMD AVT [2013/07/22 22:14:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update [2013/07/31 21:06:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ascaron Entertainment [2013/10/17 15:16:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS [2013/07/21 14:36:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies [2013/07/27 20:05:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AVG [2013/09/30 20:38:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Battle.net [2013/07/26 13:01:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bethesda Softworks [2013/07/22 22:13:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour [2013/07/22 15:37:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cheat Engine 6.3 [2013/09/25 21:47:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CI Games [2013/10/17 10:45:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files [2013/07/21 16:23:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Lite [2013/08/17 13:52:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DUNGEONS - Steam Special Edition [2013/07/30 16:12:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ElcomSoft [2013/07/23 18:47:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Electronic Arts [2013/07/21 13:40:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google [2013/10/03 18:52:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Hearthstone [2013/08/01 15:28:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HideIPEasy [2013/10/17 15:16:10 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information [2013/10/12 06:53:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer [2013/07/22 22:15:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes [2013/10/06 14:21:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LogMeIn Hamachi [2013/08/31 00:02:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LOLReplay [2013/07/21 17:32:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2013/09/15 16:51:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Analysis Services [2013/08/16 01:44:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE [2013/09/15 16:50:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office [2013/08/16 01:37:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SDKs [2013/08/16 01:40:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight [2013/08/16 01:40:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server [2013/08/16 01:39:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition [2013/08/16 01:39:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Synchronization Services [2013/08/16 01:41:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 10.0 [2013/09/15 16:52:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2013/08/16 01:43:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft XNA [2013/08/16 01:38:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET [2013/07/21 18:44:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mirillis [2013/10/01 22:38:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox [2013/10/12 06:55:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service [2013/09/15 16:53:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild [2013/08/06 01:50:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Notepad++ [2013/09/25 20:01:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PAC-MAN Championship Edition DX+ [2013/07/30 23:34:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Payday The Heist [2013/10/02 21:10:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Raptr [2013/07/21 16:08:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies [2013/07/21 13:58:51 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype [2013/10/17 15:19:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SpeedFan [2013/10/17 09:28:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam [2013/09/08 14:26:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Ubisoft [2013/07/24 02:27:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN [2013/07/29 00:03:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Warcraft II BNE [2013/08/17 02:48:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender [2012/07/26 14:08:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail [2013/07/28 02:59:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player [2012/07/26 12:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Multimedia Platform [2012/07/26 12:12:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT [2013/07/21 15:39:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer [2012/07/26 12:13:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices [2012/07/26 12:12:59 | 000,000,000 | -HSD | M] -- C:\Program Files (x86)\Windows Sidebar [2013/09/06 15:22:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wondershare [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2012/07/26 09:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\SysNative\drivers\AGP440.sys [2012/07/26 09:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_81a4c6c9cc9d86a0\AGP440.sys [2012/07/26 09:00:49 | 000,063,216 | ---- | M] (Microsoft Corporation) MD5=01590377A5AB19E792528C628A2A68F9 -- C:\Windows\WinSxS\amd64_machine.inf_31bf3856ad364e35_6.2.9200.16384_none_12dc94a048750f71\AGP440.sys [color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color] [2012/07/26 07:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=2D14788C5D0836292BEB27BBE109BE56 -- C:\Windows\SysNative\appmgmts.dll [2012/07/26 07:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) MD5=2D14788C5D0836292BEB27BBE109BE56 -- C:\Windows\WinSxS\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.2.9200.16384_none_da988fc8e5cdd730\appmgmts.dll [2012/07/26 07:17:52 | 000,152,064 | ---- | M] (Microsoft Corporation) MD5=8F0F777B167CADDF9D206180B8558433 -- C:\Windows\SysWOW64\appmgmts.dll [2012/07/26 07:17:52 | 000,152,064 | ---- | M] (Microsoft Corporation) MD5=8F0F777B167CADDF9D206180B8558433 -- C:\Windows\WinSxS\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.2.9200.16384_none_e4ed3a1b1a2e992b\appmgmts.dll [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2012/07/26 09:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\drivers\atapi.sys [2012/07/26 09:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_69660e2be041f47b\atapi.sys [2012/07/26 09:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_b733d17ea1e7f604\atapi.sys [2012/07/26 09:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.16384_none_3601cf7eab4e0493\atapi.sys [2012/07/26 09:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.16548_none_36311422ab29f479\atapi.sys [2012/07/26 09:00:48 | 000,025,840 | ---- | M] (Microsoft Corporation) MD5=A721FF570C2387E383BDDEA9632863C9 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_6.2.9200.20652_none_36a9df45c455182a\atapi.sys [color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color] [2013/08/12 13:55:37 | 000,000,619 | ---- | M] () MD5=1A57D23757BC4B88A2B0370EC2E1EB22 -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.20717_none_df774bf9ac0a075d\autochk.exe [2013/05/15 06:24:10 | 000,793,088 | ---- | M] (Microsoft Corporation) MD5=61ADD65C9D1E2EAF8BB080A4D6AAB055 -- C:\Windows\SysWOW64\autochk.exe [2013/05/15 06:24:10 | 000,793,088 | ---- | M] (Microsoft Corporation) MD5=61ADD65C9D1E2EAF8BB080A4D6AAB055 -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16612_none_dee8adbc92f0e8e0\autochk.exe [2013/07/29 13:56:19 | 000,040,790 | ---- | M] () MD5=6D410B8A3DA9F87696C1C39D3C04B5D4 -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16384_none_3abd94ae4b8558e6\autochk.exe [2013/08/12 13:55:04 | 000,034,714 | ---- | M] () MD5=C083256D4755A15A7C577093F343D5F1 -- C:\Windows\WinSxS\x86_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16384_none_de9ef92a9327e7b0\autochk.exe [2013/07/29 13:56:20 | 000,000,596 | ---- | M] () MD5=C32E9039D7C891BCD6AFB738C08832B5 -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.20717_none_3b95e77d64677893\autochk.exe [2013/05/15 06:25:59 | 000,888,320 | ---- | M] (Microsoft Corporation) MD5=E47235E8DF26CA48DA189ACFD756329C -- C:\Windows\SysNative\autochk.exe [2013/05/15 06:25:59 | 000,888,320 | ---- | M] (Microsoft Corporation) MD5=E47235E8DF26CA48DA189ACFD756329C -- C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.2.9200.16612_none_3b0749404b4e5a16\autochk.exe [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2012/07/26 06:30:19 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=9E7AEA59776D904607985AFFE7E5E183 -- C:\Windows\SysNative\drivers\beep.sys [2012/07/26 06:30:19 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=9E7AEA59776D904607985AFFE7E5E183 -- C:\Windows\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.2.9200.16384_none_1cea48b791617e52\beep.sys [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2013/08/07 21:33:02 | 000,191,911 | ---- | M] () MD5=09A48E047C3428859CDE683934C44D08 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_b5080a0137b9becc\explorer.exe [2013/06/01 15:34:21 | 002,391,280 | ---- | M] (Microsoft Corporation) MD5=0E8E6463F81C80AFBED533E0F1F8895D -- C:\Windows\explorer.exe [2013/06/01 15:34:21 | 002,391,280 | ---- | M] (Microsoft Corporation) MD5=0E8E6463F81C80AFBED533E0F1F8895D -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16628_none_aac334d9034c59e1\explorer.exe [2013/08/07 21:33:10 | 000,190,101 | ---- | M] () MD5=36728831D85B25F315F3CBA752B0566A -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20733_none_b591aa9850d758e4\explorer.exe [2013/08/07 21:32:58 | 000,193,351 | ---- | M] () MD5=3C7B77F7344CB703FBE3507E4F5FE03D -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_b4d2f8c937e166b1\explorer.exe [2013/07/29 18:53:38 | 000,220,321 | ---- | M] () MD5=A92DAE7C4876DE2E56B6524486433235 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_ab3dfcc41c75b5f2\explorer.exe [2013/07/29 18:53:35 | 000,220,310 | ---- | M] () MD5=C680E77BE6949379A1DDA939D2C99930 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16433_none_aab35faf0358fcd1\explorer.exe [2013/07/29 14:08:16 | 000,221,955 | ---- | M] () MD5=C9725E2006A56E84BFD7842FE74CFDE5 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16384_none_aa7e4e770380a4b6\explorer.exe [2013/08/07 21:33:06 | 000,191,929 | ---- | M] () MD5=D0D23FEE9210A7D225917A43B7AC7A0E -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20534_none_b592a71650d677ed\explorer.exe [2013/07/29 18:53:41 | 000,217,360 | ---- | M] () MD5=E0BBC14160A2C12D075AF5BF2803CF69 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.20733_none_ab3d00461c7696e9\explorer.exe [2013/06/01 14:24:46 | 002,106,176 | ---- | M] (Microsoft Corporation) MD5=EAFE46B0292D2BD2467835E2ACF717CC -- C:\Windows\SysWOW64\explorer.exe [2013/06/01 14:24:46 | 002,106,176 | ---- | M] (Microsoft Corporation) MD5=EAFE46B0292D2BD2467835E2ACF717CC -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.2.9200.16628_none_b517df2b37ad1bdc\explorer.exe [color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color] [2012/07/26 07:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=C0A9999E5B4C1953C6B07CD9105B41FD -- C:\Windows\SysWOW64\hidserv.dll [2012/07/26 07:18:34 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=C0A9999E5B4C1953C6B07CD9105B41FD -- C:\Windows\WinSxS\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.2.9200.16384_none_39ca9a244593a029\hidserv.dll [2012/07/26 07:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=FAC37D7B3D6354A5A5E19A45B50B4008 -- C:\Windows\SysNative\hidserv.dll [2012/07/26 07:05:46 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=FAC37D7B3D6354A5A5E19A45B50B4008 -- C:\Windows\WinSxS\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.2.9200.16384_none_2f75efd21132de2e\hidserv.dll [color=#A23BEC]< MD5 for: IASTORV.SYS >[/color] [2012/07/26 09:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\SysNative\drivers\iaStorV.sys [2012/07/26 09:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_819876bbe5c3b25f\iaStorV.sys [2012/07/26 09:00:52 | 000,411,888 | ---- | M] (Intel Corporation) MD5=5E394EBD26FD68AA9300332C46BEDD62 -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_6.2.9200.16384_none_07daf9dd118c3086\iaStorV.sys [color=#A23BEC]< MD5 for: IMM32.DLL >[/color] [2012/07/26 06:27:28 | 000,121,344 | ---- | M] (Microsoft Corporation) MD5=51E886381803D55926A6D50643B9436C -- C:\Windows\SysWOW64\imm32.dll [2012/07/26 06:27:28 | 000,121,344 | ---- | M] (Microsoft Corporation) MD5=51E886381803D55926A6D50643B9436C -- C:\Windows\WinSxS\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.2.9200.16384_none_bf746fcd388ff4f4\imm32.dll [2012/07/26 07:05:49 | 000,213,504 | ---- | M] (Microsoft Corporation) MD5=DA66D6D4A0B77D57F5CF449B1231010F -- C:\Windows\SysNative\imm32.dll [2012/07/26 07:05:49 | 000,213,504 | ---- | M] (Microsoft Corporation) MD5=DA66D6D4A0B77D57F5CF449B1231010F -- C:\Windows\WinSxS\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.2.9200.16384_none_b51fc57b042f32f9\imm32.dll [color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color] [2013/08/09 12:23:46 | 000,052,285 | ---- | M] () MD5=092A40924D33E9510F5FEADD8A19718C -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16384_none_f6dc36f8147080a0\kernel32.dll [2013/08/01 14:07:19 | 000,122,358 | ---- | M] () MD5=106207FA9578CAFA23B2A21185148555 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16604_none_ecde11b7dfced692\kernel32.dll [2013/08/09 12:23:47 | 000,043,697 | ---- | M] () MD5=5A9CA105A1B76AC504FBBE9086A8B5EB -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16604_none_f732bc0a142f988d\kernel32.dll [2013/05/31 03:08:26 | 000,974,848 | ---- | M] (Microsoft Corporation) MD5=941B22338052E8A0ADA7944B827E3E2A -- C:\Windows\SysWOW64\kernel32.dll [2013/05/31 03:08:26 | 000,974,848 | ---- | M] (Microsoft Corporation) MD5=941B22338052E8A0ADA7944B827E3E2A -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16627_none_f7201d10143d1c74\kernel32.dll [2013/08/01 14:07:17 | 000,146,568 | ---- | M] () MD5=94B76DEB33B9B059B1DA9E5A43FAC7C7 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16384_none_ec878ca5e00fbea5\kernel32.dll [2013/08/01 14:07:22 | 000,140,299 | ---- | M] () MD5=B1E8DAC29856EAB7244DD769739AF1F3 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20732_none_ed453e2af9069781\kernel32.dll [2013/08/01 14:07:20 | 000,147,542 | ---- | M] () MD5=B99D9F049B4F176AC84859DE01EC7A6C -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20708_none_ed6bafaaf8e8dbb8\kernel32.dll [2013/08/09 12:23:50 | 000,000,190 | ---- | M] () MD5=D3D539E8A5B4A1F9B9D7229BB884B30C -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20732_none_f799e87d2d67597c\kernel32.dll [2013/05/31 03:24:29 | 001,257,472 | ---- | M] (Microsoft Corporation) MD5=E1FF9D65E6B86F7EBB531AE36C5AF635 -- C:\Windows\SysNative\kernel32.dll [2013/05/31 03:24:29 | 001,257,472 | ---- | M] (Microsoft Corporation) MD5=E1FF9D65E6B86F7EBB531AE36C5AF635 -- C:\Windows\WinSxS\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.16627_none_eccb72bddfdc5a79\kernel32.dll [2013/08/09 12:23:49 | 000,043,698 | ---- | M] () MD5=ED4AC290EF03D628C0BD0B7E5230133C -- C:\Windows\WinSxS\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.2.9200.20708_none_f7c059fd2d499db3\kernel32.dll [color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color] [2012/10/11 09:44:51 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=1AC307A2F7317007BC382046B3835202 -- C:\Windows\SysNative\mswsock.dll [2012/10/11 09:44:51 | 000,355,328 | ---- | M] (Microsoft Corporation) MD5=1AC307A2F7317007BC382046B3835202 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16433_none_11520fa2b6e84ca0\mswsock.dll [2013/08/06 21:16:07 | 000,001,574 | ---- | M] () MD5=1D67B62A1B69F616C0CD55BB2BC79545 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16384_none_111cfe6ab70ff485\mswsock.dll [2013/08/06 21:16:07 | 000,000,945 | ---- | M] () MD5=8AADD39F9E2C31B668B5F7A8BD64B0C2 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.20534_none_11dcacb7d00505c1\mswsock.dll [2012/10/11 09:06:45 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=C317E72447B437F99CC750BD876DF30E -- C:\Windows\SysWOW64\mswsock.dll [2012/10/11 09:06:45 | 000,289,280 | ---- | M] (Microsoft Corporation) MD5=C317E72447B437F99CC750BD876DF30E -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16433_none_b533741efe8adb6a\mswsock.dll [2013/08/25 12:10:41 | 000,000,998 | ---- | M] () MD5=ED158CD1EB69FF85BC04EB5BC2480DDF -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.20534_none_b5be113417a7948b\mswsock.dll [2013/08/25 12:10:33 | 000,009,902 | ---- | M] () MD5=FD40BEEBB47DE849DA99A86728C8FF93 -- C:\Windows\WinSxS\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.2.9200.16384_none_b4fe62e6feb2834f\mswsock.dll [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2013/08/02 20:48:34 | 000,126,379 | ---- | M] () MD5=1A0766F82866AEBFAF0162F084D49D8F -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16518_none_b26eda01b193ddc7\ndis.sys [2013/08/02 20:48:31 | 000,132,457 | ---- | M] () MD5=3B35A364B3229846D9C813FA1E9B7343 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16420_none_b25c05dfb1a331d9\ndis.sys [2013/08/02 20:48:33 | 000,132,458 | ---- | M] () MD5=3C2778FABB23D23073E51355625CFE7C -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16433_none_b25436d1b1a899cf\ndis.sys [2013/08/02 20:48:37 | 000,132,461 | ---- | M] () MD5=4FDB9BA72C2082F63AFBA31433291A00 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20534_none_b2ded3e6cac552f0\ndis.sys [2013/08/02 20:48:35 | 000,051,156 | ---- | M] () MD5=6860589AEFF4902E89AF40D008A5BE92 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16628_none_b2640bfbb19bf6df\ndis.sys [2013/08/02 20:48:40 | 000,123,250 | ---- | M] () MD5=68F82528025D0B23F91B33D52F247B4D -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20733_none_b2ddd768cac633e7\ndis.sys [2013/08/02 20:48:36 | 000,132,461 | ---- | M] () MD5=76FA9A8B33C737C7384CFC7566D3ED97 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20521_none_b2e6a2f4cabfeafa\ndis.sys [2013/08/02 20:48:41 | 000,123,394 | ---- | M] () MD5=8CCF09E96DDF012F89E51386C50047AB -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20750_none_b2c536b2cad91fc4\ndis.sys [2013/06/17 02:41:31 | 000,997,632 | ---- | M] (Microsoft Corporation) MD5=A10E176F3B2BF83EDE7B5C4658C93B66 -- C:\Windows\SysNative\drivers\ndis.sys [2013/06/17 02:41:31 | 000,997,632 | ---- | M] (Microsoft Corporation) MD5=A10E176F3B2BF83EDE7B5C4658C93B66 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16643_none_b2496ab1b1b0b00e\ndis.sys [2013/08/02 20:48:39 | 000,126,382 | ---- | M] () MD5=ABEC633AFBDFABA54E67215F4012993C -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.20623_none_b2e8a56ecabe1acf\ndis.sys [2013/08/02 20:48:30 | 000,132,490 | ---- | M] () MD5=F71CAD0353749F158F73073C970A1507 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_6.2.9200.16384_none_b21f2599b1d041b4\ndis.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2012/07/26 07:19:22 | 000,634,368 | ---- | M] (Microsoft Corporation) MD5=EEF9DA64D7B1DD51FB8AB9EFCC560E3E -- C:\Windows\SysWOW64\netlogon.dll [2012/07/26 07:19:22 | 000,634,368 | ---- | M] (Microsoft Corporation) MD5=EEF9DA64D7B1DD51FB8AB9EFCC560E3E -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.2.9200.16384_none_60d608f9f61ee049\netlogon.dll [2012/07/26 07:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) MD5=FDC70965F0FC9DFEBC919627DED5DDFF -- C:\Windows\SysNative\netlogon.dll [2012/07/26 07:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) MD5=FDC70965F0FC9DFEBC919627DED5DDFF -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.2.9200.16384_none_56815ea7c1be1e4e\netlogon.dll [color=#A23BEC]< MD5 for: NTFS.SYS >[/color] [2013/08/02 20:49:32 | 000,041,771 | ---- | M] () MD5=6D8733404AC00C28797D5194E1BDE29A -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16497_none_ff3303f9a6b534a7\ntfs.sys [2013/02/02 14:54:54 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=76929F4A69E425911A63B407E26C2589 -- C:\Windows\SysNative\drivers\ntfs.sys [2013/02/02 14:54:54 | 001,933,544 | ---- | M] (Microsoft Corporation) MD5=76929F4A69E425911A63B407E26C2589 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16518_none_ff8a8589a6736b9d\ntfs.sys [2013/08/02 20:49:29 | 000,146,946 | ---- | M] () MD5=D7EBCF749886CF9AFD67DB4287B92FC0 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.16384_none_ff3ad121a6afcf8a\ntfs.sys [2013/08/02 20:49:34 | 000,041,699 | ---- | M] () MD5=DD3FFCBAEA00363B0C7767DE2EF96175 -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.20604_none_001af118bf8c8a1a\ntfs.sys [2013/08/02 20:49:36 | 000,001,970 | ---- | M] () MD5=F800057D2307E74E77CD81925104D67D -- C:\Windows\WinSxS\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.2.9200.20623_none_000450f6bf9da8a5\ntfs.sys [color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color] [2012/07/26 09:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\SysNative\drivers\nvstor.sys [2012/07/26 09:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_7ba65ba4b222e751\nvstor.sys [2012/07/26 09:00:55 | 000,168,176 | ---- | M] (NVIDIA Corporation) MD5=27AFC428D1D32ABD04A86763A4EDDEA9 -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_6.2.9200.16384_none_92a46a8c48c2da5e\nvstor.sys [color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color] [2012/07/26 07:08:36 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=5E3A61CE8F1CE3A166FFD76425CB6340 -- C:\Windows\SysNative\proquota.exe [2012/07/26 07:08:36 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=5E3A61CE8F1CE3A166FFD76425CB6340 -- C:\Windows\WinSxS\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.2.9200.16384_none_80909f3c1c295de0\proquota.exe [2012/07/26 07:20:53 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=B7D1E1915AA8A55E2FAF56BC3B524C48 -- C:\Windows\SysWOW64\proquota.exe [2012/07/26 07:20:53 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=B7D1E1915AA8A55E2FAF56BC3B524C48 -- C:\Windows\WinSxS\x86_microsoft-windows-proquota_31bf3856ad364e35_6.2.9200.16384_none_247203b863cbecaa\proquota.exe [color=#A23BEC]< MD5 for: QMGR.DLL >[/color] [2012/07/26 07:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) MD5=D598C44A7072D3108D8D8102EC5E07F7 -- C:\Windows\SysNative\qmgr.dll [2012/07/26 07:07:01 | 000,826,368 | ---- | M] (Microsoft Corporation) MD5=D598C44A7072D3108D8D8102EC5E07F7 -- C:\Windows\WinSxS\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.2.9200.16384_none_7c5a6c5183364183\qmgr.dll [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2012/07/26 07:07:07 | 000,224,768 | ---- | M] (Microsoft Corporation) MD5=4F6E1CA672370A9BCAC049CE3AB7F666 -- C:\Windows\SysNative\scecli.dll [2012/07/26 07:07:07 | 000,224,768 | ---- | M] (Microsoft Corporation) MD5=4F6E1CA672370A9BCAC049CE3AB7F666 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.2.9200.16384_none_90d789c062dfa509\scecli.dll [2012/07/26 07:19:52 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=B95DC83FF580DD92F487C2F4D0854B6A -- C:\Windows\SysWOW64\scecli.dll [2012/07/26 07:19:52 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=B95DC83FF580DD92F487C2F4D0854B6A -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.2.9200.16384_none_9b2c341297406704\scecli.dll [color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color] [2012/07/26 07:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) MD5=3F215BF2D4D8D6756298B25B579772C2 -- C:\Windows\SysNative\spoolsv.exe [2012/07/26 07:08:47 | 000,769,024 | ---- | M] (Microsoft Corporation) MD5=3F215BF2D4D8D6756298B25B579772C2 -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.2.9200.16384_none_2f154a864b4cfb0d\spoolsv.exe [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color] [2013/08/13 20:39:23 | 000,000,583 | ---- | M] () MD5=6D14FCB0191A0EF5B733E497B77D116F -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_b32de2dcefa42bec\svchost.exe [2013/08/03 12:36:35 | 000,000,609 | ---- | M] () MD5=6F138ADF45B7950B8910E62CBA0E5E65 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.20521_none_0f4c7e60a8019d22\svchost.exe [2012/09/20 09:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\SysWOW64\svchost.exe [2012/09/20 09:55:26 | 000,023,040 | ---- | M] (Microsoft Corporation) MD5=A46DC432F81473F526E3994AA483E366 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_b2a345c7d68772cb\svchost.exe [2013/04/04 16:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe [2013/08/13 20:39:23 | 000,003,208 | ---- | M] () MD5=DBE409878A91A13B857CE06365A18338 -- C:\Windows\WinSxS\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_b2666581d6b482a6\svchost.exe [2013/08/03 12:36:32 | 000,002,873 | ---- | M] () MD5=E68B9BFA6398B12E7901BF246A37CF33 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16384_none_0e8501058f11f3dc\svchost.exe [2012/09/20 10:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\SysNative\svchost.exe [2012/09/20 10:33:52 | 000,029,696 | ---- | M] (Microsoft Corporation) MD5=EDE27EACE742EE2888C5DD36400A2EC0 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.2.9200.16420_none_0ec1e14b8ee4e401\svchost.exe [color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color] [2012/07/26 07:07:29 | 000,723,968 | ---- | M] (Microsoft Corporation) MD5=541EE228D0DEF392F7B2DFD885DD021B -- C:\Windows\SysNative\termsrv.dll [2012/07/26 07:07:29 | 000,723,968 | ---- | M] (Microsoft Corporation) MD5=541EE228D0DEF392F7B2DFD885DD021B -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.2.9200.16384_none_e768e92cde084d59\termsrv.dll [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2012/07/26 07:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\SysNative\userinit.exe [2012/07/26 07:08:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E925F7BA032920D58DD284B6181A247 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_34f2617a5b742e02\userinit.exe [2012/07/26 07:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\SysWOW64\userinit.exe [2012/07/26 07:21:00 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=9F6289D194A04A09671FEED4B6CB6EF7 -- C:\Windows\WinSxS\x86_microsoft-windows-userinit_31bf3856ad364e35_6.2.9200.16384_none_d8d3c5f6a316bccc\userinit.exe [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color] [2013/06/01 16:06:28 | 000,332,032 | ---- | M] (Microsoft Corporation) MD5=0548F5D3282A91B69F9D39EE771307F7 -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.20733_none_6f3f10b49ecf22f7\volsnap.sys [2012/07/26 08:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_9d78abd6ac3df11c\volsnap.sys [2012/07/26 08:57:09 | 000,332,016 | ---- | M] (Microsoft Corporation) MD5=2FB3CDFD5EAF4CD9D4AFAF96877D13AE -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16384_none_6e805ee585d930c4\volsnap.sys [2013/06/01 15:26:33 | 000,327,936 | ---- | M] (Microsoft Corporation) MD5=78A5BBA3819FFFC62FFEC3E2220D102D -- C:\Windows\SysNative\drivers\volsnap.sys [2013/06/01 15:26:33 | 000,327,936 | ---- | M] (Microsoft Corporation) MD5=78A5BBA3819FFFC62FFEC3E2220D102D -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_84c99cb521dc4714\volsnap.sys [2013/06/01 15:26:33 | 000,327,936 | ---- | M] (Microsoft Corporation) MD5=78A5BBA3819FFFC62FFEC3E2220D102D -- C:\Windows\WinSxS\amd64_volume.inf_31bf3856ad364e35_6.2.9200.16628_none_6ec5454785a4e5ef\volsnap.sys [color=#A23BEC]< MD5 for: WININET.DLL >[/color] [2013/10/06 18:44:58 | 000,390,572 | ---- | M] () MD5=117B56469767492B68FA18C77F753AD5 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20521_none_8a5208acf9e25c10\wininet.dll [2013/09/23 03:23:28 | 002,248,704 | ---- | M] (Microsoft Corporation) MD5=1377A310439639A610097ED56975AE19 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20831_none_8a329932f9f9c93a\wininet.dll [2013/10/06 18:44:52 | 000,390,568 | ---- | M] () MD5=333310296FCD473521B264459E09C8FE -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16433_none_a12b51eee0322d03\wininet.dll [2013/08/21 06:20:35 | 001,777,664 | ---- | M] (Microsoft Corporation) MD5=3E1BFC0169E719604833FA26182BE778 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20796_none_2e245d6f418f5442\wininet.dll [2013/10/06 18:28:47 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=3F9494D8D4B8A2FAB574F9EC63848E41 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20521_none_2e336d294184eada\wininet.dll [2013/08/21 09:34:40 | 000,381,407 | ---- | M] () MD5=58AD2349B04C71F29A58ACC1169A755A -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20768_none_8a3fca84f9efacb5\wininet.dll [2013/10/06 18:28:54 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=60C3E80CC1E2FE3F2F78366A597ACEAF -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20534_none_2e34291b41845114\wininet.dll [2013/10/06 18:28:40 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=6579ADCC0E4251635B21D07B883325B5 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16433_none_450cb66b27d4bbcd\wininet.dll [2013/09/23 03:36:52 | 001,777,152 | ---- | M] (Microsoft Corporation) MD5=67220EB57550F10E1219D57D89937456 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20831_none_2e13fdaf419c5804\wininet.dll [2013/10/06 18:45:01 | 000,390,577 | ---- | M] () MD5=6AAE9DD358E3F22ECB80CFAF48D19BF8 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20534_none_8a52c49ef9e1c24a\wininet.dll [2013/08/21 08:12:06 | 002,241,024 | ---- | M] (Microsoft Corporation) MD5=6DBE239FF1C9650A794C974B8C7913D7 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16688_none_a11a41a0e03e63bd\wininet.dll [2013/10/06 18:28:21 | 001,775,616 | ---- | M] (Microsoft Corporation) MD5=892AD406F3C57897E6015A959ACF447C -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16420_none_450bfa7927d55593\wininet.dll [2013/08/21 11:31:38 | 000,312,711 | ---- | M] () MD5=9C79660543C41CAEA070BF30E621BCB5 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20768_none_2e212f0141923b7f\wininet.dll [2013/10/06 18:44:55 | 000,001,413 | ---- | M] () MD5=AEAEFE0CE0043F9DF93552FB56ABB086 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16660_none_a118f74ce03f6407\wininet.dll [2013/09/16 20:54:09 | 000,381,360 | ---- | M] () MD5=BB3905E78C37C3378403C58C5E85214D -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.20796_none_8a42f8f2f9ecc578\wininet.dll [2013/10/06 18:28:06 | 001,775,104 | ---- | M] (Microsoft Corporation) MD5=C024001390FBA48FD77605E90E42FBE7 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16384_none_451c710127c83830\wininet.dll [2013/09/23 02:55:10 | 002,241,024 | ---- | M] (Microsoft Corporation) MD5=D28B35DE88D27EFB27DF4B1E8319E3C0 -- C:\Windows\SysNative\wininet.dll [2013/09/23 02:55:10 | 002,241,024 | ---- | M] (Microsoft Corporation) MD5=D28B35DE88D27EFB27DF4B1E8319E3C0 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16721_none_a10a0f70e04b343d\wininet.dll [2013/10/06 18:44:49 | 000,390,475 | ---- | M] () MD5=D2EC716B73CBA4DD00EB7FF25E2DBCF1 -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16420_none_a12a95fce032c6c9\wininet.dll [2013/07/26 07:13:24 | 001,767,936 | ---- | M] (Microsoft Corporation) MD5=DAA3903F06116AE9EE7AC1D1B93684A4 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16660_none_44fa5bc927e1f2d1\wininet.dll [2013/10/06 18:44:46 | 000,388,303 | ---- | M] () MD5=E37BC59CEDDF71A3CDE7B809F326592F -- C:\Windows\WinSxS\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16384_none_a13b0c84e025a966\wininet.dll [2013/09/23 03:28:06 | 001,767,936 | ---- | M] (Microsoft Corporation) MD5=E4FEB264B47360B7296AEA4E052F88D8 -- C:\Windows\SysWOW64\wininet.dll [2013/09/23 03:28:06 | 001,767,936 | ---- | M] (Microsoft Corporation) MD5=E4FEB264B47360B7296AEA4E052F88D8 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16721_none_44eb73ed27edc307\wininet.dll [2013/08/21 06:06:11 | 001,767,936 | ---- | M] (Microsoft Corporation) MD5=F73CE26EFC7AE039A8534722395CE9A7 -- C:\Windows\WinSxS\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.0.9200.16688_none_44fba61d27e0f287\wininet.dll [color=#A23BEC]< MD5 for: WININIT.EXE >[/color] [2012/07/26 07:08:50 | 000,132,608 | ---- | M] (Microsoft Corporation) MD5=FE9AB232B56A12224E8A3F3F9878C9A3 -- C:\Windows\SysNative\wininit.exe [2012/07/26 07:08:50 | 000,132,608 | ---- | M] (Microsoft Corporation) MD5=FE9AB232B56A12224E8A3F3F9878C9A3 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.2.9200.16384_none_89bc60338e14dc99\wininit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2013/08/08 00:15:22 | 000,053,884 | ---- | M] () MD5=117F6BCE0064D3203348F0A7F3E944F0 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe [2013/08/08 00:15:22 | 000,053,884 | ---- | M] () MD5=117F6BCE0064D3203348F0A7F3E944F0 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20521_none_c95425d677a55b32\winlogon.exe [2013/08/08 00:15:17 | 000,053,889 | ---- | M] () MD5=2C96F59E166DAEF0A14239938A4C34F9 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe [2013/08/08 00:15:17 | 000,053,889 | ---- | M] () MD5=2C96F59E166DAEF0A14239938A4C34F9 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16384_none_c88ca87b5eb5b1ec\winlogon.exe [2013/08/08 00:15:25 | 000,001,620 | ---- | M] () MD5=4DAD351FFAA2A21E9813B85334AC9A6C -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe [2013/08/08 00:15:25 | 000,001,620 | ---- | M] () MD5=4DAD351FFAA2A21E9813B85334AC9A6C -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.20534_none_c94c56c877aac328\winlogon.exe [2013/08/08 00:15:19 | 000,053,876 | ---- | M] () MD5=99D04A8E18807435B13F4B2A66A52D0A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe [2013/08/08 00:15:19 | 000,053,876 | ---- | M] () MD5=99D04A8E18807435B13F4B2A66A52D0A -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16420_none_c8c988c15e88a211\winlogon.exe [2013/04/04 16:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2013/04/04 16:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2012/10/11 09:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\SysNative\winlogon.exe [2012/10/11 09:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\SysNative\winlogon.exe [2012/10/11 09:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe [2012/10/11 09:46:58 | 000,517,120 | ---- | M] (Microsoft Corporation) MD5=BCF2036A0DD579E47C008C133550283E -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.2.9200.16433_none_c8c1b9b35e8e0a07\winlogon.exe [color=#A23BEC]< MD5 for: WS2_32.DLL >[/color] [2012/07/26 09:26:48 | 000,345,088 | ---- | M] (Microsoft Corporation) MD5=2E5B349ACDA36C20612795754DB93312 -- C:\Windows\SysNative\ws2_32.dll [2012/07/26 09:26:48 | 000,345,088 | ---- | M] (Microsoft Corporation) MD5=2E5B349ACDA36C20612795754DB93312 -- C:\Windows\WinSxS\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.2.9200.16384_none_4b815827581a3bbb\ws2_32.dll [2012/07/26 07:20:38 | 000,310,784 | ---- | M] (Microsoft Corporation) MD5=B3CC9EDFD97F7087013A9A47089DF571 -- C:\Windows\SysWOW64\ws2_32.dll [2012/07/26 07:20:38 | 000,310,784 | ---- | M] (Microsoft Corporation) MD5=B3CC9EDFD97F7087013A9A47089DF571 -- C:\Windows\WinSxS\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.2.9200.16384_none_ef62bca39fbcca85\ws2_32.dll [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\Session Manager\SubSystems /s >[/color] [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\​*.sys /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\System32\config\*​.sav >[/color] [color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color] [2013/07/21 12:50:49 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-109731523-2391859423-767708429-1001\desktop.ini [2012/07/26 11:22:10 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT [2013/07/21 13:39:36 | 000,001,092 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [2013/07/21 13:39:37 | 000,001,096 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [2013/08/28 12:17:45 | 000,001,002 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job [2013/09/15 17:02:56 | 000,000,294 | ---- | C] () -- C:\Windows\Tasks\AutoKMS.job < End of report >