cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-04-2016
Ran by MjAbu (administrator) on DESKTOP-D0L9FDO (28-04-2016 17:06:43)
Running from C:\Users\MjAbu\Desktop
Loaded Profiles: MjAbu (Available Profiles: MjAbuZayed & MjAbu)
Platform: Windows 10 Education (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Autodesk Inc.) C:\Users\MjAbu\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE16\CSISYNCCLIENT.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
() C:\Users\MjAbu\jagexcache\jagexlauncher\bin\JagexLauncher.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23248560 2016-04-08] (Dropbox, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7390608 2016-04-26] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-04-26] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{749f9e42-601d-458c-a308-c36adac54ade}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-04-26]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR Profile: C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-27]
CHR Extension: (Google Drive) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-27]
CHR Extension: (YouTube) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-27]
CHR Extension: (Google Sheets) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-27]
CHR Extension: (Google Docs Offline) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-27]
CHR Extension: (Avast Online Security) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-27]
CHR Extension: (Gmail) - C:\Users\MjAbu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-04-26]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160 2015-02-05] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-04-26] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [370656 2016-04-26] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [5570272 2016-04-26] (Avast Software)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-26] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-26] (Dropbox, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S4 mi-raysat_3dsmax2016_64; C:\Program Files\Autodesk\3ds Max 2016\NVIDIA\Satellite\raysat_3dsmax2016_64server.exe [86016 2011-09-15] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-04-26] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-04-26] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-04-26] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [536312 2016-04-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-04-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-04-26] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-04-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-04-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-04-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-04-26] (AVAST Software)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-28] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [195336 2016-02-13] (Intel Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [161760 2016-04-26] (AVAST Software)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [45720 2016-02-13] (Toshiba Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [323392 2016-04-26] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U0 Partizan; system32\drivers\Partizan.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-28 16:28 - 2016-04-28 16:28 - 00016148 _____ C:\Windows\system32\DESKTOP-D0L9FDO_MjAbu_HistoryPrediction.bin
2016-04-28 16:09 - 2016-04-28 16:42 - 00000024 _____ C:\Users\MjAbu\jagexappletviewer.preferences
2016-04-28 16:09 - 2016-04-28 16:40 - 00000044 _____ C:\Users\MjAbu\jagex_cl_runescape_LIVE.dat
2016-04-28 16:09 - 2016-04-28 16:40 - 00000024 _____ C:\Users\MjAbu\random.dat
2016-04-28 16:08 - 2016-04-28 16:09 - 00000000 ____D C:\Users\MjAbu\jagexcache
2016-04-28 16:08 - 2016-04-28 16:08 - 00002110 _____ C:\Users\MjAbu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk
2016-04-28 16:08 - 2016-04-28 16:08 - 00002080 _____ C:\Users\MjAbu\Desktop\RuneScape.lnk
2016-04-28 16:08 - 2016-04-28 16:08 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape
2016-04-28 16:06 - 2016-04-28 16:08 - 24223744 _____ C:\Users\MjAbu\Downloads\RuneScape.msi
2016-04-28 16:00 - 2016-04-28 16:00 - 00000000 ___HD C:\OneDriveTemp
2016-04-28 15:59 - 2016-04-28 15:59 - 00006680 _____ C:\Users\MjAbu\Desktop\Fixlog.txt
2016-04-28 09:54 - 2016-04-28 09:54 - 00038534 _____ C:\Users\MjAbu\Desktop\Addition.txt
2016-04-28 09:53 - 2016-04-28 17:06 - 00015092 _____ C:\Users\MjAbu\Desktop\FRST.txt
2016-04-28 09:52 - 2016-04-28 17:06 - 00000000 ____D C:\FRST
2016-04-28 09:51 - 2016-04-28 09:52 - 02376704 _____ (Farbar) C:\Users\MjAbu\Desktop\FRST64.exe
2016-04-27 20:14 - 2016-04-27 20:14 - 00000000 ____D C:\Users\MjAbu\AppData\LocalLow\Adobe
2016-04-27 19:05 - 2016-04-27 19:07 - 00000000 ____D C:\Users\MjAbu\OneDrive\Documents\RegRun2
2016-04-27 19:05 - 2016-04-27 19:06 - 00000000 ____D C:\ProgramData\RegRun
2016-04-27 19:05 - 2016-04-27 19:05 - 00000002 RSHOT C:\Windows\winstart.bat
2016-04-27 19:05 - 2016-04-27 19:05 - 00000002 RSHOT C:\Windows\SysWOW64\CONFIG.NT
2016-04-27 19:05 - 2016-04-27 19:05 - 00000002 RSHOT C:\Windows\SysWOW64\AUTOEXEC.NT
2016-04-27 19:04 - 2016-04-27 19:20 - 00000000 ____D C:\Program Files (x86)\UnHackMe
2016-04-27 19:04 - 2016-04-27 19:04 - 00000000 ____D C:\Users\MjAbu\Downloads\unhackme
2016-04-27 19:01 - 2016-04-27 19:03 - 17475297 _____ C:\Users\MjAbu\Downloads\unhackme.zip
2016-04-27 18:52 - 2016-04-27 18:52 - 00380928 _____ C:\Users\MjAbu\Downloads\9eke8pt4.exe
2016-04-27 18:51 - 2016-04-27 18:51 - 00589528 _____ (Microsoft Corporation) C:\Users\MjAbu\Downloads\mssstool64.exe
2016-04-27 18:38 - 2016-04-27 18:51 - 00503452 _____ C:\TDSSKiller.3.1.0.9_27.04.2016_18.38.11_log.txt
2016-04-27 18:36 - 2016-04-28 16:00 - 00038488 _____ C:\Windows\ntbtlog.txt
2016-04-27 18:34 - 2016-04-27 18:36 - 00258284 _____ C:\TDSSKiller.3.1.0.9_27.04.2016_18.34.15_log.txt
2016-04-27 18:33 - 2016-04-27 18:34 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\MjAbu\Downloads\tdsskiller.exe
2016-04-27 18:30 - 2016-04-27 18:30 - 00000000 ____D C:\Windows\pss
2016-04-27 18:19 - 2016-04-27 18:19 - 00231390 _____ C:\Users\MjAbu\Downloads\RootkitRevealer.zip
2016-04-27 18:19 - 2016-04-27 18:19 - 00000000 ____D C:\Users\MjAbu\Downloads\RootkitRevealer
2016-04-27 18:14 - 2016-04-27 18:14 - 00277707 _____ C:\Users\MjAbu\Downloads\rkhunter-1.4.2 (1).tar.gz
2016-04-27 18:13 - 2016-04-27 18:13 - 00277707 _____ C:\Users\MjAbu\Downloads\rkhunter-1.4.2.tar.gz
2016-04-27 18:13 - 2016-04-27 18:13 - 00000000 ____D C:\Users\MjAbu\Downloads\rkhunter-1.4.2
2016-04-27 18:13 - 2016-04-27 18:13 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\WinRAR
2016-04-27 17:15 - 2016-04-27 17:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\NetworkTiles
2016-04-27 16:00 - 2016-04-27 16:00 - 00086573 _____ C:\Users\MjAbu\Desktop\ZHPDiag1.txt
2016-04-27 15:59 - 2016-04-27 15:59 - 00086570 _____ C:\Users\MjAbu\Desktop\ZHPDiag.txt
2016-04-27 15:59 - 2016-04-27 15:59 - 00000000 ____D C:\Users\MjAbu\AppData\Local\MicrosoftEdge
2016-04-27 15:57 - 2016-04-28 16:00 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-27 15:57 - 2016-04-27 18:40 - 00001169 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-27 15:57 - 2016-04-27 18:39 - 00000865 _____ C:\Users\MjAbu\Desktop\ZHPDiag.lnk
2016-04-27 15:57 - 2016-04-27 16:47 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\ZHP
2016-04-27 15:57 - 2016-04-27 15:57 - 02195456 _____ C:\Users\MjAbu\Downloads\ZHPDiag3.exe
2016-04-27 15:57 - 2016-04-27 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-27 15:57 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-04-27 15:57 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-27 15:57 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-04-27 15:34 - 2016-04-27 15:34 - 00000000 ____D C:\Users\MjAbu\AppData\Local\PeerDistRepub
2016-04-27 15:27 - 2016-04-27 15:56 - 22851472 _____ (Malwarebytes ) C:\Users\MjAbu\Downloads\mbam-setup-2.2.1.1043.exe
2016-04-27 14:19 - 2016-04-28 16:00 - 00000000 ___RD C:\Users\MjAbu\OneDrive
2016-04-27 14:19 - 2016-04-27 18:41 - 00002365 _____ C:\Users\MjAbu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\AVAST Software
2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\Autodesk
2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Dropbox
2016-04-27 14:18 - 2016-04-27 14:18 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Autodesk
2016-04-27 14:17 - 2016-04-27 18:39 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Comms
2016-04-27 14:15 - 2016-04-28 16:09 - 00000000 ____D C:\Users\MjAbu
2016-04-27 14:15 - 2016-04-27 20:14 - 00000000 ____D C:\Users\MjAbu\AppData\Roaming\Adobe
2016-04-27 14:15 - 2016-04-27 15:19 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Google
2016-04-27 14:15 - 2016-04-27 14:33 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Packages
2016-04-27 14:15 - 2016-04-27 14:15 - 00016148 _____ C:\Windows\system32\DESKTOP-D0L9FDO_MjAbuZayed_HistoryPrediction.bin
2016-04-27 14:15 - 2016-04-27 14:15 - 00000020 ___SH C:\Users\MjAbu\ntuser.ini
2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 _SHDL C:\Users\MjAbu\My Documents
2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\VirtualStore
2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\TileDataLayer
2016-04-27 14:15 - 2016-04-27 14:15 - 00000000 ____D C:\Users\MjAbu\AppData\Local\Publishers
2016-04-27 08:23 - 2016-04-27 08:27 - 33815395 _____ C:\Users\MjAbuZayed\Downloads\Codes.rar
2016-04-27 00:21 - 2016-04-27 00:21 - 00000000 ____D C:\Windows\SysWOW64\vbox
2016-04-27 00:21 - 2016-04-27 00:21 - 00000000 ____D C:\Windows\system32\vbox
2016-04-26 22:24 - 2016-04-27 18:40 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-04-26 22:24 - 2016-04-27 18:40 - 00001204 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-04-26 22:24 - 2016-04-26 22:24 - 00003178 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1461698645
2016-04-26 22:23 - 2016-04-26 22:23 - 00161760 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2016-04-26 22:23 - 2016-04-26 22:23 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-04-26 22:09 - 2016-04-27 18:40 - 00002011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premier.lnk
2016-04-26 22:09 - 2016-04-27 18:40 - 00002005 _____ C:\Users\Public\Desktop\Avast Premier.lnk
2016-04-26 22:09 - 2016-04-26 22:09 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\AVAST Software
2016-04-26 22:08 - 2016-04-26 22:09 - 00287528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00536312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00465792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-04-26 22:08 - 2016-04-26 22:08 - 00166432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-04-26 22:08 - 2016-04-26 22:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-04-26 22:08 - 2016-04-26 22:08 - 00004006 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-04-26 22:01 - 2016-04-26 22:23 - 00000000 ____D C:\ProgramData\AVAST Software
2016-04-26 22:01 - 2016-04-26 22:23 - 00000000 ____D C:\Program Files\AVAST Software
2016-04-26 22:00 - 2016-04-26 22:00 - 05139184 _____ (AVAST Software) C:\Users\MjAbuZayed\Downloads\avast_premier_antivirus_setup_online.exe
2016-04-26 22:00 - 2016-04-26 22:00 - 00027623 _____ C:\ProgramData\1461697240.bdinstall.bin
2016-04-26 21:59 - 2016-04-26 21:59 - 00236471 _____ C:\ProgramData\1461697099.bdinstall.bin
2016-04-26 21:51 - 2016-04-27 15:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-26 21:51 - 2016-04-26 21:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-26 21:48 - 2016-04-26 21:50 - 22851472 _____ (Malwarebytes ) C:\Users\MjAbuZayed\Downloads\mbam-setup-2.2.1.1043.exe
2016-04-26 21:37 - 2016-04-26 21:37 - 00041990 _____ C:\Users\MjAbuZayed\Downloads\dhcpfind.zip
2016-04-26 21:37 - 2016-04-26 21:37 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\dhcpfind
2016-04-26 21:17 - 2016-04-26 21:17 - 05509632 _____ (Microsoft Corporation) C:\Windows\system32\gppref.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 05096960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gppref.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 03399680 _____ (Microsoft Corporation) C:\Windows\system32\propshts.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 02602496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propshts.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\gpprefbr.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefbr.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\gpregistrybrowser.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpregistrybrowser.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcn.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcn.dll
2016-04-26 21:17 - 2016-04-26 21:17 - 00001315 _____ C:\Windows\DfsrAdmin.exe.config
2016-04-26 21:17 - 2016-04-26 21:17 - 00001311 _____ C:\Windows\SysWOW64\DfsMgmt.dll.config
2016-04-26 21:17 - 2016-04-26 21:17 - 00001311 _____ C:\Windows\system32\DfsMgmt.dll.config
2016-04-26 21:17 - 2016-04-26 21:17 - 00000764 _____ C:\Windows\system32\dsac.exe.config
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\SysWOW64\ipam
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\ServerManagerInternal
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\ipam
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\HardenedFabric
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\system32\BestPractices
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\Cluster
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Windows\ADFS
2016-04-26 21:17 - 2016-04-26 21:17 - 00000000 ____D C:\Program Files\Update Services
2016-04-26 21:15 - 2016-04-26 21:15 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\MjAbuZayed\Downloads\WinPcap_4_1_3.exe
2016-04-26 21:15 - 2016-04-26 21:15 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\Wireshark
2016-04-26 21:06 - 2015-10-29 07:13 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\LbfoAdminLib.dll
2016-04-26 21:06 - 2015-10-29 07:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\VLHelper.dll
2016-04-26 21:06 - 2015-10-29 06:00 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpfixup.exe
2016-04-26 21:06 - 2015-10-29 06:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\redirusr.exe
2016-04-26 21:06 - 2015-10-29 06:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\redircmp.exe
2016-04-26 21:06 - 2015-10-29 06:00 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nfsclusrc.dll
2016-04-26 21:06 - 2015-10-29 05:59 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rendom.exe
2016-04-26 21:06 - 2015-10-29 05:58 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsacls.exe
2016-04-26 21:06 - 2015-10-29 05:56 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\SVMProvisioning.dll
2016-04-26 21:06 - 2015-10-29 05:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\rrasprxy.dll
2016-04-26 21:06 - 2015-10-29 05:55 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\SusNativeCommon.dll
2016-04-26 21:06 - 2015-10-29 05:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\gpfixup.exe
2016-04-26 21:06 - 2015-10-29 05:54 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\redircmp.exe
2016-04-26 21:06 - 2015-10-29 05:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\BdeAducExt.dll
2016-04-26 21:06 - 2015-10-29 05:53 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\redirusr.exe
2016-04-26 21:06 - 2015-10-29 05:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\nfsclusrc.dll
2016-04-26 21:06 - 2015-10-29 05:52 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\rendom.exe
2016-04-26 21:06 - 2015-10-29 05:52 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\rtrfiltr.dll
2016-04-26 21:06 - 2015-10-29 05:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\dsacls.exe
2016-04-26 21:06 - 2015-10-29 05:51 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\dsuiwiz.dll
2016-04-26 21:06 - 2015-10-29 05:51 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\domadmin.dll
2016-04-26 21:06 - 2015-10-29 05:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\LicMgr.exe
2016-04-26 21:06 - 2015-10-29 05:48 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\schmmgmt.dll
2016-04-26 21:06 - 2015-10-29 05:26 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\certpdef.dll
2016-04-26 21:06 - 2015-10-29 05:25 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\TlsBrand.dll
2016-04-26 21:06 - 2015-04-20 18:21 - 00151743 _____ C:\Windows\system32\FailoverClusters.SnapInHelper.msc
2016-04-26 21:06 - 2015-04-20 18:18 - 00146019 _____ C:\Windows\system32\gptedit.msc
2016-04-26 21:06 - 2015-04-20 18:17 - 00034000 _____ C:\Windows\system32\rrasmgmt.msc
2016-04-26 21:06 - 2015-04-20 18:12 - 00115237 _____ C:\Windows\system32\lsdiag.msc
2016-04-26 21:06 - 2015-04-04 01:29 - 00146019 _____ C:\Windows\SysWOW64\gptedit.msc
2016-04-26 21:05 - 2016-04-27 18:40 - 00001240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Server Manager.lnk
2016-04-26 21:05 - 2015-10-29 07:26 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Interop.DfsrHelper.dll
2016-04-26 21:05 - 2015-10-29 07:24 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmlib.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 09647104 _____ (Microsoft Corporation) C:\Windows\system32\damgmt.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 05720576 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.Plugins.Ipam.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 04208128 _____ (Microsoft Corporation) C:\Windows\system32\dsac.exe
2016-04-26 21:05 - 2015-10-29 07:13 - 02302976 _____ (Microsoft Corporation) C:\Windows\system32\ipamapi.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.IdentityServer.ApplicationProxy.Management.ViewModel.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\ClusterUpdateUI.exe
2016-04-26 21:05 - 2015-10-29 07:13 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.NPASRole.Plugin.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.DeploymentServices.ServerManager.Plugin.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\lsdiag.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00236544 _____ (Microsoft Corporation) C:\Windows\DfsrAdmin.exe
2016-04-26 21:05 - 2015-10-29 07:13 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.DhcpServer.Plugin.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\HgsClientWmi.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\LbfoAdmin.exe
2016-04-26 21:05 - 2015-10-29 07:13 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\mtedit.exe
2016-04-26 21:05 - 2015-10-29 07:13 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.IdentityServer.ApplicationProxy.Management.Utils.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.IdentityServer.ApplicationProxy.Management.Common.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Windows.ServerManager.NetworkController.Plugin.dll
2016-04-26 21:05 - 2015-10-29 07:13 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\Interop.DfsrHelper.dll
2016-04-26 21:05 - 2015-10-29 07:12 - 00458240 _____ (Microsoft Corporation) C:\Windows\system32\Vmw.exe
2016-04-26 21:05 - 2015-10-29 07:12 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\ServerManager.exe
2016-04-26 21:05 - 2015-10-29 07:12 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\ShieldingDataFileWizard.exe
2016-04-26 21:05 - 2015-10-29 07:12 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\ServerTelemetryConfig.exe
2016-04-26 21:05 - 2015-10-29 07:12 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\TemplateDiskWizard.exe
2016-04-26 21:05 - 2015-10-29 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\CSDeployRes.dll
2016-04-26 21:05 - 2015-10-29 07:10 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srmlib.dll
2016-04-26 21:05 - 2015-10-29 06:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DfsRes.dll
2016-04-26 21:05 - 2015-10-29 06:04 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srm_ps.dll
2016-04-26 21:05 - 2015-10-29 06:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmtrace.dll
2016-04-26 21:05 - 2015-10-29 06:01 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FcSrv_ps.dll
2016-04-26 21:05 - 2015-10-29 06:00 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srm.dll
2016-04-26 21:05 - 2015-10-29 06:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netdom.exe
2016-04-26 21:05 - 2015-10-29 06:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfsfrsHost.exe
2016-04-26 21:05 - 2015-10-29 05:59 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ldifde.exe
2016-04-26 21:05 - 2015-10-29 05:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\csvde.exe
2016-04-26 21:05 - 2015-10-29 05:57 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmstormod.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmshell.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adrclient.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\DfsRes.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\srm_ps.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\HgsClientInterop.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lstelemetry.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\srvtelres.dll
2016-04-26 21:05 - 2015-10-29 05:57 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\fssmres.dll
2016-04-26 21:05 - 2015-10-29 05:56 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\damgmtres.dll
2016-04-26 21:05 - 2015-10-29 05:56 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\ipamres.dll
2016-04-26 21:05 - 2015-10-29 05:56 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\WSEDeployRes.dll
2016-04-26 21:05 - 2015-10-29 05:56 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\FSDeployRes.dll
2016-04-26 21:05 - 2015-10-29 05:56 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\DsDeployRes.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00181760 _____ C:\Windows\system32\PtpTemplateNative.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\srmtrace.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dsacn.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\EssentialsConfigPluginNative.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\FcSrv_ps.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\HostGuardianServiceClientResources.dll
2016-04-26 21:05 - 2015-10-29 05:55 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\BPAInst.dll
2016-04-26 21:05 - 2015-10-29 05:54 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\srm.dll
2016-04-26 21:05 - 2015-10-29 05:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\svrmgrnc.dll
2016-04-26 21:05 - 2015-10-29 05:54 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\SrvMgrInst.dll
2016-04-26 21:05 - 2015-10-29 05:54 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\MuxInst.dll
2016-04-26 21:05 - 2015-10-29 05:54 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\dfscmd.exe
2016-04-26 21:05 - 2015-10-29 05:54 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\FssmInst.dll
2016-04-26 21:05 - 2015-10-29 05:53 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmscan.dll
2016-04-26 21:05 - 2015-10-29 05:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\netdom.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\ldifde.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\dsmod.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wlbs.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\nlb.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\csvde.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\dsrm.exe
2016-04-26 21:05 - 2015-10-29 05:53 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\dfsfrsHost.exe
2016-04-26 21:05 - 2015-10-29 05:52 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\vmclusex.dll
2016-04-26 21:05 - 2015-10-29 05:52 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ippromon.dll
2016-04-26 21:05 - 2015-10-29 05:52 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\dsadd.exe
2016-04-26 21:05 - 2015-10-29 05:52 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\dsmove.exe
2016-04-26 21:05 - 2015-10-29 05:51 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\srmstormod.dll
2016-04-26 21:05 - 2015-10-29 05:51 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\srmshell.dll
2016-04-26 21:05 - 2015-10-29 05:51 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\adrclient.dll
2016-04-26 21:05 - 2015-10-29 05:51 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\dsget.exe
2016-04-26 21:05 - 2015-10-29 05:51 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\dsquery.exe
2016-04-26 21:05 - 2015-10-29 05:50 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\lrwizdll.dll
2016-04-26 21:05 - 2015-10-29 05:50 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\filescrn.exe
2016-04-26 21:05 - 2015-10-29 05:50 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\storrept.exe
2016-04-26 21:05 - 2015-10-29 05:49 - 00957440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srmclient.dll
2016-04-26 21:05 - 2015-10-29 05:49 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\ipmontr.dll
2016-04-26 21:05 - 2015-10-29 05:49 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdminCommon.dll
2016-04-26 21:05 - 2015-10-29 05:49 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPrepSrv.dll
2016-04-26 21:05 - 2015-10-29 05:48 - 00580608 _____ (Microsoft Corporation) C:\Windows\system32\certtmpl.dll
2016-04-26 21:05 - 2015-10-29 05:48 - 00475648 _____ (Microsoft Corporation) C:\Windows\system32\nlbmgr.exe
2016-04-26 21:05 - 2015-10-29 05:48 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\dirquota.exe
2016-04-26 21:05 - 2015-10-29 05:47 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\srmscan.dll
2016-04-26 21:05 - 2015-10-29 05:46 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\ipsnap.dll
2016-04-26 21:05 - 2015-10-29 05:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdminCommon.dll
2016-04-26 21:05 - 2015-10-29 05:43 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\CPrepSrv.dll
2016-04-26 21:05 - 2015-10-29 05:42 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\srmclient.dll
2016-04-26 21:05 - 2015-10-29 05:30 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\mprsnap.dll
2016-04-26 21:05 - 2015-10-29 05:27 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\ocsprevp.dll
2016-04-26 21:05 - 2015-10-29 05:26 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\pkiview.dll
2016-04-26 21:05 - 2015-10-29 05:26 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\certadm.dll
2016-04-26 21:05 - 2015-10-29 05:26 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\OCSPAdminNative.dll
2016-04-26 21:05 - 2015-10-29 05:26 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\capesnpn.dll
2016-04-26 21:05 - 2015-10-29 05:26 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\certxds.dll
2016-04-26 21:05 - 2015-10-29 05:25 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll
2016-04-26 21:05 - 2015-10-29 05:25 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\lsdiagres.dll
2016-04-26 21:05 - 2015-10-29 05:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\AagMmcRes.dll
2016-04-26 21:05 - 2015-10-29 05:25 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\RdmsInst.dll
2016-04-26 21:05 - 2015-10-29 05:25 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\rdmsres.dll
2016-04-26 21:05 - 2015-10-29 05:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\tsPubIconHelper.dll
2016-04-26 21:05 - 2015-04-20 18:31 - 00268640 _____ C:\Windows\system32\dfsrHealthReport.xsl
2016-04-26 21:05 - 2015-04-20 18:31 - 00155741 _____ C:\Windows\system32\dfsrPropagationReport.xsl
2016-04-26 21:05 - 2015-04-20 18:31 - 00055953 _____ C:\Windows\system32\dfsmgmt.msc
2016-04-26 21:05 - 2015-04-20 18:30 - 00145293 _____ C:\Windows\system32\certtmpl.msc
2016-04-26 21:05 - 2015-04-20 18:30 - 00144354 _____ C:\Windows\system32\pkiview.msc
2016-04-26 21:05 - 2015-04-20 18:30 - 00108461 _____ C:\Windows\system32\fsrm.msc
2016-04-26 21:05 - 2015-04-20 18:30 - 00092853 _____ C:\Windows\system32\certsrv.msc
2016-04-26 21:05 - 2015-04-20 18:30 - 00092554 _____ C:\Windows\system32\ocsp.msc
2016-04-26 21:05 - 2015-04-20 18:21 - 00150924 _____ C:\Windows\system32\CluAdmin.msc
2016-04-26 21:05 - 2015-04-20 18:18 - 00146712 _____ C:\Windows\system32\gpme.msc
2016-04-26 21:05 - 2015-04-20 18:18 - 00146446 _____ C:\Windows\system32\gpmc.msc
2016-04-26 21:05 - 2015-04-20 18:18 - 00003034 _____ C:\Windows\system32\DefaultParameters.xml
2016-04-26 21:05 - 2015-04-20 18:18 - 00001151 _____ C:\Windows\system32\ClusterUpdateUI.exe.config
2016-04-26 21:05 - 2015-04-20 18:17 - 00146654 _____ C:\Windows\system32\dhcpmgmt.msc
2016-04-26 21:05 - 2015-04-20 18:16 - 00145867 _____ C:\Windows\system32\dnsmgmt.msc
2016-04-26 21:05 - 2015-04-20 18:16 - 00145017 _____ C:\Windows\system32\dsa.msc
2016-04-26 21:05 - 2015-04-20 18:16 - 00144951 _____ C:\Windows\system32\domain.msc
2016-04-26 21:05 - 2015-04-20 18:14 - 00054530 _____ C:\Windows\system32\LServer_PKConfig.xml
2016-04-26 21:05 - 2015-04-20 18:12 - 00115860 _____ C:\Windows\system32\tsgateway.msc
2016-04-26 21:05 - 2015-04-04 01:38 - 00268640 _____ C:\Windows\SysWOW64\dfsrHealthReport.xsl
2016-04-26 21:05 - 2015-04-04 01:38 - 00155741 _____ C:\Windows\SysWOW64\dfsrPropagationReport.xsl
2016-04-26 21:05 - 2015-04-04 01:38 - 00055953 _____ C:\Windows\SysWOW64\dfsmgmt.msc
2016-04-26 21:05 - 2015-04-04 01:29 - 00146712 _____ C:\Windows\SysWOW64\gpme.msc
2016-04-26 21:05 - 2015-04-04 01:29 - 00146446 _____ C:\Windows\SysWOW64\gpmc.msc
2016-04-26 21:04 - 2016-04-26 21:09 - 47590392 _____ (Wireshark development team) C:\Users\MjAbuZayed\Downloads\Wireshark-win64-2.0.3.exe
2016-04-26 21:04 - 2015-10-29 07:12 - 08694784 _____ (Microsoft Corporation) C:\Windows\system32\RAMgmtUI.exe
2016-04-26 21:04 - 2015-10-29 05:57 - 00248320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpmon.dll
2016-04-26 21:04 - 2015-10-29 05:57 - 00177152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsmgmt.exe
2016-04-26 21:04 - 2015-10-29 05:56 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ldp.exe
2016-04-26 21:04 - 2015-10-29 05:55 - 00734208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpme.dll
2016-04-26 21:04 - 2015-10-29 05:55 - 00263680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\repadmin.exe
2016-04-26 21:04 - 2015-10-29 05:55 - 00228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsdbutil.exe
2016-04-26 21:04 - 2015-10-29 05:54 - 00475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPRSoP.dll
2016-04-26 21:04 - 2015-10-29 05:54 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcdiag.exe
2016-04-26 21:04 - 2015-10-29 05:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdsutil.exe
2016-04-26 21:04 - 2015-10-29 05:51 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DfsrHelper.dll
2016-04-26 21:04 - 2015-10-29 05:51 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\dhcpmon.dll
2016-04-26 21:04 - 2015-10-29 05:51 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\dsmgmt.exe
2016-04-26 21:04 - 2015-10-29 05:51 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\dfsutil.exe
2016-04-26 21:04 - 2015-10-29 05:51 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\dfsncimprov.dll
2016-04-26 21:04 - 2015-10-29 05:50 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\dnscmd.exe
2016-04-26 21:04 - 2015-10-29 05:50 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\ldp.exe
2016-04-26 21:04 - 2015-10-29 05:49 - 01721344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpmgmt.dll
2016-04-26 21:04 - 2015-10-29 05:49 - 00963584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdminCustom.dll
2016-04-26 21:04 - 2015-10-29 05:49 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\repadmin.exe
2016-04-26 21:04 - 2015-10-29 05:49 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\dsdbutil.exe
2016-04-26 21:04 - 2015-10-29 05:49 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\DfsDiag.exe
2016-04-26 21:04 - 2015-10-29 05:48 - 01483776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GPOAdmin.dll
2016-04-26 21:04 - 2015-10-29 05:48 - 00785408 _____ (Microsoft Corporation) C:\Windows\system32\adsiedit.dll
2016-04-26 21:04 - 2015-10-29 05:48 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\gpme.dll
2016-04-26 21:04 - 2015-10-29 05:48 - 00612864 _____ (Microsoft Corporation) C:\Windows\system32\dcdiag.exe
2016-04-26 21:04 - 2015-10-29 05:48 - 00501760 _____ (Microsoft Corporation) C:\Windows\system32\GPRSoP.dll
2016-04-26 21:04 - 2015-10-29 05:48 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\ntdsutil.exe
2016-04-26 21:04 - 2015-10-29 05:45 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\dsadmin.dll
2016-04-26 21:04 - 2015-10-29 05:45 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\DfsrHelper.dll
2016-04-26 21:04 - 2015-10-29 05:44 - 01749504 _____ (Microsoft Corporation) C:\Windows\system32\dnsmgr.dll
2016-04-26 21:04 - 2015-10-29 05:44 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\adprop.dll
2016-04-26 21:04 - 2015-10-29 05:43 - 02031616 _____ (Microsoft Corporation) C:\Windows\system32\gpmgmt.dll
2016-04-26 21:04 - 2015-10-29 05:43 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdminCustom.dll
2016-04-26 21:04 - 2015-10-29 05:43 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-04-26 21:04 - 2015-10-29 05:42 - 01902592 _____ (Microsoft Corporation) C:\Windows\system32\GPOAdmin.dll
2016-04-26 21:04 - 2015-10-29 05:42 - 01669632 _____ (Microsoft Corporation) C:\Windows\system32\dcpromoui.dll
2016-04-26 21:04 - 2015-10-29 05:42 - 01034752 _____ (Microsoft Corporation) C:\Windows\system32\wvrcimprov.dll
2016-04-26 21:04 - 2015-10-29 05:42 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-04-26 21:04 - 2015-10-29 05:41 - 04017152 _____ (Microsoft Corporation) C:\Windows\system32\dhcpsnap.dll
2016-04-26 21:04 - 2015-10-29 05:35 - 02436608 _____ (Microsoft Corporation) C:\Windows\system32\dfsrdiag.exe
2016-04-26 21:04 - 2015-10-29 05:33 - 01332224 _____ (Microsoft Corporation) C:\Windows\system32\dcpromocmd.dll
2016-04-26 21:04 - 2015-10-29 05:27 - 01172992 _____ (Microsoft Corporation) C:\Windows\system32\certmmc.dll
2016-04-26 20:46 - 2016-04-26 20:46 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\RogueChecker
2016-04-26 20:45 - 2016-04-26 20:45 - 00032078 _____ C:\Users\MjAbuZayed\Downloads\RogueChecker.zip
2016-04-26 20:41 - 2016-04-26 21:04 - 96656098 _____ C:\Users\MjAbuZayed\Downloads\WindowsTH-KB2693643-x64.msu
2016-04-26 20:08 - 2016-04-26 20:08 - 00000000 ____D C:\$SysReset
2016-04-26 18:08 - 2016-04-26 18:13 - 06882840 _____ (Piriform Ltd) C:\Users\MjAbuZayed\Downloads\ccsetup517pro.exe
2016-04-26 17:33 - 2016-04-26 17:33 - 00635461 _____ C:\Users\MjAbuZayed\Downloads\Arch432_LA_HC-_20140414_CRM.pdf
2016-04-26 17:30 - 2016-04-26 17:30 - 02810954 _____ C:\Users\MjAbuZayed\Downloads\Arch333 Second Material.rar
2016-04-25 13:19 - 2016-04-25 13:50 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Game.of.Thrones.S06E01.INTERNAL.HDTV.x264-KILLERS[ettv]
2016-04-24 10:58 - 2016-04-27 18:40 - 00002229 _____ C:\Users\Public\Desktop\Style Builder 2016.lnk
2016-04-24 10:58 - 2016-04-27 18:40 - 00002143 _____ C:\Users\Public\Desktop\LayOut 2016.lnk
2016-04-24 10:58 - 2016-04-27 18:40 - 00002054 _____ C:\Users\Public\Desktop\SketchUp 2016.lnk
2016-04-24 10:58 - 2016-04-24 10:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2016
2016-04-24 07:16 - 2016-04-24 07:16 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\SketchUp Pro 2016 v16.0.19911 + Crack [FU]
2016-04-24 07:06 - 2016-04-26 22:43 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Sketchup pro 2016 Win32Win64
2016-04-24 07:05 - 2016-04-24 07:05 - 00019484 _____ C:\Users\MjAbuZayed\Downloads\[kat.cr]sketchup.pro.2016.win32win64.torrent
2016-04-24 06:55 - 2016-04-24 06:55 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\SketchUp Pro 2016 v16.0.19911 + Crack
2016-04-22 11:49 - 2016-04-22 11:49 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\Mom
2016-04-20 08:13 - 2016-04-27 18:40 - 00002644 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project 2016.lnk
2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Windows\PCHEALTH
2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-04-20 08:13 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-04-20 08:12 - 2016-04-20 08:13 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-20 08:12 - 2016-04-20 08:12 - 00000000 __RHD C:\MSOCache
2016-04-20 07:46 - 2016-04-20 07:46 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Microsoft Project 2016 Professional 64 bit - appzdam.net
2016-04-19 21:58 - 2016-04-19 23:18 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Better.Call.Saul.S02E10.HDTV.x264-FUM[ettv]
2016-04-19 21:40 - 2016-04-19 21:59 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham.S02E18.HDTV.x264-LOL[ettv]
2016-04-18 19:26 - 2016-04-18 19:26 - 00002146 _____ C:\Users\MjAbuZayed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape.lnk
2016-04-18 19:26 - 2016-04-18 19:26 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape
2016-04-18 19:22 - 2016-04-18 19:26 - 24223744 _____ C:\Users\MjAbuZayed\Downloads\RuneScape.msi
2016-04-18 16:48 - 2016-04-18 16:48 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Comms
2016-04-18 14:38 - 2016-04-26 21:58 - 00003923 _____ C:\bdlog.txt
2016-04-18 14:26 - 2016-04-18 14:26 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Intel Components
2016-04-18 14:26 - 2016-04-18 14:26 - 00000000 ____D C:\ProgramData\IntelDLM
2016-04-18 14:23 - 2016-04-18 14:23 - 00000000 ____D C:\Windows\System32\Tasks\Intel
2016-04-18 14:22 - 2016-04-18 14:27 - 00000000 ____D C:\Program Files\Intel
2016-04-18 14:22 - 2015-06-04 14:33 - 00021984 _____ C:\Windows\system32\Drivers\semav6msr64.sys
2016-04-18 14:21 - 2016-04-18 14:22 - 05940136 _____ (Intel) C:\Users\MjAbuZayed\Downloads\Intel Driver Update Utility Installer (1).exe
2016-04-18 14:06 - 2016-04-18 14:06 - 00000000 ____D C:\VC
2016-04-16 21:10 - 2016-04-18 14:02 - 00000710 __RSH C:\ProgramData\ntuser.pol
2016-04-16 21:10 - 2016-04-16 21:10 - 00000000 ____D C:\extensions
2016-04-16 21:09 - 2016-04-16 21:09 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\vnlgp
2016-04-16 21:06 - 2016-04-25 00:12 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Vray 3.20
2016-04-16 19:04 - 2016-04-27 18:40 - 00002202 _____ C:\Users\Public\Desktop\Autodesk Flow Design.lnk
2016-04-16 19:03 - 2016-04-16 19:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw64
2016-04-16 19:03 - 2016-04-16 19:03 - 00000000 ____D C:\Program Files\x264vfw64
2016-04-16 17:22 - 2016-04-16 19:02 - 507011005 _____ (Autodesk, Inc.) C:\Users\MjAbuZayed\Downloads\Flow_Design_2014_English_WIN_64bit_R3_dlm.sfx.exe
2016-04-16 10:19 - 2016-04-16 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-04-16 00:26 - 2016-04-16 00:26 - 00316848 _____ C:\Users\MjAbuZayed\Downloads\Grid-1.dxf
2016-04-16 00:19 - 2016-04-16 00:19 - 01148646 _____ C:\Users\MjAbuZayed\Downloads\Untitled2.skp
2016-04-12 22:54 - 2016-03-29 09:40 - 03587584 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-04-12 22:54 - 2016-03-29 09:40 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-04-12 22:54 - 2016-03-25 10:38 - 24593408 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-12 22:54 - 2016-03-25 10:25 - 12505600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-12 22:54 - 2016-03-25 10:14 - 07525376 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-04-12 22:54 - 2016-03-25 10:13 - 19325440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-04-12 22:54 - 2016-03-25 09:55 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-04-12 22:54 - 2016-03-25 09:54 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-04-12 22:54 - 2016-03-16 07:56 - 03467784 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-04-12 22:54 - 2016-03-16 07:56 - 01022664 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-04-12 22:54 - 2016-03-16 07:56 - 00861512 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-04-12 22:54 - 2016-03-16 07:55 - 02495768 _____ C:\Windows\system32\CoreUIComponents.dll
2016-04-12 22:54 - 2016-03-16 07:55 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-12 22:54 - 2016-03-16 07:55 - 01299032 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-04-12 22:54 - 2016-03-16 07:55 - 01127024 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-04-12 22:54 - 2016-03-16 07:55 - 00601344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-04-12 22:54 - 2016-03-16 07:54 - 00595016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2016-04-12 22:54 - 2016-03-16 07:47 - 22610328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-04-12 22:54 - 2016-03-16 07:47 - 03622272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-12 22:54 - 2016-03-16 07:47 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-04-12 22:54 - 2016-03-16 07:46 - 00658568 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2016-04-12 22:54 - 2016-03-16 07:45 - 00140536 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-04-12 22:54 - 2016-03-16 07:41 - 00607416 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-04-12 22:54 - 2016-03-16 07:41 - 00208736 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-04-12 22:54 - 2016-03-16 07:39 - 00983904 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2016-04-12 22:54 - 2016-03-16 07:37 - 01010016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-04-12 22:54 - 2016-03-16 07:21 - 01767000 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2016-04-12 22:54 - 2016-03-16 07:21 - 01531888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-04-12 22:54 - 2016-03-16 07:11 - 21088728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-04-12 22:54 - 2016-03-16 07:11 - 02879024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-04-12 22:54 - 2016-03-16 07:11 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-04-12 22:54 - 2016-03-16 07:08 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-04-12 22:54 - 2016-03-16 07:05 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-04-12 22:54 - 2016-03-16 07:03 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-04-12 22:54 - 2016-03-16 07:00 - 21859840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-04-12 22:54 - 2016-03-16 06:56 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll
2016-04-12 22:54 - 2016-03-16 06:55 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2016-04-12 22:54 - 2016-03-16 06:55 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\ExtrasXmlParser.dll
2016-04-12 22:54 - 2016-03-16 06:51 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-04-12 22:54 - 2016-03-16 06:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-04-12 22:54 - 2016-03-16 06:49 - 01416192 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-12 22:54 - 2016-03-16 06:49 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-12 22:54 - 2016-03-16 06:47 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-04-12 22:54 - 2016-03-16 06:47 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2016-04-12 22:54 - 2016-03-16 06:44 - 01016832 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-04-12 22:54 - 2016-03-16 06:43 - 00573952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2016-04-12 22:54 - 2016-03-16 06:42 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-04-12 22:54 - 2016-03-16 06:42 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00931840 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2016-04-12 22:54 - 2016-03-16 06:40 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-12 22:54 - 2016-03-16 06:39 - 03363328 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-04-12 22:54 - 2016-03-16 06:39 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-04-12 22:54 - 2016-03-16 06:38 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2016-04-12 22:54 - 2016-03-16 06:37 - 01521664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-04-12 22:54 - 2016-03-16 06:37 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2016-04-12 22:54 - 2016-03-16 06:37 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2016-04-12 22:54 - 2016-03-16 06:37 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2016-04-12 22:54 - 2016-03-16 06:37 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\ExSMime.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\cemapi.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\POSyncServices.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\UserDataPlatformHelperUtil.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTypeHelperUtil.dll
2016-04-12 22:54 - 2016-03-16 06:36 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\UserDataLanguageUtil.dll
2016-04-12 22:54 - 2016-03-16 06:35 - 01794560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-04-12 22:54 - 2016-03-16 06:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\AppxApplicabilityEngine.dll
2016-04-12 22:54 - 2016-03-16 06:35 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2016-04-12 22:54 - 2016-03-16 06:35 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-04-12 22:54 - 2016-03-16 06:34 - 01871872 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-12 22:54 - 2016-03-16 06:33 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-04-12 22:54 - 2016-03-16 06:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-04-12 22:54 - 2016-03-16 06:31 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExtrasXmlParser.dll
2016-04-12 22:54 - 2016-03-16 06:27 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-04-12 22:54 - 2016-03-16 06:21 - 18796544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-04-12 22:54 - 2016-03-16 06:18 - 00104960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2016-04-12 22:54 - 2016-03-16 06:17 - 03680256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-04-12 22:54 - 2016-03-16 06:17 - 00842240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2016-04-12 22:54 - 2016-03-16 06:17 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2016-04-12 22:54 - 2016-03-16 06:17 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2016-04-12 22:54 - 2016-03-16 06:17 - 00133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2016-04-12 22:54 - 2016-03-16 06:17 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-04-12 22:54 - 2016-03-16 06:16 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-04-12 22:54 - 2016-03-16 06:14 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2016-04-12 22:54 - 2016-03-16 06:14 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2016-04-12 22:54 - 2016-03-16 06:14 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00201216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cemapi.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\POSyncServices.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataPlatformHelperUtil.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTypeHelperUtil.dll
2016-04-12 22:54 - 2016-03-16 06:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataLanguageUtil.dll
2016-04-12 22:54 - 2016-03-16 06:11 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-04-12 22:54 - 2016-03-16 06:10 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-04-12 22:53 - 2016-03-16 07:06 - 00181088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-04-12 22:53 - 2016-03-16 07:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-04-12 22:53 - 2016-03-16 06:56 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2016-04-12 22:53 - 2016-03-16 06:55 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2016-04-12 22:53 - 2016-03-16 06:55 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\fwbase.dll
2016-04-12 22:53 - 2016-03-16 06:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2016-04-12 22:53 - 2016-03-16 06:46 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll
2016-04-12 22:53 - 2016-03-16 06:43 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-04-12 22:53 - 2016-03-16 06:42 - 02180608 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-04-12 22:53 - 2016-03-16 06:41 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-12 22:53 - 2016-03-16 06:40 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-04-12 22:53 - 2016-03-16 06:39 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2016-04-12 22:53 - 2016-03-16 06:37 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2016-04-12 22:53 - 2016-03-16 06:36 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenanceClient.dll
2016-04-12 22:53 - 2016-03-16 06:35 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2016-04-12 22:53 - 2016-03-16 06:31 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2016-04-12 22:53 - 2016-03-16 06:31 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2016-04-12 22:53 - 2016-03-16 06:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwbase.dll
2016-04-12 22:53 - 2016-03-16 06:24 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2016-04-12 22:53 - 2016-03-16 06:24 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll
2016-04-12 22:53 - 2016-03-16 06:24 - 00019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2016-04-12 22:53 - 2016-03-16 06:20 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-04-12 22:53 - 2016-03-16 06:18 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-04-12 22:53 - 2016-03-16 06:13 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2016-04-12 22:53 - 2016-03-16 06:13 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PimIndexMaintenanceClient.dll
2016-04-12 22:53 - 2016-03-16 06:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2016-04-12 22:38 - 2016-04-12 22:38 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Temp
2016-04-12 20:58 - 2016-04-12 20:58 - 00000385 _____ C:\Users\MjAbuZayed\AppData\Roaminguser_gensett.xml
2016-04-12 20:57 - 2016-04-12 20:57 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-04-12 20:56 - 2016-04-12 20:56 - 00000000 ____D C:\ProgramData\BDLogging
2016-04-12 20:56 - 2009-07-14 13:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2016-04-12 20:56 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-04-12 20:38 - 2016-04-12 20:38 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\QuickScan
2016-04-12 20:19 - 2016-04-12 20:19 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-04-12 20:18 - 2016-04-12 20:19 - 10314888 _____ C:\Users\MjAbuZayed\Downloads\bitdefender_tsecurity.exe
2016-04-12 17:33 - 2016-04-12 18:25 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham.S02E17.HDTV.x264-LOL[ettv]
2016-04-12 17:33 - 2016-04-12 18:24 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Better.Call.Saul.S02E09.HDTV.x264-KILLERS[ettv]
2016-04-07 09:33 - 2016-04-07 09:34 - 04365589 _____ C:\Users\MjAbuZayed\Downloads\CW7.psd
2016-04-06 23:41 - 2016-04-06 23:41 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham S02E17 2015 HDTV x264 - CM
2016-04-04 15:32 - 2016-04-04 15:32 - 00026583 _____ C:\Users\MjAbuZayed\Desktop\idc_debug_log.txt
2016-04-01 14:53 - 2016-04-01 14:53 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\AAA_Internet_Publishing,_
2016-04-01 14:53 - 2016-02-01 13:17 - 00027904 ____N (AAA Internet Publishing, Inc.) C:\Windows\system32\Drivers\WtfEngineDrv.sys
2016-04-01 14:48 - 2016-04-01 14:51 - 25914328 _____ (Initex & AAA Internet Publishing ) C:\Users\MjAbuZayed\Downloads\WTFastSetup.4.0.8.710.exe
2016-04-01 14:36 - 2016-04-27 18:40 - 00001046 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2016-04-01 14:36 - 2016-04-02 18:20 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\TS3Client
2016-04-01 14:36 - 2016-04-01 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2016-04-01 14:36 - 2016-04-01 14:36 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-04-01 14:34 - 2016-04-01 14:35 - 31017664 _____ (TeamSpeak Systems GmbH) C:\Users\MjAbuZayed\Downloads\TeamSpeak3-Client-win64-3.0.18.2.exe
2016-03-30 17:25 - 2016-03-30 17:25 - 00019472 _____ C:\Users\MjAbuZayed\Downloads\gotham-second-season_HI_english-1304415.zip
2016-03-30 16:28 - 2016-03-30 17:26 - 00000000 ____D C:\Users\MjAbuZayed\Downloads\Gotham.S02E16.HDTV.x264-LOL[ettv]
2016-03-30 13:52 - 2016-03-30 13:54 - 06046176 _____ C:\Users\MjAbuZayed\Downloads\raidcall_v8.1.8.exe
2016-03-29 08:57 - 2016-04-26 18:45 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\Specs

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-28 16:28 - 2016-02-13 16:23 - 00000938 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-28 16:08 - 2016-03-26 17:03 - 00000948 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-04-28 16:08 - 2016-03-26 17:03 - 00000944 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-04-28 16:06 - 2016-02-13 16:14 - 00875126 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-28 16:06 - 2015-07-10 14:02 - 00000000 ____D C:\Windows\INF
2016-04-28 16:00 - 2016-02-13 16:23 - 00000934 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-28 16:00 - 2015-07-10 15:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-28 15:59 - 2016-02-13 16:11 - 00000000 ____D C:\Users\MjAbuZayed
2016-04-28 15:59 - 2015-07-10 12:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-04-27 18:40 - 2016-03-25 22:52 - 00002033 _____ C:\Users\Public\Desktop\3ds Max 2016.lnk
2016-04-27 18:40 - 2016-02-28 07:53 - 00001137 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-04-27 18:40 - 2016-02-27 16:10 - 00002070 _____ C:\Users\Public\Desktop\A360 Desktop.lnk
2016-04-27 18:40 - 2016-02-27 16:09 - 00002151 _____ C:\Users\Public\Desktop\Autodesk ReCap 2016.lnk
2016-04-27 18:40 - 2016-02-27 16:08 - 00002165 _____ C:\Users\Public\Desktop\AutoCAD 2016 - English.lnk
2016-04-27 18:40 - 2016-02-24 18:50 - 00002595 _____ C:\Users\Public\Desktop\eQUEST 3-65.lnk
2016-04-27 18:40 - 2016-02-18 14:25 - 00002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2016-04-27 18:40 - 2016-02-14 08:13 - 00001528 _____ C:\Users\Public\Desktop\Climate Consultant 6.0.lnk
2016-04-27 18:40 - 2016-02-13 17:50 - 00001233 _____ C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.4.lnk
2016-04-27 18:40 - 2016-02-13 16:51 - 00002137 _____ C:\Users\Public\Desktop\meteonorm 7.lnk
2016-04-27 18:40 - 2016-02-13 16:33 - 00002137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-27 18:40 - 2016-02-13 16:33 - 00002131 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-27 18:36 - 2015-07-10 16:15 - 00000000 ____D C:\Windows\OCR
2016-04-27 18:36 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\Help
2016-04-27 18:36 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\AppReadiness
2016-04-27 15:35 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\rescache
2016-04-27 14:15 - 2016-02-13 16:13 - 00000000 ___RD C:\Users\MjAbuZayed\OneDrive
2016-04-27 14:15 - 2016-02-13 16:11 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-04-27 13:23 - 2016-02-24 20:26 - 00004178 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{ED841FED-B7B6-454F-B006-059C5D4D369F}
2016-04-27 13:23 - 2016-02-13 16:11 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Packages
2016-04-26 23:55 - 2016-02-24 17:45 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\BitTorrent
2016-04-26 22:45 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\ELAMBKUP
2016-04-26 21:23 - 2015-07-10 12:05 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-04-26 21:10 - 2016-02-13 17:50 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-26 21:07 - 2015-07-10 13:55 - 00000000 ____D C:\Windows\CbsTemp
2016-04-26 21:06 - 2015-07-10 14:00 - 00144646 _____ C:\Windows\system32\dssite.msc
2016-04-26 21:06 - 2015-07-10 14:00 - 00144380 _____ C:\Windows\system32\adsiedit.msc
2016-04-26 20:37 - 2016-02-13 17:27 - 00000024 _____ C:\Users\MjAbuZayed\random.dat
2016-04-26 17:28 - 2015-07-10 14:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-26 03:15 - 2016-03-26 17:16 - 00000000 ___RD C:\Users\MjAbuZayed\Dropbox
2016-04-25 21:32 - 2015-07-10 15:20 - 00415544 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-25 18:25 - 2016-02-28 07:54 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Roaming\vlc
2016-04-21 20:47 - 2016-02-13 16:13 - 00002382 _____ C:\Users\MjAbuZayed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-04-20 08:18 - 2016-03-07 09:44 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Microsoft Help
2016-04-20 08:13 - 2015-07-10 16:19 - 00000000 ____D C:\Windows\ShellNew
2016-04-20 08:13 - 2015-07-10 14:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-04-20 08:13 - 2015-07-10 14:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-04-20 08:12 - 2016-02-13 16:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-18 14:23 - 2016-02-13 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2016-04-18 14:23 - 2016-02-13 17:50 - 00000000 ____D C:\Program Files (x86)\Intel Driver Update Utility
2016-04-18 14:23 - 2016-02-13 16:50 - 00000000 ____D C:\Program Files (x86)\Intel
2016-04-17 11:29 - 2016-02-14 05:45 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\Design 6
2016-04-17 11:14 - 2016-02-27 16:08 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Autodesk
2016-04-16 21:10 - 2015-07-10 14:04 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-04-16 21:10 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-04-16 19:04 - 2016-02-27 16:04 - 00000000 ____D C:\Program Files\Autodesk
2016-04-16 19:04 - 2016-02-24 18:03 - 00000000 ____D C:\ProgramData\Autodesk
2016-04-16 19:04 - 2016-02-24 18:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2016-04-16 19:02 - 2016-02-27 14:45 - 00000000 ____D C:\Autodesk
2016-04-16 10:19 - 2016-03-26 17:03 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-04-16 00:50 - 2016-02-13 16:44 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\MICROSOFT Office PRO Plus 2016 v16.0.4266.1003 RTM + Activator [TechTools.NET]
2016-04-16 00:49 - 2016-02-27 16:04 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2016-04-16 00:49 - 2016-02-13 17:14 - 00000000 ____D C:\ProgramData\KMSAuto
2016-04-14 00:38 - 2016-03-26 17:02 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\Dropbox
2016-04-14 00:35 - 2015-07-10 12:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-04-12 23:24 - 2016-03-09 22:58 - 00000000 ____D C:\Windows\system32\MRT
2016-04-12 23:21 - 2016-03-09 22:58 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-04-12 22:35 - 2015-07-10 14:04 - 00000000 ___SD C:\Windows\Downloaded Program Files
2016-04-12 22:35 - 2015-07-10 14:04 - 00000000 ___RD C:\Windows\Offline Web Pages
2016-04-06 21:32 - 2015-07-10 14:06 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-04-06 21:32 - 2015-07-10 14:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-31 10:18 - 2016-02-18 16:50 - 00000000 ____D C:\Users\MjAbuZayed\Desktop\test
2016-03-30 14:49 - 2016-02-26 00:02 - 00000000 ____D C:\Users\MjAbuZayed\AppData\Local\ElevatedDiagnostics

==================== Files in the root of some directories =======

2016-04-26 21:59 - 2016-04-26 21:59 - 0236471 _____ () C:\ProgramData\1461697099.bdinstall.bin
2016-04-26 22:00 - 2016-04-26 22:00 - 0027623 _____ () C:\ProgramData\1461697240.bdinstall.bin
2016-02-27 16:07 - 2016-02-27 16:07 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-21 16:37

==================== End of FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité