Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja:02-05-2016
Uruchomiony przez Mortada (administrator) MORTADA-PC (02-05-2016 19:18:24)
Uruchomiony z C:\Users\Mortada\Desktop
Załadowane profile: Mortada (Dostępne profile: Mortada)
Platform: Windows 7 Professional Service Pack 1 (X64) Język: Français (France)
Internet Explorer Wersja 11 (Domyślna przeglądarka: Chrome)
Tryb startu: Normal
Instrukcja obsługi Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesy (filtrowane) =================

(Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\System32\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TechSmith Corporation) C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\SnagitEditor.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\TscHelp.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
() C:\Users\Mortada\Desktop\ResetBrowser.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Rejestr (filtrowane) ===========================

(Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1959410866-558105716-412224720-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-1959410866-558105716-412224720-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3077712 2016-03-31] (Valve Corporation)
HKU\S-1-5-21-1959410866-558105716-412224720-1000\...\MountPoints2: {dcea5ae2-fcbe-11e5-b955-daf4b35d8e9c} - H:\setup.exe
HKU\S-1-5-21-1959410866-558105716-412224720-1000\...\MountPoints2: {dcea5ae5-fcbe-11e5-b955-daf4b35d8e9c} - H:\setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-03-05] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175368 2016-02-09] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [153208 2016-02-09] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => Brak pliku
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 12.lnk [2016-05-01]
ShortcutTarget: Snagit 12.lnk -> C:\Program Files (x86)\TechSmith\Snagit 12\Snagit32.exe (TechSmith Corporation)

==================== Internet (filtrowane) ====================

(Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E053BB2E-5247-4939-AC87-AA4244FFF324}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKU\S-1-5-21-1959410866-558105716-412224720-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-05-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-05-02] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-02]
CHR Extension: (Google Docs) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-02]
CHR Extension: (Google Drive) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-02]
CHR Extension: (YouTube) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-02]
CHR Extension: (Google Sheets) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-02]
CHR Extension: (Gmail) - C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-02]

==================== Usługi (filtrowane) ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-03-30] (NVIDIA Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-03-30] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-01] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-05-01] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6942480 2016-03-02] (TeamViewer GmbH)
R2 TechSmith Uploader Service; C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe [3408384 2015-01-26] (TechSmith Corporation) [Brak podpisu cyfrowego]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

===================== Sterowniki (filtrowane) ==========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

S3 ampa; C:\Windows\system32\ampa.sys [19568 2015-11-10] ()
S3 ampa; C:\Windows\SysWOW64\ampa.sys [19568 2015-11-10] ()
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-04] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-03-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
S3 cpuz138; \??\C:\Users\Mortada\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\NZXT\CAM\CAM_Client_V3.sys [X]

==================== NetSvcs (filtrowane) ===================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)


==================== Jeden miesiąc - utworzone pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-02 19:18 - 2016-05-02 19:18 - 00012007 _____ C:\Users\Mortada\Desktop\FRST.txt
2016-05-02 19:18 - 2016-05-02 19:18 - 00000000 ____D C:\FRST
2016-05-02 19:17 - 2016-05-02 19:17 - 02377216 _____ (Farbar) C:\Users\Mortada\Desktop\FRST64.exe
2016-05-02 19:13 - 2016-05-02 19:18 - 00000844 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-02 19:13 - 2016-05-02 19:18 - 00000840 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-02 19:13 - 2016-05-02 19:13 - 00003840 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-02 19:13 - 2016-05-02 19:13 - 00003588 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-02 19:13 - 2016-05-02 19:13 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-02 19:08 - 2016-05-02 19:08 - 00002817 _____ C:\Users\Mortada\Desktop\malware repport.txt
2016-05-02 18:46 - 2016-05-02 18:46 - 01622528 _____ C:\Users\Mortada\Desktop\ResetBrowser.exe
2016-05-02 13:12 - 2016-05-02 13:12 - 00002203 _____ C:\Users\Mortada\Desktop\ZHPCleaner.txt
2016-05-02 13:07 - 2016-05-02 13:07 - 02252288 _____ C:\Users\Mortada\ZHPCleaner.exe
2016-05-02 13:07 - 2016-05-02 13:07 - 00000794 _____ C:\Users\Mortada\Desktop\ZHPCleaner.lnk
2016-05-02 13:05 - 2016-05-02 13:05 - 00001884 _____ C:\Users\Mortada\Desktop\JRT.txt
2016-05-02 12:58 - 2016-05-02 12:58 - 00002087 _____ C:\Users\Mortada\Desktop\AdwCleaner[C2].txt
2016-05-02 12:55 - 2016-05-02 12:55 - 00001874 _____ C:\Users\Mortada\Desktop\AdwCleaner[S2].txt
2016-05-01 18:02 - 2016-05-01 18:37 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-05-01 18:02 - 2016-05-01 18:37 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-05-01 16:46 - 2016-05-01 16:46 - 00001772 _____ C:\Users\Mortada\Desktop\After effects.lnk
2016-05-01 16:36 - 2016-05-01 16:36 - 00001970 _____ C:\Users\Mortada\Desktop\ZHPFixReport.txt
2016-05-01 16:23 - 2016-05-01 16:28 - 00001771 _____ C:\Users\Mortada\Desktop\chrome.exe - Raccourci.lnk
2016-05-01 16:08 - 2016-05-02 13:12 - 00000000 ____D C:\Users\Mortada\Desktop\Anti viruses
2016-05-01 16:06 - 2016-05-01 16:25 - 00000000 ____D C:\Users\Mortada\Desktop\Games log
2016-05-01 16:05 - 2016-05-01 16:57 - 00000000 ___RD C:\Users\Mortada\Desktop\Games
2016-05-01 15:46 - 2016-05-01 15:46 - 00003510 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Mortada-PC-Mortada
2016-05-01 15:45 - 2016-05-01 15:45 - 00000000 ____D C:\Users\Mortada\Documents\Adobe
2016-05-01 15:45 - 2016-05-01 15:45 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\NVIDIA
2016-05-01 15:32 - 2016-05-01 16:28 - 00001363 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2015.lnk
2016-05-01 15:32 - 2016-05-01 15:32 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-05-01 15:30 - 2016-05-01 16:28 - 00001360 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator (Preview).lnk
2016-05-01 15:27 - 2016-05-01 15:32 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-05-01 15:27 - 2016-05-01 15:31 - 00000000 ____D C:\Program Files\Adobe
2016-05-01 15:25 - 2016-05-01 16:28 - 00001518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2016-05-01 15:25 - 2016-05-01 16:28 - 00001512 _____ C:\Users\Public\Desktop\Adobe Application Manager.lnk
2016-05-01 15:22 - 2016-05-02 12:28 - 00000000 ____D C:\ProgramData\Adobe
2016-05-01 15:22 - 2016-05-01 15:22 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\Macromedia
2016-05-01 15:21 - 2016-05-02 12:29 - 00000000 ____D C:\Users\Mortada\AppData\Local\Adobe
2016-04-30 14:41 - 2016-04-30 14:41 - 00000000 ____D C:\Users\Mortada\AppData\Local\ElevatedDiagnostics
2016-04-29 17:31 - 2016-05-02 19:07 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-29 17:31 - 2016-05-01 16:28 - 00001108 _____ C:\Users\Mortada\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-29 17:31 - 2016-04-29 17:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-29 17:31 - 2016-04-29 17:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-29 17:31 - 2016-04-29 17:31 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-29 17:31 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-04-29 17:31 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-29 17:31 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-04-29 17:30 - 2016-04-29 17:31 - 22851472 _____ (Malwarebytes ) C:\Users\Mortada\Downloads\mbam-setup-2.2.1.1043.exe
2016-04-29 13:55 - 2016-05-02 13:13 - 00000000 ____D C:\AdwCleaner
2016-04-29 12:42 - 2016-05-01 16:28 - 00000790 _____ C:\Users\Mortada\Desktop\ZHPDiag.lnk
2016-04-29 12:41 - 2016-04-29 12:41 - 02197504 _____ C:\Users\Mortada\Downloads\ZHPDiag3.exe
2016-04-29 12:33 - 2016-05-02 13:12 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\ZHP
2016-04-29 12:33 - 2016-05-01 16:28 - 00001855 _____ C:\Users\Mortada\Desktop\ZHPFix.lnk
2016-04-29 12:33 - 2016-04-29 12:37 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-04-29 12:33 - 2016-04-29 12:33 - 03521617 _____ (Nicolas Coolman ) C:\Users\Mortada\Downloads\ZHPFix.exe
2016-04-29 12:33 - 2016-04-29 12:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-04-29 12:32 - 2016-04-29 17:26 - 00001752 _____ C:\Google Chrome.lnk
2016-04-28 22:57 - 2016-04-28 22:57 - 00000000 ____D C:\Users\Mortada\Downloads\toriko_368
2016-04-28 22:57 - 2016-04-28 22:57 - 00000000 ____D C:\QMDownload
2016-04-28 22:56 - 2016-04-28 22:56 - 12118855 _____ C:\Users\Mortada\Downloads\toriko_368.zip
2016-04-28 21:39 - 2016-04-28 21:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2016-04-28 21:39 - 2016-04-28 21:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2016-04-28 21:38 - 2016-04-28 21:38 - 04117346 _____ C:\Users\Mortada\Downloads\motioninjoy-0-7-1001-en-win.zip
2016-04-28 21:38 - 2016-04-28 21:38 - 00000000 ____D C:\Users\Mortada\Downloads\motioninjoy-0-7-1001-en-win
2016-04-28 21:32 - 2016-04-28 21:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2016-04-28 21:32 - 2016-04-28 21:38 - 00000000 ____D C:\Program Files\MotioninJoy
2016-04-28 21:32 - 2016-04-28 21:32 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\MotioninJoy
2016-04-28 21:32 - 2012-05-12 12:31 - 00121416 _____ (MotioninJoy) C:\Windows\system32\Drivers\MijXfilt.sys
2016-04-28 21:32 - 2011-12-07 19:42 - 00328712 _____ (Logitech Inc.) C:\Windows\system32\MijFrc.dll
2016-04-28 21:32 - 2011-12-07 19:42 - 00074960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xusb21.sys
2016-04-28 21:31 - 2016-04-28 21:31 - 02551656 _____ (www.motioninjoy.com ) C:\Users\Mortada\Downloads\motioninjoy_060004_amd64_signed.exe
2016-04-27 11:36 - 2016-05-01 16:28 - 00002108 _____ C:\Users\Mortada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-27 11:36 - 2016-04-29 13:58 - 00000000 ____D C:\Windows\system32\log
2016-04-27 11:36 - 2016-04-27 11:36 - 00000000 ____D C:\Users\Mortada\AppData\Local\vreXjvX
2016-04-27 11:35 - 2016-05-01 16:27 - 00000000 ____D C:\Program Files (x86)\vreXjvX
2016-04-27 11:35 - 2016-04-27 11:36 - 00000000 ____D C:\Users\Public\Documents\vreXjvX
2016-04-26 12:54 - 2016-04-26 12:54 - 00000000 ____D C:\Users\Mortada\Downloads\ROTR Semi _
2016-04-26 12:53 - 2016-04-26 12:53 - 00781591 _____ C:\Users\Mortada\Downloads\ROTR Semi _.rar
2016-04-25 12:42 - 2016-04-25 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2016-04-24 12:28 - 2016-04-24 12:28 - 00069509 _____ C:\Users\Mortada\Downloads\Rise of the Tomb Raider.torrent
2016-04-23 14:55 - 2016-04-29 14:16 - 00000000 ____D C:\Users\Mortada\Desktop\Rapports
2016-04-22 14:25 - 2016-04-22 14:25 - 00000000 ____D C:\Users\Mortada\Downloads\Pro Evolution Soccer 2016 v1.0 Plus 7 Trainer
2016-04-22 14:09 - 2016-04-22 14:09 - 00000000 ____D C:\Users\Mortada\Documents\FLiNGTrainer
2016-04-22 14:08 - 2016-04-22 14:08 - 00547578 _____ C:\Users\Mortada\Downloads\Pro Evolution Soccer 2016 v1.0 Plus 7 Trainer.rar
2016-04-21 18:26 - 2016-04-21 18:26 - 01022648 _____ C:\Windows\Minidump\042116-21652-01.dmp
2016-04-20 20:45 - 2016-04-21 18:25 - 752568567 _____ C:\Windows\MEMORY.DMP
2016-04-20 20:45 - 2016-04-20 20:45 - 00416712 _____ C:\Windows\Minidump\042016-25724-01.dmp
2016-04-17 13:10 - 2016-04-17 13:10 - 00000000 ____D C:\Users\Mortada\Downloads\bleach_670
2016-04-17 13:03 - 2016-04-17 13:03 - 08229616 _____ C:\Users\Mortada\Downloads\bleach_670.zip
2016-04-17 13:03 - 2016-04-17 13:03 - 00000000 ____D C:\Users\Mortada\Downloads\toriko_367
2016-04-17 13:01 - 2016-04-17 13:02 - 13339392 _____ C:\Users\Mortada\Downloads\toriko_367.zip
2016-04-17 12:35 - 2016-04-17 12:45 - 00000000 ____D C:\Users\Mortada\AppData\Local\Ubisoft Game Launcher
2016-04-17 12:35 - 2016-04-17 12:35 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-04-17 12:35 - 2016-04-17 12:35 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-04-16 16:35 - 2016-05-02 19:02 - 00000290 __RSH C:\ProgramData\ntuser.pol
2016-04-16 14:57 - 2016-04-16 14:57 - 03032931 _____ C:\Users\Mortada\Downloads\Les_cl_s_du_futur_-_Jean_Staune_.pdf
2016-04-16 14:32 - 2016-04-16 14:32 - 00001628 _____ C:\Users\Mortada\Downloads\[kat.cr]les.clés.du.futur.jean.staune.ecologie.science.politique.economie.torrent
2016-04-16 14:27 - 2016-04-16 14:27 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-04-16 14:25 - 2016-04-16 14:25 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-04-16 14:25 - 2016-04-16 14:25 - 00000000 ____D C:\extensions
2016-04-16 10:42 - 2016-04-22 11:36 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-04-13 09:11 - 2016-03-31 20:25 - 00394952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-04-13 09:11 - 2016-03-31 19:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-04-13 09:11 - 2016-03-31 01:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-13 09:11 - 2016-03-31 01:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 09:11 - 2016-03-31 01:31 - 02892800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-13 09:11 - 2016-03-31 01:28 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-13 09:11 - 2016-03-31 01:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-04-13 09:11 - 2016-03-31 01:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-13 09:11 - 2016-03-31 01:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-04-13 09:11 - 2016-03-31 01:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-04-13 09:11 - 2016-03-31 01:25 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-13 09:11 - 2016-03-31 01:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-13 09:11 - 2016-03-31 01:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-04-13 09:11 - 2016-03-31 01:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-13 09:11 - 2016-03-31 01:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-13 09:11 - 2016-03-31 01:17 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-04-13 09:11 - 2016-03-31 01:17 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-13 09:11 - 2016-03-31 01:17 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-04-13 09:11 - 2016-03-31 01:11 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 09:11 - 2016-03-31 01:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-13 09:11 - 2016-03-31 01:03 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-04-13 09:11 - 2016-03-31 01:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-04-13 09:11 - 2016-03-31 01:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 09:11 - 2016-03-31 00:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-04-13 09:11 - 2016-03-31 00:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-04-13 09:11 - 2016-03-31 00:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-13 09:11 - 2016-03-31 00:55 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-13 09:11 - 2016-03-31 00:53 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-04-13 09:11 - 2016-03-31 00:53 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-04-13 09:11 - 2016-03-31 00:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-04-13 09:11 - 2016-03-31 00:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-04-13 09:11 - 2016-03-31 00:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-04-13 09:11 - 2016-03-31 00:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-04-13 09:11 - 2016-03-31 00:51 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-04-13 09:11 - 2016-03-31 00:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-04-13 09:11 - 2016-03-31 00:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-04-13 09:11 - 2016-03-31 00:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-04-13 09:11 - 2016-03-31 00:45 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-04-13 09:11 - 2016-03-31 00:45 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-04-13 09:11 - 2016-03-31 00:45 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-04-13 09:11 - 2016-03-31 00:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-04-13 09:11 - 2016-03-31 00:43 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-13 09:11 - 2016-03-31 00:43 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-04-13 09:11 - 2016-03-31 00:42 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-13 09:11 - 2016-03-31 00:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-04-13 09:11 - 2016-03-31 00:39 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-13 09:11 - 2016-03-31 00:38 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-04-13 09:11 - 2016-03-31 00:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-04-13 09:11 - 2016-03-31 00:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-04-13 09:11 - 2016-03-31 00:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-04-13 09:11 - 2016-03-31 00:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-04-13 09:11 - 2016-03-31 00:30 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-04-13 09:11 - 2016-03-31 00:30 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-13 09:11 - 2016-03-31 00:30 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-04-13 09:11 - 2016-03-31 00:29 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-04-13 09:11 - 2016-03-31 00:24 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-04-13 09:11 - 2016-03-31 00:23 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-04-13 09:11 - 2016-03-31 00:23 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-04-13 09:11 - 2016-03-31 00:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-04-13 09:11 - 2016-03-31 00:21 - 13811712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-04-13 09:11 - 2016-03-31 00:18 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-13 09:11 - 2016-03-31 00:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-04-13 09:11 - 2016-03-31 00:05 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-04-13 09:11 - 2016-03-31 00:02 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-04-13 09:11 - 2016-03-31 00:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-04-13 09:11 - 2016-03-29 18:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-13 09:11 - 2016-03-18 00:04 - 05551336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-13 09:11 - 2016-03-18 00:04 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-04-13 09:11 - 2016-03-18 00:04 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-04-13 09:11 - 2016-03-18 00:04 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-04-13 09:11 - 2016-03-18 00:01 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-13 09:11 - 2016-03-18 00:01 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-04-13 09:11 - 2016-03-17 23:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-04-13 09:11 - 2016-03-17 23:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-04-13 09:11 - 2016-03-17 23:57 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-13 09:11 - 2016-03-17 23:57 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-04-13 09:11 - 2016-03-17 23:57 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-04-13 09:11 - 2016-03-17 23:57 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-04-13 09:11 - 2016-03-17 23:57 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-13 09:11 - 2016-03-17 23:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-13 09:11 - 2016-03-17 23:56 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-04-13 09:11 - 2016-03-17 23:54 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-04-13 09:11 - 2016-03-17 23:54 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-13 09:11 - 2016-03-17 23:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-04-13 09:11 - 2016-03-17 23:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-04-13 09:11 - 2016-03-17 23:53 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-13 09:11 - 2016-03-17 23:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-13 09:11 - 2016-03-17 23:53 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-13 09:11 - 2016-03-17 23:53 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:36 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-04-13 09:11 - 2016-03-17 23:36 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-04-13 09:11 - 2016-03-17 23:33 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-04-13 09:11 - 2016-03-17 23:31 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-04-13 09:11 - 2016-03-17 23:31 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-04-13 09:11 - 2016-03-17 23:31 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-04-13 09:11 - 2016-03-17 23:31 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-04-13 09:11 - 2016-03-17 23:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-04-13 09:11 - 2016-03-17 23:30 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-04-13 09:11 - 2016-03-17 23:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-04-13 09:11 - 2016-03-17 23:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-04-13 09:11 - 2016-03-17 23:29 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-04-13 09:11 - 2016-03-17 23:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-04-13 09:11 - 2016-03-17 23:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-04-13 09:11 - 2016-03-17 23:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-04-13 09:11 - 2016-03-17 23:27 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-04-13 09:11 - 2016-03-17 23:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-04-13 09:11 - 2016-03-17 23:27 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-04-13 09:11 - 2016-03-17 23:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-04-13 09:11 - 2016-03-17 23:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-04-13 09:11 - 2016-03-17 23:25 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 23:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 22:53 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 09:11 - 2016-03-17 22:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-04-13 09:11 - 2016-03-17 22:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 09:11 - 2016-03-17 22:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-04-13 09:11 - 2016-03-17 22:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-04-13 09:11 - 2016-03-17 22:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-04-13 09:11 - 2016-03-17 22:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-04-13 09:11 - 2016-03-17 22:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-04-13 09:11 - 2016-03-17 22:37 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-04-13 09:11 - 2016-03-17 22:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-04-13 09:11 - 2016-03-17 22:35 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-13 09:11 - 2016-03-17 22:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-04-13 09:11 - 2016-03-17 22:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-04-13 09:11 - 2016-03-17 22:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-04-13 09:11 - 2016-03-17 22:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-04-13 09:11 - 2016-03-17 22:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-04-13 09:11 - 2016-03-17 22:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-04-13 09:11 - 2016-03-17 22:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 22:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 22:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 09:11 - 2016-03-17 22:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 09:11 - 2016-03-16 01:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-13 09:11 - 2016-03-16 01:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-13 09:11 - 2016-03-16 00:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-04-13 09:11 - 2016-03-11 19:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-04-13 09:11 - 2016-03-11 19:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-04-13 09:11 - 2016-03-06 19:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-13 09:11 - 2016-03-06 19:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-04-13 09:11 - 2016-03-06 19:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-04-13 09:11 - 2016-03-06 19:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-04-13 09:10 - 2016-03-31 01:54 - 25817600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-12 12:43 - 2016-04-12 12:43 - 00000000 ____D C:\Users\Mortada\Downloads\Arabic.P16
2016-04-12 12:32 - 2016-04-12 12:42 - 488653055 _____ C:\Users\Mortada\Downloads\Arabic.P16.rar
2016-04-10 13:21 - 2016-05-01 17:12 - 00000000 ____D C:\Program Files (x86)\Pro Evolution Soccer 2016
2016-04-10 13:21 - 2016-05-01 16:28 - 00000902 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pro Evolution Soccer 2016.lnk
2016-04-09 17:50 - 2016-04-09 17:50 - 00000000 ____D C:\Users\Mortada\Downloads\P.V1.04.0
2016-04-09 17:49 - 2016-04-09 17:50 - 12226699 _____ C:\Users\Mortada\Downloads\P.V1.04.0.rar
2016-04-09 17:43 - 2016-04-09 17:43 - 00000000 ____D C:\Users\Mortada\Downloads\PES 2016 V1.04.00.Online.Fix-RVTFiX
2016-04-09 17:42 - 2016-04-09 17:42 - 12261170 _____ C:\Users\Mortada\Downloads\PES 2016 V1.04.00.Online.Fix-RVTFiX.rar
2016-04-09 15:06 - 2016-04-09 15:07 - 09757920 _____ (CyberGhost S.R.L. ) C:\Users\Mortada\Downloads\CG_5.5.1.3.exe
2016-04-09 14:43 - 2016-04-09 14:44 - 08687080 _____ (suprx) C:\Users\Mortada\Downloads\sharewithus.exe
2016-04-08 21:53 - 2016-04-08 21:53 - 00000000 ____D C:\ProgramData\Steam
2016-04-08 13:43 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-04-08 13:43 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-04-08 13:43 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-04-08 13:43 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-04-08 13:43 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-04-08 13:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-04-08 13:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-04-08 13:43 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-04-08 13:43 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-04-08 13:43 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-04-08 13:43 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-04-08 13:43 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-04-08 13:38 - 2016-04-08 21:52 - 00001024 ____H C:\AMTAG.BIN
2016-04-08 13:37 - 2016-05-01 16:28 - 00001279 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant Standard Edition 6.0.lnk
2016-04-08 13:37 - 2016-04-08 21:52 - 00000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant Standard Edition 6.0
2016-04-08 13:37 - 2016-04-08 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 6.0
2016-04-08 13:37 - 2015-12-11 09:57 - 01920624 _____ C:\Windows\ampa.exe
2016-04-08 13:37 - 2015-11-10 09:36 - 00019568 _____ C:\Windows\SysWOW64\ampa.sys
2016-04-08 13:37 - 2015-11-10 09:36 - 00019568 _____ C:\Windows\system32\ampa.sys
2016-04-08 13:13 - 2016-04-08 13:16 - 10037952 _____ (AOMEI Technology Co., Ltd. ) C:\Users\Mortada\Downloads\PAssist_Std.exe
2016-04-08 13:10 - 2016-05-02 19:03 - 00000000 ____D C:\Program Files (x86)\Steam
2016-04-08 13:10 - 2016-05-01 16:28 - 00000963 _____ C:\Users\Mortada\Desktop\Steam.lnk
2016-04-08 13:10 - 2016-04-08 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-04-08 13:04 - 2016-05-01 16:28 - 00001031 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-04-08 13:04 - 2016-05-01 16:28 - 00001025 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-04-08 13:04 - 2016-04-08 13:32 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-04-08 13:04 - 2016-04-08 13:04 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\TeamViewer
2016-04-08 13:03 - 2016-04-08 13:03 - 09786560 _____ (TeamViewer GmbH) C:\Users\Mortada\Downloads\TeamViewer_Setup_ar-iod.exe
2016-04-07 21:54 - 2016-04-07 21:54 - 00003356 _____ C:\Windows\System32\Tasks\{0B030DE4-504C-47C9-99A7-8B42C06CB8E8}
2016-04-07 21:52 - 2016-04-07 21:52 - 00000000 ____D C:\Users\Mortada\Downloads\mortada
2016-04-07 21:51 - 2016-04-07 21:51 - 03204275 _____ C:\Users\Mortada\Downloads\mortada.rar
2016-04-07 20:31 - 2016-04-07 20:31 - 00000000 ____D C:\Users\Mortada\Downloads\download
2016-04-07 20:31 - 2016-04-07 20:31 - 00000000 ____D C:\ProgramData\KONAMI
2016-04-07 20:26 - 2016-04-07 20:26 - 1023072772 _____ C:\Users\Mortada\Downloads\PES 2016 Actualización 1.04 Paquete de datos 3.0.rar
2016-04-07 20:26 - 2016-04-07 20:26 - 00000000 ____D C:\Users\Mortada\Downloads\PES 2016 Actualización 1.04 Paquete de datos 3.0
2016-04-07 19:59 - 2016-04-07 19:59 - 00000000 ____D C:\Users\Mortada\Downloads\PES 16.V1.04.00.Online
2016-04-07 19:58 - 2016-04-07 19:58 - 12226699 _____ C:\Users\Mortada\Downloads\PES 16.V1.04.00.Online..rar
2016-04-07 19:58 - 2016-03-25 21:18 - 00211968 _____ (tapek+rvt (aka deadmau5)) C:\Users\Mortada\Downloads\steam_api.dll
2016-04-07 19:58 - 2016-03-25 21:17 - 00011567 _____ C:\Users\Mortada\Downloads\RVTFiX.nfo
2016-04-07 19:58 - 2016-03-24 05:14 - 39435632 _____ (Konami Digital Entertainment Co., Ltd.) C:\Users\Mortada\Downloads\PES2016.exe
2016-04-07 19:58 - 2015-10-03 03:48 - 00002676 _____ C:\Users\Mortada\Downloads\REVOLT.ini
2016-04-07 19:58 - 2015-09-17 02:03 - 00528064 _____ C:\Users\Mortada\Downloads\sdkencryptedappticket.dll
2016-04-07 19:58 - 2015-09-17 02:03 - 00145600 _____ (Valve Corporation) C:\Users\Mortada\Downloads\REVOLT.dll
2016-04-07 19:58 - 2015-06-07 03:09 - 00000051 _____ C:\Users\Mortada\Downloads\The REVOLT Forum.url
2016-04-07 19:55 - 2016-04-07 19:55 - 12898447 _____ C:\Users\Mortada\Downloads\PES2016 3DM Crack.rar
2016-04-07 19:55 - 2016-04-07 19:55 - 00000000 ____D C:\Users\Mortada\Downloads\PES2016 3DM Crack
2016-04-07 13:28 - 2016-04-07 13:28 - 00615478 _____ C:\Users\Mortada\Downloads\Autoruns.zip
2016-04-07 13:28 - 2016-02-01 03:10 - 00616616 ____N (Sysinternals - www.sysinternals.com) C:\Users\Mortada\Downloads\autorunsc.exe
2016-04-07 13:28 - 2016-02-01 03:08 - 00704672 ____N (Sysinternals - www.sysinternals.com) C:\Users\Mortada\Downloads\Autoruns.exe
2016-04-07 13:28 - 2016-02-01 03:05 - 00050512 ____N C:\Users\Mortada\Downloads\autoruns.chm
2016-04-07 13:28 - 2015-01-26 10:19 - 00002009 ____N C:\Users\Mortada\Downloads\Eula.txt
2016-04-07 13:23 - 2016-04-07 13:23 - 05073240 _____ (Microsoft Corporation) C:\Users\Mortada\Downloads\vcredist_x86 (1).exe
2016-04-07 13:22 - 2015-02-12 14:15 - 00001912 _____ C:\Windows\system32\steam_api (2).ini
2016-04-07 13:22 - 2015-01-30 21:49 - 01088516 _____ C:\Windows\system32\steam_api64 (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 28298032 _____ C:\Windows\system32\gamedll_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 11618608 _____ (Techland) C:\Windows\system32\engine_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 01695024 _____ C:\Windows\system32\vorbis_vs2010_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00458032 _____ C:\Windows\system32\rd3d11_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00417072 _____ C:\Windows\system32\imagelib_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00346416 _____ (Techland) C:\Windows\system32\filesystem_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00121648 _____ C:\Windows\system32\jsoncpp_vs2010_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00039216 _____ C:\Windows\system32\vorbisfile_vs2010_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00025904 _____ C:\Windows\system32\ogg_vs2010_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00024880 _____ C:\Windows\system32\memdump_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-30 17:19 - 00014640 _____ C:\Windows\system32\ropengl_x64_rwdi (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 02452992 _____ C:\Windows\system32\GFSDK_NVDOF_LIB.win64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 01498112 _____ (Firelight Technologies) C:\Windows\system32\fmodex64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 01190400 _____ () C:\Windows\system32\SDL2 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00987136 _____ (Firelight Technologies) C:\Windows\system32\fmod_event_net64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00710656 _____ C:\Windows\system32\GFSDK_SSAO.win64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00491520 _____ (Firelight Technologies) C:\Windows\system32\fmod_event64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00308224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Windows\system32\libcurl64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00068608 _____ (Sony Computer Entertainment Inc.) C:\Windows\system32\libpad (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00038912 _____ C:\Windows\system32\libScePad_x64 (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00023400 _____ (Alienware Corp.) C:\Windows\system32\LightFX (2).dll
2016-04-07 13:22 - 2015-01-27 10:59 - 00009728 _____ (Sony Computer Entertainment Inc.) C:\Windows\system32\libpadfilter (2).dll
2016-04-07 13:22 - 2012-09-18 04:53 - 01801048 _____ C:\Windows\system32\dsetup32 (2).dll
2016-04-07 13:22 - 2012-09-18 04:53 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\DSETUP (2).dll
2016-04-07 13:22 - 2012-09-18 04:53 - 00053592 _____ (Microsoft Corporation) C:\Windows\system32\D3D11InstallHelper (2).dll
2016-04-07 13:22 - 2012-08-17 10:38 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100 (2).dll
2016-04-07 13:22 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7 (2).dll
2016-04-07 13:22 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7 (2).dll
2016-04-07 13:22 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5 (2).dll
2016-04-07 13:22 - 2010-06-02 04:34 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\dxupdate (2).dll
2016-04-07 13:22 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43 (2).dll
2016-04-07 13:22 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_43 (2).dll
2016-04-07 13:22 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43 (2).dll
2016-04-07 13:22 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43 (2).dll
2016-04-07 13:22 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43 (2).dll
2016-04-07 13:22 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6 (2).dll
2016-04-07 13:22 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6 (2).dll
2016-04-07 13:22 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4 (2).dll
2016-04-07 13:22 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7 (2).dll
2016-04-07 13:22 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5 (2).dll
2016-04-07 13:22 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5 (2).dll
2016-04-07 13:22 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42 (2).dll
2016-04-07 13:22 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42 (2).dll
2016-04-07 13:22 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_42 (2).dll
2016-04-07 13:22 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42 (2).dll
2016-04-07 13:22 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42 (2).dll
2016-04-07 13:22 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4 (2).dll
2016-04-07 13:22 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4 (2).dll
2016-04-07 13:22 - 2009-03-16 15:18 - 00069448 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3 (2).dll
2016-04-07 13:22 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6 (2).dll
2016-04-07 13:22 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_41 (2).dll
2016-04-07 13:22 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41 (2).dll
2016-04-07 13:22 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41 (2).dll
2016-04-07 13:22 - 2009-01-13 14:25 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4 (3).dll
2016-04-07 13:22 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3 (2).dll
2016-04-07 13:22 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3 (2).dll
2016-04-07 13:22 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2 (2).dll
2016-04-07 13:22 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5 (2).dll
2016-04-07 13:22 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_40 (2).dll
2016-04-07 13:22 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40 (2).dll
2016-04-07 13:22 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40 (2).dll
2016-04-07 13:22 - 2008-10-09 19:25 - 00182275 _____ C:\Windows\system32\d3d10core (2).dll
2016-04-07 13:22 - 2008-10-09 17:36 - 00512008 _____ (Microsoft Corporation) C:\Windows\system32\D3DX10d_39 (2).dll
2016-04-07 13:22 - 2008-09-18 16:47 - 00430088 _____ (Microsoft Corporation) C:\Windows\system32\D3D10SDKLayers (2).DLL
2016-04-07 13:22 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2 (2).dll
2016-04-07 13:22 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1 (2).dll
2016-04-07 13:22 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2 (2).dll
2016-04-07 13:22 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39 (2).dll
2016-04-07 13:22 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_39 (2).dll
2016-04-07 13:22 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39 (2).dll
2016-04-07 13:22 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1 (2).dll
2016-04-07 13:22 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1 (2).dll
2016-04-07 13:22 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0 (2).dll
2016-04-07 13:22 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4 (4).dll
2016-04-07 13:22 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_38 (2).dll
2016-04-07 13:22 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38 (2).dll
2016-04-07 13:22 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38 (2).dll
2016-04-07 13:22 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0 (2).dll
2016-04-07 13:22 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0 (2).dll
2016-04-07 13:22 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3 (2).dll
2016-04-07 13:22 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_37 (2).dll
2016-04-07 13:22 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37 (2).dll
2016-04-07 13:22 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37 (2).dll
2016-04-07 13:22 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10 (2).dll
2016-04-07 13:22 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_2 (2).dll
2016-04-07 13:22 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36 (2).dll
2016-04-07 13:22 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_36 (2).dll
2016-04-07 13:22 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36 (2).dll
2016-04-07 13:22 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9 (2).dll
2016-04-07 13:22 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35 (2).dll
2016-04-07 13:22 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_35 (2).dll
2016-04-07 13:22 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35 (2).dll
2016-04-07 13:22 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8 (2).dll
2016-04-07 13:22 - 2007-05-16 18:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34 - Copy (2).dll
2016-04-07 13:22 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34 (2).dll
2016-04-07 13:22 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_34 (2).dll
2016-04-07 13:22 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34 (2).dll
2016-04-07 13:22 - 2007-04-07 17:33 - 00024344 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_1 (3).dll
2016-04-07 13:22 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7 (2).dll
2016-04-07 13:22 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3 (2).dll
2016-04-07 13:22 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33 (2).dll
2016-04-07 13:22 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33 (2).dll
2016-04-07 13:22 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\d3dcompiler_33 (2).dll
2016-04-07 13:22 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6 (2).dll
2016-04-07 13:22 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5 (2).dll
2016-04-07 13:22 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32 (2).dll
2016-04-07 13:22 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10 (2).dll
2016-04-07 13:22 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31 (2).dll
2016-04-07 13:22 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4 (2).dll
2016-04-07 13:22 - 2006-09-28 17:03 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1 (4).dll
2016-04-07 13:22 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3 (2).dll
2016-04-07 13:22 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2 (2).dll
2016-04-07 13:22 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2 (2).dll
2016-04-07 13:22 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30 (2).dll
2016-04-07 13:22 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1 (2).dll
2016-04-07 13:22 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1 (2).dll
2016-04-07 13:22 - 2006-03-31 12:27 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.direct3dx (2).dll
2016-04-07 13:22 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29 (2).dll
2016-04-07 13:22 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0 (2).dll
2016-04-07 13:22 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0 (2).dll
2016-04-07 13:22 - 2005-12-15 10:57 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10 - Copy (2).dll
2016-04-07 13:22 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28 (2).dll
2016-04-07 13:22 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27 (2).dll
2016-04-07 13:22 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26 (2).dll
2016-04-07 13:22 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26 - Copy (2).dll
2016-04-07 13:22 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25 (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.direct3d (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directplay (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directsound (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directinput (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directdraw (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.audiovideoplayback (2).dll
2016-04-07 13:22 - 2005-03-18 17:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.diagnostics (2).dll
2016-04-07 13:22 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24 (2).dll
2016-04-07 13:22 - 2004-08-04 02:56 - 01689088 _____ (Microsoft Corporation) C:\Windows\system32\d3d9 (2).dll
2016-04-07 13:22 - 2004-08-04 02:56 - 01179648 _____ (Microsoft Corporation) C:\Windows\system32\d3d8 (2).dll
2016-04-07 13:22 - 2004-08-04 02:56 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\d3dim700 (2).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\d3dramp (2).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\d3dim (4).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\d3dim (3).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\d3drm (4).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\d3drm (3).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\d3dxof (2).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\d3dxof - Copy (2).dll
2016-04-07 13:22 - 2001-08-23 16:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\d3dpmesh (2).dll
2016-04-07 13:22 - 2000-07-31 13:28 - 00286208 _____ C:\Windows\system32\binkw32 (2).dll
2016-04-07 13:21 - 2015-01-27 10:59 - 00423424 _____ (RAD Game Tools, Inc.) C:\Windows\system32\bink2w64 (2).dll
2016-04-07 13:21 - 2005-12-05 19:07 - 00061136 _____ (Microsoft Corporation) C:\Windows\system32\xinput9_1_0 (2).dll
2016-04-06 21:40 - 2016-04-06 21:41 - 01118920 _____ (Microsoft Corporation) C:\Users\Mortada\Downloads\NDP452-KB2901954-Web.exe
2016-04-06 21:40 - 2016-04-06 21:40 - 00292184 _____ (Microsoft Corporation) C:\Users\Mortada\Downloads\dxwebsetup.exe
2016-04-06 21:39 - 2016-04-06 21:39 - 06503984 _____ (Microsoft Corporation) C:\Users\Mortada\Downloads\vcredist_x86.exe
2016-04-06 21:39 - 2016-04-06 21:39 - 01420840 _____ (Microsoft Corporation) C:\Users\Mortada\Downloads\vcredist_arm.exe
2016-04-06 21:35 - 2016-04-06 21:35 - 00179875 _____ C:\Users\Mortada\Downloads\Desktop.rar
2016-04-06 12:31 - 2016-04-21 18:26 - 00000000 ____D C:\Windows\Minidump
2016-04-06 12:31 - 2016-04-06 12:31 - 01030520 _____ C:\Windows\Minidump\040616-20638-01.dmp
2016-04-05 18:27 - 2016-04-05 18:27 - 00000000 ____D C:\Users\Mortada\Downloads\Pro.Evolution.Soccer.2016.V1.04.00.Online.Fix-RVTFiX (1)
2016-04-05 18:26 - 2016-04-05 18:27 - 12226699 _____ C:\Users\Mortada\Downloads\Pro.Evolution.Soccer.2016.V1.04.00.Online.Fix-RVTFiX (1).rar
2016-04-05 13:39 - 2016-04-05 13:39 - 00000000 ____D C:\Users\Mortada\Downloads\Pro.Evolution.Soccer.2016.V1.04.00.Online.Fix-RVTFiX
2016-04-05 13:38 - 2016-04-05 13:39 - 12226699 _____ C:\Users\Mortada\Downloads\Pro.Evolution.Soccer.2016.V1.04.00.Online.Fix-RVTFiX.rar
2016-04-04 20:55 - 2016-04-04 20:55 - 00000000 ____D C:\Users\Mortada\Downloads\0xc0000142 by manafea
2016-04-04 20:53 - 2015-02-12 14:15 - 00001912 _____ C:\Windows\system32\steam_api.ini
2016-04-04 20:53 - 2015-01-30 21:49 - 01088516 _____ C:\Windows\system32\steam_api64.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 28298032 _____ C:\Windows\system32\gamedll_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 11618608 _____ (Techland) C:\Windows\system32\engine_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 01695024 _____ C:\Windows\system32\vorbis_vs2010_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00458032 _____ C:\Windows\system32\rd3d11_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00417072 _____ C:\Windows\system32\imagelib_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00346416 _____ (Techland) C:\Windows\system32\filesystem_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00121648 _____ C:\Windows\system32\jsoncpp_vs2010_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00039216 _____ C:\Windows\system32\vorbisfile_vs2010_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00025904 _____ C:\Windows\system32\ogg_vs2010_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00024880 _____ C:\Windows\system32\memdump_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-30 17:19 - 00014640 _____ C:\Windows\system32\ropengl_x64_rwdi.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 02452992 _____ C:\Windows\system32\GFSDK_NVDOF_LIB.win64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 01498112 _____ (Firelight Technologies) C:\Windows\system32\fmodex64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 01190400 _____ () C:\Windows\system32\SDL2.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00987136 _____ (Firelight Technologies) C:\Windows\system32\fmod_event_net64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00710656 _____ C:\Windows\system32\GFSDK_SSAO.win64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00491520 _____ (Firelight Technologies) C:\Windows\system32\fmod_event64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00423424 _____ (RAD Game Tools, Inc.) C:\Windows\system32\bink2w64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00308224 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Windows\system32\libcurl64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00068608 _____ (Sony Computer Entertainment Inc.) C:\Windows\system32\libpad.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00038912 _____ C:\Windows\system32\libScePad_x64.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00023400 _____ (Alienware Corp.) C:\Windows\system32\LightFX.dll
2016-04-04 20:53 - 2015-01-27 10:59 - 00009728 _____ (Sony Computer Entertainment Inc.) C:\Windows\system32\libpadfilter.dll
2016-04-04 20:53 - 2012-09-18 04:53 - 01801048 _____ C:\Windows\system32\dsetup32.dll
2016-04-04 20:53 - 2012-09-18 04:53 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\DSETUP.dll
2016-04-04 20:53 - 2012-09-18 04:53 - 00053592 _____ (Microsoft Corporation) C:\Windows\system32\D3D11InstallHelper.dll
2016-04-04 20:53 - 2010-06-02 04:34 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\dxupdate.dll
2016-04-04 20:53 - 2009-01-13 14:25 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4 (2).dll
2016-04-04 20:53 - 2008-10-09 17:36 - 00512008 _____ (Microsoft Corporation) C:\Windows\system32\D3DX10d_39.dll
2016-04-04 20:53 - 2008-09-18 16:47 - 00430088 _____ (Microsoft Corporation) C:\Windows\system32\D3D10SDKLayers.DLL
2016-04-04 20:53 - 2007-05-16 18:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34 - Copy.dll
2016-04-04 20:53 - 2007-04-07 17:33 - 00024344 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_1 (2).dll
2016-04-04 20:53 - 2006-03-31 12:27 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.direct3dx.dll
2016-04-04 20:53 - 2005-12-15 10:57 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10 - Copy.dll
2016-04-04 20:53 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26 - Copy.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.direct3d.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directplay.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directsound.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directinput.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.directdraw.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.audiovideoplayback.dll
2016-04-04 20:53 - 2005-03-18 17:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\microsoft.directx.diagnostics.dll
2016-04-04 20:53 - 2004-08-04 02:56 - 01179648 _____ (Microsoft Corporation) C:\Windows\system32\d3d8.dll
2016-04-04 20:53 - 2004-08-04 02:56 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\d3dim700.dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\d3dramp.dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\d3dim.dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\d3dim (2).dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\d3drm.dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\d3drm (2).dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\d3dxof.dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\d3dxof - Copy.dll
2016-04-04 20:53 - 2001-08-23 16:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\d3dpmesh.dll
2016-04-04 20:53 - 2000-07-31 13:28 - 00286208 _____ C:\Windows\system32\binkw32.dll
2016-04-04 20:51 - 2016-04-04 20:51 - 00000000 ____D C:\Users\Mortada\Downloads\DLL Files .. By Abdo Safwat
2016-04-04 20:49 - 2016-04-04 20:51 - 60766400 _____ C:\Users\Mortada\Downloads\DLL Files .. By Abdo Safwat.rar
2016-04-04 20:37 - 2016-04-04 20:37 - 00000000 ____D C:\Users\Mortada\Documents\KONAMI
2016-04-04 19:05 - 2016-04-04 20:29 - 1034321935 _____ C:\Users\Mortada\Downloads\P16.Data.Pack.3.00.rar
2016-04-04 18:18 - 2016-03-24 08:37 - 00000000 ____D C:\Users\Mortada\Downloads\P16.Data.Pack.3.00
2016-04-04 13:16 - 2016-04-04 13:16 - 00000000 ____D C:\Users\Mortada\AppData\Local\Steam
2016-04-04 13:16 - 2016-04-04 13:16 - 00000000 ____D C:\Users\Mortada\AppData\Local\CEF
2016-04-04 13:10 - 2016-04-04 13:11 - 01380712 _____ C:\Users\Mortada\Downloads\SteamSetup.exe
2016-04-04 12:49 - 2016-04-04 12:49 - 00047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys
2016-04-04 12:38 - 2016-04-04 12:38 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-04-04 12:37 - 2016-04-04 12:50 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\DAEMON Tools Lite
2016-04-04 12:37 - 2016-04-04 12:49 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-04-04 12:37 - 2016-04-04 12:48 - 00030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-04-04 12:37 - 2016-04-04 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-04-04 12:37 - 2016-04-04 12:37 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-04-04 12:31 - 2016-04-04 12:32 - 00692072 _____ (Disc Soft Ltd.) C:\Users\Mortada\Downloads\daemon-tools-lite_10-3-0_fr_10729.exe
2016-04-04 12:20 - 2016-04-04 12:20 - 00000000 ____D C:\Users\Mortada\Downloads\P.16.RLD
2016-04-02 11:25 - 2016-03-21 21:01 - 00109632 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-04-02 11:25 - 2016-03-21 21:01 - 00100416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-04-02 11:25 - 2016-03-21 21:01 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

==================== Jeden miesiąc - zmodyfikowane pliki i foldery ========

(Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)

2016-05-02 19:13 - 2016-02-28 19:23 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-02 19:13 - 2016-02-28 19:21 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-02 19:10 - 2009-07-14 05:45 - 00025216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-02 19:10 - 2009-07-14 05:45 - 00025216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-02 19:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-02 19:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-05-02 13:07 - 2016-02-28 16:22 - 00000000 ____D C:\Users\Mortada
2016-05-01 18:39 - 2016-02-29 22:39 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\TS3Client
2016-05-01 18:02 - 2016-02-29 14:17 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe
2016-05-01 17:52 - 2016-02-29 00:01 - 00000000 ____D C:\ProgramData\Origin
2016-05-01 17:52 - 2016-02-28 23:56 - 00000000 ____D C:\Program Files (x86)\Origin
2016-05-01 16:32 - 2016-02-28 23:56 - 00001849 _____ C:\Users\Mortada\Desktop\Origin.lnk
2016-05-01 16:28 - 2016-03-15 13:57 - 00002583 _____ C:\Users\Mortada\Desktop\µTorrent.lnk
2016-05-01 16:28 - 2016-03-15 13:57 - 00002563 _____ C:\Users\Mortada\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-05-01 16:28 - 2016-03-13 13:00 - 00000941 _____ C:\Users\Mortada\Desktop\sai - Raccourci.lnk
2016-05-01 16:28 - 2016-02-28 16:23 - 00001429 _____ C:\Users\Mortada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-01 16:28 - 2016-02-28 16:19 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-05-01 16:28 - 2016-02-28 16:19 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-05-01 16:28 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-05-01 16:28 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-05-01 16:28 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-05-01 16:28 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-05-01 16:28 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-05-01 16:28 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-05-01 16:28 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-05-01 16:27 - 2009-07-14 05:45 - 04935072 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-01 16:08 - 2016-03-13 13:07 - 00000000 ____D C:\Users\Mortada\Desktop\dawra
2016-05-01 15:45 - 2016-03-13 12:54 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\Adobe
2016-05-01 15:44 - 2016-03-02 13:05 - 00000000 ____D C:\Users\Mortada\AppData\Local\CrashDumps
2016-05-01 15:43 - 2016-02-28 16:36 - 00057952 _____ C:\Users\Mortada\AppData\Local\GDIPFONTCACHEV1.DAT
2016-05-01 15:26 - 2016-02-28 23:50 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-29 14:08 - 2009-07-14 16:24 - 00737844 _____ C:\Windows\system32\perfh00C.dat
2016-04-29 14:08 - 2009-07-14 16:24 - 00149772 _____ C:\Windows\system32\perfc00C.dat
2016-04-29 14:08 - 2009-07-14 06:13 - 01669584 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-28 22:27 - 2016-03-19 21:52 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-04-28 22:24 - 2016-03-19 21:51 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-04-28 22:22 - 2016-02-29 08:29 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-04-28 22:19 - 2016-03-21 23:41 - 00003212 _____ C:\Windows\System32\Tasks\CAM
2016-04-28 22:10 - 2016-03-15 13:56 - 00000000 ____D C:\Users\Mortada\AppData\Roaming\uTorrent
2016-04-27 13:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2016-04-23 15:16 - 2016-03-18 13:10 - 00000000 ____D C:\Users\Mortada\Documents\The Witcher 3
2016-04-21 15:05 - 2016-02-28 22:25 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-16 16:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\GroupPolicy
2016-04-16 16:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-04-09 15:09 - 2016-02-28 16:22 - 00000000 ____D C:\Users\Mortada\AppData\Local\VirtualStore
2016-04-06 21:52 - 2016-02-28 23:49 - 01633988 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-04-06 21:41 - 2016-03-19 21:53 - 00000000 ____D C:\Windows\SysWOW64\directx

Pliki do przeniesienia lub usunięcia:
====================
C:\Users\Mortada\ZHPCleaner.exe


Niektóre pliki w TEMP:
====================
C:\Users\Mortada\AppData\Local\Temp\libeay32.dll
C:\Users\Mortada\AppData\Local\Temp\msvcr120.dll
C:\Users\Mortada\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)

C:\Windows\system32\winlogon.exe => Plik podpisany cyfrowo
C:\Windows\system32\wininit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\wininit.exe => Plik podpisany cyfrowo
C:\Windows\explorer.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\explorer.exe => Plik podpisany cyfrowo
C:\Windows\system32\svchost.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\svchost.exe => Plik podpisany cyfrowo
C:\Windows\system32\services.exe => Plik podpisany cyfrowo
C:\Windows\system32\User32.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\User32.dll => Plik podpisany cyfrowo
C:\Windows\system32\userinit.exe => Plik podpisany cyfrowo
C:\Windows\SysWOW64\userinit.exe => Plik podpisany cyfrowo
C:\Windows\system32\rpcss.dll => Plik podpisany cyfrowo
C:\Windows\system32\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\SysWOW64\dnsapi.dll => Plik podpisany cyfrowo
C:\Windows\system32\Drivers\volsnap.sys => Plik podpisany cyfrowo


LastRegBack: 2016-04-28 20:04

==================== Koniec FRST.txt ============================