Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-05-2017
Ran by hassan (administrator) on HASSAN-PC (17-05-2017 06:34:41)
Running from C:\Users\hassan\Desktop
Loaded Profiles: hassan (Available Profiles: hassan)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: العربية (السعودية)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(ESET) C:\Program Files\ESET\ESET Security\eeclnt.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [4027504 2017-05-02] (Tonec Inc.)
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7456984 2017-04-11] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{2F941FA0-4A3F-4FC4-8262-37D175800866}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{2F941FA0-4A3F-4FC4-8262-37D175800866}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: [S-1-5-21-1796275782-4292205373-2313263118-1001] ATTENTION => Default URLSearchHook is missing
FireFox:
========
FF DefaultProfile: 6ylt0cqt.default
FF ProfilePath: C:\Users\hassan\AppData\Roaming\Mozilla\Firefox\Profiles\6ylt0cqt.default [2017-05-17]
FF HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc3.xpi
FF Extension: (No Name) - C:\Program Files\Internet Download Manager\idmmzcc3.xpi [2017-04-25]
FF HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\hassan\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\hassan\AppData\Roaming\IDM\idmmzcc5 [2017-05-11] [not signed]
FF HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
Chrome:
=======
CHR DefaultProfile: ChromeDefaultData2
CHR HomePage: ChromeDefaultData2 -> hxxp://www.initialpage123.com/?z=3638f8b93deae0b96ec2b4bgfzdt5zew6zew2w6o3t&from=bcn&uid=WDCXWD3200AVJS-63WDA0_WD-WCARW350251802518&type=hp
CHR StartupUrls: ChromeDefaultData2 -> "hxxp://www.initialpage123.com/?z=3638f8b93deae0b96ec2b4bgfzdt5zew6zew2w6o3t&from=bcn&uid=WDCXWD3200AVJS-63WDA0_WD-WCARW350251802518&type=hp"
CHR Profile: C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2017-05-17] <==== ATTENTION
CHR Extension: (محرّر مستندات Google) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-11]
CHR Extension: (آدبلوك بلس) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-05-11]
CHR Extension: (IDM Integration Module) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-05-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-10]
CHR Extension: (Chrome Media Router) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2017-04-26]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2069424 2017-03-09] (ESET)
S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [113032 2017-03-09] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [90656 2017-03-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [139384 2017-03-09] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [43920 2017-03-09] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [69304 2017-03-09] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [52680 2017-03-09] (ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [86504 2017-03-09] (ESET)
R3 es1969; C:\Windows\System32\drivers\ES1969.sys [96896 2006-08-15] (ESS Technology, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2017-05-11] (REALiX(tm))
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2017-05-16] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [124304 2017-02-02] (Power Software Ltd)
S3 catchme; \??\C:\Users\hassan\AppData\Local\Temp\catchme.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-05-17 06:34 - 2017-05-17 06:35 - 00007946 _____ C:\Users\hassan\Desktop\FRST.txt
2017-05-17 06:28 - 2017-05-17 06:34 - 00000000 ____D C:\FRST
2017-05-17 00:18 - 2017-05-17 00:18 - 01770496 _____ (Farbar) C:\Users\hassan\Desktop\FRST.exe
2017-05-16 23:46 - 2017-05-16 23:46 - 00002065 _____ C:\Users\hassan\Desktop\ZHPFixReport.txt
2017-05-16 23:44 - 2017-05-16 23:45 - 00000000 ____D C:\Program Files\ZHPFix
2017-05-16 23:44 - 2017-05-16 23:44 - 00001799 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-05-16 23:44 - 2017-05-16 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-05-16 23:43 - 2017-05-16 23:43 - 00004929 _____ C:\Users\hassan\Desktop\1.txt..1
2017-05-16 23:40 - 2017-05-16 23:41 - 03521617 _____ (Nicolas Coolman ) C:\Users\hassan\Desktop\ZHPFix.exe
2017-05-16 12:53 - 2017-05-16 12:53 - 00075250 _____ C:\Users\hassan\Desktop\ZHPDiag.txt
2017-05-16 12:48 - 2017-05-16 23:46 - 00000000 ____D C:\Users\hassan\AppData\Roaming\ZHP
2017-05-16 12:42 - 2017-05-16 12:44 - 02728960 _____ C:\Users\hassan\Downloads\ZHPDiag3.exe
2017-05-15 23:12 - 2017-05-15 23:11 - 02727424 _____ C:\Users\hassan\ZHPDiag3.exe
2017-05-15 13:25 - 2017-05-15 13:45 - 00000000 ____D C:\AdwCleaner
2017-05-15 13:16 - 2017-05-15 13:16 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\hassan\Downloads\rkill.com
2017-05-14 14:13 - 2017-05-14 14:14 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Mozilla
2017-05-14 14:13 - 2017-05-14 14:13 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-05-14 14:13 - 2017-05-14 14:13 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-05-14 13:23 - 2017-05-16 12:46 - 00000000 ____D C:\Users\hassan\Desktop\RegistryFinder
2017-05-14 12:51 - 2017-05-14 12:51 - 00458234 _____ C:\Malwarebytes Anti-Malware.txt
2017-05-14 05:59 - 2017-05-15 23:12 - 00000669 _____ C:\Users\hassan\Desktop\ZHPDiag.lnk
2017-05-13 14:06 - 2017-05-13 14:06 - 00001118 _____ C:\الي.txt
2017-05-13 13:26 - 2017-05-16 13:48 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-13 13:26 - 2017-05-13 14:17 - 00001088 _____ C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\Malwarebytes Anti-Malware.lnk
2017-05-13 13:26 - 2017-05-13 14:17 - 00001064 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-05-13 13:26 - 2017-05-13 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-05-13 13:26 - 2017-05-13 13:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-13 13:26 - 2017-05-13 13:26 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2017-05-13 13:26 - 2015-06-18 06:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-05-13 13:26 - 2015-06-18 06:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-05-13 13:26 - 2015-06-18 06:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2017-05-13 13:25 - 2017-05-13 13:25 - 00000000 ____D C:\Users\hassan\Desktop\Malwarebytes Anti-Malware 2.2.1.1043
2017-05-13 12:29 - 2017-05-13 12:29 - 00024776 _____ C:\ComboFix.txt
2017-05-13 11:25 - 2017-05-13 12:29 - 00000000 ____D C:\Qoobox
2017-05-13 11:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2017-05-13 11:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2017-05-13 11:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2017-05-13 11:24 - 2017-05-13 12:25 - 00000000 ____D C:\Windows\erdnt
2017-05-13 11:19 - 2017-05-13 11:22 - 05660182 _____ (Swearware) C:\Users\hassan\Downloads\ComboFix.exe
2017-05-12 23:15 - 2017-05-16 12:50 - 00000000 ____D C:\Users\hassan\AppData\Local\ZHP
2017-05-12 22:57 - 2017-05-12 22:57 - 00000000 ____D C:\Users\hassan\Desktop\public_dns
2017-05-12 22:55 - 2017-05-12 22:55 - 00000000 ____D C:\Users\hassan\AppData\Roaming\ESET
2017-05-12 22:55 - 2017-05-12 22:55 - 00000000 ____D C:\Users\hassan\AppData\Local\ESET
2017-05-12 22:31 - 2017-05-12 22:32 - 00000132 _____ C:\ProgramData\log.binb
2017-05-12 12:41 - 2017-05-12 12:41 - 00001985 _____ C:\Users\Public\Desktop\حماية الدفع المصرفي.lnk
2017-05-12 12:40 - 2017-05-12 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2017-05-12 12:40 - 2017-05-12 12:40 - 00000000 ____D C:\ProgramData\ESET
2017-05-12 12:40 - 2017-05-12 12:40 - 00000000 ____D C:\Program Files\ESET
2017-05-12 12:34 - 2017-05-12 22:31 - 00000128 _____ C:\ProgramData\log.ewbb
2017-05-12 09:30 - 2017-05-12 09:30 - 00000138 _____ C:\AiOLog.txt
2017-05-12 06:51 - 2017-05-13 14:17 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-05-12 06:51 - 2017-05-13 14:05 - 00000000 ____D C:\Program Files\CCleaner
2017-05-12 06:51 - 2017-05-12 06:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-12 06:30 - 2017-05-12 06:31 - 00000000 ____D C:\Users\hassan\AppData\Local\navi
2017-05-12 00:15 - 2017-05-13 00:17 - 00000000 ____D C:\Program Files\Common Files\ul432lwc
2017-05-11 23:32 - 2017-05-12 06:27 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Qktynerzos
2017-05-11 23:26 - 2017-05-11 23:26 - 00000000 ____D C:\Users\hassan\Desktop\205937
2017-05-11 23:26 - 2006-08-15 16:46 - 00096896 _____ (ESS Technology, Inc.) C:\Windows\system32\Drivers\ES1969.sys
2017-05-11 23:23 - 2017-05-11 23:23 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-11 23:22 - 2017-05-11 23:22 - 00000000 ____D C:\Users\Public\Documents\Google
2017-05-11 23:16 - 2017-05-13 22:26 - 00000000 ____D C:\Windows\system32\appmgmt
2017-05-11 23:15 - 2017-05-12 06:28 - 00000000 ____D C:\Program Files\BitTorrent
2017-05-11 23:11 - 2017-05-11 23:11 - 07290368 _____ C:\Users\hassan\AppData\Local\agent.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 01894851 _____ C:\Users\hassan\AppData\Local\IsBam.tst
2017-05-11 23:11 - 2017-05-11 23:11 - 00126464 _____ C:\Users\hassan\AppData\Local\noah.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 00070800 _____ C:\Users\hassan\AppData\Local\Config.xml
2017-05-11 23:11 - 2017-05-11 23:11 - 00018432 _____ C:\Users\hassan\AppData\Local\Main.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 00005568 _____ C:\Users\hassan\AppData\Local\md.xml
2017-05-11 23:08 - 2017-05-11 23:08 - 00000000 _____ C:\Windows\system32\3333333
2017-05-11 23:07 - 2017-05-11 23:07 - 00000000 _____ C:\Windows\system32\1111111
2017-05-11 23:06 - 2017-05-11 23:07 - 00019008 _____ C:\Users\hassan\AppData\Local\InstallationConfiguration.xml
2017-05-11 23:06 - 2017-05-11 23:06 - 00140800 _____ C:\Users\hassan\AppData\Local\installer.dat
2017-05-11 23:06 - 2017-05-11 23:06 - 00000000 _____ C:\Windows\system32\22
2017-05-11 23:06 - 2017-05-11 23:06 - 00000000 _____ C:\Windows\system32\11
2017-05-11 23:06 - 2017-05-11 23:06 - 00000000 _____ C:\Windows\system32\00
2017-05-11 23:05 - 2017-05-11 23:05 - 00000000 _____ C:\Windows\system32\1111
2017-05-11 22:20 - 2017-05-11 22:20 - 00000000 __RSH C:\MSDOS.SYS
2017-05-11 22:20 - 2017-05-11 22:20 - 00000000 __RSH C:\IO.SYS
2017-05-11 22:04 - 2017-05-11 22:04 - 00023840 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO32.SYS
2017-05-11 22:00 - 2017-05-12 06:27 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Stamerpy
2017-05-11 22:00 - 2017-05-12 00:13 - 00000000 ____D C:\Users\hassan\AppData\Local\Grotationreabent
2017-05-11 13:59 - 2014-09-10 17:14 - 00163480 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 01070232 _____ (Microsoft Corporation) C:\Windows\system32\mscomctl.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00660120 _____ (Microsoft Corporation) C:\Windows\system32\mscomct2.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00617896 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00444328 _____ (Microsoft Corporation) C:\Windows\system32\MShflxgd.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00416408 _____ (Microsoft Corporation ) C:\Windows\system32\comct332.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00279192 _____ (Microsoft Corporation) C:\Windows\system32\msdatgrd.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00259736 _____ (Microsoft Corporation) C:\Windows\system32\msflxgrd.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00253080 _____ (Microsoft Corporation) C:\Windows\system32\msdatlst.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00222360 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00219288 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00218776 _____ (Microsoft Corporation) C:\Windows\system32\dblist32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00212112 _____ (Microsoft Corporation) C:\Windows\system32\mci32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00179352 _____ (Microsoft Corporation) C:\Windows\system32\msmask32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00170920 _____ (Microsoft Corporation) C:\Windows\system32\comct232.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00131728 _____ (Microsoft Corporation) C:\Windows\system32\msinet.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00130712 _____ (Microsoft Corporation) C:\Windows\system32\msstdfmt.dll
2017-05-11 13:59 - 2013-11-25 14:27 - 00127640 _____ (Microsoft Corporation) C:\Windows\system32\mswinsck.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00119960 _____ (Microsoft Corporation) C:\Windows\system32\mscomm32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00108696 _____ (Microsoft Corporation) C:\Windows\system32\MSSTKPRP.DLL
2017-05-11 13:59 - 2013-11-25 14:27 - 00104088 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00084624 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx
2017-05-11 13:59 - 2011-01-12 20:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\MFC71u.dll
2017-05-11 13:59 - 2011-01-12 20:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\MFC71DEU.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ITA.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71FRA.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ESP.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ENU.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71KOR.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71JPN.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHT.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHS.DLL
2017-05-11 13:59 - 2011-01-12 20:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\MFC71.dll
2017-05-11 13:59 - 2011-01-12 19:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\atl71.dll
2017-05-11 13:59 - 2008-04-15 13:00 - 01355776 _____ (Microsoft Corporation) C:\Windows\system32\msvbvm50.dll
2017-05-11 13:59 - 2007-02-01 17:13 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll
2017-05-11 13:59 - 2007-02-01 14:11 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2017-05-11 13:59 - 2007-01-30 17:04 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll
2017-05-11 13:59 - 2006-08-25 21:28 - 01017344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70u.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ita.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70fra.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70esp.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70deu.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70enu.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70kor.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70jpn.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc70cht.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc70chs.dll
2017-05-11 13:59 - 2006-08-25 21:07 - 01024000 _____ (Microsoft Corporation) C:\Windows\system32\mfc70.dll
2017-05-11 13:59 - 2006-08-25 20:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\atl70.dll
2017-05-11 13:59 - 2005-01-20 16:25 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll
2017-05-11 13:59 - 2002-01-05 02:40 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP70.DLL
2017-05-11 13:59 - 1996-01-12 01:00 - 00935632 _____ (Microsoft Corporation) C:\Windows\system\Vb40016.dll
2017-05-11 13:59 - 1996-01-12 01:00 - 00722192 _____ (Microsoft Corporation) C:\Windows\system32\Vb40032.dll
2017-05-11 13:59 - 1994-11-17 22:00 - 00210944 _____ C:\Windows\system32\msvcrt10.dll
2017-05-11 13:59 - 1993-05-11 18:00 - 00398416 _____ (Microsoft Corporation) C:\Windows\system\Vbrun300.dll
2017-05-11 13:59 - 1992-10-20 23:00 - 00356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2017-05-11 13:59 - 1991-05-10 00:00 - 00271264 _____ C:\Windows\system\vbrun100.dll
2017-05-11 13:58 - 2017-05-11 13:58 - 00000000 ____D C:\Program Files\Intel
2017-05-11 13:58 - 2017-05-11 13:58 - 00000000 ____D C:\Intel
2017-05-11 13:37 - 2017-05-11 13:37 - 00000000 ____D C:\Program Files\PlayReady
2017-05-11 13:35 - 2017-05-11 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-05-11 13:35 - 2017-05-11 13:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-05-11 12:40 - 2017-05-11 12:40 - 01130328 _____ (Google Inc.) C:\Users\hassan\Downloads\ChromeSetup.exe
2017-05-11 12:30 - 2017-05-11 12:30 - 00000000 ____D C:\Users\hassan\Desktop\EmbratoriaG7
2017-05-11 12:28 - 2017-05-17 00:33 - 00001430 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-11 12:28 - 2017-05-17 00:33 - 00001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-11 12:18 - 2017-05-11 12:18 - 00000000 ____D C:\Windows\system32\Adobe
2017-05-11 11:39 - 2017-05-11 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2017-05-11 11:33 - 2017-05-11 11:33 - 00000000 ____D C:\Users\hassan\AppData\Roaming\PowerISO
2017-05-11 11:30 - 2017-05-13 14:17 - 00000969 _____ C:\Users\Public\Desktop\PowerISO.lnk
2017-05-11 11:30 - 2017-05-11 21:41 - 00000000 ____D C:\Program Files\PowerISO
2017-05-11 10:56 - 2017-05-16 23:40 - 00000000 ____D C:\Users\hassan\AppData\Roaming\IDM
2017-05-11 10:56 - 2017-05-13 14:17 - 00001069 _____ C:\Users\Public\Desktop\Internet Download Manager.lnk
2017-05-11 10:56 - 2017-05-11 22:27 - 00000000 ____D C:\Program Files\Internet Download Manager
2017-05-11 10:56 - 2017-05-11 10:56 - 00000000 ____D C:\Users\hassan\Desktop\Internet_Download_Manager_6.28.9_Final
2017-05-11 10:11 - 2017-05-11 10:11 - 00000000 ____D C:\Program Files\Realtek
2017-05-11 10:11 - 2011-12-13 10:01 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-05-11 09:48 - 2017-05-11 09:48 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-05-11 09:48 - 2017-05-11 09:48 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-05-11 09:20 - 2017-05-11 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-05-11 09:00 - 2017-05-11 09:00 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2017-05-11 09:00 - 2017-05-11 09:00 - 00000000 ____D C:\Users\hassan\AppData\Local\FluxSoftware
2017-05-11 08:59 - 2017-05-11 08:59 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-11 08:59 - 2017-05-11 08:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-11 01:06 - 2017-05-12 06:59 - 00000000 ____D C:\Windows\Panther
2017-05-10 23:03 - 2017-05-10 23:07 - 31125683 _____ C:\Users\hassan\Downloads\6303_Vista_Win7_PG537.zip
2017-05-10 22:27 - 2017-05-10 22:27 - 00000000 ____D C:\Windows\IObit
2017-05-10 22:22 - 2017-05-11 22:04 - 00000000 ____D C:\Users\hassan\AppData\LocalLow\IObit
2017-05-10 22:20 - 2017-05-11 23:44 - 00057560 _____ C:\Users\hassan\AppData\Local\GDIPFONTCACHEV1.DAT
2017-05-10 22:13 - 2017-05-13 12:37 - 00000000 ____D C:\Users\hassan\AppData\Local\Google
2017-05-10 22:12 - 2017-05-10 22:12 - 00000000 ____D C:\Users\hassan\AppData\Roaming\DRPNPS
2017-05-10 22:11 - 2017-05-11 12:28 - 00000000 ____D C:\Program Files\Google
2017-05-10 22:08 - 2017-05-11 12:16 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-05-10 22:08 - 2017-05-10 22:08 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-05-10 22:08 - 2017-05-10 22:08 - 00000000 ____D C:\ProgramData\Adobe
2017-05-10 22:08 - 2017-05-10 22:08 - 00000000 ____D C:\Program Files\Adobe
2017-05-10 22:00 - 2017-05-10 22:08 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Adobe
2017-05-10 22:00 - 2017-05-10 22:00 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Macromedia
2017-05-10 22:00 - 2017-05-10 22:00 - 00000000 ____D C:\Users\hassan\AppData\Local\Macromedia
2017-05-10 21:59 - 2017-05-11 09:48 - 00000000 ____D C:\Windows\system32\Macromed
2017-05-10 21:56 - 2017-05-11 09:45 - 00000000 ____D C:\Users\hassan\AppData\Local\Adobe
2017-05-10 21:54 - 2017-05-16 12:50 - 00000000 ____D C:\Users\hassan\AppData\LocalLow\Mozilla
2017-05-10 21:54 - 2017-05-10 22:02 - 00000000 ____D C:\Users\hassan\AppData\Local\Mozilla
2017-05-10 19:18 - 2017-05-17 00:39 - 00000000 ____D C:\Users\hassan\AppData\Roaming\DMCache
2017-05-10 19:16 - 2017-05-14 13:23 - 00000000 ____D C:\Users\hassan\Downloads\Compressed
2017-05-10 19:16 - 2017-05-10 19:16 - 00000000 ____D C:\Users\hassan\Downloads\Video
2017-05-10 19:14 - 2017-05-11 08:59 - 00000000 ____D C:\Program Files\WinRAR
2017-05-10 19:14 - 2017-05-10 19:14 - 00000000 ____D C:\Users\hassan\AppData\Roaming\WinRAR
2017-05-10 19:14 - 2017-05-10 19:14 - 00000000 ____D C:\ProgramData\IDM
2017-05-10 18:54 - 2017-05-10 19:00 - 16502180 _____ C:\Users\hassan\Downloads\Internet_Download_Manager_6.28.9_Final.rar
2017-05-10 18:49 - 2017-05-10 18:49 - 00000000 ___SD C:\Users\hassan\AppData\LocalLow\Temp
2017-05-10 15:18 - 2017-05-10 15:18 - 00000000 ____D C:\Users\hassan\AppData\Local\ElevatedDiagnostics
2017-05-10 15:15 - 2017-05-15 23:12 - 00000000 ____D C:\Users\hassan
2017-05-10 15:15 - 2017-05-10 15:15 - 00000020 ___SH C:\Users\hassan\ntuser.ini
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\قائمة ابدأ
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\My Documents
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\Documents\My Videos
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\Documents\My Pictures
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\Documents\My Music
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\البرامج
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\Default\قائمة ابدأ
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\البرامج
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\ProgramData\قائمة ابدأ
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\ProgramData\سطح المكتب
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\البرامج
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 ____D C:\Users\hassan\AppData\Local\VirtualStore
2017-05-10 15:15 - 2010-11-21 01:46 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Media Center Programs
2017-05-10 15:11 - 2017-05-13 14:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-05-10 15:11 - 2017-05-13 14:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-04-27 18:39 - 2014-01-23 10:16 - 00051928 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\Rtnicxp.sys
2017-04-27 18:39 - 2013-10-31 03:24 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2017-04-27 18:39 - 2013-10-31 03:24 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2017-04-27 14:11 - 2012-11-14 00:43 - 09037312 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd32.sys
2017-04-27 14:11 - 2012-11-14 00:43 - 01921265 _____ C:\Windows\system32\iglhxa32.cpa
2017-04-27 14:11 - 2012-11-14 00:43 - 00189552 _____ C:\Windows\system32\Gfxres.th-TH.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00178407 _____ C:\Windows\system32\Gfxres.el-GR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00165395 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00139909 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00136401 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00133746 _____ C:\Windows\system32\Gfxres.he-IL.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00125558 _____ C:\Windows\system32\Gfxres.it-IT.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00123230 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00122927 _____ C:\Windows\system32\Gfxres.es-ES.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00122709 _____ C:\Windows\system32\Gfxres.de-DE.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00121173 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00120800 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00120366 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119616 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119586 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119360 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119067 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118745 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118697 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118409 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118058 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00115200 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2017-04-27 14:11 - 2012-11-14 00:43 - 00114852 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00114372 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00114261 _____ C:\Windows\system32\Gfxres.da-DK.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00110211 _____ C:\Windows\system32\Gfxres.en-US.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00104044 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00102883 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084992 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084992 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084480 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084480 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00082944 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00082944 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00081920 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00081920 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00060254 _____ C:\Windows\system32\iglhxg32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00060226 _____ C:\Windows\system32\iglhxc32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00060015 _____ C:\Windows\system32\iglhxo32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00051652 _____ C:\Windows\system32\iglhxs32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00001090 _____ C:\Windows\system32\iglhxa32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00000259 _____ C:\Windows\system32\GfxUI.exe.config
2017-04-27 14:10 - 2012-11-14 00:43 - 00828928 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00571904 _____ (Intel Corporation) C:\Windows\system32\igdumdx32.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00261632 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00228864 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00208896 _____ (Intel Corporation) C:\Windows\system32\iglhsip32.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00195584 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00147456 _____ (Intel Corporation) C:\Windows\system32\iglhcp32.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00130048 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00081920 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2869.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00057856 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00023552 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00004096 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2017-04-27 14:09 - 2012-11-17 01:54 - 08195640 _____ (Intel(R) Corporation) C:\Windows\system32\TVWSetup.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00268856 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00180280 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00173624 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00138808 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2017-04-27 14:09 - 2012-11-17 01:53 - 03158584 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2017-04-27 14:09 - 2012-11-17 01:53 - 00172088 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2017-04-27 14:09 - 2012-11-14 00:43 - 11405824 _____ (Intel Corporation) C:\Windows\system32\ig4icd32.dll
2017-04-27 14:09 - 2012-11-14 00:43 - 00982240 _____ C:\Windows\system32\igkrng500.bin
2017-04-27 14:09 - 2012-11-14 00:43 - 00439308 _____ C:\Windows\system32\igcompkrng500.bin
2017-04-27 14:09 - 2012-11-14 00:43 - 00120320 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2017-04-27 14:09 - 2012-11-14 00:43 - 00095232 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2017-04-27 14:09 - 2012-11-14 00:43 - 00092356 _____ C:\Windows\system32\igfcg500m.bin
2017-04-21 13:53 - 2017-04-21 13:53 - 00029376 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-04-21 13:53 - 2017-04-21 13:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2017-04-21 13:53 - 2017-04-21 13:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-04-21 13:53 - 2017-04-21 13:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2017-04-20 19:09 - 2017-04-20 19:09 - 00987840 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-04-20 19:09 - 2017-04-20 19:09 - 00485576 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-05-17 06:26 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-16 23:55 - 2009-07-14 05:34 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-05-16 23:55 - 2009-07-14 05:34 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-05-16 15:02 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-05-16 06:54 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-05-15 21:56 - 2011-02-07 13:31 - 00744976 _____ C:\Windows\system32\perfh00C.dat
2017-05-15 21:56 - 2011-02-07 13:31 - 00470204 _____ C:\Windows\system32\perfh001.dat
2017-05-15 21:56 - 2011-02-07 13:31 - 00148908 _____ C:\Windows\system32\perfc00C.dat
2017-05-15 21:56 - 2011-02-07 13:31 - 00094026 _____ C:\Windows\system32\perfc001.dat
2017-05-15 21:56 - 2010-11-20 22:01 - 02229580 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-14 16:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\TAPI
2017-05-13 14:18 - 2009-07-14 05:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-13 14:18 - 2009-07-14 05:42 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2017-05-13 14:18 - 2009-07-14 05:42 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2017-05-13 14:18 - 2009-07-14 05:42 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2017-05-13 14:17 - 2009-07-14 05:46 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2017-05-13 14:17 - 2009-07-14 05:37 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2017-05-13 12:24 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2017-05-13 12:16 - 2009-07-14 03:03 - 31457280 _____ C:\Windows\system32\config\SOFTWARE.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 11010048 _____ C:\Windows\system32\config\SYSTEM.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2017-05-12 06:27 - 2009-07-14 05:33 - 00266928 _____ C:\Windows\system32\FNTCACHE.DAT
2017-05-12 00:19 - 2009-07-14 05:53 - 00010452 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-11 13:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system
2017-05-11 01:05 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-05-11 01:05 - 2009-07-14 05:34 - 00000000 ____D C:\Windows\Setup
2017-05-10 23:30 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-10 23:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2017-05-10 15:15 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-10 15:13 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2017-05-10 15:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\oobe
2017-05-10 15:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sysprep
2017-05-10 15:07 - 2010-11-21 01:46 - 00000000 ____D C:\Windows\CSC
==================== Files in the root of some directories =======
2017-05-11 23:11 - 2017-05-11 23:11 - 7290368 _____ () C:\Users\hassan\AppData\Local\agent.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 0070800 _____ () C:\Users\hassan\AppData\Local\Config.xml
2017-05-11 23:06 - 2017-05-11 23:07 - 0019008 _____ () C:\Users\hassan\AppData\Local\InstallationConfiguration.xml
2017-05-11 23:06 - 2017-05-11 23:06 - 0140800 _____ () C:\Users\hassan\AppData\Local\installer.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 1894851 _____ () C:\Users\hassan\AppData\Local\IsBam.tst
2017-05-11 23:11 - 2017-05-11 23:11 - 0018432 _____ () C:\Users\hassan\AppData\Local\Main.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 0005568 _____ () C:\Users\hassan\AppData\Local\md.xml
2017-05-11 23:11 - 2017-05-11 23:11 - 0126464 _____ () C:\Users\hassan\AppData\Local\noah.dat
2017-05-11 23:15 - 2017-05-11 23:15 - 0001150 _____ () C:\Users\hassan\AppData\Local\uninstall_temp.ico
2017-05-12 22:31 - 2017-05-12 22:32 - 0000132 _____ () C:\ProgramData\log.binb
2017-05-12 12:34 - 2017-05-12 22:31 - 0000128 _____ () C:\ProgramData\log.ewbb
Files to move or delete:
====================
C:\Users\hassan\ZHPDiag3.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-05-16 13:41
==================== End of FRST.txt ============================
Ran by hassan (administrator) on HASSAN-PC (17-05-2017 06:34:41)
Running from C:\Users\hassan\Desktop
Loaded Profiles: hassan (Available Profiles: hassan)
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: العربية (السعودية)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(ESET) C:\Program Files\ESET\ESET Security\egui.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(ESET) C:\Program Files\ESET\ESET Security\eeclnt.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [4027504 2017-05-02] (Tonec Inc.)
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7456984 2017-04-11] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{2F941FA0-4A3F-4FC4-8262-37D175800866}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{2F941FA0-4A3F-4FC4-8262-37D175800866}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: [S-1-5-21-1796275782-4292205373-2313263118-1001] ATTENTION => Default URLSearchHook is missing
FireFox:
========
FF DefaultProfile: 6ylt0cqt.default
FF ProfilePath: C:\Users\hassan\AppData\Roaming\Mozilla\Firefox\Profiles\6ylt0cqt.default [2017-05-17]
FF HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc3.xpi
FF Extension: (No Name) - C:\Program Files\Internet Download Manager\idmmzcc3.xpi [2017-04-25]
FF HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\hassan\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\hassan\AppData\Roaming\IDM\idmmzcc5 [2017-05-11] [not signed]
FF HKU\S-1-5-21-1796275782-4292205373-2313263118-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
Chrome:
=======
CHR DefaultProfile: ChromeDefaultData2
CHR HomePage: ChromeDefaultData2 -> hxxp://www.initialpage123.com/?z=3638f8b93deae0b96ec2b4bgfzdt5zew6zew2w6o3t&from=bcn&uid=WDCXWD3200AVJS-63WDA0_WD-WCARW350251802518&type=hp
CHR StartupUrls: ChromeDefaultData2 -> "hxxp://www.initialpage123.com/?z=3638f8b93deae0b96ec2b4bgfzdt5zew6zew2w6o3t&from=bcn&uid=WDCXWD3200AVJS-63WDA0_WD-WCARW350251802518&type=hp"
CHR Profile: C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2017-05-17] <==== ATTENTION
CHR Extension: (محرّر مستندات Google) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-11]
CHR Extension: (آدبلوك بلس) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-05-11]
CHR Extension: (IDM Integration Module) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-05-16]
CHR Extension: (Chrome Web Store Payments) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-10]
CHR Extension: (Chrome Media Router) - C:\Users\hassan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-13]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2017-04-26]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2069424 2017-03-09] (ESET)
S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [113032 2017-03-09] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [90656 2017-03-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [139384 2017-03-09] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [43920 2017-03-09] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [69304 2017-03-09] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [52680 2017-03-09] (ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [86504 2017-03-09] (ESET)
R3 es1969; C:\Windows\System32\drivers\ES1969.sys [96896 2006-08-15] (ESS Technology, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2017-05-11] (REALiX(tm))
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2017-05-16] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [124304 2017-02-02] (Power Software Ltd)
S3 catchme; \??\C:\Users\hassan\AppData\Local\Temp\catchme.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-05-17 06:34 - 2017-05-17 06:35 - 00007946 _____ C:\Users\hassan\Desktop\FRST.txt
2017-05-17 06:28 - 2017-05-17 06:34 - 00000000 ____D C:\FRST
2017-05-17 00:18 - 2017-05-17 00:18 - 01770496 _____ (Farbar) C:\Users\hassan\Desktop\FRST.exe
2017-05-16 23:46 - 2017-05-16 23:46 - 00002065 _____ C:\Users\hassan\Desktop\ZHPFixReport.txt
2017-05-16 23:44 - 2017-05-16 23:45 - 00000000 ____D C:\Program Files\ZHPFix
2017-05-16 23:44 - 2017-05-16 23:44 - 00001799 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-05-16 23:44 - 2017-05-16 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-05-16 23:43 - 2017-05-16 23:43 - 00004929 _____ C:\Users\hassan\Desktop\1.txt..1
2017-05-16 23:40 - 2017-05-16 23:41 - 03521617 _____ (Nicolas Coolman ) C:\Users\hassan\Desktop\ZHPFix.exe
2017-05-16 12:53 - 2017-05-16 12:53 - 00075250 _____ C:\Users\hassan\Desktop\ZHPDiag.txt
2017-05-16 12:48 - 2017-05-16 23:46 - 00000000 ____D C:\Users\hassan\AppData\Roaming\ZHP
2017-05-16 12:42 - 2017-05-16 12:44 - 02728960 _____ C:\Users\hassan\Downloads\ZHPDiag3.exe
2017-05-15 23:12 - 2017-05-15 23:11 - 02727424 _____ C:\Users\hassan\ZHPDiag3.exe
2017-05-15 13:25 - 2017-05-15 13:45 - 00000000 ____D C:\AdwCleaner
2017-05-15 13:16 - 2017-05-15 13:16 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\hassan\Downloads\rkill.com
2017-05-14 14:13 - 2017-05-14 14:14 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Mozilla
2017-05-14 14:13 - 2017-05-14 14:13 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-05-14 14:13 - 2017-05-14 14:13 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-05-14 13:23 - 2017-05-16 12:46 - 00000000 ____D C:\Users\hassan\Desktop\RegistryFinder
2017-05-14 12:51 - 2017-05-14 12:51 - 00458234 _____ C:\Malwarebytes Anti-Malware.txt
2017-05-14 05:59 - 2017-05-15 23:12 - 00000669 _____ C:\Users\hassan\Desktop\ZHPDiag.lnk
2017-05-13 14:06 - 2017-05-13 14:06 - 00001118 _____ C:\الي.txt
2017-05-13 13:26 - 2017-05-16 13:48 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-13 13:26 - 2017-05-13 14:17 - 00001088 _____ C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\Malwarebytes Anti-Malware.lnk
2017-05-13 13:26 - 2017-05-13 14:17 - 00001064 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-05-13 13:26 - 2017-05-13 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-05-13 13:26 - 2017-05-13 13:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-13 13:26 - 2017-05-13 13:26 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2017-05-13 13:26 - 2015-06-18 06:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-05-13 13:26 - 2015-06-18 06:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2017-05-13 13:26 - 2015-06-18 06:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2017-05-13 13:25 - 2017-05-13 13:25 - 00000000 ____D C:\Users\hassan\Desktop\Malwarebytes Anti-Malware 2.2.1.1043
2017-05-13 12:29 - 2017-05-13 12:29 - 00024776 _____ C:\ComboFix.txt
2017-05-13 11:25 - 2017-05-13 12:29 - 00000000 ____D C:\Qoobox
2017-05-13 11:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2017-05-13 11:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2017-05-13 11:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2017-05-13 11:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2017-05-13 11:24 - 2017-05-13 12:25 - 00000000 ____D C:\Windows\erdnt
2017-05-13 11:19 - 2017-05-13 11:22 - 05660182 _____ (Swearware) C:\Users\hassan\Downloads\ComboFix.exe
2017-05-12 23:15 - 2017-05-16 12:50 - 00000000 ____D C:\Users\hassan\AppData\Local\ZHP
2017-05-12 22:57 - 2017-05-12 22:57 - 00000000 ____D C:\Users\hassan\Desktop\public_dns
2017-05-12 22:55 - 2017-05-12 22:55 - 00000000 ____D C:\Users\hassan\AppData\Roaming\ESET
2017-05-12 22:55 - 2017-05-12 22:55 - 00000000 ____D C:\Users\hassan\AppData\Local\ESET
2017-05-12 22:31 - 2017-05-12 22:32 - 00000132 _____ C:\ProgramData\log.binb
2017-05-12 12:41 - 2017-05-12 12:41 - 00001985 _____ C:\Users\Public\Desktop\حماية الدفع المصرفي.lnk
2017-05-12 12:40 - 2017-05-12 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2017-05-12 12:40 - 2017-05-12 12:40 - 00000000 ____D C:\ProgramData\ESET
2017-05-12 12:40 - 2017-05-12 12:40 - 00000000 ____D C:\Program Files\ESET
2017-05-12 12:34 - 2017-05-12 22:31 - 00000128 _____ C:\ProgramData\log.ewbb
2017-05-12 09:30 - 2017-05-12 09:30 - 00000138 _____ C:\AiOLog.txt
2017-05-12 06:51 - 2017-05-13 14:17 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-05-12 06:51 - 2017-05-13 14:05 - 00000000 ____D C:\Program Files\CCleaner
2017-05-12 06:51 - 2017-05-12 06:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-05-12 06:30 - 2017-05-12 06:31 - 00000000 ____D C:\Users\hassan\AppData\Local\navi
2017-05-12 00:15 - 2017-05-13 00:17 - 00000000 ____D C:\Program Files\Common Files\ul432lwc
2017-05-11 23:32 - 2017-05-12 06:27 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Qktynerzos
2017-05-11 23:26 - 2017-05-11 23:26 - 00000000 ____D C:\Users\hassan\Desktop\205937
2017-05-11 23:26 - 2006-08-15 16:46 - 00096896 _____ (ESS Technology, Inc.) C:\Windows\system32\Drivers\ES1969.sys
2017-05-11 23:23 - 2017-05-11 23:23 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-11 23:22 - 2017-05-11 23:22 - 00000000 ____D C:\Users\Public\Documents\Google
2017-05-11 23:16 - 2017-05-13 22:26 - 00000000 ____D C:\Windows\system32\appmgmt
2017-05-11 23:15 - 2017-05-12 06:28 - 00000000 ____D C:\Program Files\BitTorrent
2017-05-11 23:11 - 2017-05-11 23:11 - 07290368 _____ C:\Users\hassan\AppData\Local\agent.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 01894851 _____ C:\Users\hassan\AppData\Local\IsBam.tst
2017-05-11 23:11 - 2017-05-11 23:11 - 00126464 _____ C:\Users\hassan\AppData\Local\noah.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 00070800 _____ C:\Users\hassan\AppData\Local\Config.xml
2017-05-11 23:11 - 2017-05-11 23:11 - 00018432 _____ C:\Users\hassan\AppData\Local\Main.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 00005568 _____ C:\Users\hassan\AppData\Local\md.xml
2017-05-11 23:08 - 2017-05-11 23:08 - 00000000 _____ C:\Windows\system32\3333333
2017-05-11 23:07 - 2017-05-11 23:07 - 00000000 _____ C:\Windows\system32\1111111
2017-05-11 23:06 - 2017-05-11 23:07 - 00019008 _____ C:\Users\hassan\AppData\Local\InstallationConfiguration.xml
2017-05-11 23:06 - 2017-05-11 23:06 - 00140800 _____ C:\Users\hassan\AppData\Local\installer.dat
2017-05-11 23:06 - 2017-05-11 23:06 - 00000000 _____ C:\Windows\system32\22
2017-05-11 23:06 - 2017-05-11 23:06 - 00000000 _____ C:\Windows\system32\11
2017-05-11 23:06 - 2017-05-11 23:06 - 00000000 _____ C:\Windows\system32\00
2017-05-11 23:05 - 2017-05-11 23:05 - 00000000 _____ C:\Windows\system32\1111
2017-05-11 22:20 - 2017-05-11 22:20 - 00000000 __RSH C:\MSDOS.SYS
2017-05-11 22:20 - 2017-05-11 22:20 - 00000000 __RSH C:\IO.SYS
2017-05-11 22:04 - 2017-05-11 22:04 - 00023840 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO32.SYS
2017-05-11 22:00 - 2017-05-12 06:27 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Stamerpy
2017-05-11 22:00 - 2017-05-12 00:13 - 00000000 ____D C:\Users\hassan\AppData\Local\Grotationreabent
2017-05-11 13:59 - 2014-09-10 17:14 - 00163480 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 01070232 _____ (Microsoft Corporation) C:\Windows\system32\mscomctl.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00660120 _____ (Microsoft Corporation) C:\Windows\system32\mscomct2.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00617896 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00444328 _____ (Microsoft Corporation) C:\Windows\system32\MShflxgd.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00416408 _____ (Microsoft Corporation ) C:\Windows\system32\comct332.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00279192 _____ (Microsoft Corporation) C:\Windows\system32\msdatgrd.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00259736 _____ (Microsoft Corporation) C:\Windows\system32\msflxgrd.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00253080 _____ (Microsoft Corporation) C:\Windows\system32\msdatlst.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00222360 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00219288 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00218776 _____ (Microsoft Corporation) C:\Windows\system32\dblist32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00212112 _____ (Microsoft Corporation) C:\Windows\system32\mci32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00179352 _____ (Microsoft Corporation) C:\Windows\system32\msmask32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00170920 _____ (Microsoft Corporation) C:\Windows\system32\comct232.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00131728 _____ (Microsoft Corporation) C:\Windows\system32\msinet.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00130712 _____ (Microsoft Corporation) C:\Windows\system32\msstdfmt.dll
2017-05-11 13:59 - 2013-11-25 14:27 - 00127640 _____ (Microsoft Corporation) C:\Windows\system32\mswinsck.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00119960 _____ (Microsoft Corporation) C:\Windows\system32\mscomm32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00108696 _____ (Microsoft Corporation) C:\Windows\system32\MSSTKPRP.DLL
2017-05-11 13:59 - 2013-11-25 14:27 - 00104088 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx
2017-05-11 13:59 - 2013-11-25 14:27 - 00084624 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx
2017-05-11 13:59 - 2011-01-12 20:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\MFC71u.dll
2017-05-11 13:59 - 2011-01-12 20:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\MFC71DEU.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ITA.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71FRA.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ESP.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ENU.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71KOR.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71JPN.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHT.DLL
2017-05-11 13:59 - 2011-01-12 20:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHS.DLL
2017-05-11 13:59 - 2011-01-12 20:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\MFC71.dll
2017-05-11 13:59 - 2011-01-12 19:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\atl71.dll
2017-05-11 13:59 - 2008-04-15 13:00 - 01355776 _____ (Microsoft Corporation) C:\Windows\system32\msvbvm50.dll
2017-05-11 13:59 - 2007-02-01 17:13 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll
2017-05-11 13:59 - 2007-02-01 14:11 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2017-05-11 13:59 - 2007-01-30 17:04 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll
2017-05-11 13:59 - 2006-08-25 21:28 - 01017344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70u.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ita.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70fra.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70esp.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70deu.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70enu.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70kor.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70jpn.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc70cht.dll
2017-05-11 13:59 - 2006-08-25 21:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc70chs.dll
2017-05-11 13:59 - 2006-08-25 21:07 - 01024000 _____ (Microsoft Corporation) C:\Windows\system32\mfc70.dll
2017-05-11 13:59 - 2006-08-25 20:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\atl70.dll
2017-05-11 13:59 - 2005-01-20 16:25 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll
2017-05-11 13:59 - 2002-01-05 02:40 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP70.DLL
2017-05-11 13:59 - 1996-01-12 01:00 - 00935632 _____ (Microsoft Corporation) C:\Windows\system\Vb40016.dll
2017-05-11 13:59 - 1996-01-12 01:00 - 00722192 _____ (Microsoft Corporation) C:\Windows\system32\Vb40032.dll
2017-05-11 13:59 - 1994-11-17 22:00 - 00210944 _____ C:\Windows\system32\msvcrt10.dll
2017-05-11 13:59 - 1993-05-11 18:00 - 00398416 _____ (Microsoft Corporation) C:\Windows\system\Vbrun300.dll
2017-05-11 13:59 - 1992-10-20 23:00 - 00356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2017-05-11 13:59 - 1991-05-10 00:00 - 00271264 _____ C:\Windows\system\vbrun100.dll
2017-05-11 13:58 - 2017-05-11 13:58 - 00000000 ____D C:\Program Files\Intel
2017-05-11 13:58 - 2017-05-11 13:58 - 00000000 ____D C:\Intel
2017-05-11 13:37 - 2017-05-11 13:37 - 00000000 ____D C:\Program Files\PlayReady
2017-05-11 13:35 - 2017-05-11 13:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-05-11 13:35 - 2017-05-11 13:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-05-11 12:40 - 2017-05-11 12:40 - 01130328 _____ (Google Inc.) C:\Users\hassan\Downloads\ChromeSetup.exe
2017-05-11 12:30 - 2017-05-11 12:30 - 00000000 ____D C:\Users\hassan\Desktop\EmbratoriaG7
2017-05-11 12:28 - 2017-05-17 00:33 - 00001430 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-11 12:28 - 2017-05-17 00:33 - 00001154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-11 12:18 - 2017-05-11 12:18 - 00000000 ____D C:\Windows\system32\Adobe
2017-05-11 11:39 - 2017-05-11 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2017-05-11 11:33 - 2017-05-11 11:33 - 00000000 ____D C:\Users\hassan\AppData\Roaming\PowerISO
2017-05-11 11:30 - 2017-05-13 14:17 - 00000969 _____ C:\Users\Public\Desktop\PowerISO.lnk
2017-05-11 11:30 - 2017-05-11 21:41 - 00000000 ____D C:\Program Files\PowerISO
2017-05-11 10:56 - 2017-05-16 23:40 - 00000000 ____D C:\Users\hassan\AppData\Roaming\IDM
2017-05-11 10:56 - 2017-05-13 14:17 - 00001069 _____ C:\Users\Public\Desktop\Internet Download Manager.lnk
2017-05-11 10:56 - 2017-05-11 22:27 - 00000000 ____D C:\Program Files\Internet Download Manager
2017-05-11 10:56 - 2017-05-11 10:56 - 00000000 ____D C:\Users\hassan\Desktop\Internet_Download_Manager_6.28.9_Final
2017-05-11 10:11 - 2017-05-11 10:11 - 00000000 ____D C:\Program Files\Realtek
2017-05-11 10:11 - 2011-12-13 10:01 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2017-05-11 09:48 - 2017-05-11 09:48 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-05-11 09:48 - 2017-05-11 09:48 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-05-11 09:20 - 2017-05-11 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-05-11 09:00 - 2017-05-11 09:00 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
2017-05-11 09:00 - 2017-05-11 09:00 - 00000000 ____D C:\Users\hassan\AppData\Local\FluxSoftware
2017-05-11 08:59 - 2017-05-11 08:59 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-11 08:59 - 2017-05-11 08:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-05-11 01:06 - 2017-05-12 06:59 - 00000000 ____D C:\Windows\Panther
2017-05-10 23:03 - 2017-05-10 23:07 - 31125683 _____ C:\Users\hassan\Downloads\6303_Vista_Win7_PG537.zip
2017-05-10 22:27 - 2017-05-10 22:27 - 00000000 ____D C:\Windows\IObit
2017-05-10 22:22 - 2017-05-11 22:04 - 00000000 ____D C:\Users\hassan\AppData\LocalLow\IObit
2017-05-10 22:20 - 2017-05-11 23:44 - 00057560 _____ C:\Users\hassan\AppData\Local\GDIPFONTCACHEV1.DAT
2017-05-10 22:13 - 2017-05-13 12:37 - 00000000 ____D C:\Users\hassan\AppData\Local\Google
2017-05-10 22:12 - 2017-05-10 22:12 - 00000000 ____D C:\Users\hassan\AppData\Roaming\DRPNPS
2017-05-10 22:11 - 2017-05-11 12:28 - 00000000 ____D C:\Program Files\Google
2017-05-10 22:08 - 2017-05-11 12:16 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-05-10 22:08 - 2017-05-10 22:08 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-05-10 22:08 - 2017-05-10 22:08 - 00000000 ____D C:\ProgramData\Adobe
2017-05-10 22:08 - 2017-05-10 22:08 - 00000000 ____D C:\Program Files\Adobe
2017-05-10 22:00 - 2017-05-10 22:08 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Adobe
2017-05-10 22:00 - 2017-05-10 22:00 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Macromedia
2017-05-10 22:00 - 2017-05-10 22:00 - 00000000 ____D C:\Users\hassan\AppData\Local\Macromedia
2017-05-10 21:59 - 2017-05-11 09:48 - 00000000 ____D C:\Windows\system32\Macromed
2017-05-10 21:56 - 2017-05-11 09:45 - 00000000 ____D C:\Users\hassan\AppData\Local\Adobe
2017-05-10 21:54 - 2017-05-16 12:50 - 00000000 ____D C:\Users\hassan\AppData\LocalLow\Mozilla
2017-05-10 21:54 - 2017-05-10 22:02 - 00000000 ____D C:\Users\hassan\AppData\Local\Mozilla
2017-05-10 19:18 - 2017-05-17 00:39 - 00000000 ____D C:\Users\hassan\AppData\Roaming\DMCache
2017-05-10 19:16 - 2017-05-14 13:23 - 00000000 ____D C:\Users\hassan\Downloads\Compressed
2017-05-10 19:16 - 2017-05-10 19:16 - 00000000 ____D C:\Users\hassan\Downloads\Video
2017-05-10 19:14 - 2017-05-11 08:59 - 00000000 ____D C:\Program Files\WinRAR
2017-05-10 19:14 - 2017-05-10 19:14 - 00000000 ____D C:\Users\hassan\AppData\Roaming\WinRAR
2017-05-10 19:14 - 2017-05-10 19:14 - 00000000 ____D C:\ProgramData\IDM
2017-05-10 18:54 - 2017-05-10 19:00 - 16502180 _____ C:\Users\hassan\Downloads\Internet_Download_Manager_6.28.9_Final.rar
2017-05-10 18:49 - 2017-05-10 18:49 - 00000000 ___SD C:\Users\hassan\AppData\LocalLow\Temp
2017-05-10 15:18 - 2017-05-10 15:18 - 00000000 ____D C:\Users\hassan\AppData\Local\ElevatedDiagnostics
2017-05-10 15:15 - 2017-05-15 23:12 - 00000000 ____D C:\Users\hassan
2017-05-10 15:15 - 2017-05-10 15:15 - 00000020 ___SH C:\Users\hassan\ntuser.ini
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\قائمة ابدأ
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\My Documents
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\Documents\My Videos
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\Documents\My Pictures
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\Documents\My Music
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\hassan\AppData\Roaming\Microsoft\Windows\Start Menu\البرامج
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\Default\قائمة ابدأ
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\البرامج
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\ProgramData\قائمة ابدأ
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\ProgramData\سطح المكتب
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\البرامج
2017-05-10 15:15 - 2017-05-10 15:15 - 00000000 ____D C:\Users\hassan\AppData\Local\VirtualStore
2017-05-10 15:15 - 2010-11-21 01:46 - 00000000 ____D C:\Users\hassan\AppData\Roaming\Media Center Programs
2017-05-10 15:11 - 2017-05-13 14:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-05-10 15:11 - 2017-05-13 14:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-04-27 18:39 - 2014-01-23 10:16 - 00051928 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\Rtnicxp.sys
2017-04-27 18:39 - 2013-10-31 03:24 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2017-04-27 18:39 - 2013-10-31 03:24 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2017-04-27 14:11 - 2012-11-14 00:43 - 09037312 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd32.sys
2017-04-27 14:11 - 2012-11-14 00:43 - 01921265 _____ C:\Windows\system32\iglhxa32.cpa
2017-04-27 14:11 - 2012-11-14 00:43 - 00189552 _____ C:\Windows\system32\Gfxres.th-TH.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00178407 _____ C:\Windows\system32\Gfxres.el-GR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00165395 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00139909 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00136401 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00133746 _____ C:\Windows\system32\Gfxres.he-IL.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00125558 _____ C:\Windows\system32\Gfxres.it-IT.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00123230 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00122927 _____ C:\Windows\system32\Gfxres.es-ES.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00122709 _____ C:\Windows\system32\Gfxres.de-DE.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00121173 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00120800 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00120366 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119616 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119586 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119360 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00119067 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118745 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118697 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118409 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00118058 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00115200 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2017-04-27 14:11 - 2012-11-14 00:43 - 00114852 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00114372 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00114261 _____ C:\Windows\system32\Gfxres.da-DK.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00110211 _____ C:\Windows\system32\Gfxres.en-US.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00104044 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00102883 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2017-04-27 14:11 - 2012-11-14 00:43 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00086016 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00085504 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084992 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084992 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084480 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00084480 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00082944 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00082944 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00081920 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00081920 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2017-04-27 14:11 - 2012-11-14 00:43 - 00060254 _____ C:\Windows\system32\iglhxg32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00060226 _____ C:\Windows\system32\iglhxc32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00060015 _____ C:\Windows\system32\iglhxo32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00051652 _____ C:\Windows\system32\iglhxs32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00001090 _____ C:\Windows\system32\iglhxa32.vp
2017-04-27 14:11 - 2012-11-14 00:43 - 00000259 _____ C:\Windows\system32\GfxUI.exe.config
2017-04-27 14:10 - 2012-11-14 00:43 - 00828928 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00571904 _____ (Intel Corporation) C:\Windows\system32\igdumdx32.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00261632 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00228864 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00208896 _____ (Intel Corporation) C:\Windows\system32\iglhsip32.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00195584 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00147456 _____ (Intel Corporation) C:\Windows\system32\iglhcp32.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00130048 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00081920 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2869.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00057856 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00023552 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2017-04-27 14:10 - 2012-11-14 00:43 - 00004096 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2017-04-27 14:09 - 2012-11-17 01:54 - 08195640 _____ (Intel(R) Corporation) C:\Windows\system32\TVWSetup.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00268856 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00180280 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00173624 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2017-04-27 14:09 - 2012-11-17 01:54 - 00138808 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2017-04-27 14:09 - 2012-11-17 01:53 - 03158584 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2017-04-27 14:09 - 2012-11-17 01:53 - 00172088 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2017-04-27 14:09 - 2012-11-14 00:43 - 11405824 _____ (Intel Corporation) C:\Windows\system32\ig4icd32.dll
2017-04-27 14:09 - 2012-11-14 00:43 - 00982240 _____ C:\Windows\system32\igkrng500.bin
2017-04-27 14:09 - 2012-11-14 00:43 - 00439308 _____ C:\Windows\system32\igcompkrng500.bin
2017-04-27 14:09 - 2012-11-14 00:43 - 00120320 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2017-04-27 14:09 - 2012-11-14 00:43 - 00095232 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2017-04-27 14:09 - 2012-11-14 00:43 - 00092356 _____ C:\Windows\system32\igfcg500m.bin
2017-04-21 13:53 - 2017-04-21 13:53 - 00029376 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-04-21 13:53 - 2017-04-21 13:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2017-04-21 13:53 - 2017-04-21 13:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-04-21 13:53 - 2017-04-21 13:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2017-04-20 19:09 - 2017-04-20 19:09 - 00987840 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-04-20 19:09 - 2017-04-20 19:09 - 00485576 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-05-17 06:26 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-16 23:55 - 2009-07-14 05:34 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-05-16 23:55 - 2009-07-14 05:34 - 00022944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-05-16 15:02 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-05-16 06:54 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-05-15 21:56 - 2011-02-07 13:31 - 00744976 _____ C:\Windows\system32\perfh00C.dat
2017-05-15 21:56 - 2011-02-07 13:31 - 00470204 _____ C:\Windows\system32\perfh001.dat
2017-05-15 21:56 - 2011-02-07 13:31 - 00148908 _____ C:\Windows\system32\perfc00C.dat
2017-05-15 21:56 - 2011-02-07 13:31 - 00094026 _____ C:\Windows\system32\perfc001.dat
2017-05-15 21:56 - 2010-11-20 22:01 - 02229580 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-14 16:19 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\TAPI
2017-05-13 14:18 - 2009-07-14 05:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-05-13 14:18 - 2009-07-14 05:42 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2017-05-13 14:18 - 2009-07-14 05:42 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2017-05-13 14:18 - 2009-07-14 05:42 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2017-05-13 14:17 - 2009-07-14 05:46 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2017-05-13 14:17 - 2009-07-14 05:37 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2017-05-13 12:24 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2017-05-13 12:16 - 2009-07-14 03:03 - 31457280 _____ C:\Windows\system32\config\SOFTWARE.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 11010048 _____ C:\Windows\system32\config\SYSTEM.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2017-05-13 12:16 - 2009-07-14 03:03 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2017-05-12 06:27 - 2009-07-14 05:33 - 00266928 _____ C:\Windows\system32\FNTCACHE.DAT
2017-05-12 00:19 - 2009-07-14 05:53 - 00010452 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-11 13:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system
2017-05-11 01:05 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-05-11 01:05 - 2009-07-14 05:34 - 00000000 ____D C:\Windows\Setup
2017-05-10 23:30 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-05-10 23:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2017-05-10 15:15 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Public\Libraries
2017-05-10 15:13 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2017-05-10 15:12 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\oobe
2017-05-10 15:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sysprep
2017-05-10 15:07 - 2010-11-21 01:46 - 00000000 ____D C:\Windows\CSC
==================== Files in the root of some directories =======
2017-05-11 23:11 - 2017-05-11 23:11 - 7290368 _____ () C:\Users\hassan\AppData\Local\agent.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 0070800 _____ () C:\Users\hassan\AppData\Local\Config.xml
2017-05-11 23:06 - 2017-05-11 23:07 - 0019008 _____ () C:\Users\hassan\AppData\Local\InstallationConfiguration.xml
2017-05-11 23:06 - 2017-05-11 23:06 - 0140800 _____ () C:\Users\hassan\AppData\Local\installer.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 1894851 _____ () C:\Users\hassan\AppData\Local\IsBam.tst
2017-05-11 23:11 - 2017-05-11 23:11 - 0018432 _____ () C:\Users\hassan\AppData\Local\Main.dat
2017-05-11 23:11 - 2017-05-11 23:11 - 0005568 _____ () C:\Users\hassan\AppData\Local\md.xml
2017-05-11 23:11 - 2017-05-11 23:11 - 0126464 _____ () C:\Users\hassan\AppData\Local\noah.dat
2017-05-11 23:15 - 2017-05-11 23:15 - 0001150 _____ () C:\Users\hassan\AppData\Local\uninstall_temp.ico
2017-05-12 22:31 - 2017-05-12 22:32 - 0000132 _____ () C:\ProgramData\log.binb
2017-05-12 12:34 - 2017-05-12 22:31 - 0000128 _____ () C:\ProgramData\log.ewbb
Files to move or delete:
====================
C:\Users\hassan\ZHPDiag3.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-05-16 13:41
==================== End of FRST.txt ============================