FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-06-2017 01
Ran by user (administrator) on DESKTOP-5HHBKHR (24-06-2017 07:39:30)

Running from D:\harus bersih
Loaded Profiles: user (Available Profiles: user & Administrator)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: "C:\Program Files
(x86)\UCBrowser\Application\UCBrowser.exe" -- "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-
recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will
not be moved.)
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\REALTEK
Bluetooth\BTDevMgr.exe
() C:\Users\user\AppData\Roaming\CRMSvc\CRMSvc.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\UCBrowser\Application\UCService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\REALTEK\REALTEK
Bluetooth\BTServer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
() C:\Program
Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Windows\Temp\g1F24.tmp.exe
() C:\Windows\Temp\g1F25.tmp.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support
Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files (x86)\UCBrowser\Application\6.1.2716.5\UCAgent.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-
servicingstack_31bf3856ad364e35_10.0.10586.870_none_7645b64e266be2c8\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to
default or removed. The file will not be moved.)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe

[8029064 2016-10-07] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek
Bluetooth\BTServer.exe [231640 2016-05-14] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
[8903176 2016-10-05] (Realtek Semiconductor)
HKLM\...\RunOnce: [DESKTOP-5HHBKHR] => C:\Windows\TEMP\gA6F3.tmp.exe [239104 2017-
06-24] () <===== ATTENTION
HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo
Security Solutions) <==== ATTENTION
HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure
Corporation) <==== ATTENTION
HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK
Software International/F-Prot) <==== ATTENTION
HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender
SRL) <==== ATTENTION
HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA
Software AG) <==== ATTENTION
HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264
(Malwarebytes Corporation) <==== ATTENTION
HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec
HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend
Micro) <==== ATTENTION
HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot
Inc.) <==== ATTENTION
HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A
(SUPERAntiSpyware.com) <==== ATTENTION
HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky
Lab) <==== ATTENTION
HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG
Technologies CZ) <==== ATTENTION
HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools)
<==== ATTENTION
HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7
Computing Pvt Ltd) <==== ATTENTION
HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web
Ltd.) <==== ATTENTION
HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft
Ltd) <==== ATTENTION
HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point
Software Technologies Ltd.) <==== ATTENTION
HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft
HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7
Computing Pvt Ltd) <==== ATTENTION
HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard
HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee)
<==== ATTENTION
HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo
Security Solutions) <==== ATTENTION
HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee)
<==== ATTENTION
HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware
Software) <==== ATTENTION
HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer
Networking Ltd.) <==== ATTENTION
HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot
HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack
Security) <==== ATTENTION
HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB
S.M.B.A.) <==== ATTENTION
HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira
Operations GmbH & Co. KG) <==== ATTENTION
HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard
HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <====
ATTENTION
HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG
HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast
Antivirus/Software) <==== ATTENTION
HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec
HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84
(Malwarebytes Corporation) <==== ATTENTION
HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend
Micro) <==== ATTENTION
HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky
Lab) <==== ATTENTION
HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack
Security) <==== ATTENTION
HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast
Antivirus/Software) <==== ATTENTION
HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total
Defense, Inc.) <==== ATTENTION
HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG
HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender
SRL) <==== ATTENTION
HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <====
ATTENTION
HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda
Security S.L) <==== ATTENTION
HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web
Ltd.) <==== ATTENTION
HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\Run: [IDMan] =>
E:\IDM62810\IDMan.exe [4035696 2017-05-25] (Tonec Inc.)
HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\Policies\Explorer: [DisallowRun]
1
HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\Policies\Explorer\DisallowRun:
[1] Mshta.exe
[2] powershell.exe
[3] bitsadmin.exe
HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\MountPoints2: {396cae62-3bdf-
11e7-bd22-5800e3883f7c} - "G:\AutoRun.exe"
HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\MountPoints2: {396cb323-3bdf-
11e7-bd22-5800e3883f7c} - "G:\Lenovo_Suite.exe"
HKLM\...\Providers\e7oec4eb: C:\Program Files (x86)\Anusaentatoback
Verfier\local64spl.dll [311808 2017-06-04] () <===== ATTENTION
ShellExecuteHooks: No Name - {2C3E9A50-45A5-11E7-BC47-64006A5CFC23} -
C:\Users\user\AppData\Roaming\Rerverpywjeck\Jozsqjing.dll -> No File
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-
64A52A78855D} => E:\IDM62810\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [JzShlobj] -> {9A0700D2-920A-4E52-8697-9B5230C92612}
=> C:\Program Files (x86)\Maoha\JiSuZip\JZipExt.dll [2016-12-27] (
)
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed

or restored to default.)
ProxyServer: [S-1-5-21-1305004467-2202425-649574984-1001] =>

http=127.0.0.1:8080;https=127.0.0.1:8080
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7f203f45-e122-44c9-ad1c-148cf9afb856}: [DhcpNameServer]
192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-1305004467-2202425-649574984-1001\Software\Microsoft\Internet
Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?
LinkID=617910&ResetID=131420074102863608&GUID=662FB34E-17C7-4229-8F44-9C83800A16C8
SearchScopes: HKU\S-1-5-21-1305004467-2202425-649574984-1001 -> DefaultScope
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8}
-> E:\IDM62810\IDMIECC64.dll [2016-12-11] (Internet Download Manager, Tonec Inc.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} ->
C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-22] (Microsoft
Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} ->
C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft
Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} ->
C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-04-07] (HP
Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-
17B458C2A3A8} -> E:\IDM62810\IDMIECC.dll [2016-12-11] (Internet Download Manager,
Tonec Inc.)
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} ->
C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-
10-22] (Adobe Systems Incorporated)
BHO-x32: ContributeBHO Class -> {074C1DC5-9320-4A9A-947D-C042949C6216} ->
C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-
16] (Adobe Systems Incorporated.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} ->
C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-22]
(Microsoft Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-
0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat
8.0\Acrobat\AcroIEFavClient.dll [2007-05-10] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} ->
C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16]
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} ->
C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-04-07] (HP Inc.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program
Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10] (Adobe
Systems Incorporated)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} -
C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-
16] (Adobe Systems Incorporated.)
FireFox:
========
FF HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\SeaMonkey\Extensions:
[mozilla_cc@internetdownloadmanager.com] -
C:\Users\user\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\user\AppData\Roaming\IDM\idmmzcc5 [2017-06-18]
[not signed]
FF HKU\S-1-5-21-1305004467-2202425-649574984-1001\...\SeaMonkey\Extensions:
[mozilla_cc2@internetdownloadmanager.com] - E:\IDM62810\idmmzcc2.xpi
FF Extension: (IDM integration) - E:\IDM62810\idmmzcc2.xpi [2017-01-26]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 ->
C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 ->
C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 ->
C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files
(x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro
9\npnitromozilla.dll [2014-05-19] (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files
(x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files
(x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-18] (Google Inc.)
Chrome:
=======
CHR DefaultProfile: staapycerockanerwacult
CHR HomePage: staapycerockanerwacult -> hxxp://www.initialpage123.com/?
z=29a03a60e831a55c6bd5233gezdtdqaw4c3z0b0e4q&from=amz&uid=ST1000LM035-
1RK172_WES3DGAK&type=hp
CHR NewTab: staapycerockanerwacult -> Not-active:"chrome-
extension://iinglghmhcgdgjjlafobajghjamdchik/newtab.html"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult [2017-06-24] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-05-
18]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-
19]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-05-
19]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-
19]
CHR Extension: (Cookies On-Off) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\dceidjjhomnclmfgflmjaomohekdgdgb [2017-06-
16]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-
18]
CHR Extension: (Tables) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-
04]
CHR Extension: (Google Docs Offline) -
C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-05-
19]
CHR Extension: (Bitmotion - New Tab) -
Data\staapycerockanerwacult\Extensions\iinglghmhcgdgjjlafobajghjamdchik [2017-06-
16]
CHR Extension: (IDM Integration Module) -
Data\staapycerockanerwacult\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-06-
24]
CHR Extension: (Chrome Web Store Payments) -
Data\staapycerockanerwacult\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-
18]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User
Data\staapycerockanerwacult\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-
19]
CHR Extension: (Chrome Media Router) -
Data\staapycerockanerwacult\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-
18]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] -
E:\IDM62810\IDMGCExt.crx [2017-05-25]
CHR HKLM-x32\...\Chrome\Extension: [iinglghmhcgdgjjlafobajghjamdchik] -
hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] -
E:\IDM62810\IDMGCExt.crx [2017-05-25]
Opera:
=======
OPR Extension: (Tables) - C:\Users\user\AppData\Roaming\Opera Software\Opera
Stable\Extensions\egafjhhpbipcmpoiomegbckljbbbphoj [2017-06-04]
OPR Extension: (Fast search) - C:\Users\user\AppData\Roaming\Opera Software\Opera
Stable\Extensions\pbdpajcdgknpendpmecafmopknefafha [2017-06-10]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe
==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The
file will not be moved unless listed separately.)
R2 AdaptiveSleepService; C:\Program Files\ATI

Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2016-10-07] ()
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-
02-28] (Apple Computer, Inc.) [File not signed]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
[125656 2016-05-14] (Realtek Semiconductor Corp.)
R2 CRMSvc; C:\Users\user\AppData\Roaming\CRMSvc\CRMSvc.exe [1215488 2017-06-15] ()
[File not signed] <==== ATTENTION
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision
Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2017-06-07] (Macrovision
Europe Ltd.) [File not signed]
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-04]
(HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP
Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP
Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [630776 2017-
02-07] (HP Inc.)
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro
9\NitroPDFDriverService9x64.exe [230920 2014-05-19] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800
2014-05-19] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
[317960 2016-10-05] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [258152
2016-08-25] (Synaptics Incorporated)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [51224 2016-10-17]
(Advanced Micro Devices, Inc.)
R2 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [599440
2017-05-11] () <==== ATTENTION
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25]
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-04-28]
S2 JszipService; C:\Program Files (x86)\Maoha\JiSuZip\JszipSvc.exe [X] <====
ATTENTION
===================== Drivers (Whitelisted) ======================
S3 ADSPIDEREX; C:\Windows\system32\drivers\adspiderex.sys [55664 2015-12-28] (()

)
R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [27376 2016-10-17] (Advanced
Micro Devices, INC.)
R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [34704 2016-10-17] (Advanced
Micro Devices, Inc)
R3 amdi2c; C:\Windows\System32\drivers\amdi2c.sys [54160 2016-10-17] (Advanced
Micro Devices, Inc)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [100752 2016-10-17] (Advanced
Micro Devices, Inc. )
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [87856 2016-10-17] (Advanced
Micro Devices, Inc.)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [254864 2016-10-17] (Advanced
Micro Devices, Inc. )
R3 amduart; C:\Windows\System32\drivers\amduart.sys [91672 2016-10-17] (Advanced
Micro Devices, Inc)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [110104 2016-10-17]
(Advanced Micro Devices)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung
Electronics Co., Ltd.)
R1 MpKsl196867c0; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\
{6BFB5D38-4AA0-4BA8-9040-818662C9177A}\MpKsl196867c0.sys [44928 2017-06-22]
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [943112 2016-08-27] (Realtek
)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [709376 2016-03-17]
(Realtek Semiconductor Corporation)
U5 RTSUER; C:\Windows\System32\Drivers\RTSUER.sys [418784 2016-08-05] (Realsil
Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [6561280 2016-12-29] (Realtek
Semiconductor Corporation )
R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [60008 2016-08-25]
(Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung
Electronics Co., Ltd.)
R1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [25444 ] (UC Web
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft
Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30]
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30]
R3 WirelessButtonDriver64; C:\Windows\system32\DRIVERS\WirelessButtonDriver64.sys
[32832 2016-08-01] (HP)
S1 atslpkms; \??\C:\Windows\system32\drivers\atslpkms.sys [X]
S1 fxtxqinj; \??\C:\Windows\system32\drivers\fxtxqinj.sys [X]
S1 kzqnjowr; \??\C:\Windows\system32\drivers\kzqnjowr.sys [X]
S1 ludrogjt; \??\C:\Windows\system32\drivers\ludrogjt.sys [X]
S1 mpmysbxg; \??\C:\Windows\system32\drivers\mpmysbxg.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-24 07:18 - 2017-06-24 07:18 - 00000000 ____D C:\Windows.old

2017-06-18 05:31 - 2017-06-18 05:31 - 00000000 ____D C:\ProgramData\AMD
2017-06-18 05:23 - 2017-06-18 05:23 - 00000553 _____ C:\Users\user\Desktop\Internet
Download Manager.lnk
2017-06-18 05:23 - 2017-06-18 05:23 - 00000000 ____D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet
Download Manager
2017-06-18 05:23 - 2017-06-18 05:23 - 00000000 ____D
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-06-18 05:01 - 2017-06-24 07:21 - 00000000 ____D
C:\Users\user\AppData\Roaming\DMCache
2017-06-18 05:01 - 2017-06-18 05:28 - 00000000 ____D
C:\Users\user\AppData\Roaming\IDM
2017-06-18 05:01 - 2017-06-18 05:01 - 00000000 ____D C:\Users\user\Downloads\Video
2017-06-18 05:01 - 2017-06-18 05:01 - 00000000 ____D
C:\Users\user\Downloads\Compressed
2017-06-18 05:01 - 2017-06-18 05:01 - 00000000 ____D C:\ProgramData\IDM
2017-06-16 21:20 - 2017-06-24 07:22 - 00000334 _____
C:\Windows\Tasks\UCBrowserUpdaterCore.job
2017-06-16 21:20 - 2017-06-16 21:20 - 00002688 _____
C:\Windows\System32\Tasks\UCBrowserUpdaterCore
2017-06-16 19:13 - 2017-06-16 19:10 - 00024064 _____ C:\Windows\zoek-delete.exe
2017-06-16 19:08 - 2017-06-16 19:13 - 00000138 _____ C:\runcheck.txt
2017-06-16 18:44 - 2017-06-16 18:44 - 00003476 _____
C:\Windows\System32\Tasks\UCBrowserSecureUpdater
2017-06-16 18:42 - 2017-06-16 18:42 - 00000000 ____D
C:\Users\Administrator\AppData\Roaming\hpqLog
2017-06-16 18:33 - 2017-06-16 18:35 - 00000000 ____D
C:\Users\Administrator\AppData\Roaming\Geek Uninstaller
2017-06-15 21:59 - 2017-06-15 22:00 - 00000132 _____ C:\ProgramData\log.binb
2017-06-15 21:35 - 2017-06-15 21:35 - 00000000 ____D
C:\Users\user\AppData\Roaming\Nitro
2017-06-15 21:33 - 2017-06-15 21:33 - 00033287 _____ C:\Users\user\Documents\Jadwal
%20Piket%20dan%20Ketua%20Kelas-1.xlsx.pdf
2017-06-15 19:15 - 2017-06-18 05:29 - 00000000 ____D C:\Program Files (x86)\AVBoost
2017-06-15 19:15 - 2017-06-15 19:15 - 00000000 ____D
C:\Users\user\AppData\Roaming\umexqwfiucw
2017-06-15 19:15 - 2017-06-15 19:15 - 00000000 ____D
C:\Users\user\AppData\Roaming\bn05daazx4n
2017-06-15 19:15 - 2017-06-15 19:15 - 00000000 ____D
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Somefungames
2017-06-15 19:15 - 2017-06-15 19:15 - 00000000 ____D C:\Program Files
(x86)\Somefungames
2017-06-15 19:15 - 2017-06-15 19:15 - 00000000 ____D C:\Program Files
(x86)\4iki5jkwpg0
2017-06-15 19:13 - 2017-06-15 21:59 - 00001008 _____ C:\ProgramData\log.ewbt
2017-06-15 19:13 - 2017-06-15 21:59 - 00000128 _____ C:\ProgramData\log.ewbb
2017-06-15 19:13 - 2017-06-15 19:13 - 00117760 _____ C:\Windows\Manager.exe
2017-06-15 19:13 - 2017-06-15 19:13 - 00000000 ____D
C:\Users\user\AppData\Roaming\vnfwzkgjsap
2017-06-15 19:13 - 2017-06-15 19:13 - 00000000 ____D
C:\Users\user\AppData\Roaming\Easeware
2017-06-15 19:13 - 2017-06-15 19:13 - 00000000 ____D
C:\ProgramData\WindowsVideoErrorReporting
2017-06-15 19:12 - 2017-06-15 19:12 - 00001974 ___RS C:\Users\user\Desktop\LIN.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00001954 ___RS
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\LIN.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00001176 ___RS
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gogle hrom.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00001146 ___RS C:\Users\Public\Desktop\Ggl
hrme.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00001146 ___RS
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pera.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00001130 ___RS C:\Users\user\Desktop\Ggle
Chrom.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00001116 ___RS
C:\Users\Public\Desktop\ra.lnk
2017-06-15 19:12 - 2017-06-15 19:12 - 00000000 ____D
C:\Users\user\AppData\Roaming\SPI
2017-06-15 19:12 - 2017-06-15 19:12 - 00000000 ____D
C:\Users\user\AppData\Roaming\Browsers
2017-06-15 19:09 - 2017-06-15 19:09 - 00000258 __RSH C:\ProgramData\ntuser.pol
2017-06-15 19:03 - 2017-06-15 19:03 - 00002005 _____
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk
2017-06-15 19:03 - 2017-06-15 19:03 - 00001993 _____ C:\Users\Public\Desktop\Nitro
Pro 9.lnk
2017-06-15 19:03 - 2017-06-15 19:03 - 00000000 ____D C:\ProgramData\Nitro
2017-06-15 19:03 - 2017-06-15 19:03 - 00000000 ____D C:\Program Files\Nitro
2017-06-15 19:03 - 2017-06-15 19:03 - 00000000 ____D C:\Program Files\Common
Files\Nitro
2017-06-15 19:03 - 2017-06-15 19:03 - 00000000 ____D C:\Program Files (x86)\Nitro
2017-06-15 19:03 - 2014-05-19 13:26 - 00029704 _____ (Nitro PDF Software)
C:\Windows\system32\nitrolocalmon9.dll
2017-06-15 19:03 - 2014-05-19 13:26 - 00017928 _____ (Nitro PDF Software)
C:\Windows\system32\nitrolocalui9.dll
2017-06-15 19:00 - 2017-06-15 19:00 - 00000000 ____D
C:\Users\user\AppData\Roaming\Downloaded Installations
2017-06-14 11:22 - 2017-06-14 11:22 - 00051618 _____ C:\Windows\uninstaller.dat
2017-06-13 22:14 - 2017-06-13 22:14 - 28052914 _____ C:\Windows\repository.backup
2017-06-13 22:14 - 2017-06-13 22:14 - 00000000 ____D C:\zoek_backup
2017-06-13 22:02 - 2017-06-13 22:04 - 00000000 ____D
C:\Users\user\AppData\Roaming\Geek Uninstaller
2017-06-13 21:58 - 2017-06-13 21:58 - 00018357 _____
C:\Users\user\Downloads\fixlist.txt
2017-06-13 19:50 - 2017-06-13 19:50 - 00000000 ____D
C:\Users\user\AppData\Roaming\Obsidium
2017-06-13 19:07 - 2017-06-13 19:07 - 00000000 ____D C:\Users\user\Downloads\FRST-
OlderVersion
2017-06-12 17:36 - 2017-06-12 17:39 - 00000000 ____D C:\Windows\system32\MRT
2017-06-12 17:36 - 2017-06-12 17:36 - 132223576 ____C (Microsoft Corporation)
C:\Windows\system32\MRT.exe
2017-06-12 17:33 - 2017-06-12 17:33 - 00000000 ____D
C:\Users\Administrator\AppData\Local\NetworkTiles
2017-06-12 17:24 - 2017-06-16 18:43 - 00000000 ____D C:\AdwCleaner
2017-06-12 17:12 - 2017-06-12 17:12 - 00000000 ____D
C:\Users\Administrator\AppData\Roaming\Skype
2017-06-12 17:11 - 2017-06-12 17:14 - 00002379 _____
C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\OneDrive.lnk
2017-06-12 17:11 - 2017-06-12 17:14 - 00000000 ___RD
C:\Users\Administrator\OneDrive
2017-06-12 17:11 - 2017-06-12 17:11 - 00000000 ____D
C:\Users\Administrator\AppData\Local\Publishers
2017-06-12 17:10 - 2017-06-12 17:10 - 00000000 ____D
C:\Users\Administrator\AppData\Roaming\Smadav
2017-06-12 17:10 - 2017-06-12 17:10 - 00000000 ____D
C:\Users\Administrator\AppData\Local\Google
2017-06-12 17:10 - 2017-06-12 17:10 - 00000000 ____D
C:\Users\Administrator\AppData\Local\Adobe
2017-06-12 16:59 - 2017-06-12 16:59 - 00000000 ____D
C:\Users\Administrator\AppData\Local\ActiveSync
2017-06-12 16:57 - 2017-06-13 18:41 - 00000000 ____D C:\Users\Administrator
2017-06-12 16:57 - 2017-06-12 17:14 - 00000000 ____D
C:\Users\Administrator\AppData\Local\Packages
2017-06-12 16:57 - 2017-06-12 17:10 - 00000000 ____D
C:\Users\Administrator\AppData\Roaming\Adobe
2017-06-12 16:57 - 2017-06-12 16:57 - 00000020 ___SH
C:\Users\Administrator\ntuser.ini
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 _SHDL C:\Users\Administrator\My
Documents
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 _SHDL
C:\Users\Administrator\Documents\My Videos
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 _SHDL
C:\Users\Administrator\Documents\My Pictures
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 _SHDL
C:\Users\Administrator\Documents\My Music
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 ____D
C:\Users\Administrator\Documents\My Bluetooth
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 ____D
C:\Users\Administrator\AppData\Roaming\Synaptics
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 ____D
C:\Users\Administrator\AppData\Local\UCBrowser
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 ____D
C:\Users\Administrator\AppData\Local\TileDataLayer
2017-06-12 16:57 - 2017-06-12 16:57 - 00000000 ____D
C:\Users\Administrator\AppData\Local\AMD
2017-06-11 18:58 - 2017-06-11 18:58 - 00725157 _____ C:\Windows\unins000.exe
2017-06-11 18:58 - 2017-06-11 18:58 - 00001688 _____ C:\Windows\unins000.dat
2017-06-10 22:31 - 2017-06-10 22:34 - 00000000 ____D
C:\Users\user\Downloads\KRT_5.0.0.112
2017-06-10 22:18 - 2011-10-24 13:35 - 00000000 ____D
C:\Users\user\Downloads\Tweaking.com - Windows Repair
2017-06-10 21:59 - 2017-06-13 22:12 - 00035793 _____
C:\Users\user\Downloads\Addition.txt
2017-06-10 21:54 - 2017-06-24 07:39 - 00000000 ____D C:\FRST
2017-06-10 21:54 - 2017-06-13 22:12 - 00233630 _____
C:\Users\user\Downloads\FRST.txt
2017-06-10 18:36 - 2017-06-10 18:36 - 00000000 ____D
C:\Users\user\AppData\Roaming\MPC-HC
2017-06-10 18:33 - 2017-06-10 18:33 - 00000000 ____D
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-06-10 18:33 - 2017-06-10 18:33 - 00000000 ____D C:\Program Files (x86)\K-Lite
Codec Pack
2017-06-10 18:33 - 2015-10-06 01:00 - 00112128 _____ C:\Windows\SysWOW64\ff_vfw.dll
2017-06-10 18:33 - 2015-06-22 20:25 - 00254976 _____
C:\Windows\system32\xvidvfw.dll
2017-06-10 18:33 - 2015-06-22 20:25 - 00240128 _____
C:\Windows\SysWOW64\xvidvfw.dll
2017-06-10 18:33 - 2015-06-22 20:24 - 00729088 _____
C:\Windows\system32\xvidcore.dll
2017-06-10 18:33 - 2015-06-22 20:24 - 00655872 _____
C:\Windows\SysWOW64\xvidcore.dll
2017-06-10 18:33 - 2015-02-28 22:22 - 03571200 _____ (x264vfw project)
C:\Windows\system32\x264vfw64.dll
2017-06-10 18:33 - 2015-02-28 22:21 - 03591680 _____ (x264vfw project)
C:\Windows\SysWOW64\x264vfw.dll
2017-06-10 18:33 - 2012-07-21 17:55 - 00180736 _____ (fccHandler)
C:\Windows\system32\ac3acm.acm
2017-06-10 18:33 - 2012-07-21 17:54 - 00122880 _____ (fccHandler)
C:\Windows\SysWOW64\ac3acm.acm
2017-06-10 18:33 - 2011-12-08 00:37 - 00148992 _____ ( )
C:\Windows\system32\lagarith.dll
2017-06-10 18:33 - 2011-12-08 00:32 - 00216064 _____ ( )
C:\Windows\SysWOW64\lagarith.dll
2017-06-07 21:13 - 2017-06-07 21:13 - 00000000 ____D C:\Users\user\Documents\Adobe
2017-06-07 21:13 - 2017-06-07 21:13 - 00000000 ____D C:\ProgramData\FLEXnet
2017-06-07 21:05 - 2017-06-07 21:05 - 00000000 ____D C:\ProgramData\ALM
2017-06-07 20:48 - 2017-06-07 20:48 - 00000000 ____D C:\Program Files
(x86)\QuickTime
2017-06-07 20:47 - 2017-06-07 22:47 - 00000000 ____D
C:\Users\user\AppData\Local\Adobe
2017-06-07 20:46 - 2017-06-07 20:46 - 00002098 _____ C:\Users\Public\Desktop\Adobe
Acrobat 8 Professional.lnk
2017-06-07 20:43 - 2007-02-20 16:04 - 02463976 _____
C:\Windows\SysWOW64\NPSWF32.dll
2017-06-07 20:43 - 2007-02-20 16:04 - 00190696 _____ (Adobe Systems, Inc.)
C:\Windows\SysWOW64\NPSWF32_FlashUtil.exe
2017-06-07 20:42 - 2017-06-07 21:12 - 00000000 ____D C:\ProgramData\Adobe
2017-06-07 20:41 - 2017-06-07 20:41 - 00000000 ____D C:\Windows\SysWOW64\spool
2017-06-07 20:39 - 2017-06-07 21:07 - 00000000 ____D
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS3
2017-06-07 20:39 - 2017-06-07 20:39 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-06-07 20:37 - 2017-06-07 21:07 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-06-07 19:55 - 2017-06-07 19:57 - 00000687 _____ C:\Windows\SysWOW64\Ahmbed.gz
2017-06-04 12:22 - 2017-06-22 04:14 - 00004158 _____
C:\Windows\System32\Tasks\User_Feed_Synchronization-{4FDE9970-7631-4F6F-84D2-
F86C5A91B31C}
2017-06-04 07:06 - 2017-06-04 07:06 - 00000000 ____D
C:\Users\user\AppData\Roaming\g3z4asfaoao
2017-06-04 07:06 - 2017-06-04 07:06 - 00000000 ____D
C:\Users\user\AppData\Roaming\ctristki2wk
2017-06-04 07:06 - 2017-06-04 07:06 - 00000000 ____D C:\Program Files (x86)\Premage
2017-06-04 06:49 - 2017-06-13 18:51 - 00000034 _____ C:\Users\Public\Documents\
{DE764086-1C0A-4DD3-90BA-0B93BDD794BE}
2017-06-04 06:49 - 2017-06-04 06:49 - 00000000 ____D
C:\Users\user\AppData\Local\UCBrowser
2017-06-04 06:45 - 2017-06-13 19:28 - 00000000 ____D C:\Program Files
(x86)\UCBrowser
2017-06-04 06:42 - 2015-12-28 11:33 - 00055664 _____ (())
C:\Windows\system32\Drivers\adspiderex.sys
2017-06-04 06:41 - 2017-06-15 20:38 - 00016896 _____ C:\Windows\System32\Tasks\3D
Ultra Helicopter Removal
2017-06-04 06:41 - 2017-06-04 06:41 - 00000000 ____D C:\Program Files\XBox
2017-06-04 06:41 - 2016-12-27 09:34 - 00025432 _____
C:\Windows\system32\Drivers\vcdrom.sys
2017-06-04 06:40 - 2017-06-04 06:40 - 00000000 ____D C:\Program Files (x86)\Maoha
2017-06-04 06:38 - 2017-06-15 20:36 - 00001291 ____H C:\Users\user\Desktop\Google
Chrome.lnk
2017-06-04 06:35 - 2017-06-12 17:18 - 00000000 ____D
C:\Users\user\AppData\Roaming\Rerverpywjeck
2017-06-04 06:35 - 2017-06-04 07:07 - 00000000 ____D
C:\Users\user\AppData\Local\Ckerwatainqoteph
2017-06-04 06:35 - 2017-06-04 06:35 - 00140800 _____
C:\Users\user\AppData\Local\installer.dat
2017-06-04 06:35 - 2017-06-04 06:35 - 00000000 ____D
C:\Users\user\AppData\Roaming\hm5np5kfpyo
2017-06-04 06:35 - 2017-06-04 06:35 - 00000000 ____D C:\Program Files
(x86)\Anusaentatoback Verfier
2017-06-04 06:34 - 2017-06-04 06:35 - 00000000 ____D
C:\Users\user\AppData\Roaming\5dtxp02fa1d
2017-06-04 06:34 - 2017-06-04 06:34 - 00000000 ____D
C:\Users\user\AppData\Roaming\qi1rfnoyha1
2017-06-04 06:33 - 2017-06-10 21:47 - 00000000 ____D C:\Program Files
(x86)\iubyz3huodx
2017-06-04 06:33 - 2017-06-04 06:33 - 00000000 ____D
C:\Users\user\AppData\Roaming\12ws5bpohw1
2017-06-04 06:31 - 2017-06-04 06:32 - 00000000 ____D
C:\Users\user\AppData\Roaming\CRMSvc
2017-06-04 06:30 - 2017-06-04 06:30 - 00001456 _____
C:\Users\Public\Desktop\Download Foxit PhantomP...lnk
2017-06-04 06:28 - 2017-06-10 22:49 - 00000000 ____D C:\Users\user\Downloads\_
2017-06-04 06:28 - 2017-06-04 02:25 - 00346992 ____N C:\Users\user\Downloads\Foxit
PhantomPDF Business 8.2.1.zip
2017-06-04 06:28 - 2017-06-04 02:25 - 00346816 ____N (Micrsoft)
C:\Users\user\Downloads\Foxit PhantomPDF Business 8.2.1.exe
2017-06-04 06:26 - 2017-06-04 06:26 - 00408700 _____ C:\Users\user\Downloads\foxit-
phantompdf-business-8.2.1.zip
2017-06-04 05:46 - 2017-06-04 05:46 - 00000000 ____D
C:\Users\user\AppData\Roaming\Apple Computer
2017-06-04 05:46 - 2017-06-04 05:46 - 00000000 ____D
C:\Users\user\AppData\Local\Apple Computer
2017-06-03 22:54 - 2017-06-03 22:54 - 00000000 ____D
C:\Windows\SysWOW64\BestPractices
2017-06-03 22:54 - 2017-06-03 22:54 - 00000000 ____D
C:\Windows\system32\BestPractices
2017-06-03 15:02 - 2017-04-28 09:56 - 02945648 _____ (Microsoft Corporation)
C:\Windows\SysWOW64\iertutil.dll
C:\Windows\SysWOW64\SettingSyncHost.exe
C:\Windows\SysWOW64\olepro32.dll
C:\Windows\SysWOW64\unimdm.tsp
C:\Windows\SysWOW64\IdCtrls.dll
C:\Windows\SysWOW64\ieproxy.dll
C:\Windows\SysWOW64\iedkcs32.dll
C:\Windows\SysWOW64\WSSync.dll
C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
C:\Windows\SysWOW64\ieapfltr.dll
C:\Windows\SysWOW64\WSShared.dll
C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
C:\Windows\SysWOW64\dbgeng.dll
C:\Windows\SysWOW64\asycfilt.dll
C:\Windows\SysWOW64\SHCore.dll
C:\Windows\SysWOW64\ReInfo.dll
C:\Windows\SysWOW64\mcbuilder.exe
C:\Windows\SysWOW64\WinSCard.dll
C:\Windows\SysWOW64\thumbcache.dll
C:\Windows\SysWOW64\GdiPlus.dll
C:\Windows\SysWOW64\inetcomm.dll
C:\Windows\SysWOW64\SearchFolder.dll
C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
C:\Windows\SysWOW64\SettingSync.dll
C:\Windows\SysWOW64\wlanpref.dll
C:\Windows\SysWOW64\MSMPEG2ENC.DLL
C:\Windows\SysWOW64\SettingSyncCore.dll
C:\Windows\SysWOW64\themecpl.dll
C:\Windows\SysWOW64\usercpl.dll
C:\Windows\SysWOW64\UserLanguagesCpl.dll
C:\Windows\SysWOW64\input.dll
C:\Windows\SysWOW64\msctf.dll
C:\Windows\SysWOW64\WMVCORE.DLL
C:\Windows\SysWOW64\wmpeffects.dll
C:\Windows\SysWOW64\MshtmlDac.dll
C:\Windows\SysWOW64\PortableDeviceClassExtension.dll
C:\Windows\SysWOW64\PortableDeviceConnectApi.dll
C:\Windows\SysWOW64\objsel.dll
C:\Windows\SysWOW64\PortableDeviceApi.dll
C:\Windows\SysWOW64\filemgmt.dll
C:\Windows\SysWOW64\wsecedit.dll
C:\Windows\SysWOW64\winspool.drv
C:\Windows\SysWOW64\WlanMM.dll
C:\Windows\SysWOW64\wcnwiz.dll
C:\Windows\SysWOW64\rasgcw.dll
C:\Windows\SysWOW64\WebcamUi.dll
C:\Windows\SysWOW64\WLanConn.dll
C:\Windows\SysWOW64\Windows.Storage.Search.dll
C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
C:\Windows\SysWOW64\rasdlg.dll
C:\Windows\SysWOW64\mmc.exe
C:\Windows\SysWOW64\mmcndmgr.dll
C:\Windows\SysWOW64\prnfldr.dll
C:\Windows\SysWOW64\netshell.dll
C:\Windows\SysWOW64\mstscax.dll
C:\Windows\SysWOW64\PhotoScreensaver.scr
C:\Windows\SysWOW64\davclnt.dll
C:\Windows\SysWOW64\offreg.dll
C:\Windows\SysWOW64\wmpshell.dll
C:\Windows\SysWOW64\WebClnt.dll
C:\Windows\SysWOW64\netcfgx.dll
C:\Windows\SysWOW64\shsetup.dll
C:\Windows\SysWOW64\usbceip.dll
C:\Windows\SysWOW64\mmcshext.dll
C:\Windows\SysWOW64\mmcbase.dll
C:\Windows\SysWOW64\cic.dll
C:\Windows\SysWOW64\msctfuimanager.dll
C:\Windows\SysWOW64\SyncSettings.dll
C:\Windows\SysWOW64\tdh.dll
C:\Windows\SysWOW64\winipcsecproc_ssp.dll
C:\Windows\SysWOW64\sysdm.cpl
C:\Windows\SysWOW64\mprddm.dll
C:\Windows\SysWOW64\XpsFilt.dll
C:\Windows\SysWOW64\XpsPrint.dll
C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
C:\Windows\SysWOW64\rdpcore.dll
C:\Windows\SysWOW64\DbgModel.dll
C:\Windows\SysWOW64\IconCodecService.dll
C:\Windows\SysWOW64\ntprint.dll
C:\Windows\SysWOW64\WPDShServiceObj.dll
C:\Windows\SysWOW64\SimCfg.dll
C:\Windows\SysWOW64\SimAuth.dll
C:\Windows\SysWOW64\WSClient.dll
C:\Windows\SysWOW64\wlanui.dll
C:\Windows\SysWOW64\wiaaut.dll
C:\Windows\SysWOW64\msieftp.dll
C:\Windows\SysWOW64\netplwiz.dll
C:\Windows\SysWOW64\sud.dll
C:\Windows\SysWOW64\netcenter.dll
C:\Windows\SysWOW64\taskcomp.dll
C:\Windows\SysWOW64\taskeng.exe
C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
C:\Windows\SysWOW64\SyncCenter.dll
C:\Windows\SysWOW64\SettingMonitor.dll
C:\Windows\SysWOW64\wpdshext.dll
C:\Windows\SysWOW64\newdev.dll
C:\Windows\SysWOW64\rastls.dll
C:\Windows\SysWOW64\mdmregistration.dll
C:\Windows\SysWOW64\shacct.dll
C:\Windows\SysWOW64\msorcl32.dll
C:\Windows\SysWOW64\wsdchngr.dll
2017-06-03 15:02 - 2016-03-29 13:27 - 00162816 _____ C:\Windows\SysWOW64\MTF.dll
C:\Windows\SysWOW64\WWAHost.exe
C:\Windows\SysWOW64\UIRibbonRes.dll
C:\Windows\SysWOW64\oemlicense.dll
C:\Windows\SysWOW64\GamePanel.exe
C:\Windows\SysWOW64\inetcpl.cpl
C:\Windows\SysWOW64\licensingdiag.exe
C:\Windows\SysWOW64\urlmon.dll
C:\Windows\SysWOW64\wininet.dll
C:\Windows\SysWOW64\OpcServices.dll
C:\Windows\SysWOW64\Windows.UI.Search.dll
C:\Windows\SysWOW64\CertEnroll.dll
C:\Windows\SysWOW64\certcli.dll
2017-06-03 15:01 - 2017-03-28 14:53 - 06958304 _____ (Microsoft Corp.)
C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
C:\Windows\SysWOW64\WindowsCodecs.dll
C:\Windows\SysWOW64\UserDataTimeUtil.dll
C:\Windows\SysWOW64\ucrtbase.dll
C:\Windows\SysWOW64\wlanapi.dll
C:\Windows\SysWOW64\winmde.dll
C:\Windows\SysWOW64\twinapi.appcore.dll
C:\Windows\SysWOW64\wintrust.dll
C:\Windows\SysWOW64\apds.dll
C:\Windows\SysWOW64\setupugc.exe
C:\Windows\SysWOW64\wlansec.dll
C:\Windows\SysWOW64\cryptui.dll
C:\Windows\SysWOW64\winhttp.dll
C:\Windows\SysWOW64\DevicePairing.dll
C:\Windows\SysWOW64\WMPDMC.exe
C:\Windows\SysWOW64\Windows.Media.Speech.dll
C:\Windows\SysWOW64\wuapi.dll
C:\Windows\SysWOW64\SearchIndexer.exe
C:\Windows\SysWOW64\twinapi.dll
C:\Windows\SysWOW64\rshx32.dll
C:\Windows\SysWOW64\Windows.UI.Logon.dll
C:\Windows\SysWOW64\twinui.appcore.dll
C:\Windows\SysWOW64\twinui.dll
C:\Windows\SysWOW64\Windows.UI.Immersive.dll
C:\Windows\SysWOW64\Windows.Data.Pdf.dll
C:\Windows\SysWOW64\authui.dll
C:\Windows\SysWOW64\user32.dll
C:\Windows\SysWOW64\wininetlui.dll
C:\Windows\SysWOW64\UXInit.dll
C:\Windows\SysWOW64\azroleui.dll
C:\Windows\SysWOW64\dot3ui.dll
C:\Windows\SysWOW64\PhoneOm.dll
C:\Windows\SysWOW64\UIAnimation.dll
C:\Windows\SysWOW64\certreq.exe
C:\Windows\SysWOW64\Windows.AccountsControl.dll
C:\Windows\SysWOW64\AppointmentApis.dll
C:\Windows\SysWOW64\appwiz.cpl
C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
C:\Windows\SysWOW64\ContactApis.dll
C:\Windows\SysWOW64\Windows.UI.Cred.dll
C:\Windows\SysWOW64\MSVidCtl.dll
C:\Windows\SysWOW64\comdlg32.dll
C:\Windows\SysWOW64\Windows.Web.dll
C:\Windows\SysWOW64\dui70.dll
C:\Windows\SysWOW64\UIRibbon.dll
C:\Windows\SysWOW64\mssrch.dll
C:\Windows\SysWOW64\xpsrchvw.exe
C:\Windows\SysWOW64\tquery.dll
C:\Windows\SysWOW64\Display.dll
C:\Windows\SysWOW64\hgcpl.dll
C:\Windows\SysWOW64\mstsc.exe
C:\Windows\SysWOW64\wer.dll
C:\Windows\SysWOW64\adsmsext.dll
C:\Windows\SysWOW64\taskschd.dll
C:\Windows\SysWOW64\webservices.dll
C:\Windows\SysWOW64\d3d9.dll
C:\Windows\SysWOW64\WindowsCodecsRaw.dll
C:\Windows\SysWOW64\hevcdecoder.dll
C:\Windows\SysWOW64\VoipRT.dll
C:\Windows\SysWOW64\udhisapi.dll
C:\Windows\SysWOW64\wsmprovhost.exe
C:\Windows\SysWOW64\upnpcont.exe
C:\Windows\SysWOW64\WsmAuto.dll
C:\Windows\SysWOW64\WcnApi.dll
C:\Windows\SysWOW64\fdWCN.dll
C:\Windows\SysWOW64\WsmAgent.dll
C:\Windows\SysWOW64\fwcfg.dll
C:\Windows\SysWOW64\wbemcomn.dll
C:\Windows\SysWOW64\vsstrace.dll
C:\Windows\SysWOW64\CheckNetIsolation.exe
C:\Windows\SysWOW64\WmpDui.dll
C:\Windows\SysWOW64\WsmWmiPl.dll
C:\Windows\SysWOW64\certmgr.dll
C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
C:\Windows\SysWOW64\authfwcfg.dll
C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
C:\Windows\SysWOW64\nshwfp.dll
C:\Windows\SysWOW64\azroles.dll
C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
C:\Windows\SysWOW64\sti.dll
C:\Windows\SysWOW64\WindowsCodecsExt.dll
C:\Windows\SysWOW64\MrmIndexer.dll
C:\Windows\SysWOW64\SearchProtocolHost.exe
C:\Windows\SysWOW64\vssapi.dll
C:\Windows\SysWOW64\wsp_health.dll
C:\Windows\SysWOW64\CPFilters.dll
C:\Windows\SysWOW64\comuid.dll
C:\Windows\SysWOW64\wlidprov.dll
C:\Windows\SysWOW64\upnphost.dll
C:\Windows\SysWOW64\resutils.dll
C:\Windows\SysWOW64\clusapi.dll
C:\Windows\SysWOW64\duser.dll
C:\Windows\SysWOW64\comsvcs.dll
C:\Windows\SysWOW64\Pimstore.dll
C:\Windows\SysWOW64\UIAutomationCore.dll
C:\Windows\SysWOW64\Windows.UI.dll
C:\Windows\SysWOW64\wsp_fs.dll
C:\Windows\SysWOW64\mispace.dll
C:\Windows\SysWOW64\gpedit.dll
C:\Windows\SysWOW64\xpsservices.dll
C:\Windows\SysWOW64\Windows.Web.Http.dll
C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
C:\Windows\SysWOW64\WsmSvc.dll
C:\Windows\SysWOW64\Windows.StateRepository.dll
C:\Windows\SysWOW64\tdlrecover.exe
C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
C:\Windows\SysWOW64\Windows.StateRepositoryBroker.dll
C:\Windows\SysWOW64\VEEventDispatcher.dll
C:\Windows\SysWOW64\wevtutil.exe
C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
C:\Windows\SysWOW64\Clipc.dll
C:\Windows\SysWOW64\msscntrs.dll
C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
C:\Windows\SysWOW64\ActionCenterCPL.dll
C:\Windows\SysWOW64\dmdskmgr.dll
C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
C:\Windows\SysWOW64\zipfldr.dll
C:\Windows\SysWOW64\mssph.dll
C:\Windows\SysWOW64\mssphtb.dll
C:\Windows\SysWOW64\Windows.Graphics.dll
C:\Windows\SysWOW64\webio.dll
C:\Windows\SysWOW64\themeui.dll
C:\Windows\SysWOW64\ws2_32.dll
C:\Windows\SysWOW64\mswsock.dll
C:\Windows\SysWOW64\InstallAgent.exe
C:\Windows\SysWOW64\StoreAgent.dll
C:\Windows\SysWOW64\Windows.Internal.Management.dll
C:\Windows\SysWOW64\AppContracts.dll
C:\Windows\SysWOW64\StructuredQuery.dll
C:\Windows\SysWOW64\AppxPackaging.dll
C:\Windows\SysWOW64\updatepolicy.dll
C:\Windows\SysWOW64\AppxAllUserStore.dll
C:\Windows\SysWOW64\wups.dll
C:\Windows\SysWOW64\wfdprov.dll
C:\Windows\SysWOW64\VEDataLayerHelpers.dll
C:\Windows\SysWOW64\BrowserSettingSync.dll
C:\Windows\SysWOW64\wlanmsm.dll
2017-06-03 15:01 - 2016-04-19 05:30 - 00002186 _____
C:\Windows\SysWOW64\AppxProvisioning.xml
C:\Windows\SysWOW64\NotificationObjFactory.dll
C:\Windows\SysWOW64\wkscli.dll
C:\Windows\SysWOW64\jsproxy.dll
C:\Windows\SysWOW64\mtxoci.dll
C:\Windows\SysWOW64\WSDApi.dll
C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
C:\Windows\SysWOW64\KernelBase.dll
C:\Windows\SysWOW64\oleaut32.dll
C:\Windows\SysWOW64\mfmp4srcsnk.dll
C:\Windows\SysWOW64\windows.storage.dll
C:\Windows\SysWOW64\gdi32.dll
C:\Windows\SysWOW64\WpcWebFilter.dll
C:\Windows\SysWOW64\odbcconf.dll
C:\Windows\SysWOW64\tdc.ocx
C:\Windows\SysWOW64\dxtrans.dll
C:\Windows\SysWOW64\iepeers.dll
C:\Windows\SysWOW64\mshtmled.dll
C:\Windows\SysWOW64\schannel.dll
C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
C:\Windows\SysWOW64\webcheck.dll
C:\Windows\SysWOW64\msfeeds.dll
C:\Windows\SysWOW64\vbscript.dll
C:\Windows\SysWOW64\D3DCompiler_47.dll
C:\Windows\SysWOW64\ExplorerFrame.dll
C:\Windows\SysWOW64\Windows.UI.Xaml.dll
C:\Windows\SysWOW64\mos.dll
C:\Windows\SysWOW64\ieframe.dll
C:\Windows\SysWOW64\mshtml.dll
C:\Windows\SysWOW64\jscript9.dll
C:\Windows\SysWOW64\edgehtml.dll
C:\Windows\SysWOW64\Chakra.dll
C:\Windows\SysWOW64\wscapi.dll
C:\Windows\SysWOW64\fontdrvhost.exe
2017-06-03 15:00 - 2017-03-28 14:08 - 00316248 _____ (Adobe Systems Incorporated)
C:\Windows\SysWOW64\atmfd.dll
2017-06-03 15:00 - 2017-03-28 13:23 - 00037376 _____ (Adobe Systems)
C:\Windows\SysWOW64\atmlib.dll
C:\Windows\SysWOW64\mfmjpegdec.dll
C:\Windows\SysWOW64\kerberos.dll
C:\Windows\SysWOW64\quartz.dll
C:\Windows\SysWOW64\dnsapi.dll
C:\Windows\SysWOW64\LicenseManager.dll
C:\Windows\SysWOW64\mfcore.dll
C:\Windows\SysWOW64\mfnetsrc.dll
C:\Windows\SysWOW64\mfasfsrcsnk.dll
C:\Windows\SysWOW64\mfsrcsnk.dll
C:\Windows\SysWOW64\mfnetcore.dll
C:\Windows\SysWOW64\mfplat.dll
C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
C:\Windows\SysWOW64\shell32.dll
C:\Windows\SysWOW64\explorer.exe
C:\Windows\SysWOW64\msmpeg2vdec.dll
C:\Windows\SysWOW64\msmpeg2adec.dll
C:\Windows\SysWOW64\DolbyDecMFT.dll
C:\Windows\SysWOW64\MSAudDecMFT.dll
C:\Windows\SysWOW64\MosHostClient.dll
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\SysWOW64\samlib.dll
C:\Windows\SysWOW64\MosStorage.dll
C:\Windows\SysWOW64\MapsBtSvc.dll
C:\Windows\SysWOW64\sscore.dll
C:\Windows\SysWOW64\feclient.dll
C:\Windows\SysWOW64\icm32.dll
C:\Windows\SysWOW64\P2P.dll
C:\Windows\SysWOW64\WinFax.dll
C:\Windows\SysWOW64\MapConfiguration.dll
C:\Windows\SysWOW64\SensorsApi.dll
C:\Windows\SysWOW64\JpMapControl.dll
C:\Windows\SysWOW64\mbsmsapi.dll
C:\Windows\SysWOW64\Geolocation.dll
C:\Windows\SysWOW64\LockAppBroker.dll
C:\Windows\SysWOW64\NMAA.dll
C:\Windows\SysWOW64\MapControlCore.dll
C:\Windows\SysWOW64\msxml3.dll
C:\Windows\SysWOW64\gameux.dll
C:\Windows\SysWOW64\InputService.dll
C:\Windows\SysWOW64\TokenBroker.dll
C:\Windows\SysWOW64\DWrite.dll
C:\Windows\SysWOW64\qwave.dll
C:\Windows\SysWOW64\LocationFramework.dll
C:\Windows\SysWOW64\Windows.Networking.Proximity.dll
C:\Windows\SysWOW64\ActiveSyncProvider.dll
C:\Windows\SysWOW64\BingMaps.dll
C:\Windows\SysWOW64\Windows.Media.dll
C:\Windows\SysWOW64\MFMediaEngine.dll
C:\Windows\SysWOW64\wmp.dll
C:\Windows\SysWOW64\d3d10warp.dll
C:\Windows\SysWOW64\msi.dll
C:\Windows\SysWOW64\ntdll.dll
C:\Windows\SysWOW64\mfsvr.dll
C:\Windows\SysWOW64\LockAppHost.exe
C:\Windows\SysWOW64\propsys.dll
C:\Windows\SysWOW64\msv1_0.dll
C:\Windows\SysWOW64\SCardDlg.dll
C:\Windows\SysWOW64\NPSMDesktopProvider.dll
C:\Windows\SysWOW64\NPSM.dll
C:\Windows\SysWOW64\intl.cpl
C:\Windows\SysWOW64\DafPrintProvider.dll
C:\Windows\SysWOW64\puiobj.dll
C:\Windows\SysWOW64\Windows.Media.Import.dll
C:\Windows\SysWOW64\wvc.dll
C:\Windows\SysWOW64\wmdrmsdk.dll
C:\Windows\SysWOW64\Windows.Media.Editing.dll
C:\Windows\SysWOW64\PlayToManager.dll
C:\Windows\SysWOW64\LogonController.dll
C:\Windows\SysWOW64\MbaeApiPublic.dll
C:\Windows\SysWOW64\WMNetMgr.dll
C:\Windows\SysWOW64\wdc.dll
C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
C:\Windows\SysWOW64\mspaint.exe
C:\Windows\SysWOW64\Windows.Media.Streaming.dll
C:\Windows\SysWOW64\msftedit.dll
C:\Windows\SysWOW64\Wpc.dll
C:\Windows\SysWOW64\ntshrui.dll
C:\Windows\SysWOW64\Windows.Globalization.dll
C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
C:\Windows\SysWOW64\GlobCollationHost.dll
C:\Windows\SysWOW64\drvstore.dll
C:\Windows\SysWOW64\wmpdxm.dll
C:\Windows\SysWOW64\AboveLockAppHost.dll
C:\Windows\SysWOW64\kernel32.dll
C:\Windows\SysWOW64\msxml6.dll
C:\Windows\SysWOW64\evr.dll
C:\Windows\SysWOW64\mf.dll
C:\Windows\SysWOW64\NetSetupEngine.dll
C:\Windows\SysWOW64\wmdrmdev.dll
C:\Windows\SysWOW64\MFCaptureEngine.dll
C:\Windows\SysWOW64\sspicli.dll
C:\Windows\SysWOW64\wmploc.DLL
C:\Windows\SysWOW64\Windows.Media.Streaming.ps.dll
C:\Windows\SysWOW64\prnntfy.dll
C:\Windows\SysWOW64\DisplayManager.dll
C:\Windows\SysWOW64\qdvd.dll
C:\Windows\SysWOW64\mprdim.dll
C:\Windows\SysWOW64\MiracastReceiver.dll
C:\Windows\SysWOW64\eappcfg.dll
C:\Windows\SysWOW64\SRH.dll
C:\Windows\SysWOW64\mscms.dll
C:\Windows\SysWOW64\ieui.dll
C:\Windows\SysWOW64\offlinelsa.dll
C:\Windows\SysWOW64\pla.dll
C:\Windows\SysWOW64\winmsipc.dll
C:\Windows\SysWOW64\Windows.Networking.dll
C:\Windows\SysWOW64\syncutil.dll
C:\Windows\SysWOW64\Windows.Media.Audio.dll
C:\Windows\SysWOW64\wpnapps.dll
C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
C:\Windows\SysWOW64\winipcsecproc.dll
C:\Windows\SysWOW64\storagewmi.dll
C:\Windows\SysWOW64\SyncController.dll
C:\Windows\SysWOW64\notepad.exe
C:\Windows\SysWOW64\hnetcfg.dll
C:\Windows\SysWOW64\D3D12.dll
C:\Windows\SysWOW64\adtschema.dll
C:\Windows\SysWOW64\msobjs.dll
C:\Windows\SysWOW64\NetSetupApi.dll
C:\Windows\SysWOW64\SensorsNativeApi.dll
C:\Windows\SysWOW64\mfpmp.exe
C:\Windows\SysWOW64\dxgi.dll
C:\Windows\SysWOW64\Windows.Speech.Pal.dll
C:\Windows\SysWOW64\eappprxy.dll
C:\Windows\SysWOW64\eappgnui.dll
C:\Windows\SysWOW64\eapphost.dll
C:\Windows\SysWOW64\schtasks.exe
C:\Windows\SysWOW64\WMPhoto.dll
C:\Windows\SysWOW64\eapp3hst.dll
C:\Windows\SysWOW64\ProximityCommon.dll
C:\Windows\SysWOW64\ExecModelClient.dll
C:\Windows\SysWOW64\efswrt.dll
C:\Windows\SysWOW64\edputil.dll
C:\Windows\SysWOW64\PrintDialogs.dll
C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
C:\Windows\SysWOW64\winipcfile.dll
C:\Windows\SysWOW64\PlayToReceiver.dll
C:\Windows\SysWOW64\SRHInproc.dll
C:\Windows\SysWOW64\sbe.dll
C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
C:\Windows\SysWOW64\puiapi.dll
C:\Windows\SysWOW64\setupapi.dll
C:\Windows\SysWOW64\ncryptsslp.dll
C:\Windows\SysWOW64\fontsub.dll
C:\Windows\SysWOW64\FwRemoteSvr.dll
C:\Windows\SysWOW64\polstore.dll
C:\Windows\SysWOW64\cryptngc.dll
C:\Windows\SysWOW64\rpcrt4.dll
C:\Windows\SysWOW64\rsaenh.dll
C:\Windows\SysWOW64\d3d10level9.dll
C:\Windows\SysWOW64\directmanipulation.dll
C:\Windows\SysWOW64\hmkd.dll
C:\Windows\SysWOW64\jscript.dll
C:\Windows\SysWOW64\NetSetupShim.dll
C:\Windows\SysWOW64\srvcli.dll
C:\Windows\SysWOW64\netapi32.dll
C:\Windows\SysWOW64\SensorsNativeApi.V2.dll
C:\Windows\SysWOW64\oleacchooks.dll
C:\Windows\SysWOW64\tbauth.dll
C:\Windows\SysWOW64\TokenBrokerCookies.exe
C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll
C:\Windows\SysWOW64\Windows.Media.Devices.dll
C:\Windows\SysWOW64\oleacc.dll
C:\Windows\SysWOW64\easwrt.dll
C:\Windows\SysWOW64\AccountsRt.dll
C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
C:\Windows\SysWOW64\TextInputFramework.dll
C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll
C:\Windows\SysWOW64\InputLocaleManager.dll
C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
C:\Windows\SysWOW64\esent.dll
C:\Windows\SysWOW64\FWPUCLNT.DLL
2017-06-03 14:59 - 2017-04-28 10:59 - 01862000 _____
C:\Windows\SysWOW64\CoreUIComponents.dll
C:\Windows\SysWOW64\combase.dll
C:\Windows\SysWOW64\ole32.dll
C:\Windows\SysWOW64\crypt32.dll
C:\Windows\SysWOW64\apprepsync.dll
C:\Windows\SysWOW64\apprepapi.dll
C:\Windows\SysWOW64\CoreMessaging.dll
C:\Windows\SysWOW64\CallButtons.dll
C:\Windows\SysWOW64\bcastdvr.exe
C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
C:\Windows\SysWOW64\dwmcore.dll
C:\Windows\SysWOW64\cdp.dll
C:\Windows\SysWOW64\bcrypt.dll
C:\Windows\SysWOW64\appidapi.dll
C:\Windows\SysWOW64\AppCapture.dll
C:\Windows\SysWOW64\MrmCoreR.dll
C:\Windows\SysWOW64\wldp.dll
C:\Windows\SysWOW64\Taskmgr.exe
C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
C:\Windows\SysWOW64\MessagingDataModel2.dll
C:\Windows\SysWOW64\CredProvDataModel.dll
C:\Windows\SysWOW64\ShareHost.dll
C:\Windows\SysWOW64\DevDispItemProvider.dll
C:\Windows\SysWOW64\BCP47Langs.dll
C:\Windows\SysWOW64\bcryptprimitives.dll
C:\Windows\SysWOW64\Windows.Cortana.ProxyStub.dll
C:\Windows\SysWOW64\srpapi.dll
C:\Windows\SysWOW64\deviceassociation.dll
C:\Windows\SysWOW64\AppLockerCSP.dll
C:\Windows\SysWOW64\DictationManager.dll
C:\Windows\SysWOW64\Windows.Devices.Midi.dll
C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
C:\Windows\SysWOW64\apphelp.dll
C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
C:\Windows\SysWOW64\dlnashext.dll
C:\Windows\SysWOW64\MSAJApi.dll
C:\Windows\SysWOW64\certca.dll
C:\Windows\SysWOW64\wshbth.dll
C:\Windows\SysWOW64\BluetoothApis.dll
C:\Windows\SysWOW64\dcomp.dll
C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
C:\Windows\SysWOW64\Windows.Devices.Picker.dll
C:\Windows\SysWOW64\credprovs.dll
C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
C:\Windows\SysWOW64\dhcpcsvc6.dll
C:\Windows\SysWOW64\dhcpcsvc.dll
C:\Windows\SysWOW64\dhcpcore6.dll
C:\Windows\SysWOW64\dhcpcore.dll
C:\Windows\SysWOW64\ByteCodeGenerator.exe
C:\Windows\SysWOW64\AppXDeploymentClient.dll
C:\Windows\SysWOW64\actxprxy.dll
C:\Windows\SysWOW64\policymanager.dll
C:\Windows\SysWOW64\browcli.dll
C:\Windows\SysWOW64\credprovhost.dll
C:\Windows\system32\mssprxy.dll
C:\Windows\system32\Windows.Media.Speech.dll
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wlidsvc.dll
C:\Windows\system32\mssrch.dll
C:\Windows\system32\tquery.dll
C:\Windows\system32\Windows.Storage.ApplicationData.dll
C:\Windows\system32\XboxNetApiSvc.dll
C:\Windows\system32\cmintegrator.dll
C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\Windows.Networking.Vpn.dll
C:\Windows\system32\wlidprov.dll
C:\Windows\system32\Windows.StateRepository.dll
C:\Windows\system32\Windows.StateRepositoryClient.dll
C:\Windows\system32\Windows.StateRepositoryBroker.dll
C:\Windows\system32\msscntrs.dll
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\mssph.dll
C:\Windows\system32\mssphtb.dll
C:\Windows\system32\StructuredQuery.dll
C:\Windows\system32\AppContracts.dll
C:\Windows\system32\Drivers\usbser.sys
C:\Windows\system32\Drivers\xinputhid.sys
C:\Windows\system32\Drivers\portcls.sys
C:\Windows\system32\WSDApi.dll
2017-06-03 13:26 - 2017-03-28 16:18 - 08710320 _____ (Microsoft Corp.)
C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
C:\Windows\system32\icfupgd.dll
C:\Windows\system32\winhttp.dll
C:\Windows\system32\GdiPlus.dll
C:\Windows\system32\SIHClient.exe
C:\Windows\system32\hevcdecoder.dll
C:\Windows\system32\Drivers\MTConfig.sys
C:\Windows\system32\fwcfg.dll
C:\Windows\system32\CheckNetIsolation.exe
C:\Windows\system32\authfwcfg.dll
C:\Windows\system32\nshwfp.dll
C:\Windows\system32\Drivers\pci.sys
C:\Windows\system32\bthserv.dll
C:\Windows\system32\MPSSVC.dll
C:\Windows\system32\Drivers\serial.sys
C:\Windows\system32\WWAHost.exe
C:\Windows\system32\MusNotification.exe
C:\Windows\system32\UIRibbonRes.dll
C:\Windows\system32\MusNotificationUx.exe
C:\Windows\system32\unimdm.tsp
C:\Windows\system32\usocore.dll
C:\Windows\system32\MusUpdateHandlers.dll
C:\Windows\system32\winsrv.dll
C:\Windows\system32\GamePanel.exe
C:\Windows\system32\win32kbase.sys
C:\Windows\system32\wuuhext.dll
C:\Windows\system32\updatehandlers.dll
C:\Windows\system32\win32kfull.sys
C:\Windows\system32\wuaueng.dll
C:\Windows\system32\Windows.UI.Search.dll
C:\Windows\system32\CertEnroll.dll
C:\Windows\system32\WindowsCodecs.dll
C:\Windows\system32\vss_ps.dll
2017-06-03 13:25 - 2017-03-21 08:36 - 00448285 _____
C:\Windows\system32\ApnDatabase.xml
C:\Windows\system32\ucrtbase.dll
C:\Windows\system32\diagtrack.dll
C:\Windows\system32\ReAgent.dll
C:\Windows\system32\wmpmde.dll
C:\Windows\system32\winmde.dll
C:\Windows\system32\wintrust.dll
C:\Windows\system32\wups.dll
C:\Windows\system32\wlansec.dll
C:\Windows\system32\diagtrack_win.dll
C:\Windows\system32\winlogon.exe
C:\Windows\system32\WMPDMC.exe
C:\Windows\system32\wwansvc.dll
C:\Windows\system32\wifinetworkmanager.dll
C:\Windows\system32\UserDataService.dll
C:\Windows\system32\wlanpref.dll
C:\Windows\system32\Windows.UI.Logon.dll
C:\Windows\system32\wkssvc.dll
C:\Windows\system32\Windows.UI.Shell.dll
C:\Windows\system32\Windows.UI.Immersive.dll
C:\Windows\system32\UserLanguagesCpl.dll
C:\Windows\system32\usercpl.dll
C:\Windows\system32\user32.dll
C:\Windows\system32\WWanAPI.dll
C:\Windows\system32\WindowsCodecsRaw.dll
C:\Windows\system32\musdialoghandlers.dll
C:\Windows\system32\PortableDeviceClassExtension.dll
C:\Windows\system32\PortableDeviceConnectApi.dll
C:\Windows\system32\ubpm.dll
C:\Windows\system32\UXInit.dll
C:\Windows\system32\wwanmm.dll
C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
C:\Windows\system32\Windows.UI.BlockedShutdown.dll
C:\Windows\system32\wlanui.dll
C:\Windows\system32\UIAnimation.dll
C:\Windows\system32\WalletService.dll
C:\Windows\system32\PortableDeviceApi.dll
C:\Windows\system32\Windows.UI.BioFeedback.dll
C:\Windows\system32\zipfldr.dll
C:\Windows\system32\wcmsvc.dll
C:\Windows\system32\wcnwiz.dll
C:\Windows\system32\wwanconn.dll
C:\Windows\system32\WLanConn.dll
C:\Windows\system32\wpdshext.dll
C:\Windows\system32\WebcamUi.dll
C:\Windows\system32\Windows.Graphics.dll
C:\Windows\system32\Pimstore.dll
C:\Windows\system32\Windows.UI.Cred.dll
C:\Windows\system32\MSVidCtl.dll
C:\Windows\system32\Windows.Web.dll
C:\Windows\system32\UIRibbon.dll
C:\Windows\system32\xpsrchvw.exe
C:\Windows\system32\wlansvc.dll
C:\Windows\system32\davclnt.dll
C:\Windows\system32\WebClnt.dll
C:\Windows\system32\Drivers\mrxdav.sys
C:\Windows\system32\wimserv.exe
C:\Windows\system32\wifitask.exe
C:\Windows\system32\webservices.dll
C:\Windows\system32\wificonnapi.dll
C:\Windows\system32\udhisapi.dll
C:\Windows\system32\upnpcont.exe
C:\Windows\system32\wsmprovhost.exe
C:\Windows\system32\WsmAuto.dll
C:\Windows\system32\WcnApi.dll
C:\Windows\system32\dafWCN.dll
C:\Windows\system32\fdWCN.dll
C:\Windows\system32\WsmAgent.dll
C:\Windows\system32\wusa.exe
C:\Windows\system32\wbemcomn.dll
C:\Windows\system32\vdsutil.dll
C:\Windows\system32\vsstrace.dll
C:\Windows\system32\wiarpc.dll
C:\Windows\system32\WsmWmiPl.dll
C:\Windows\system32\wcmcsp.dll
C:\Windows\system32\WmpDui.dll
C:\Windows\system32\swprv.dll
C:\Windows\system32\vds.exe
C:\Windows\system32\XblAuthManager.dll
C:\Windows\system32\sti.dll
C:\Windows\system32\WindowsCodecsExt.dll
C:\Windows\system32\WlanMM.dll
C:\Windows\system32\wiaservc.dll
C:\Windows\system32\tileobjserver.dll
C:\Windows\system32\wcncsvc.dll
C:\Windows\system32\upnphost.dll
C:\Windows\system32\vssapi.dll
C:\Windows\system32\wsp_health.dll
C:\Windows\system32\VSSVC.exe
C:\Windows\system32\wsp_fs.dll
C:\Windows\system32\Windows.UI.dll
C:\Windows\system32\UIAutomationCore.dll
C:\Windows\system32\XpsFilt.dll
C:\Windows\system32\mispace.dll
C:\Windows\system32\Windows.Web.Http.dll
C:\Windows\system32\Windows.UI.Xaml.Phone.dll
C:\Windows\system32\WsmSvc.dll
C:\Windows\system32\tdlrecover.exe
C:\Windows\system32\VEDataLayerHelpers.dll
C:\Windows\system32\VEEventDispatcher.dll
C:\Windows\system32\wuapi.dll
C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
C:\Windows\system32\WPDShServiceObj.dll
C:\Windows\system32\wmicmiplugin.dll
C:\Windows\system32\wiaaut.dll
C:\Windows\system32\webio.dll
C:\Windows\system32\ws2_32.dll
C:\Windows\system32\mswsock.dll
C:\Windows\system32\Drivers\ufx01000.sys
C:\Windows\system32\InstallAgent.exe
C:\Windows\system32\StoreAgent.dll
C:\Windows\system32\updatepolicy.dll
C:\Windows\system32\wlanapi.dll
C:\Windows\system32\wininit.exe
C:\Windows\system32\Drivers\UcmCx.sys
C:\Windows\system32\VEStoreEventHandlers.dll
C:\Windows\system32\wpdbusenum.dll
C:\Windows\system32\NotificationObjFactory.dll
C:\Windows\system32\wkscli.dll
C:\Windows\system32\wsdchngr.dll
C:\Windows\system32\wuautoappupdate.dll
C:\Windows\system32\Windows.UI.Input.Inking.dll
C:\Windows\system32\WSService.dll
C:\Windows\system32\shell32.dll
C:\Windows\system32\SettingSyncHost.exe
C:\Windows\system32\sppobjs.dll
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\schannel.dll
C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
C:\Windows\system32\Drivers\srv2.sys
C:\Windows\system32\Drivers\srv.sys
C:\Windows\system32\SettingsHandlers_Bluetooth.dll
C:\Windows\system32\OneDriveSettingSyncProvider.dll
C:\Windows\system32\vbscript.dll
C:\Windows\system32\aadtb.dll
C:\Windows\system32\WSShared.dll
C:\Windows\system32\AzureSettingSyncProvider.dll
C:\Windows\system32\NetworkMobileSettings.dll
C:\Windows\system32\jscript9.dll
C:\Windows\system32\SettingsHandlers_nt.dll
C:\Windows\system32\fvewiz.dll
C:\Windows\system32\wksprtPS.dll
C:\Windows\system32\Chakra.dll
C:\Windows\system32\reseteng.dll
C:\Windows\system32\wscapi.dll
C:\Windows\system32\LsaIso.exe
C:\Windows\system32\UserDataTimeUtil.dll
C:\Windows\system32\wscsvc.dll
C:\Windows\system32\kerberos.dll
C:\Windows\system32\SecConfig.efi
C:\Windows\system32\LicenseManager.dll
C:\Windows\system32\SHCore.dll
C:\Windows\system32\twinapi.appcore.dll
C:\Windows\system32\EditionUpgradeManagerObj.dll
C:\Windows\system32\Drivers\mrxsmb20.sys
C:\Windows\system32\Drivers\mrxsmb.sys
C:\Windows\system32\Drivers\scfilter.sys
C:\Windows\system32\sscore.dll
C:\Windows\system32\TabbtnEx.dll
C:\Windows\system32\NgcCtnr.dll
C:\Windows\system32\certprop.dll
C:\Windows\system32\PhoneService.dll
C:\Windows\system32\SensorService.dll
C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
C:\Windows\system32\ngccredprov.dll
C:\Windows\system32\schedsvc.dll
C:\Windows\system32\thumbcache.dll
C:\Windows\system32\SharedStartModel.dll
C:\Windows\system32\SettingMonitor.dll
C:\Windows\system32\Drivers\mrxsmb10.sys
C:\Windows\system32\SearchFolder.dll
C:\Windows\system32\TokenBroker.dll
C:\Windows\system32\MsSpellCheckingFacility.dll
C:\Windows\system32\srvsvc.dll
C:\Windows\system32\twinapi.dll
C:\Windows\system32\SensorDataService.exe
C:\Windows\system32\SettingSync.dll
C:\Windows\system32\twinui.appcore.dll
C:\Windows\system32\SettingSyncCore.dll
C:\Windows\system32\TabSvc.dll
C:\Windows\system32\Tabbtn.dll
C:\Windows\system32\themecpl.dll
C:\Windows\system32\twinui.dll
C:\Windows\system32\rdpclip.exe
C:\Windows\system32\SpeechPal.dll
C:\Windows\system32\fveapibase.dll
C:\Windows\system32\fveapi.dll
C:\Windows\system32\phoneactivate.exe
C:\Windows\system32\msv1_0.dll
C:\Windows\system32\msctf.dll
C:\Windows\system32\input.dll
C:\Windows\system32\msctfp.dll
C:\Windows\system32\TpmTasks.dll
C:\Windows\system32\SCardDlg.dll
C:\Windows\system32\Chakradiag.dll
C:\Windows\system32\NetworkDesktopSettings.dll
C:\Windows\system32\PhoneOm.dll
C:\Windows\system32\EmailApis.dll
C:\Windows\system32\wsecedit.dll
C:\Windows\system32\ChatApis.dll
C:\Windows\system32\sud.dll
C:\Windows\system32\DataSenseHandlers.dll
C:\Windows\system32\AppointmentApis.dll
C:\Windows\system32\SRH.dll
C:\Windows\system32\Windows.ApplicationModel.Store.dll
C:\Windows\system32\ContactApis.dll
C:\Windows\system32\sdengin2.dll
C:\Windows\system32\StikyNot.exe
C:\Windows\system32\themeui.dll
C:\Windows\system32\mstscax.dll
C:\Windows\system32\mstsc.exe
C:\Windows\system32\RADCUI.dll
C:\Windows\system32\Drivers\tm.sys
C:\Windows\system32\wsqmcons.exe
C:\Windows\system32\setupapi.dll
C:\Windows\system32\Drivers\FWPKCLNT.SYS
C:\Windows\system32\termsrv.dll
C:\Windows\system32\ngcsvc.dll
C:\Windows\system32\VoipRT.dll
C:\Windows\system32\SecureTimeAggregator.dll
C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
C:\Windows\system32\shsetup.dll
C:\Windows\system32\StorSvc.dll
C:\Windows\system32\MicrosoftAccountCloudAP.dll
C:\Windows\system32\msctfuimanager.dll
C:\Windows\system32\filemgmt.dll
C:\Windows\system32\SyncSettings.dll
C:\Windows\system32\netlogon.dll
C:\Windows\system32\sysdm.cpl
C:\Windows\system32\tdh.dll
C:\Windows\system32\sppinst.dll
C:\Windows\system32\Drivers\srvnet.sys
C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
C:\Windows\system32\sppcext.dll
C:\Windows\system32\Windows.Devices.Sensors.dll
C:\Windows\system32\storagewmi.dll
C:\Windows\system32\w32time.dll
C:\Windows\system32\rdpcore.dll
C:\Windows\system32\TSWorkspace.dll
C:\Windows\system32\Drivers\storport.sys
C:\Windows\system32\SensorsNativeApi.dll
C:\Windows\system32\Drivers\tcpip.sys
C:\Windows\system32\Windows.Speech.Pal.dll
C:\Windows\system32\SimCfg.dll
C:\Windows\system32\sdrsvc.dll
C:\Windows\system32\sdshext.dll
C:\Windows\system32\SettingsHandlers_Maps.dll
C:\Windows\system32\schtasks.exe
C:\Windows\system32\SimAuth.dll
C:\Windows\system32\aadcloudap.dll
C:\Windows\system32\shutdownux.dll
C:\Windows\system32\WSClient.dll
C:\Windows\system32\OneBackupHandler.dll
C:\Windows\system32\sbe.dll
C:\Windows\system32\SRHInproc.dll
C:\Windows\system32\taskcomp.dll
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SystemEventsBrokerServer.dll
C:\Windows\system32\ngcpopkeysrv.dll
C:\Windows\system32\Drivers\sdport.sys
C:\Windows\system32\NgcCtnrSvc.dll
C:\Windows\system32\cryptngc.dll
C:\Windows\system32\Drivers\fvevol.sys
C:\Windows\system32\hmkd.dll
C:\Windows\system32\PhoneProviders.dll
C:\Windows\system32\shacct.dll
C:\Windows\system32\SubscriptionMgr.dll
C:\Windows\system32\jscript.dll
C:\Windows\system32\easinvoker.exe
C:\Windows\system32\srvcli.dll
C:\Windows\system32\SensorsNativeApi.V2.dll
C:\Windows\system32\fveskybackup.dll
C:\Windows\system32\tbauth.dll
C:\Windows\system32\TokenBrokerCookies.exe
C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
C:\Windows\system32\BitLockerDeviceEncryption.exe
C:\Windows\system32\fveui.dll
C:\Windows\system32\bdesvc.dll
C:\Windows\system32\fvecpl.dll
C:\Windows\system32\systemreset.exe
C:\Windows\system32\sppwinob.dll
C:\Windows\system32\rdpudd.dll
C:\Windows\system32\WpcWebFilter.dll
C:\Windows\system32\WSSync.dll
C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
C:\Windows\system32\rdpcorets.dll
C:\Windows\system32\Drivers\pdc.sys
C:\Windows\system32\Drivers\rdbss.sys
C:\Windows\system32\provisioningcsp.dll
C:\Windows\system32\WinSCard.dll
C:\Windows\system32\P2P.dll
C:\Windows\system32\provengine.dll
C:\Windows\system32\provhandlers.dll
C:\Windows\system32\PlayToDevice.dll
C:\Windows\system32\efswrt.dll
C:\Windows\system32\RDXTaskFactory.dll
C:\Windows\system32\PsmServiceExtHost.dll
C:\Windows\system32\pnrpsvc.dll
C:\Windows\system32\PlayToManager.dll
C:\Windows\system32\ApplicationFrame.dll
C:\Windows\system32\win32spl.dll
C:\Windows\system32\RDXService.dll
C:\Windows\system32\qwave.dll
C:\Windows\system32\Windows.Networking.Proximity.dll
C:\Windows\system32\rasapi32.dll
C:\Windows\system32\Windows.Media.dll
C:\Windows\system32\RecoveryDrive.exe
C:\Windows\system32\WpcMon.exe
C:\Windows\system32\SystemSettingsAdminFlows.exe
C:\Windows\system32\propsys.dll
C:\Windows\system32\microsoft-windows-system-events.dll
C:\Windows\system32\racpldlg.dll
C:\Windows\system32\Drivers\ndiswan.sys
C:\Windows\system32\Windows.UI.PicturePassword.dll
C:\Windows\system32\SystemSettings.Handlers.dll
C:\Windows\system32\msdrm.dll
C:\Windows\system32\SettingsHandlers_StorageSense.dll
C:\Windows\system32\pnidui.dll
C:\Windows\system32\winspool.drv
C:\Windows\system32\PlayToReceiver.dll
C:\Windows\system32\PrintDialogs.dll
C:\Windows\system32\rasgcw.dll
C:\Windows\system32\NgcCtnrGidsHandler.dll
C:\Windows\system32\wvc.dll
C:\Windows\system32\Windows.Media.Editing.dll
C:\Windows\system32\PrintDialogs3D.dll
C:\Windows\system32\Windows.Graphics.Printing.3D.dll
C:\Windows\system32\wdc.dll
C:\Windows\system32\localspl.dll
C:\Windows\system32\WpcWebSync.dll
C:\Windows\system32\prnfldr.dll
C:\Windows\system32\Wpc.dll
C:\Windows\system32\PhotoScreensaver.scr
C:\Windows\system32\wpncore.dll
C:\Windows\system32\RemoteNaturalLanguage.dll
C:\Windows\system32\wpx.dll
C:\Windows\system32\pnpclean.dll
C:\Windows\system32\prnntfy.dll
C:\Windows\system32\SettingsHandlers_Geolocation.dll
C:\Windows\system32\WMPhoto.dll
C:\Windows\system32\easwrt.dll
C:\Windows\system32\SharedStartModelShim.dll
C:\Windows\system32\mprdim.dll
C:\Windows\system32\winipcfile.dll
C:\Windows\system32\winipcsecproc_ssp.dll
C:\Windows\system32\SmartCardSimulator.dll
C:\Windows\system32\winmsipc.dll
C:\Windows\system32\pla.dll
C:\Windows\system32\mprddm.dll
C:\Windows\system32\spoolsv.exe
C:\Windows\system32\wpnapps.dll
C:\Windows\system32\printfilterpipelinesvc.exe
C:\Windows\system32\winipcsecproc.dll
C:\Windows\system32\XpsPrint.dll
C:\Windows\system32\NFCProvisioningPlugin.dll
C:\Windows\system32\ntprint.dll
C:\Windows\system32\inetpp.dll
C:\Windows\system32\provops.dll
C:\Windows\system32\PackageStateRoaming.dll
C:\Windows\system32\Windows.Graphics.Printing.dll
C:\Windows\system32\Drivers\partmgr.sys
C:\Windows\system32\SettingsHandlers_Privacy.dll
C:\Windows\system32\rastls.dll
C:\Windows\system32\vpnike.dll
C:\Windows\system32\rpcrt4.dll
C:\Windows\system32\rsaenh.dll
C:\Windows\system32\LicenseManagerShellext.exe
C:\Windows\system32\BdeHdCfgLib.dll
C:\Windows\system32\storewuauth.dll
C:\Windows\system32\profsvc.dll
C:\Windows\system32\ntoskrnl.exe
C:\Windows\system32\oleaut32.dll
C:\Windows\system32\mfmp4srcsnk.dll
C:\Windows\system32\odbcconf.dll
C:\Windows\system32\Windows.Media.Streaming.ps.dll
C:\Windows\system32\mos.dll
C:\Windows\system32\IKEEXT.DLL
C:\Windows\system32\wmpps.dll
C:\Windows\system32\mfmjpegdec.dll
C:\Windows\system32\asycfilt.dll
C:\Windows\system32\mfnetsrc.dll
C:\Windows\system32\mf.dll
C:\Windows\system32\mfcore.dll
C:\Windows\system32\mfasfsrcsnk.dll
C:\Windows\system32\mfplat.dll
C:\Windows\system32\mfsrcsnk.dll
C:\Windows\system32\mfnetcore.dll
C:\Windows\system32\mfmpeg2srcsnk.dll
C:\Windows\system32\msmpeg2vdec.dll
C:\Windows\system32\msmpeg2adec.dll
C:\Windows\system32\MSAudDecMFT.dll
C:\Windows\system32\MapsCSP.dll
C:\Windows\system32\MosHostClient.dll
C:\Windows\system32\stdole2.tlb
C:\Windows\system32\mapsupdatetask.dll
C:\Windows\system32\NcdAutoSetup.dll
C:\Windows\system32\MosStorage.dll
C:\Windows\system32\MapsBtSvc.dll
C:\Windows\system32\moshost.dll
C:\Windows\system32\mcbuilder.exe
C:\Windows\system32\moshostcore.dll
C:\Windows\system32\LegacyNetUXHost.exe
2017-06-03 13:22 - 2017-03-04 12:31 - 00185856 _____ C:\Windows\system32\ism32k.dll
C:\Windows\system32\Drivers\nwifi.sys
C:\Windows\system32\MBMediaManager.dll
C:\Windows\system32\APHostService.dll
C:\Windows\system32\MapConfiguration.dll
C:\Windows\system32\WlanMediaManager.dll
C:\Windows\system32\netplwiz.dll
C:\Windows\system32\Drivers\WdiWiFi.sys
C:\Windows\system32\SensorsApi.dll
C:\Windows\system32\JpMapControl.dll
C:\Windows\system32\MiracastReceiver.dll
C:\Windows\system32\MapsStore.dll
C:\Windows\system32\NMAA.dll
C:\Windows\system32\MapControlCore.dll
C:\Windows\system32\modernexecserver.dll
C:\Windows\system32\msxml3.dll
C:\Windows\system32\inetcomm.dll
C:\Windows\system32\MSMPEG2ENC.DLL
C:\Windows\system32\BingMaps.dll
C:\Windows\system32\ntshrui.dll
C:\Windows\system32\wmp.dll
C:\Windows\system32\Drivers\mup.sys
C:\Windows\system32\ntdll.dll
C:\Windows\system32\netcfgx.dll
C:\Windows\system32\wmdrmdev.dll
C:\Windows\system32\mfps.dll
C:\Windows\system32\mfsvr.dll
C:\Windows\system32\WMVCORE.DLL
C:\Windows\system32\wmpeffects.dll
C:\Windows\system32\NPSMDesktopProvider.dll
C:\Windows\system32\NPSM.dll
C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
C:\Windows\system32\DafPrintProvider.dll
C:\Windows\system32\mqsnap.dll
C:\Windows\system32\netman.dll
C:\Windows\system32\Windows.Media.Import.dll
C:\Windows\system32\netcenter.dll
C:\Windows\system32\wmdrmsdk.dll
C:\Windows\system32\syncutil.dll
C:\Windows\system32\WMNetMgr.dll
C:\Windows\system32\SyncCenter.dll
C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
C:\Windows\system32\mspaint.exe
C:\Windows\system32\Windows.Media.Streaming.dll
C:\Windows\system32\internetmail.dll
C:\Windows\system32\msftedit.dll
C:\Windows\system32\netshell.dll
C:\Windows\system32\Windows.Networking.Connectivity.dll
C:\Windows\system32\MDMAppInstaller.exe
C:\Windows\system32\offreg.dll
C:\Windows\system32\wmpdxm.dll
C:\Windows\system32\wmpshell.dll
C:\Windows\system32\msxml6.dll
C:\Windows\system32\NetSetupEngine.dll
C:\Windows\system32\OnDemandConnRouteHelper.dll
C:\Windows\system32\wmploc.DLL
C:\Windows\system32\ipsecsnp.dll
C:\Windows\system32\msdt.exe
C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
C:\Windows\system32\nettrace.dll
C:\Windows\system32\Windows.Networking.dll
C:\Windows\system32\Windows.Media.Audio.dll
C:\Windows\system32\SyncController.dll
C:\Windows\system32\ImplatSetup.dll
C:\Windows\system32\XpsDocumentTargetPrint.dll
C:\Windows\system32\adtschema.dll
C:\Windows\system32\msobjs.dll
C:\Windows\system32\NetSetupApi.dll
C:\Windows\system32\NetSetupSvc.dll
C:\Windows\system32\mfpmp.exe
C:\Windows\system32\LegacyNetUX.dll
C:\Windows\system32\msieftp.dll
C:\Windows\system32\puiapi.dll
C:\Windows\system32\puiobj.dll
C:\Windows\system32\NetworkUXBroker.exe
C:\Windows\system32\ncryptsslp.dll
C:\Windows\system32\FwRemoteSvr.dll
C:\Windows\system32\Drivers\Ndu.sys
C:\Windows\system32\Drivers\netbt.sys
C:\Windows\system32\newdev.dll
C:\Windows\system32\polstore.dll
C:\Windows\system32\IPSECSVC.DLL
C:\Windows\system32\mdmregistration.dll
C:\Windows\system32\NetSetupShim.dll
C:\Windows\system32\Drivers\ntfs.sys
C:\Windows\system32\Drivers\ndis.sys
C:\Windows\system32\netapi32.dll
C:\Windows\system32\oleacchooks.dll
C:\Windows\system32\NetCfgNotifyObjectHost.exe
C:\Windows\system32\Windows.Media.Devices.dll
C:\Windows\system32\oleacc.dll
C:\Windows\system32\AccountsRt.dll
2017-06-03 13:22 - 2016-03-29 14:00 - 00235008 _____ C:\Windows\system32\MTF.dll
C:\Windows\system32\accountaccessor.dll
C:\Windows\system32\ncbservice.dll
C:\Windows\system32\BFE.DLL
C:\Windows\system32\FWPUCLNT.DLL
C:\Windows\system32\KernelBase.dll
C:\Windows\system32\iertutil.dll
C:\Windows\system32\windows.storage.dll
C:\Windows\system32\Drivers\cng.sys
C:\Windows\system32\Drivers\dxgkrnl.sys
C:\Windows\system32\tdc.ocx
C:\Windows\system32\ieetwcollector.exe
C:\Windows\system32\dxtrans.dll
C:\Windows\system32\iepeers.dll
C:\Windows\system32\IdCtrls.dll
C:\Windows\system32\mshtmled.dll
C:\Windows\system32\ie4uinit.exe
C:\Windows\system32\ieproxy.dll
C:\Windows\system32\iedkcs32.dll
C:\Windows\system32\msfeeds.dll
C:\Windows\system32\webcheck.dll
C:\Windows\system32\inetcpl.cpl
C:\Windows\system32\ieapfltr.dll
C:\Windows\system32\dbgeng.dll
C:\Windows\system32\wininet.dll
C:\Windows\system32\lsasrv.dll
C:\Windows\system32\edgehtml.dll
C:\Windows\system32\ieframe.dll
C:\Windows\system32\mshtml.dll
C:\Windows\system32\Drivers\dxgmms1.sys
C:\Windows\system32\MFCaptureEngine.dll
C:\Windows\system32\Windows.Internal.Shell.Broker.dll
C:\Windows\system32\icm32.dll
C:\Windows\system32\Windows.Internal.Bluetooth.dll
C:\Windows\system32\mbsmsapi.dll
C:\Windows\system32\LockAppBroker.dll
C:\Windows\system32\Windows.Storage.Search.dll
C:\Windows\system32\LogonController.dll
C:\Windows\system32\InputService.dll
C:\Windows\system32\ActiveSyncProvider.dll
C:\Windows\system32\MFMediaEngine.dll
C:\Windows\system32\msi.dll
C:\Windows\system32\LockAppHost.exe
C:\Windows\system32\Drivers\dxgmms2.sys
C:\Windows\system32\wininetlui.dll
C:\Windows\system32\MicrosoftAccountExtension.dll
C:\Windows\system32\intl.cpl
C:\Windows\system32\MbaeApiPublic.dll
C:\Windows\system32\mmc.exe
C:\Windows\system32\mmcndmgr.dll
2017-06-03 13:21 - 2016-10-25 09:19 - 00775336 _____ C:\Windows\SysWOW64\locale.nls
2017-06-03 13:21 - 2016-10-25 09:19 - 00775336 _____ C:\Windows\system32\locale.nls
C:\Windows\system32\AboveLockAppHost.dll
C:\Windows\system32\kernel32.dll
C:\Windows\system32\sspicli.dll
C:\Windows\system32\Drivers\ksecdd.sys
C:\Windows\system32\Drivers\ClipSp.sys
C:\Windows\system32\lsass.exe
C:\Windows\system32\IconCodecService.dll
C:\Windows\system32\mmcshext.dll
C:\Windows\system32\mmcbase.dll
C:\Windows\system32\cic.dll
C:\Windows\system32\mscms.dll
C:\Windows\system32\offlinelsa.dll
C:\Windows\system32\dbghelp.dll
C:\Windows\system32\ieui.dll
C:\Windows\system32\DbgModel.dll
C:\Windows\system32\Drivers\ksecpkg.sys
C:\Windows\system32\cdd.dll
C:\Windows\system32\adhsvc.dll
C:\Windows\system32\httpprxp.dll
C:\Windows\system32\iphlpsvc.dll
C:\Windows\system32\httpprxm.dll
C:\Windows\system32\iuilp.dll
C:\Windows\system32\jsproxy.dll
C:\Windows\system32\TextInputFramework.dll
C:\Windows\system32\Windows.UI.Core.TextInput.dll
C:\Windows\system32\InputLocaleManager.dll
C:\Windows\system32\gdi32.dll
C:\Windows\system32\dpapisrv.dll
C:\Windows\system32\WUDFPlatform.dll
C:\Windows\system32\D3DCompiler_47.dll
C:\Windows\system32\urlmon.dll
C:\Windows\system32\ExplorerFrame.dll
C:\Windows\system32\Windows.UI.Xaml.dll
C:\Windows\system32\Drivers\dam.sys
2017-06-03 13:20 - 2017-03-28 15:30 - 00379232 _____ (Adobe Systems Incorporated)
C:\Windows\system32\atmfd.dll
C:\Windows\system32\fontdrvhost.exe
2017-06-03 13:20 - 2017-03-28 14:48 - 00045568 _____ (Adobe Systems)
C:\Windows\system32\atmlib.dll
C:\Windows\system32\quartz.dll
C:\Windows\system32\dnsapi.dll
C:\Windows\explorer.exe
C:\Windows\system32\d3d11.dll
C:\Windows\system32\dcntel.dll
C:\Windows\system32\DeviceCensus.exe
C:\Windows\system32\DolbyDecMFT.dll
C:\Windows\system32\LocationFrameworkInternalPS.dll
C:\Windows\system32\samlib.dll
C:\Windows\system32\feclient.dll
C:\Windows\system32\apds.dll
C:\Windows\system32\enterprisecsps.dll
C:\Windows\system32\dnsrslvr.dll
C:\Windows\system32\setupugc.exe
C:\Windows\system32\WinFax.dll
C:\Windows\system32\edputil.dll
C:\Windows\system32\energy.dll
C:\Windows\system32\DevicePairing.dll
C:\Windows\system32\Geolocation.dll
C:\Windows\system32\Windows.Devices.Bluetooth.dll
C:\Windows\system32\gameux.dll
C:\Windows\system32\FntCache.dll
C:\Windows\system32\Drivers\dfsc.sys
C:\Windows\system32\DWrite.dll
C:\Windows\system32\LocationFramework.dll
C:\Windows\system32\dui70.dll
C:\Windows\system32\dmenrollengine.dll
C:\Windows\system32\configmanager2.dll
C:\Windows\system32\dwmcore.dll
C:\Windows\system32\dosvc.dll
C:\Windows\HelpPane.exe
C:\Windows\system32\samsrv.dll
C:\Windows\system32\hgcpl.dll
C:\Windows\system32\Windows.Data.Pdf.dll
C:\Windows\system32\d3d10warp.dll
C:\Windows\system32\DMRServer.dll
C:\Windows\system32\HttpsDataSource.dll
C:\Windows\system32\FingerprintEnrollment.dll
C:\Windows\system32\fhsvc.dll
C:\Windows\system32\dot3ui.dll
C:\Windows\system32\Dxpserver.exe
C:\Windows\system32\domgmt.dll
C:\Windows\system32\ListSvc.dll
C:\Windows\system32\Windows.Devices.WiFiDirect.dll
C:\Windows\system32\WFS.exe
C:\Windows\system32\fhsettingsprovider.dll
C:\Windows\system32\ExecModelClient.dll
C:\Windows\system32\DXP.dll
C:\Windows\system32\Windows.Devices.Picker.dll
C:\Windows\system32\Windows.Devices.SmartCards.dll
C:\Windows\system32\workfolderssvc.dll
C:\Windows\system32\werconcpl.dll
C:\Windows\system32\Windows.Globalization.dll
C:\Windows\system32\Display.dll
C:\Windows\system32\GlobCollationHost.dll
C:\Windows\system32\wer.dll
C:\Windows\system32\drvstore.dll
C:\Windows\system32\DevDispItemProvider.dll
C:\Windows\system32\das.dll
C:\Windows\system32\Windows.Devices.Enumeration.dll
C:\Windows\system32\hal.dll
C:\Windows\system32\evr.dll
C:\Windows\system32\dcomp.dll
C:\Windows\system32\directmanipulation.dll
C:\Windows\system32\pngfilt.dll
C:\Windows\system32\deviceassociation.dll
C:\Windows\system32\Windows.Devices.Midi.dll
C:\Windows\system32\eapphost.dll
C:\Windows\system32\DisplayManager.dll
C:\Windows\system32\dialserver.dll
C:\Windows\system32\DiagCpl.dll
C:\Windows\system32\Windows.Devices.LowLevel.dll
C:\Windows\system32\eapp3hst.dll
C:\Windows\system32\EnterpriseAppMgmtSvc.dll
C:\Windows\system32\eapsvc.dll
C:\Windows\system32\Windows.Devices.PointOfService.dll
C:\Windows\system32\fhcfg.dll
C:\Windows\system32\qdvd.dll
C:\Windows\system32\MDEServer.exe
C:\Windows\system32\Windows.Internal.Management.dll
C:\Windows\system32\dlnashext.dll
C:\Windows\system32\eappcfg.dll
C:\Windows\system32\defragsvc.dll
C:\Windows\system32\resutils.dll
C:\Windows\system32\clusapi.dll
C:\Windows\system32\WUDFx.dll
C:\Windows\system32\duser.dll
C:\Windows\system32\wevtsvc.dll
C:\Windows\system32\uDWM.dll
C:\Windows\system32\gpedit.dll
C:\Windows\system32\hnetcfg.dll
C:\Windows\system32\enrollmentapi.dll
C:\Windows\system32\D3D12.dll
C:\Windows\system32\wevtutil.exe
C:\Windows\system32\dxgi.dll
C:\Windows\system32\eappprxy.dll
C:\Windows\system32\d3d10_1.dll
C:\Windows\system32\eappgnui.dll
C:\Windows\system32\fhengine.dll
C:\Windows\system32\dmdskmgr.dll
C:\Windows\system32\ActionCenterCPL.dll
C:\Windows\system32\werui.dll
C:\Windows\system32\deviceaccess.dll
C:\Windows\system32\gpapi.dll
C:\Windows\system32\Drivers\dumpsdport.sys
C:\Windows\system32\fontsub.dll
C:\Windows\system32\dhcpcsvc6.dll
C:\Windows\system32\dhcpcsvc.dll
C:\Windows\system32\dhcpcore6.dll
C:\Windows\system32\GnssAdapter.dll
C:\Windows\system32\dhcpcore.dll
C:\Windows\system32\mdmmigrator.dll
C:\Windows\system32\gpsvc.dll
C:\Windows\system32\DeviceEnroller.exe
C:\Windows\system32\Drivers\fastfat.sys
C:\Windows\system32\d3d10level9.dll
C:\Windows\system32\dwminit.dll
C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
C:\Windows\system32\Drivers\filecrypt.sys
C:\Windows\system32\omadmapi.dll
C:\Windows\system32\policymanager.dll
C:\Windows\system32\Drivers\http.sys
C:\Windows\system32\policymanagerprecheck.dll
C:\Windows\system32\dmenterprisediagnostics.dll
C:\Windows\system32\FontProvider.dll
C:\Windows\system32\DAFWSD.dll
C:\Windows\system32\esent.dll
C:\Windows\system32\winresume.efi
2017-06-03 13:19 - 2017-04-28 11:30 - 02656960 _____
C:\Windows\system32\CoreUIComponents.dll
C:\Windows\system32\winload.efi
C:\Windows\system32\MrmCoreR.dll
C:\Windows\system32\combase.dll
C:\Windows\system32\ole32.dll
C:\Windows\system32\browser_broker.exe
C:\Windows\system32\crypt32.dll
C:\Windows\system32\browserbroker.dll
C:\Windows\system32\cryptui.dll
C:\Windows\system32\rpcss.dll
C:\Windows\system32\OpcServices.dll
C:\Windows\system32\certcli.dll
C:\Windows\system32\dmcertinst.exe
C:\Windows\system32\winresume.exe
C:\Windows\system32\ci.dll
C:\Windows\system32\CloudExperienceHost.dll
C:\Windows\system32\appraiser.dll
C:\Windows\system32\generaltel.dll
C:\Windows\system32\acmigration.dll
C:\Windows\system32\CompatTelRunner.exe
C:\Windows\system32\cdpreference.exe
C:\Windows\system32\scapi.dll
C:\Windows\system32\cdpsvc.dll
C:\Windows\system32\Windows.Cortana.OneCore.dll
C:\Windows\system32\MrmIndexer.dll
C:\Windows\system32\configurationclient.dll
C:\Windows\system32\Windows.Cortana.Desktop.dll
C:\Windows\system32\comsvcs.dll
C:\Windows\system32\comdlg32.dll
C:\Windows\system32\cdp.dll
C:\Windows\system32\Drivers\clfs.sys
C:\Windows\system32\bcrypt.dll
C:\Windows\system32\winload.exe
C:\Windows\system32\wldp.dll
C:\Windows\system32\Drivers\bowser.sys
C:\Windows\system32\wpr.exe
C:\Windows\system32\ConhostV2.dll
C:\Windows\system32\CellularAPI.dll
C:\Windows\system32\credprovs.dll
C:\Windows\system32\windowsperformancerecordercontrol.dll
C:\Windows\system32\certreq.exe
C:\Windows\system32\AppxApplicabilityEngine.dll
C:\Windows\system32\CredProvDataModel.dll
C:\Windows\system32\qmgr.dll
C:\Windows\system32\bisrv.dll
C:\Windows\system32\wbengine.exe
C:\Windows\system32\bcdedit.exe
C:\Windows\system32\BCP47Langs.dll
C:\Windows\system32\WinTypes.dll
C:\Windows\system32\bcryptprimitives.dll
C:\Windows\system32\Windows.Cortana.ProxyStub.dll
C:\Windows\system32\BootMenuUX.dll
C:\Windows\system32\SmsRouterSvc.dll
C:\Windows\system32\CPFilters.dll
C:\Windows\system32\comuid.dll
C:\Windows\system32\msdtctm.dll
C:\Windows\system32\AppxPackaging.dll
C:\Windows\system32\diagperf.dll
C:\Windows\system32\xpsservices.dll
C:\Windows\system32\certca.dll
C:\Windows\system32\csrsrv.dll
C:\Windows\system32\wshbth.dll
C:\Windows\system32\BluetoothApis.dll
C:\Windows\system32\dmcsps.dll
C:\Windows\system32\omadmclient.exe
C:\Windows\system32\cryptsvc.dll
C:\Windows\system32\BrokerLib.dll
C:\Windows\system32\CloudDomainJoinDataModelServer.dll
C:\Windows\system32\BrowserSettingSync.dll
C:\Windows\system32\browcli.dll
C:\Windows\system32\mtxoci.dll
C:\Windows\system32\dafBth.dll
C:\Windows\system32\browser.dll
C:\Windows\system32\credprovhost.dll
C:\Windows\system32\basesrv.dll
C:\Windows\system32\apprepsync.dll
C:\Windows\system32\apprepapi.dll
C:\Windows\system32\aeinv.dll
C:\Windows\system32\devinv.dll
C:\Windows\system32\invagent.dll
C:\Windows\system32\aepic.dll
C:\Windows\system32\MessagingDataModel2.dll
C:\Windows\system32\AppReadiness.dll
C:\Windows\system32\appwiz.cpl
C:\Windows\system32\audiosrv.dll
C:\Windows\system32\rshx32.dll
C:\Windows\system32\AppXDeploymentExtensions.dll
C:\Windows\system32\AppXDeploymentServer.dll
C:\Windows\system32\authui.dll
C:\Windows\system32\appidapi.dll
C:\Windows\system32\appidcertstorecheck.exe
C:\Windows\system32\appidsvc.dll
C:\Windows\system32\appidpolicyconverter.exe
C:\Windows\system32\Taskmgr.exe
C:\Windows\system32\pcasvc.dll
C:\Windows\system32\Windows.Media.MediaControl.dll
C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
C:\Windows\system32\ActivationManager.dll
C:\Windows\system32\Windows.AccountsControl.dll
C:\Windows\system32\AppXDeploymentClient.dll
C:\Windows\system32\SmartcardCredentialProvider.dll
C:\Windows\system32\adsmsext.dll
C:\Windows\system32\AudioEng.dll
C:\Windows\system32\spcompat.dll
C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
C:\Windows\system32\Windows.Devices.AllJoyn.dll
C:\Windows\system32\aitstatic.exe
C:\Windows\system32\apphelp.dll
C:\Windows\system32\azroleui.dll
C:\Windows\system32\autochk.exe
C:\Windows\system32\azroles.dll
C:\Windows\system32\MSAJApi.dll
C:\Windows\system32\usermgr.dll
C:\Windows\system32\Drivers\ahcache.sys
C:\Windows\system32\tzautoupdate.dll
C:\Windows\system32\actxprxy.dll
C:\Windows\system32\AppxAllUserStore.dll
C:\Windows\system32\ByteCodeGenerator.exe
2017-06-03 13:18 - 2016-04-23 09:10 - 00002186 _____
C:\Windows\system32\AppxProvisioning.xml
C:\Windows\system32\audiodg.exe
C:\Windows\system32\AppxSysprep.dll
C:\Windows\system32\CoreMessaging.dll
C:\Windows\system32\ClipUp.exe
C:\Windows\system32\ClipSVC.dll
C:\Windows\system32\fdProxy.dll
C:\Windows\system32\oemlicense.dll
C:\Windows\system32\licensingdiag.exe
C:\Windows\system32\AppCapture.dll
C:\Windows\system32\bcastdvr.exe
C:\Windows\system32\Drivers\hdaudbus.sys
C:\Windows\system32\Drivers\HdAudio.sys
C:\Windows\system32\ShareHost.dll
C:\Windows\system32\DictationManager.dll
C:\Windows\system32\icsvc.dll
C:\Windows\system32\Drivers\bthmodem.sys
C:\Windows\system32\Clipc.dll
C:\Windows\system32\NotificationController.dll
C:\Windows\system32\tetheringservice.dll
C:\Windows\system32\Drivers\BasicRender.sys
C:\Windows\system32\Drivers\usbport.sys
C:\Windows\system32\Drivers\vhdmp.sys
C:\Windows\system32\Drivers\usbd.sys
C:\Windows\system32\Drivers\genericusbfn.sys
C:\Windows\system32\Drivers\sdbus.sys
C:\Windows\system32\Drivers\ufxsynopsys.sys
C:\Windows\system32\Drivers\bthpan.sys
C:\Windows\system32\Drivers\bthenum.sys
C:\Windows\system32\Drivers\rfcomm.sys
C:\Windows\system32\Drivers\bthport.sys
C:\Windows\system32\Drivers\BTHUSB.SYS
C:\Windows\system32\Drivers\tpm.sys
C:\Windows\system32\Drivers\hidclass.sys
C:\Windows\system32\Drivers\USBHUB3.SYS
C:\Windows\system32\Drivers\dumpsd.sys
C:\Windows\system32\Drivers\USBXHCI.SYS
C:\Windows\system32\Drivers\BthLEEnum.sys
C:\Windows\system32\Drivers\BthAvrcpTg.sys
2017-06-03 13:12 - 2017-06-13 18:57 - 00000840 ____H
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2017-06-03 13:12 - 2017-06-13 18:57 - 00000828 ____H
C:\Users\Public\Desktop\Opera.lnk
2017-06-03 13:12 - 2017-06-03 13:12 - 00000000 ____D
C:\Users\user\AppData\Roaming\Opera Software
2017-06-03 13:12 - 2017-06-03 13:12 - 00000000 ____D
C:\Users\user\AppData\Local\Opera Software
2017-06-03 12:58 - 2017-06-15 18:48 - 00000000 ____D C:\Program Files\Opera
2017-06-03 12:57 - 2017-06-03 12:57 - 00000000 ____D
C:\Users\user\AppData\Roaming\Skype
2017-06-03 12:56 - 2017-06-03 12:58 - 01166528 _____ (Opera Software)
C:\Users\user\Downloads\OperaSetup.exe
2017-06-02 15:21 - 2017-06-02 15:21 - 00000000 ____D C:\Program Files\Reference
Assemblies
2017-06-02 15:21 - 2017-06-02 15:21 - 00000000 ____D C:\Program Files\MSBuild
2017-06-02 15:21 - 2017-06-02 15:21 - 00000000 ____D C:\Program Files
(x86)\Reference Assemblies
2017-06-02 15:19 - 2017-06-02 15:19 - 00000000 ____D
C:\Users\user\AppData\Roaming\WMM
C:\Windows\SysWOW64\PresentationNative_v0300.dll
C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
C:\Windows\SysWOW64\TsWpfWrp.exe
C:\Windows\system32\PresentationNative_v0300.dll
C:\Windows\system32\TsWpfWrp.exe
C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-06-02 15:16 - 2017-06-02 15:16 - 00001447 _____
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2017-06-02 15:16 - 2017-06-02 15:16 - 00001378 _____
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2017-06-02 15:16 - 2017-06-02 15:16 - 00001295 _____
C:\Users\Public\Desktop\Windows Movie Maker.lnk
2017-06-02 15:16 - 2017-06-02 15:16 - 00000000 ____D
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker
C:\Windows\SysWOW64\XAudio2_7.dll
C:\Windows\system32\XAudio2_7.dll
C:\Windows\system32\XAPOFX1_5.dll
C:\Windows\SysWOW64\XAPOFX1_5.dll
C:\Windows\system32\D3DCompiler_43.dll
C:\Windows\SysWOW64\D3DCompiler_43.dll
C:\Windows\system32\d3dx11_43.dll
C:\Windows\SysWOW64\d3dx11_43.dll
2017-06-02 15:15 - 2017-06-02 15:16 - 00000000 ____D C:\Program Files (x86)\Windows
Live
Movie Maker
2017-06-02 14:36 - 2017-06-02 15:15 - 26689458 _____ (videowinsoft.com )
C:\Users\user\Downloads\windows-movie-maker-2016.exe
2017-06-02 14:22 - 2017-06-02 14:22 - 00000000 ____D
C:\Users\user\AppData\Roaming\WinRAR
C:\Windows\system32\wuauclt.exe
2017-06-02 13:28 - 2017-06-02 13:28 - 00000000 ____H
C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-05-25 22:54 - 2016-10-17 22:35 - 00223464 _____ (Tonec Inc.)
C:\Windows\system32\Drivers\idmwfp.sys
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-06-24 07:39 - 2015-10-30 14:11 - 00000000 ____D C:\Windows\CbsTemp

2017-06-24 07:29 - 2017-05-18 17:44 - 00879220 _____
C:\Windows\system32\PerfStringBackup.INI
2017-06-24 07:29 - 2015-10-30 14:21 - 00000000 ____D C:\Windows\INF
2017-06-24 07:22 - 2017-05-18 17:37 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-24 07:22 - 2015-10-30 13:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2017-06-24 07:21 - 2017-05-18 21:39 - 00065536 _____ C:\Windows\psp_storage.bin
2017-06-21 23:05 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\AppReadiness
2017-06-18 11:24 - 2017-05-19 17:18 - 00000000 ____D
C:\Users\user\AppData\Roaming\WhatsApp
2017-06-18 04:40 - 2015-10-30 14:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-15 19:24 - 2017-05-18 23:25 - 00001403 ____H
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-15 19:24 - 2017-05-18 23:25 - 00001385 ____H C:\Users\Public\Desktop\Google
Chrome.lnk
2017-06-15 19:12 - 2017-05-19 17:31 - 00000000 ____D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LINE
2017-06-15 19:09 - 2015-10-30 14:24 - 00000000 ___HD
C:\Windows\system32\GroupPolicy
2017-06-15 19:09 - 2015-10-30 14:24 - 00000000 ____D
C:\Windows\SysWOW64\GroupPolicy
2017-06-15 19:05 - 2017-05-18 22:17 - 00000000 ____D C:\Program Files (x86)\SMADAV
2017-06-12 17:10 - 2017-05-18 17:40 - 00000000 __RHD
C:\Users\Public\AccountPictures
2017-06-11 19:01 - 2015-10-30 14:24 - 00000000 ____D
C:\Windows\system32\WinBioDatabase
2017-06-11 18:56 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\appcompat
2017-06-10 22:34 - 2017-05-18 22:17 - 00000000 __SHD C:\[Smad-Cage]
2017-06-10 18:35 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\system32\NDF
2017-06-07 22:47 - 2017-05-18 17:40 - 00000000 ____D
C:\Users\user\AppData\Roaming\Adobe
2017-06-07 21:13 - 2017-05-18 17:40 - 00000000 ____D
C:\Users\user\AppData\Local\VirtualStore
2017-06-07 21:10 - 2017-05-18 17:33 - 02283032 _____
C:\Windows\system32\FNTCACHE.DAT
2017-06-07 19:24 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\rescache
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ___SD C:\Windows\system32\F12
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ____D
C:\Windows\system32\WinBioPlugIns
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ____D
C:\Windows\system32\SystemResetPlatform
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\system32\setup
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\system32\oobe
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\system32\migwiz
2017-06-03 22:55 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\system32\appraiser
2017-06-03 22:55 - 2015-10-30 13:31 - 00000000 ____D
C:\Windows\SysWOW64\AdvancedInstallers
2017-06-03 22:55 - 2015-10-30 13:31 - 00000000 ____D
C:\Windows\system32\AdvancedInstallers
2017-06-03 22:55 - 2015-10-30 13:28 - 00000000 ____D C:\Windows\SysWOW64\Dism
2017-06-03 22:55 - 2015-10-30 13:28 - 00000000 ____D C:\Windows\system32\Dism
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ___RD C:\Windows\PrintDialog
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ___RD
C:\Windows\ImmersiveControlPanel
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ___RD C:\Windows\DevicesFlow
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\Provisioning
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ____D C:\Windows\bcastdvr
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ____D C:\Program Files\Windows Photo
Viewer
2017-06-03 22:54 - 2015-10-30 14:24 - 00000000 ____D C:\Program Files\Windows
Defender
Photo Viewer
Defender
2017-06-03 22:53 - 2015-10-30 14:24 - 00015703 _____
C:\Windows\system32\OEMDefaultAssociations.xml
2017-06-03 12:58 - 2017-05-18 17:43 - 00002356 _____
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-03 12:58 - 2017-05-18 17:43 - 00000000 ___RD C:\Users\user\OneDrive
2017-06-03 00:03 - 2015-10-30 16:05 - 00000000 ____D C:\Windows\ShellNew
2017-06-02 15:21 - 2017-05-18 22:26 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-31 03:45 - 2017-05-19 18:27 - 00565416 ____N (Microsoft Corporation)
C:\Windows\system32\MpSigStub.exe
==================== Files in the root of some directories =======
2017-05-18 21:42 - 2017-06-24 07:23 - 0130298 _____ ()

C:\Users\user\AppData\Local\BTServer.log
2017-06-04 06:35 - 2017-06-04 06:35 - 0140800 _____ ()
C:\Users\user\AppData\Local\installer.dat
2017-06-15 21:59 - 2017-06-15 22:00 - 0000132 _____ () C:\ProgramData\log.binb
2017-06-15 19:13 - 2017-06-15 21:59 - 0000128 _____ () C:\ProgramData\log.ewbb
2017-06-15 19:13 - 2017-06-15 21:59 - 0001008 _____ () C:\ProgramData\log.ewbt
Files to move or delete:

====================
C:\Windows\TEMP\gA6F3.tmp.exe
Some files in TEMP:

====================
2017-06-16 19:10 - 2017-06-16 19:10 - 0476672 _____ ()
C:\Users\Administrator\AppData\Local\Temp\7za.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0020480 _____ (E Dev)
C:\Users\Administrator\AppData\Local\Temp\DaS_21.exe
2017-06-16 18:33 - 2017-06-16 18:33 - 3932096 _____ (Geek Unnstaller)
C:\Users\Administrator\AppData\Local\Temp\geek64.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0388608 _____ (Trend Micro Inc.)
C:\Users\Administrator\AppData\Local\Temp\hijackthis.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0030720 _____ (NirSoft)
C:\Users\Administrator\AppData\Local\Temp\NirCmd.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0256512 _____ ()
C:\Users\Administrator\AppData\Local\Temp\PEVZ.EXE
2017-06-16 19:10 - 2017-06-16 19:10 - 0069632 _____ ()
C:\Users\Administrator\AppData\Local\Temp\remove.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0098816 _____ ()
C:\Users\Administrator\AppData\Local\Temp\sed.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0057344 _____ (Optimum X)
C:\Users\Administrator\AppData\Local\Temp\shortcut.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0217088 _____ (SteelWerX)
C:\Users\Administrator\AppData\Local\Temp\swxcacls.exe
2017-06-16 19:10 - 2017-06-16 19:10 - 0024064 _____ ()
C:\Users\Administrator\AppData\Local\Temp\zoek-delete.exe
2017-06-15 19:15 - 2017-06-15 19:15 - 0328160 _____ (WeMonetize
) C:\Users\user\AppData\Local\Temp\6B08295.exe
2017-06-16 19:08 - 2017-06-16 19:08 - 0476672 _____ ()
C:\Users\user\AppData\Local\Temp\7za.exe
2017-06-15 19:12 - 2017-06-15 19:12 - 0860669 _____ (
) C:\Users\user\AppData\Local\Temp\avboost.exe
2017-06-03 22:11 - 2017-06-03 22:11 - 0467968 _____ (Realtek Semiconductor Corp.)
C:\Users\user\AppData\Local\Temp\COMAP.EXE
2017-06-16 19:08 - 2017-06-16 19:08 - 0020480 _____ (E Dev)
C:\Users\user\AppData\Local\Temp\DaS_21.exe
2017-06-15 19:12 - 2017-06-15 19:12 - 0097280 _____ ()
C:\Users\user\AppData\Local\Temp\DriverEasySetup.exe
2017-06-15 19:12 - 2017-06-15 19:13 - 4015032 _____ (Easeware
) C:\Users\user\AppData\Local\Temp\EE3F.tmp.exe
2017-06-13 22:02 - 2017-06-13 22:02 - 3932096 _____ (Geek Unnstaller)
C:\Users\user\AppData\Local\Temp\geek64.exe
2017-06-16 19:08 - 2017-06-16 19:08 - 0388608 _____ (Trend Micro Inc.)
C:\Users\user\AppData\Local\Temp\hijackthis.exe
2017-06-15 19:13 - 2017-06-15 19:13 - 3020288 _____ (isMiner worker and updater for
windows of isMiner inc ) C:\Users\user\AppData\Local\Temp\isminer.exe
2017-06-15 19:12 - 2017-06-15 19:12 - 0697010 _____ (VideoBox
) C:\Users\user\AppData\Local\Temp\ms.exe
2017-06-04 06:33 - 2017-06-04 06:33 - 0524988 _____ (WeMonetize
) C:\Users\user\AppData\Local\Temp\QSSHD5T.exe
2017-06-16 19:08 - 2017-06-16 19:08 - 0098816 _____ ()
C:\Users\user\AppData\Local\Temp\sed.exe
2017-06-15 19:13 - 2017-06-15 19:15 - 13158206 _____ (
) C:\Users\user\AppData\Local\Temp\sg3.6.0.0.exe
2017-06-16 19:08 - 2017-06-16 19:08 - 0057344 _____ (Optimum X)
C:\Users\user\AppData\Local\Temp\shortcut.exe
2017-06-10 22:52 - 2017-06-10 22:52 - 2031585 _____ ()
C:\Users\user\AppData\Local\Temp\speedboostsetup.exe
2017-06-16 19:08 - 2017-06-16 19:08 - 0217088 _____ (SteelWerX)
C:\Users\user\AppData\Local\Temp\swxcacls.exe
2017-06-15 19:12 - 2017-06-15 19:12 - 0612264 _____ (iurtewdqwevbert
) C:\Users\user\AppData\Local\Temp\tables.exe
2017-06-15 19:13 - 2017-06-15 19:12 - 1199825 _____ ()
C:\Users\user\AppData\Local\Temp\unins000.exe
2017-06-15 19:13 - 2017-06-15 19:13 - 9123840 _____ ()
C:\Users\user\AppData\Local\Temp\wajam_install (1).exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-06-18 11:47
==================== End of FRST.txt ============================

FRST

Enviado por

Dados do documento

Descrição original:

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

FRST

Enviado por

Direitos autorais:

Formatos disponíveis

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-06-2017 01

Ran by user (administrator) on DESKTOP-5HHBKHR (24-06-2017 07:39:30)

==================== Processes (Whitelisted) =================

(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe

==================== Registry (Whitelisted) ====================

HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed

ProxyServer: [S-1-5-21-1305004467-2202425-649574984-1001] =>

==================== Services (Whitelisted) ====================

R2 AdaptiveSleepService; C:\Program Files\ATI

===================== Drivers (Whitelisted) ======================

S3 ADSPIDEREX; C:\Windows\system32\drivers\adspiderex.sys [55664 2015-12-28] (()

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-24 07:18 - 2017-06-24 07:18 - 00000000 ____D C:\Windows.old

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-06-24 07:39 - 2015-10-30 14:11 - 00000000 ____D C:\Windows\CbsTemp

==================== Files in the root of some directories =======

2017-05-18 21:42 - 2017-06-24 07:23 - 0130298 _____ ()

Files to move or delete:

Some files in TEMP:

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

LastRegBack: 2017-06-18 11:47

==================== End of FRST.txt ============================

Você também pode gostar