|
Poslao: 03 Jan 2016 10:56
|
|
|
Konkretnih problema nemam, odnosno, ja ih ne primjećujem, ali mi malwarebytes već drugi puta pronalazi neke malware.
Od zaštite koristim
Eset Smart Security
Malwarebytes Pro verziju sa aktiviranom zaštitom
MCShield i
CryptoPrevent
Internet je kablovski, zadovoljava moje potrebe.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
Ran by Qu (administrator) on QU (03-01-2016 10:40:02)
Running from C:\Users\Qu\Desktop
Loaded Profiles: Qu (Available Profiles: Qu)
Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe
(Singer's Creations) C:\Program Files (x86)\Weather Watcher Live\ww.exe
(Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch.exe
(Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch64.exe
() C:\Program Files (x86)\DFX\DFX.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TNOD UP] => C:\Program Files (x86)\TNod\TNODUP.exe [5592576 2015-12-20] (Tukero[X]Team)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Ad Muncher] => C:\Program Files (x86)\Ad Muncher\AdMunch.exe [560760 2015-09-26] (Murray Hurps Software Pty Ltd)
HKLM-x32\...\Run: [DFX] => C:\Program Files (x86)\DFX\DFX.exe [1328632 2015-12-25] ()
HKLM Group Policy restriction on software: *.ppt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: vssadmin.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.scr <====== ATTENTION
HKLM Group Policy restriction on software: syskey.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.js <====== ATTENTION
HKLM Group Policy restriction on software: lsassw86s.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.js <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.exe <====== ATTENTION
HKLM Group Policy restriction on software: ** <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.js <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: scsvserv.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.scr <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.bat <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.js <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.js <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: cipher.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.cmd <====== ATTENTION
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\Run: [WeatherWatcherLive] => C:\Program Files (x86)\Weather Watcher Live\ww.exe [2390640 2015-11-19] (Singer's Creations)
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\MountPoints2: {92599b8c-6453-11e5-9bc2-806e6f6e6963} - "K:\start.exe"
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
BootExecute: autocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.77.192.20
Tcpip\..\Interfaces\{bb4bd682-3c09-4160-8bf0-bc05bd81ad7d}: [DhcpNameServer] 77.77.192.20
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-09-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-14] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-14] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-25] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
BHO-x32: No Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-25] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
FireFox:
========
FF ProfilePath: C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default
FF Homepage: [Link mogu videti samo ulogovani korisnici]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-28] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-14] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-25] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
FF Plugin-x32: @verimatrix.com/ViewRightWeb -> C:\Program Files (x86)\Verimatrix\ViewRight Web\\npViewRight.dll [2015-04-06] (Verimatrix, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3196085421-3131423022-1353517232-1001: @verimatrix.com/ViewRightWeb -> C:\Program Files (x86)\Verimatrix\ViewRight Web\\npViewRight.dll [2015-04-06] (Verimatrix, Inc.)
FF Plugin HKU\S-1-5-21-3196085421-3131423022-1353517232-1001: SkypePlugin -> C:\Users\Qu\AppData\Local\SkypePlugin\7.12.0.55\npGatewayNpapi.dll [2015-12-08] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3196085421-3131423022-1353517232-1001: SkypePlugin64 -> C:\Users\Qu\AppData\Local\SkypePlugin\7.12.0.55\npGatewayNpapi-x64.dll [2015-12-08] (Skype Technologies S.A.)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default\extensions\adblockpopups@jessehakanen.net.xpi [2015-11-10]
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-12-09]
FF Extension: Adguard AdBlocker - C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default\Extensions\adguardadblocker@adguard.com.xpi [2015-12-22]
FF Extension: Adblock Plus - C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-10-29] [not signed]
FF HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Qu\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Qu\AppData\Roaming\IDM\idmmzcc5 [2016-01-03] [not signed]
FF HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
Chrome:
=======
CHR HomePage: Default -> [Link mogu videti samo ulogovani korisnici]
CHR StartupUrls: Default -> "hxxp://www.google.com/ncr"
CHR Profile: C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-02]
CHR Extension: (Adguard AdBlocker) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2015-12-22]
CHR Extension: (YouTube) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-02]
CHR Extension: (Adblock Plus) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-12-09]
CHR Extension: (Google Search) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02]
CHR Extension: (IDM Integration Module) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-12-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-02]
CHR Extension: (Gmail) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-02]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-29]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-29]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S4 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2015-09-26] ()
S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [697856 2015-09-09] (Microsoft Corporation) [File not signed]
S3 ehSched; C:\Windows\ehome\ehsched.exe [176128 2015-09-09] (Microsoft Corporation) [File not signed]
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2521080 2015-11-19] (ESET)
S4 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2015-09-14] ()
S4 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373152 2015-12-01] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [81408 2014-11-21] (Microsoft Corporation) [File not signed]
S4 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [112792 2015-09-14] ()
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [243448 2015-12-24] (RaMMicHaeL)
S4 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2015-09-14] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 adgnetworktdidrv; C:\Windows\System32\drivers\adgnetworktdidrv.sys [61432 2015-06-02] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-09-26] ()
S3 DFX11_1; C:\Windows\system32\drivers\dfx11_1x64.sys [28008 2012-12-13] (Windows (R) Win 7 DDK provider)
R3 DFX12; C:\Windows\system32\drivers\dfx12x64.sys [28344 2015-10-13] (Windows (R) Win 7 DDK provider)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [263528 2015-11-16] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-09-23] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-11-16] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-12-08] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-11-16] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-11-16] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-11-16] (ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-10-03] (Glarysoft Ltd)
R2 hmip; C:\WINDOWS\system32\Drivers\hmip64.sys [43920 2015-08-13] (Hide My IP)
R3 int0800; C:\Windows\System32\drivers\flashud.sys [51712 2009-09-09] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [109272 2015-10-05] (Malwarebytes)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-01-03] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185600 2015-10-08] (Intel Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-21] (Realtek )
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S4 nvlddmkm; \SystemRoot\system32\DRIVERS\nvlddmkm.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-01-03 10:40 - 2016-01-03 10:40 - 00044955 _____ C:\Users\Qu\Desktop\FRST.txt
2016-01-03 10:39 - 2016-01-03 10:40 - 00000000 ____D C:\FRST
2016-01-03 10:38 - 2016-01-03 10:38 - 02370560 _____ (Farbar) C:\Users\Qu\Desktop\FRST64.exe
2016-01-03 10:33 - 2016-01-03 10:33 - 00001426 _____ C:\Users\Qu\Desktop\sav.txt
2016-01-03 08:53 - 2016-01-03 08:53 - 12456051 _____ C:\Users\Qu\Desktop\Facebook.mp4
2016-01-02 21:38 - 2016-01-02 21:38 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2015-12-31 18:35 - 2015-12-31 18:35 - 00000000 ____D C:\WINDOWS\LastGood
2015-12-31 18:23 - 2015-12-31 18:24 - 00000000 ____D C:\Users\Qu\AppData\Roaming\DriverPack Notifier
2015-12-31 18:23 - 2015-12-31 18:23 - 00003502 _____ C:\WINDOWS\System32\Tasks\DriverPack Notifier
2015-12-31 18:23 - 2015-12-31 18:23 - 00000000 ____D C:\Program Files (x86)\DriverPack Notifier
2015-12-31 18:23 - 2015-12-31 18:23 - 00000000 ____D C:\Intel
2015-12-31 18:22 - 2015-12-31 18:23 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-12-31 18:22 - 2015-12-18 07:48 - 72203792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-12-31 18:22 - 2015-12-18 07:48 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 12986520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 10521552 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 05776680 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 05338936 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 05289944 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 04498889 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-12-31 18:22 - 2015-12-18 07:48 - 03299832 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03282024 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03271912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03195648 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03152591 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2015-12-31 18:22 - 2015-12-18 07:48 - 02893568 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-12-31 18:22 - 2015-12-18 07:48 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02693360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02437144 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02110592 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02030208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01928624 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01601944 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01435144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01421104 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01356504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01286160 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01211832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01186160 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01008360 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00965024 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00952984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00933640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00923744 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00888480 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00873464 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00716104 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00678184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00677672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00618184 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00596128 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00589080 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2015-12-31 18:22 - 2015-12-18 07:48 - 00574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00467168 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00448584 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00447720 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00445400 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00369304 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00362056 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00330560 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00310424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00258504 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00224264 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00221976 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00214840 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00209536 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00192984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00172576 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00158696 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00134200 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00122328 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00110992 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2015-12-31 18:22 - 2015-11-19 11:39 - 00935168 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2015-12-31 18:22 - 2015-11-19 11:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-12-31 18:22 - 2015-11-12 20:05 - 01467912 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys
2015-12-31 18:21 - 2015-12-01 23:29 - 35016288 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 34083104 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 29894272 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 15454976 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 13427688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 04482424 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 04324664 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 02145232 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 01816720 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 01814064 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 01665200 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00435096 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00433968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00381936 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00379792 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00310168 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00295024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00242160 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00222736 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00205360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00181328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00055248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 05685768 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 04608520 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 04123144 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 03970056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 01576968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 01167880 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00626696 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00439304 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00415752 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00390152 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00388624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00350224 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00318472 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00273416 _____ C:\WINDOWS\system32\igfxCPL.cpl
2015-12-31 18:21 - 2015-12-01 23:25 - 00266248 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00225288 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00206352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4331.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00193040 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00173584 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00111624 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00103952 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00103432 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00100880 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00099848 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00095240 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00083464 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00052744 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00029192 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00029192 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00027656 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00027656 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00022536 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00022536 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2015-12-31 18:21 - 2015-11-20 22:32 - 00041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00004730 _____ C:\WINDOWS\system32\iglhxs64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2015-12-31 18:20 - 2015-12-01 23:25 - 29101576 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 19861512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 11586056 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 08634888 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 05262864 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 01026464 _____ C:\WINDOWS\system32\igfxSDK.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00962464 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00958880 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00621472 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00535968 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00466344 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00402344 _____ C:\WINDOWS\system32\igfxTray.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00373152 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00354208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00300960 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00268712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00236456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00231848 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00231336 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00174504 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2015-12-31 18:20 - 2015-11-20 22:32 - 05797102 _____ C:\WINDOWS\system32\igdclbif.bin
2015-12-31 18:20 - 2015-11-20 22:32 - 00819449 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2015-12-30 16:33 - 2015-12-30 16:38 - 00012288 ____H C:\Users\Qu\Desktop\photothumb.db
2015-12-30 15:28 - 2015-12-30 20:26 - 00000107 _____ C:\Users\Qu\Desktop\UniCredit banka.txt
2015-12-29 23:38 - 2015-12-29 23:38 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Verimatrix
2015-12-29 23:38 - 2015-12-29 23:38 - 00000000 ____D C:\Program Files (x86)\Verimatrix
2015-12-29 17:50 - 2015-12-29 17:50 - 00000020 _____ C:\Users\Qu\Desktop\Temax.txt
2015-12-29 13:23 - 2015-12-29 13:18 - 00199152 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
2015-12-28 21:39 - 2015-12-28 21:39 - 00000398 _____ C:\Users\Qu\Desktop\Serial.txt
2015-12-28 19:17 - 2015-12-28 19:17 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Thunderbird
2015-12-28 19:17 - 2015-12-28 19:17 - 00000000 ____D C:\Users\Qu\AppData\Local\Thunderbird
2015-12-28 08:39 - 2015-12-28 08:39 - 00419040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-27 18:32 - 2015-12-27 18:32 - 00000017 _____ C:\Users\Qu\AppData\Local\resmon.resmoncfg
2015-12-27 17:43 - 2015-12-31 17:54 - 00000000 ____D C:\Users\Qu\AppData\Roaming\DRPSu
2015-12-25 21:01 - 2015-12-27 17:28 - 00000000 ____D C:\Program Files (x86)\DFX
2015-12-25 21:01 - 2015-12-25 21:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2015-12-25 20:41 - 2015-12-25 20:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-12-25 20:30 - 2015-12-25 20:30 - 00000000 ____D C:\Program Files\MP3 Remix
2015-12-25 16:18 - 2015-12-25 20:55 - 00000000 ____D C:\Program Files (x86)\Freemake
2015-12-25 15:09 - 2015-12-25 15:09 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-12-25 15:08 - 2015-12-25 15:08 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-25 15:08 - 2015-12-14 22:10 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2015-12-24 23:55 - 2015-12-28 18:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-24 17:31 - 2015-12-24 17:31 - 00001397 _____ C:\Users\Qu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo Burning Studio 16.lnk
2015-12-23 23:14 - 2015-12-24 18:47 - 00000000 ____D C:\Users\Qu\AppData\Local\SkypePlugin
2015-12-22 13:58 - 2015-12-22 14:01 - 00000000 ____D C:\ProgramData\Norton
2015-12-22 13:58 - 2015-12-22 13:58 - 00000000 ____D C:\ProgramData\NortonInstaller
2015-12-22 09:47 - 2015-12-22 09:47 - 00000000 ____D C:\WINDOWS\OCR
2015-12-19 20:37 - 2015-12-19 23:55 - 00000000 ____D C:\ProgramData\Mathematica
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\Documents\Wolfram Mathematica
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Mathematica
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\AppData\Local\Wolfram Research
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\AppData\Local\Mathematica
2015-12-19 18:22 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-19 18:22 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-19 18:22 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-19 18:22 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-19 18:22 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-19 09:57 - 2015-12-19 09:58 - 00000000 ____D C:\WINDOWS\Panther
2015-12-17 19:25 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-17 19:25 - 2015-12-07 05:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-17 19:25 - 2015-12-07 05:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-17 19:25 - 2015-12-07 05:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-17 19:25 - 2015-12-07 05:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-17 19:25 - 2015-12-07 05:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-17 19:25 - 2015-12-07 05:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-17 19:25 - 2015-12-07 05:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-17 19:25 - 2015-12-07 05:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-17 19:25 - 2015-12-07 05:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-17 19:25 - 2015-12-07 05:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-17 19:25 - 2015-12-07 05:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-17 19:25 - 2015-12-07 05:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-17 19:25 - 2015-12-07 05:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-17 19:25 - 2015-12-07 05:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-17 19:25 - 2015-12-07 05:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-17 19:25 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-17 19:25 - 2015-12-07 05:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-17 19:25 - 2015-12-07 05:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-17 19:25 - 2015-12-07 05:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-17 19:25 - 2015-12-07 05:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-17 19:25 - 2015-12-07 05:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-17 19:25 - 2015-12-07 05:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-17 19:25 - 2015-12-07 05:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-17 19:25 - 2015-12-07 05:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-17 19:25 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-17 19:25 - 2015-12-07 05:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-17 19:25 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-17 19:25 - 2015-12-07 05:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-17 19:25 - 2015-12-07 05:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-17 19:25 - 2015-12-07 05:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-17 19:25 - 2015-12-07 05:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-17 19:25 - 2015-12-07 04:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-17 19:25 - 2015-12-07 04:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-17 19:25 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-17 19:25 - 2015-12-07 04:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-17 19:25 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-17 19:25 - 2015-12-07 04:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-17 19:25 - 2015-12-07 04:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 04:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-17 19:25 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-17 19:25 - 2015-12-07 04:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-17 19:25 - 2015-12-07 04:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-17 19:25 - 2015-12-07 04:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-17 19:25 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 04:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-17 19:25 - 2015-12-07 04:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-17 19:25 - 2015-12-07 04:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-17 19:25 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-17 19:25 - 2015-12-07 04:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-17 19:25 - 2015-12-07 04:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-17 19:25 - 2015-12-07 04:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-17 19:25 - 2015-12-07 04:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-17 19:25 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-17 19:25 - 2015-12-07 04:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-17 19:25 - 2015-12-07 04:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-17 19:25 - 2015-12-07 04:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-17 19:25 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-17 19:25 - 2015-12-07 04:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-17 19:25 - 2015-12-07 04:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-17 19:25 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-17 19:25 - 2015-12-07 04:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-17 19:25 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-17 19:25 - 2015-12-07 04:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-17 19:25 - 2015-12-07 04:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-16 18:31 - 2016-01-03 09:26 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Skype
2015-12-16 18:31 - 2015-12-31 17:43 - 00000000 ____D C:\ProgramData\Skype
2015-12-16 18:31 - 2015-12-16 18:31 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-16 18:31 - 2015-12-16 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-16 17:59 - 2015-12-20 16:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-16 17:59 - 2015-12-20 16:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-16 17:59 - 2015-12-20 16:00 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-14 22:10 - 2015-12-14 22:10 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-12-14 22:10 - 2015-12-14 22:10 - 00000000 ____D C:\Program Files\Java
2015-12-12 19:49 - 2015-12-12 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2015-12-12 19:49 - 2015-12-12 19:49 - 00000000 ____D C:\Program Files (x86)\FinalWire
2015-12-12 17:13 - 2015-12-19 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder
2015-12-12 17:13 - 2015-12-19 17:12 - 00000000 ____D C:\Program Files (x86)\TNod
2015-12-12 17:04 - 2015-12-12 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-12-12 16:54 - 2015-12-23 17:24 - 00000000 ____D C:\Program Files\ESET
2015-12-12 16:54 - 2015-12-12 16:54 - 00000000 ____D C:\ProgramData\ESET
2015-12-12 08:59 - 2015-12-12 08:59 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Thinstall
2015-12-10 17:53 - 2015-12-10 17:53 - 00000000 ____D C:\Users\Qu\AppData\Roaming\java
2015-12-10 17:52 - 2015-12-11 07:02 - 00000000 ____D C:\Users\Qu\AppData\Roaming\.minecraft
2015-12-09 17:56 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-09 17:56 - 2015-11-24 13:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 17:56 - 2015-11-24 12:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 17:56 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 17:56 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-09 17:56 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-09 17:56 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-09 17:56 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-09 17:56 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 17:56 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 17:56 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-09 17:56 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 17:56 - 2015-11-24 09:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 17:56 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-09 17:56 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-09 17:56 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 17:56 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 17:56 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 17:56 - 2015-11-24 09:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 17:56 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 17:56 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 17:56 - 2015-11-24 08:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-09 17:56 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 17:56 - 2015-11-24 08:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 17:56 - 2015-11-24 08:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-09 17:56 - 2015-11-24 08:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 17:56 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-08 08:31 - 2015-12-08 08:31 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2015-12-07 17:18 - 2015-12-09 17:58 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2015-12-07 17:18 - 2015-12-07 17:18 - 00002709 _____ C:\Users\Qu\Desktop\Microsoft Office Word 2007.lnk
2015-12-07 17:18 - 2015-12-07 17:18 - 00002661 _____ C:\Users\Qu\Desktop\Microsoft Office PowerPoint 2007.lnk
2015-12-07 17:18 - 2015-12-07 17:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-12-07 17:17 - 2015-12-07 17:17 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-12-07 17:17 - 2015-12-07 17:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2015-12-07 17:16 - 2015-12-07 17:16 - 00000000 __RHD C:\MSOCache
2015-12-07 17:16 - 2015-12-07 17:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-01-03 10:39 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-03 10:38 - 2015-10-22 07:40 - 00000000 ____D C:\Users\Qu\AppData\Roaming\vlc
2016-01-03 10:37 - 2015-11-13 17:06 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-03 10:37 - 2015-11-11 17:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-03 10:37 - 2015-09-26 15:14 - 00000000 ____D C:\ProgramData\MCShield
2016-01-03 10:36 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-03 10:36 - 2015-09-26 16:25 - 00000000 ____D C:\Users\Qu\AppData\Roaming\WeatherWatcherLive
2016-01-03 10:36 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\AppData\Roaming\DMCache
2016-01-03 09:45 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-03 09:45 - 2015-09-26 14:46 - 00879220 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-03 09:26 - 2015-09-26 15:26 - 00000000 ____D C:\Users\Qu\AppData\Roaming\uTorrent
2016-01-03 08:53 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\Downloads\Video
2016-01-03 08:49 - 2015-09-26 15:35 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{99648750-4626-49AE-A8DE-D7DED599844D}
2016-01-02 21:38 - 2015-09-26 15:57 - 00000000 ____D C:\ProgramData\HitmanPro
2016-01-01 09:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-01 02:07 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\Downloads\Compressed
2015-12-31 18:45 - 2015-11-11 17:14 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-31 18:45 - 2015-09-26 14:47 - 00000000 __SHD C:\Users\Qu\IntelGraphicsProfiles
2015-12-31 18:25 - 2015-09-26 15:47 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-31 18:23 - 2015-11-11 17:14 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-31 18:23 - 2015-11-11 17:14 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-31 18:22 - 2015-11-11 17:14 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-31 17:43 - 2015-09-26 15:13 - 00000000 ____D C:\ProgramData\Unchecky
2015-12-31 08:19 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-30 21:13 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-30 20:23 - 2015-09-26 16:08 - 00000000 ___RD C:\Users\Qu\Desktop\ZAŠTITA
2015-12-30 19:50 - 2015-10-21 22:24 - 00000000 ____D C:\Users\Qu\AppData\LocalLow\Temp
2015-12-30 18:01 - 2015-09-26 16:08 - 00000000 ___RD C:\Users\Qu\Desktop\REGISTAR
2015-12-30 16:35 - 2015-09-30 20:30 - 00000000 ____D C:\Users\Qu\AppData\Roaming\PhotoScape
2015-12-29 23:28 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-29 20:51 - 2015-09-26 15:32 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2015-12-29 08:34 - 2015-09-26 15:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-28 18:03 - 2015-11-03 09:03 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-27 22:10 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-27 22:10 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-27 18:41 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\AppData\Roaming\IDM
2015-12-27 18:33 - 2015-10-11 20:48 - 00001400 __RSH C:\ProgramData\ntuser.pol
2015-12-27 17:28 - 2015-10-03 23:11 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2015-12-25 21:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-25 20:41 - 2015-09-26 15:36 - 00000000 ____D C:\Program Files\VideoLAN
2015-12-25 20:40 - 2015-10-06 16:48 - 00000000 ____D C:\Program Files (x86)\GRETECH
2015-12-25 15:09 - 2015-11-23 20:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-25 15:09 - 2015-09-26 15:43 - 00000000 ____D C:\ProgramData\Oracle
2015-12-25 10:20 - 2015-09-26 14:44 - 00000000 ____D C:\Users\Qu\AppData\Local\VirtualStore
2015-12-25 07:22 - 2015-09-26 14:44 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Adobe
2015-12-24 08:04 - 2015-09-26 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-12-24 08:04 - 2015-09-26 15:33 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2015-12-22 14:06 - 2015-11-11 16:11 - 00000267 _____ C:\WINDOWS\SysWOW64\Drivers\vwifikerneldrv.sys
2015-12-22 14:06 - 2015-11-11 16:11 - 00000267 _____ C:\ProgramData\fontcacheev1.dat
2015-12-21 23:35 - 2015-11-25 17:34 - 00002224 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-12-21 23:35 - 2015-10-03 23:11 - 00002580 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2015-12-21 23:35 - 2015-10-03 23:11 - 00002286 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2015-12-21 20:04 - 2015-11-25 17:34 - 00000000 ____D C:\Program Files\CCleaner
2015-12-21 18:17 - 2015-09-26 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-12-21 17:48 - 2015-10-03 23:11 - 00001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-12-21 06:53 - 2015-10-27 17:01 - 00017716 _____ C:\WINDOWS\system32\results.xml
2015-12-20 22:27 - 2015-10-27 16:59 - 00000728 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2015-12-20 22:24 - 2015-10-27 16:58 - 00000000 ____D C:\ProgramData\IntelDLM
2015-12-20 20:13 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-20 16:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-19 23:55 - 2015-10-29 10:20 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-19 23:54 - 2015-10-29 10:20 - 00000000 ____D C:\ProgramData\Adobe
2015-12-19 23:54 - 2015-10-04 15:17 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-19 23:52 - 2015-10-04 15:18 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-12-18 11:00 - 2015-09-26 15:34 - 00755200 _____ C:\WINDOWS\system32\xvidcore.dll
2015-12-18 11:00 - 2015-09-26 15:34 - 00674816 _____ C:\WINDOWS\SysWOW64\xvidcore.dll
2015-12-18 11:00 - 2015-09-26 15:34 - 00309248 _____ C:\WINDOWS\system32\xvidvfw.dll
2015-12-18 11:00 - 2015-09-26 15:34 - 00282112 _____ C:\WINDOWS\SysWOW64\xvidvfw.dll
2015-12-18 09:25 - 2015-11-11 17:14 - 00000000 ____D C:\Users\Qu
2015-12-18 07:48 - 2015-09-26 14:43 - 04712704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-12-18 07:48 - 2015-09-26 14:43 - 03053904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-12-18 07:48 - 2015-09-26 14:43 - 00023696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-12-17 21:15 - 2015-10-19 17:48 - 00000000 ____D C:\Users\Qu\AppData\Local\Adobe
2015-12-17 20:35 - 2015-11-02 06:58 - 00000908 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-17 20:35 - 2015-11-02 06:58 - 00000904 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-17 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-17 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-17 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-17 18:44 - 2015-11-02 06:58 - 00003480 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-17 18:44 - 2015-11-02 06:58 - 00003256 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-17 18:30 - 2015-09-26 15:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-17 16:56 - 2015-09-26 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2015-12-17 16:56 - 2015-09-26 15:22 - 00000000 ____D C:\ProgramData\Ashampoo
2015-12-15 09:38 - 2015-09-26 15:57 - 00000000 ____D C:\Program Files\HitmanPro
2015-12-14 00:07 - 2015-11-02 19:06 - 00000000 ____D C:\Users\Qu\.fontconfig
2015-12-12 15:58 - 2015-11-27 19:51 - 00001665 _____ C:\Users\Qu\Desktop\ZAVRŠENI TORENTI.lnk
2015-12-10 21:18 - 2015-11-30 13:44 - 00000000 ____D C:\WINDOWS\CryptoGuard
2015-12-10 21:18 - 2015-10-03 19:52 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-12-09 20:00 - 2015-09-30 16:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-12-09 18:14 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-09 18:09 - 2015-09-26 15:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 18:05 - 2015-07-10 12:04 - 00000167 _____ C:\WINDOWS\win.ini
2015-12-09 18:02 - 2015-09-26 14:55 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-09 17:59 - 2015-09-26 14:55 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-08 17:16 - 2015-10-07 05:16 - 00142976 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2015-12-08 08:29 - 2015-10-14 16:15 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Ashampoo
2015-12-08 08:29 - 2015-09-26 15:22 - 00000000 ____D C:\Users\Qu\AppData\Local\ashampoo
2015-12-07 17:18 - 2015-11-12 02:09 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-07 17:17 - 2015-10-30 10:05 - 00000000 ____D C:\WINDOWS\ShellNew
2015-12-07 17:17 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-07 17:16 - 2015-09-30 16:50 - 00000000 ____D C:\Program Files\Microsoft Office
2015-12-07 16:58 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-07 16:57 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-06 16:58 - 2015-11-13 16:52 - 00002810 _____ C:\WINDOWS\System32\Tasks\{221B58B8-721C-4963-B87D-5E183009B5D9}
2015-12-04 11:53 - 2015-10-29 10:22 - 00000000 ____D C:\Users\Qu\AppData\LocalLow\Adobe
==================== Files in the root of some directories =======
2015-03-26 12:48 - 2015-03-26 12:48 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2014-08-21 13:59 - 2014-08-21 13:59 - 12662488 _____ (Insoft LLC) C:\Users\Qu\AppData\Roaming\setup.exe
2015-10-21 16:21 - 2015-10-21 16:21 - 0000001 _____ () C:\Users\Qu\AppData\Local\llftool.4.40.agreement
2015-10-21 16:21 - 2015-10-21 16:21 - 0000019 _____ () C:\Users\Qu\AppData\Local\llftool.license
2015-12-27 18:32 - 2015-12-27 18:32 - 0000017 _____ () C:\Users\Qu\AppData\Local\resmon.resmoncfg
2015-11-11 17:14 - 2015-11-11 17:14 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-11-11 16:11 - 2015-12-22 14:06 - 0000267 _____ () C:\ProgramData\fontcacheev1.dat
Files to move or delete:
====================
C:\ProgramData\fontcacheev1.dat
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-12-31 18:26
==================== End of FRST.txt ============================
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 11:13
|
offline
- TwinHeadedEagle
- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Pozdrav,
Da li MalwareBytes iznova nalazi ovo isto? Imas li mozda i prethodni izvestaj/e?
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 13:06
|
|
|
Napisano: 03 Jan 2016 11:18
Evo log od 30.12. prošle godine. Nakon skeniranja traži restart. Par dana nije ništa detektovao ali se onda opet pojavi.
[Link mogu videti samo ulogovani korisnici]
Dopuna: 03 Jan 2016 11:22
Ali 31. 12. nije ništa pronašao...
[Link mogu videti samo ulogovani korisnici]
Dopuna: 03 Jan 2016 13:06
Deinstalirao sam jedan piratski aktivator jer sam pomislio da mi on pravi taj problem ali nakon ponovnog skeniranja opet isti slučaj.
[Link mogu videti samo ulogovani korisnici]
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 13:49
|
offline
- TwinHeadedEagle
- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Odakle ti sad Corporate verzija?
Malwarebytes Anti-Malware (Corporate) 1.80.1.1011
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 14:19
|
|
|
Jer je ona verzija bola aktivirana piratski i pomislio sam da mi taj aktivator pravi problem pa sam je deinstalirao. Instalirao sam onda ovu verziju da pokušam otkloniti sumnju. Međutim opet je isto. Sada sam deinstalirao i tnod za eset i pokrenuo sam opet scan sa malwarebytes.
I opet je isto. Sada na računaru nemam nikakvog piratskog sadržaja.
[Link mogu videti samo ulogovani korisnici]
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 14:42
|
offline
- TwinHeadedEagle
- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Pokreni ovaj alat i pocisti MalwareBytes kompletno:
[Link mogu videti samo ulogovani korisnici]
Onda lepo k'o covek skini besplatnu verziju i skeniraj.
|
|
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 17:55
|
offline
- TwinHeadedEagle
- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Ponovo pokreni FRST, cekiraj Addition.txt, klikni na Scan i dostavi oba izvestaja.
|
|
|
|
|
|
|
Poslao: 03 Jan 2016 19:14
|
|
|
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-12-2015
Ran by Qu (administrator) on QU (03-01-2016 19:12:57)
Running from C:\Users\Qu\Desktop
Loaded Profiles: Qu (Available Profiles: Qu)
Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Singer's Creations) C:\Program Files (x86)\Weather Watcher Live\ww.exe
(Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch.exe
(Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch64.exe
() C:\Program Files (x86)\DFX\DFX.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe
() C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Ad Muncher] => C:\Program Files (x86)\Ad Muncher\AdMunch.exe [560760 2015-09-26] (Murray Hurps Software Pty Ltd)
HKLM-x32\...\Run: [DFX] => C:\Program Files (x86)\DFX\DFX.exe [1328632 2016-01-03] ()
HKLM Group Policy restriction on software: *.ppt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: vssadmin.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.scr <====== ATTENTION
HKLM Group Policy restriction on software: syskey.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.js <====== ATTENTION
HKLM Group Policy restriction on software: lsassw86s.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.js <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.exe <====== ATTENTION
HKLM Group Policy restriction on software: ** <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.js <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: scsvserv.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.scr <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.bat <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.js <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.js <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: cipher.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.cmd <====== ATTENTION
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\Run: [WeatherWatcherLive] => C:\Program Files (x86)\Weather Watcher Live\ww.exe [2390640 2015-11-19] (Singer's Creations)
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\MountPoints2: {92599b8c-6453-11e5-9bc2-806e6f6e6963} - "K:\start.exe"
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
BootExecute: autocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 77.77.192.20 94.140.66.194
Tcpip\..\Interfaces\{bb4bd682-3c09-4160-8bf0-bc05bd81ad7d}: [DhcpNameServer] 77.77.192.20 94.140.66.194
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-09-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-14] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-14] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-25] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
BHO-x32: No Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-25] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2015-06-29] (Adobe Systems Incorporated)
FireFox:
========
FF ProfilePath: C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default
FF Homepage: [Link mogu videti samo ulogovani korisnici]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-28] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-14] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-28] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-25] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-15] (Google Inc.)
FF Plugin-x32: @verimatrix.com/ViewRightWeb -> C:\Program Files (x86)\Verimatrix\ViewRight Web\\npViewRight.dll [2015-04-06] (Verimatrix, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3196085421-3131423022-1353517232-1001: @verimatrix.com/ViewRightWeb -> C:\Program Files (x86)\Verimatrix\ViewRight Web\\npViewRight.dll [2015-04-06] (Verimatrix, Inc.)
FF Plugin HKU\S-1-5-21-3196085421-3131423022-1353517232-1001: SkypePlugin -> C:\Users\Qu\AppData\Local\SkypePlugin\7.12.0.55\npGatewayNpapi.dll [2015-12-08] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3196085421-3131423022-1353517232-1001: SkypePlugin64 -> C:\Users\Qu\AppData\Local\SkypePlugin\7.12.0.55\npGatewayNpapi-x64.dll [2015-12-08] (Skype Technologies S.A.)
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default\extensions\adblockpopups@jessehakanen.net.xpi [2015-11-10]
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-12-09]
FF Extension: Adguard AdBlocker - C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default\Extensions\adguardadblocker@adguard.com.xpi [2015-12-22]
FF Extension: Adblock Plus - C:\Users\Qu\AppData\Roaming\Mozilla\Firefox\Profiles\4gtp7psp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-10-29] [not signed]
FF HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Qu\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Qu\AppData\Roaming\IDM\idmmzcc5 [2016-01-03] [not signed]
FF HKU\S-1-5-21-3196085421-3131423022-1353517232-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
Chrome:
=======
CHR HomePage: Default -> [Link mogu videti samo ulogovani korisnici]
CHR StartupUrls: Default -> "hxxp://www.google.com/ncr"
CHR Profile: C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-02]
CHR Extension: (Adguard AdBlocker) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2015-12-22]
CHR Extension: (YouTube) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-02]
CHR Extension: (Adblock Plus) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-12-09]
CHR Extension: (Google Search) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-02]
CHR Extension: (IDM Integration Module) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-12-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-02]
CHR Extension: (Gmail) - C:\Users\Qu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-02]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-29]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-29]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S4 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2015-09-26] ()
S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [697856 2015-09-09] (Microsoft Corporation) [File not signed]
S3 ehSched; C:\Windows\ehome\ehsched.exe [176128 2015-09-09] (Microsoft Corporation) [File not signed]
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2521080 2015-11-19] (ESET)
S4 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2015-09-14] ()
S4 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373152 2015-12-01] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [81408 2014-11-21] (Microsoft Corporation) [File not signed]
S4 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [112792 2015-09-14] ()
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [243448 2015-12-24] (RaMMicHaeL)
S4 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2015-09-14] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 adgnetworktdidrv; C:\Windows\System32\drivers\adgnetworktdidrv.sys [61432 2015-06-02] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-09-26] ()
S3 DFX11_1; C:\Windows\system32\drivers\dfx11_1x64.sys [28008 2012-12-13] (Windows (R) Win 7 DDK provider)
R3 DFX12; C:\Windows\system32\drivers\dfx12x64.sys [28344 2015-10-13] (Windows (R) Win 7 DDK provider)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [263528 2015-11-16] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-09-23] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-11-16] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-12-08] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-11-16] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-11-16] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-11-16] (ESET)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-10-03] (Glarysoft Ltd)
R2 hmip; C:\WINDOWS\system32\Drivers\hmip64.sys [43920 2015-08-13] (Hide My IP)
R3 int0800; C:\Windows\System32\drivers\flashud.sys [51712 2009-09-09] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185600 2015-10-08] (Intel Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [888064 2015-10-21] (Realtek )
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S4 nvlddmkm; \SystemRoot\system32\DRIVERS\nvlddmkm.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-01-03 19:12 - 2016-01-03 19:13 - 00044167 _____ C:\Users\Qu\Desktop\FRST.txt
2016-01-03 17:12 - 2016-01-03 17:15 - 00000000 ____D C:\Program Files (x86)\DFX
2016-01-03 17:12 - 2016-01-03 17:12 - 00001686 _____ C:\Users\Public\Desktop\DFX.lnk
2016-01-03 17:12 - 2016-01-03 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DFX Audio Enhancer
2016-01-03 14:50 - 2016-01-03 14:51 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-03 14:50 - 2016-01-03 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-01-03 14:50 - 2016-01-03 14:50 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-03 14:50 - 2016-01-03 14:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-01-03 14:50 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-03 14:50 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-03 14:50 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-03 13:06 - 2016-01-03 13:06 - 00419040 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-03 12:05 - 2016-01-03 12:05 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Qu\Desktop\mbam-clean-2.1.1.1001.exe
2016-01-03 11:02 - 2016-01-03 11:02 - 00000000 ____D C:\Users\Qu\Desktop\SSD Tweaker Pro 3.4.0
2016-01-03 10:39 - 2016-01-03 19:12 - 00000000 ____D C:\FRST
2016-01-03 10:38 - 2016-01-03 10:38 - 02370560 _____ (Farbar) C:\Users\Qu\Desktop\FRST64.exe
2016-01-02 21:38 - 2016-01-02 21:38 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2015-12-31 18:35 - 2015-12-31 18:35 - 00000000 ____D C:\WINDOWS\LastGood
2015-12-31 18:23 - 2015-12-31 18:24 - 00000000 ____D C:\Users\Qu\AppData\Roaming\DriverPack Notifier
2015-12-31 18:22 - 2015-12-31 18:23 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-12-31 18:22 - 2015-12-18 07:48 - 72203792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-12-31 18:22 - 2015-12-18 07:48 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 12986520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 10521552 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 07172920 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 05776680 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 05338936 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 05289944 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 04498889 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-12-31 18:22 - 2015-12-18 07:48 - 03299832 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03282024 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03271912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03195648 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 03152591 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2015-12-31 18:22 - 2015-12-18 07:48 - 02893568 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-12-31 18:22 - 2015-12-18 07:48 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02693360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02437144 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02110592 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02050184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 02030208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01928624 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01601944 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01435144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01421104 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01356504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01286160 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01211832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01186160 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01008360 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00965024 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00952984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00933640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00923744 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00888480 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00873464 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00716104 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00678184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00677672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00618184 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00596128 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00589080 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2015-12-31 18:22 - 2015-12-18 07:48 - 00574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00467168 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00448584 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00447720 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00445400 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00381408 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00369304 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00362056 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00330560 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00310424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00258504 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00253872 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00224264 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00221976 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00214840 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00209536 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00192984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00172576 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00158696 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00134200 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00122328 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00110992 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2015-12-31 18:22 - 2015-12-18 07:48 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2015-12-31 18:22 - 2015-11-19 11:39 - 00935168 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2015-12-31 18:22 - 2015-11-19 11:39 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-12-31 18:22 - 2015-11-12 20:05 - 01467912 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys
2015-12-31 18:21 - 2015-12-01 23:29 - 35016288 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 34083104 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 29894272 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 15454976 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 13427688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 04482424 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 04324664 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 02145232 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 01816720 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 01814064 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 01665200 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00435096 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00433968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00381936 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00379792 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00310168 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00295024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00242160 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00222736 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00205360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00181328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll
2015-12-31 18:21 - 2015-12-01 23:29 - 00055248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 05685768 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 04608520 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 04123144 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 03970056 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 01576968 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 01167880 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00626696 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00439304 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00415752 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00390152 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00388624 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00350224 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00318472 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00273416 _____ C:\WINDOWS\system32\igfxCPL.cpl
2015-12-31 18:21 - 2015-12-01 23:25 - 00266248 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00225288 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00206352 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4331.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00193040 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00173584 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00111624 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00103952 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00103432 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00100880 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00099848 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00095240 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00083464 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00052744 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00029192 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00029192 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00027656 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00027656 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00022536 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll
2015-12-31 18:21 - 2015-12-01 23:25 - 00022536 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll
2015-12-31 18:21 - 2015-11-20 22:32 - 00041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00040343 _____ C:\WINDOWS\system32\iglhxo64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00040316 _____ C:\WINDOWS\system32\iglhxc64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00039658 _____ C:\WINDOWS\system32\iglhxg64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00004730 _____ C:\WINDOWS\system32\iglhxs64.vp
2015-12-31 18:21 - 2015-11-20 22:32 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp
2015-12-31 18:20 - 2015-12-01 23:25 - 29101576 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 19861512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 11586056 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 08634888 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 05262864 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll
2015-12-31 18:20 - 2015-12-01 23:25 - 01026464 _____ C:\WINDOWS\system32\igfxSDK.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00962464 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00958880 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00621472 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00535968 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00466344 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00402344 _____ C:\WINDOWS\system32\igfxTray.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00373152 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00354208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00300960 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00268712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00236456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00231848 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00231336 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe
2015-12-31 18:20 - 2015-12-01 23:25 - 00174504 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2015-12-31 18:20 - 2015-11-20 22:32 - 05797102 _____ C:\WINDOWS\system32\igdclbif.bin
2015-12-31 18:20 - 2015-11-20 22:32 - 00819449 _____ C:\WINDOWS\system32\DisplayAudiox64.cab
2015-12-30 16:33 - 2016-01-03 11:03 - 00016384 ____H C:\Users\Qu\Desktop\photothumb.db
2015-12-30 15:28 - 2015-12-30 20:26 - 00000107 _____ C:\Users\Qu\Desktop\UniCredit banka.txt
2015-12-29 23:38 - 2015-12-29 23:38 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Verimatrix
2015-12-29 23:38 - 2015-12-29 23:38 - 00000000 ____D C:\Program Files (x86)\Verimatrix
2015-12-29 13:23 - 2015-12-29 13:18 - 00199152 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
2015-12-28 21:39 - 2015-12-28 21:39 - 00000398 _____ C:\Users\Qu\Desktop\Serial.txt
2015-12-28 19:17 - 2015-12-28 19:17 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Thunderbird
2015-12-28 19:17 - 2015-12-28 19:17 - 00000000 ____D C:\Users\Qu\AppData\Local\Thunderbird
2015-12-27 18:32 - 2015-12-27 18:32 - 00000017 _____ C:\Users\Qu\AppData\Local\resmon.resmoncfg
2015-12-27 17:43 - 2015-12-31 17:54 - 00000000 ____D C:\Users\Qu\AppData\Roaming\DRPSu
2015-12-25 20:41 - 2015-12-25 20:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-12-25 20:30 - 2015-12-25 20:30 - 00000000 ____D C:\Program Files\MP3 Remix
2015-12-25 16:18 - 2015-12-25 20:55 - 00000000 ____D C:\Program Files (x86)\Freemake
2015-12-25 15:09 - 2015-12-25 15:09 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-12-25 15:08 - 2015-12-25 15:08 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-25 15:08 - 2015-12-14 22:10 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2015-12-24 23:55 - 2016-01-03 12:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-24 17:31 - 2015-12-24 17:31 - 00001397 _____ C:\Users\Qu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo Burning Studio 16.lnk
2015-12-23 23:14 - 2015-12-24 18:47 - 00000000 ____D C:\Users\Qu\AppData\Local\SkypePlugin
2015-12-22 13:58 - 2015-12-22 14:01 - 00000000 ____D C:\ProgramData\Norton
2015-12-22 13:58 - 2015-12-22 13:58 - 00000000 ____D C:\ProgramData\NortonInstaller
2015-12-22 09:47 - 2015-12-22 09:47 - 00000000 ____D C:\WINDOWS\OCR
2015-12-19 20:37 - 2015-12-19 23:55 - 00000000 ____D C:\ProgramData\Mathematica
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\Documents\Wolfram Mathematica
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Mathematica
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\AppData\Local\Wolfram Research
2015-12-19 20:37 - 2015-12-19 20:37 - 00000000 ____D C:\Users\Qu\AppData\Local\Mathematica
2015-12-19 18:22 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-19 18:22 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-19 18:22 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-19 18:22 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-19 18:22 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-19 09:57 - 2015-12-19 09:58 - 00000000 ____D C:\WINDOWS\Panther
2015-12-17 19:25 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-17 19:25 - 2015-12-07 05:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-17 19:25 - 2015-12-07 05:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-17 19:25 - 2015-12-07 05:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-17 19:25 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-17 19:25 - 2015-12-07 05:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-17 19:25 - 2015-12-07 05:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-17 19:25 - 2015-12-07 05:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-17 19:25 - 2015-12-07 05:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-17 19:25 - 2015-12-07 05:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-17 19:25 - 2015-12-07 05:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-17 19:25 - 2015-12-07 05:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-17 19:25 - 2015-12-07 05:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-17 19:25 - 2015-12-07 05:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-17 19:25 - 2015-12-07 05:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-17 19:25 - 2015-12-07 05:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-17 19:25 - 2015-12-07 05:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-17 19:25 - 2015-12-07 05:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-17 19:25 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-17 19:25 - 2015-12-07 05:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-17 19:25 - 2015-12-07 05:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-17 19:25 - 2015-12-07 05:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-17 19:25 - 2015-12-07 05:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-17 19:25 - 2015-12-07 05:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-17 19:25 - 2015-12-07 05:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-17 19:25 - 2015-12-07 05:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-17 19:25 - 2015-12-07 05:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-17 19:25 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-17 19:25 - 2015-12-07 05:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-17 19:25 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-17 19:25 - 2015-12-07 05:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-17 19:25 - 2015-12-07 05:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-17 19:25 - 2015-12-07 05:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-17 19:25 - 2015-12-07 05:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-17 19:25 - 2015-12-07 04:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-17 19:25 - 2015-12-07 04:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-17 19:25 - 2015-12-07 04:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-17 19:25 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-17 19:25 - 2015-12-07 04:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-17 19:25 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-17 19:25 - 2015-12-07 04:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-17 19:25 - 2015-12-07 04:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 04:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-17 19:25 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-17 19:25 - 2015-12-07 04:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-17 19:25 - 2015-12-07 04:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-17 19:25 - 2015-12-07 04:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-17 19:25 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-17 19:25 - 2015-12-07 04:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-17 19:25 - 2015-12-07 04:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-17 19:25 - 2015-12-07 04:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-17 19:25 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-17 19:25 - 2015-12-07 04:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-17 19:25 - 2015-12-07 04:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-17 19:25 - 2015-12-07 04:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-17 19:25 - 2015-12-07 04:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-17 19:25 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-17 19:25 - 2015-12-07 04:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-17 19:25 - 2015-12-07 04:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-17 19:25 - 2015-12-07 04:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-17 19:25 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-17 19:25 - 2015-12-07 04:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-17 19:25 - 2015-12-07 04:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-17 19:25 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-17 19:25 - 2015-12-07 04:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-17 19:25 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-17 19:25 - 2015-12-07 04:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-17 19:25 - 2015-12-07 04:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-16 18:31 - 2016-01-03 09:26 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Skype
2015-12-16 18:31 - 2015-12-31 17:43 - 00000000 ____D C:\ProgramData\Skype
2015-12-16 18:31 - 2015-12-16 18:31 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-16 18:31 - 2015-12-16 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-16 17:59 - 2015-12-20 16:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-16 17:59 - 2015-12-20 16:00 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-16 17:59 - 2015-12-20 16:00 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-14 22:10 - 2015-12-14 22:10 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-12-14 22:10 - 2015-12-14 22:10 - 00000000 ____D C:\Program Files\Java
2015-12-12 19:49 - 2015-12-12 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2015-12-12 19:49 - 2015-12-12 19:49 - 00000000 ____D C:\Program Files (x86)\FinalWire
2015-12-12 17:04 - 2015-12-12 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-12-12 16:54 - 2015-12-23 17:24 - 00000000 ____D C:\Program Files\ESET
2015-12-12 16:54 - 2015-12-12 16:54 - 00000000 ____D C:\ProgramData\ESET
2015-12-12 08:59 - 2015-12-12 08:59 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Thinstall
2015-12-10 17:53 - 2015-12-10 17:53 - 00000000 ____D C:\Users\Qu\AppData\Roaming\java
2015-12-10 17:52 - 2015-12-11 07:02 - 00000000 ____D C:\Users\Qu\AppData\Roaming\.minecraft
2015-12-09 17:56 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-09 17:56 - 2015-11-24 13:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 17:56 - 2015-11-24 12:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 17:56 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 17:56 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-09 17:56 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-09 17:56 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-09 17:56 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-09 17:56 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 17:56 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 17:56 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-09 17:56 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 17:56 - 2015-11-24 09:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 17:56 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-09 17:56 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-09 17:56 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 17:56 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 17:56 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 17:56 - 2015-11-24 09:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 17:56 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 17:56 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 17:56 - 2015-11-24 08:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-09 17:56 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 17:56 - 2015-11-24 08:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 17:56 - 2015-11-24 08:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-09 17:56 - 2015-11-24 08:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 17:56 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-08 08:31 - 2015-12-08 08:31 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2015-12-07 17:18 - 2015-12-09 17:58 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2015-12-07 17:18 - 2015-12-07 17:18 - 00002709 _____ C:\Users\Qu\Desktop\Microsoft Office Word 2007.lnk
2015-12-07 17:18 - 2015-12-07 17:18 - 00002661 _____ C:\Users\Qu\Desktop\Microsoft Office PowerPoint 2007.lnk
2015-12-07 17:18 - 2015-12-07 17:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-12-07 17:17 - 2015-12-07 17:17 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-12-07 17:17 - 2015-12-07 17:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2015-12-07 17:16 - 2015-12-07 17:16 - 00000000 __RHD C:\MSOCache
2015-12-07 17:16 - 2015-12-07 17:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-01-03 19:12 - 2015-09-26 15:14 - 00000000 ____D C:\ProgramData\MCShield
2016-01-03 17:48 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-03 17:48 - 2015-09-26 14:46 - 00879220 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-03 17:43 - 2015-11-11 17:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-03 17:43 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-03 17:39 - 2015-10-22 07:40 - 00000000 ____D C:\Users\Qu\AppData\Roaming\vlc
2016-01-03 17:35 - 2015-09-26 16:25 - 00000000 ____D C:\Users\Qu\AppData\Roaming\WeatherWatcherLive
2016-01-03 16:42 - 2015-09-26 16:08 - 00000000 ___RD C:\Users\Qu\Desktop\ZAŠTITA
2016-01-03 15:05 - 2015-09-26 15:35 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{99648750-4626-49AE-A8DE-D7DED599844D}
2016-01-03 14:53 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-03 12:56 - 2015-10-03 23:11 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-01-03 12:54 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\AppData\Roaming\DMCache
2016-01-03 12:54 - 2015-09-26 15:32 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-01-03 12:51 - 2015-09-30 20:30 - 00000000 ____D C:\Users\Qu\AppData\Roaming\PhotoScape
2016-01-03 12:51 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\AppData\Roaming\IDM
2016-01-03 12:51 - 2015-09-26 15:26 - 00000000 ____D C:\Users\Qu\AppData\Roaming\uTorrent
2016-01-03 08:53 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\Downloads\Video
2016-01-02 21:38 - 2015-09-26 15:57 - 00000000 ____D C:\ProgramData\HitmanPro
2016-01-01 09:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-01 02:07 - 2015-09-26 15:32 - 00000000 ____D C:\Users\Qu\Downloads\Compressed
2015-12-31 18:45 - 2015-11-11 17:14 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-12-31 18:45 - 2015-09-26 14:47 - 00000000 __SHD C:\Users\Qu\IntelGraphicsProfiles
2015-12-31 18:25 - 2015-09-26 15:47 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-31 18:23 - 2015-11-11 17:14 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2015-12-31 18:23 - 2015-11-11 17:14 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-31 18:22 - 2015-11-11 17:14 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-31 17:43 - 2015-09-26 15:13 - 00000000 ____D C:\ProgramData\Unchecky
2015-12-31 08:19 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-30 21:13 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-30 19:50 - 2015-10-21 22:24 - 00000000 ____D C:\Users\Qu\AppData\LocalLow\Temp
2015-12-30 18:01 - 2015-09-26 16:08 - 00000000 ___RD C:\Users\Qu\Desktop\REGISTAR
2015-12-29 23:28 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-29 08:34 - 2015-09-26 15:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-28 18:03 - 2015-11-03 09:03 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-27 22:10 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-27 22:10 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-27 18:33 - 2015-10-11 20:48 - 00001400 __RSH C:\ProgramData\ntuser.pol
2015-12-25 21:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-25 20:41 - 2015-09-26 15:36 - 00000000 ____D C:\Program Files\VideoLAN
2015-12-25 20:40 - 2015-10-06 16:48 - 00000000 ____D C:\Program Files (x86)\GRETECH
2015-12-25 15:09 - 2015-11-23 20:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-25 15:09 - 2015-09-26 15:43 - 00000000 ____D C:\ProgramData\Oracle
2015-12-25 10:20 - 2015-09-26 14:44 - 00000000 ____D C:\Users\Qu\AppData\Local\VirtualStore
2015-12-25 07:22 - 2015-09-26 14:44 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Adobe
2015-12-24 08:04 - 2015-09-26 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-12-24 08:04 - 2015-09-26 15:33 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2015-12-22 14:06 - 2015-11-11 16:11 - 00000267 _____ C:\WINDOWS\SysWOW64\Drivers\vwifikerneldrv.sys
2015-12-22 14:06 - 2015-11-11 16:11 - 00000267 _____ C:\ProgramData\fontcacheev1.dat
2015-12-21 23:35 - 2015-11-25 17:34 - 00002224 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-12-21 23:35 - 2015-10-03 23:11 - 00002580 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2015-12-21 23:35 - 2015-10-03 23:11 - 00002286 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2015-12-21 20:04 - 2015-11-25 17:34 - 00000000 ____D C:\Program Files\CCleaner
2015-12-21 18:17 - 2015-09-26 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-12-21 17:48 - 2015-10-03 23:11 - 00001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-12-21 06:53 - 2015-10-27 17:01 - 00017716 _____ C:\WINDOWS\system32\results.xml
2015-12-20 22:27 - 2015-10-27 16:59 - 00000728 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2015-12-20 22:24 - 2015-10-27 16:58 - 00000000 ____D C:\ProgramData\IntelDLM
2015-12-20 20:13 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-20 16:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-19 23:55 - 2015-10-29 10:20 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-19 23:54 - 2015-10-29 10:20 - 00000000 ____D C:\ProgramData\Adobe
2015-12-19 23:54 - 2015-10-04 15:17 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-19 23:52 - 2015-10-04 15:18 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-12-18 11:00 - 2015-09-26 15:34 - 00755200 _____ C:\WINDOWS\system32\xvidcore.dll
2015-12-18 11:00 - 2015-09-26 15:34 - 00674816 _____ C:\WINDOWS\SysWOW64\xvidcore.dll
2015-12-18 11:00 - 2015-09-26 15:34 - 00309248 _____ C:\WINDOWS\system32\xvidvfw.dll
2015-12-18 11:00 - 2015-09-26 15:34 - 00282112 _____ C:\WINDOWS\SysWOW64\xvidvfw.dll
2015-12-18 09:25 - 2015-11-11 17:14 - 00000000 ____D C:\Users\Qu
2015-12-18 07:48 - 2015-09-26 14:43 - 04712704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-12-18 07:48 - 2015-09-26 14:43 - 03053904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-12-18 07:48 - 2015-09-26 14:43 - 00023696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-12-17 21:15 - 2015-10-19 17:48 - 00000000 ____D C:\Users\Qu\AppData\Local\Adobe
2015-12-17 20:35 - 2015-11-02 06:58 - 00000908 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-17 20:35 - 2015-11-02 06:58 - 00000904 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-17 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-17 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-17 20:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-17 18:44 - 2015-11-02 06:58 - 00003480 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-17 18:44 - 2015-11-02 06:58 - 00003256 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-17 18:30 - 2015-09-26 15:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-17 16:56 - 2015-09-26 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2015-12-17 16:56 - 2015-09-26 15:22 - 00000000 ____D C:\ProgramData\Ashampoo
2015-12-15 09:38 - 2015-09-26 15:57 - 00000000 ____D C:\Program Files\HitmanPro
2015-12-14 00:07 - 2015-11-02 19:06 - 00000000 ____D C:\Users\Qu\.fontconfig
2015-12-12 15:58 - 2015-11-27 19:51 - 00001665 _____ C:\Users\Qu\Desktop\ZAVRŠENI TORENTI.lnk
2015-12-10 21:18 - 2015-11-30 13:44 - 00000000 ____D C:\WINDOWS\CryptoGuard
2015-12-10 21:18 - 2015-10-03 19:52 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-12-09 20:00 - 2015-09-30 16:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-12-09 18:14 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-09 18:09 - 2015-09-26 15:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 18:05 - 2015-07-10 12:04 - 00000167 _____ C:\WINDOWS\win.ini
2015-12-09 18:02 - 2015-09-26 14:55 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-09 17:59 - 2015-09-26 14:55 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-08 17:16 - 2015-10-07 05:16 - 00142976 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2015-12-08 08:29 - 2015-10-14 16:15 - 00000000 ____D C:\Users\Qu\AppData\Roaming\Ashampoo
2015-12-08 08:29 - 2015-09-26 15:22 - 00000000 ____D C:\Users\Qu\AppData\Local\ashampoo
2015-12-07 17:18 - 2015-11-12 02:09 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-07 17:17 - 2015-10-30 10:05 - 00000000 ____D C:\WINDOWS\ShellNew
2015-12-07 17:17 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-07 17:16 - 2015-09-30 16:50 - 00000000 ____D C:\Program Files\Microsoft Office
2015-12-07 16:58 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-07 16:57 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-06 16:58 - 2015-11-13 16:52 - 00002810 _____ C:\WINDOWS\System32\Tasks\{221B58B8-721C-4963-B87D-5E183009B5D9}
2015-12-04 11:53 - 2015-10-29 10:22 - 00000000 ____D C:\Users\Qu\AppData\LocalLow\Adobe
==================== Files in the root of some directories =======
2015-03-26 12:48 - 2015-03-26 12:48 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2014-08-21 13:59 - 2014-08-21 13:59 - 12662488 _____ (Insoft LLC) C:\Users\Qu\AppData\Roaming\setup.exe
2015-10-21 16:21 - 2015-10-21 16:21 - 0000001 _____ () C:\Users\Qu\AppData\Local\llftool.4.40.agreement
2015-10-21 16:21 - 2015-10-21 16:21 - 0000019 _____ () C:\Users\Qu\AppData\Local\llftool.license
2015-12-27 18:32 - 2015-12-27 18:32 - 0000017 _____ () C:\Users\Qu\AppData\Local\resmon.resmoncfg
2015-11-11 17:14 - 2015-11-11 17:14 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-11-11 16:11 - 2015-12-22 14:06 - 0000267 _____ () C:\ProgramData\fontcacheev1.dat
Files to move or delete:
====================
C:\ProgramData\fontcacheev1.dat
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-12-31 18:26
==================== End of FRST.txt ============================
[Link mogu videti samo ulogovani korisnici]
|
|
|
|
|
|
|
Poslao: 05 Jan 2016 23:43
|
offline
- TwinHeadedEagle
- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Probaj da apdejtujes MalwareBytes sada i reci mi da li i dalje dobijas isto?
|
|
|
|
|
|
