This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Printer driver will not install after extracting

14 min read

This thread's last reply is from December 28, 2014, 2:30 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

kwr5
December 20, 2014, 5:31 AM UTC
attach.txt

Trying to install a hp deskjet d1660. it extracts and nothing happens. I was able to install my epson scanner.

I have emisoft, malewarebytes and avast. combofix was run with no change.

Thanks in advance

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17496
Run by [removed] at 18:07:22 on 2014-12-19
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2795.1281 [GMT -5:00]
.
AV: Emsisoft Anti-Malware *Enabled/Updated* {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Emsisoft Anti-Malware *Enabled/Updated* {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxps://www.google.com/
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun: [emsisoft anti-malware] "c:\program files (x86)\emsisoft anti-malware\a2guard.exe" /d=60
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: SoftwareSASGeneration = dword:1
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{F27D3E3B-39B6-41E2-A1A8-1F38244209D0} : DHCPNameServer = 192.168.1.1
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe
x64-Run: [Acer ePower Management] C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\4ff0f1bj.default\
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2014-11-22 65776]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2014-11-22 267632]
R1 A2DDA;A2 Direct Disk Access Support Driver;C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [2014-12-18 26176]
R1 a2injectiondriver;a2injectiondriver;C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [2014-12-18 45208]
R1 a2util;a-squared Malware-IDS utility driver;C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [2014-12-18 23088]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswsnx.sys [2014-11-22 1050432]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2014-11-22 436624]
R2 a2AntiMalware;Emsisoft Protection Service;C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [2014-12-18 4907232]
R2 aswHwid;avast! HardwareID;C:\Windows\System32\drivers\aswHwid.sys [2014-11-22 29208]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2014-11-22 83280]
R2 aswStm;aswStm;C:\Windows\System32\drivers\aswStm.sys [2014-11-22 116728]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-22 50344]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-22 1871160]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-22 969016]
R2 TeamViewer9;TeamViewer 9;C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-11-27 4799760]
R3 a2acc;a2acc;C:\Program Files (x86)\Emsisoft Anti-Malware\a2accx64.sys [2014-12-18 71472]
R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2014-9-30 46136]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2010-12-23 115216]
R3 cleanhlp;cleanhlp;C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [2014-12-18 57024]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2010-12-22 138024]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\System32\drivers\L1C62x64.sys [2010-12-22 76912]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-11-22 25816]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-11-23 129752]
R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-11-22 63704]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2014-9-30 38528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-12-9 114688]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-12-22 246376]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-11-22 59392]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2014-8-15 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2014-11-27 1255736]
S4 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-12-23 203776]
S4 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2010-11-18 354304]
S4 AMD Reservation Manager;AMD Reservation Manager;C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-6-17 194496]
S4 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-1-5 310864]
S4 ePowerSvc;Acer ePower Service;C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe [2010-12-22 868224]
S4 GREGService;GREGService;C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe [2010-1-8 23584]
S4 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NTI\Gateway MyBackup\IScheduleSvc.exe [2010-11-11 257344]
S4 Updater Service;Updater Service;C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [2010-12-22 243232]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2014-12-19 22:36:13 11870360 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E1D4C0C0-6187-4E5E-BD4D-E4CC88BB8564}\mpengine.dll
2014-12-19 00:03:55 -------- d-----w- C:\Program Files\Enigma Software Group
2014-12-18 02:30:12 115712 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-12-18 02:30:11 144384 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-12-17 04:28:47 -------- d-sh--w- C:\$RECYCLE.BIN
2014-12-17 01:59:11 -------- d-----w- C:\Program Files (x86)\IrfanView
2014-12-16 22:57:39 -------- d-----w- C:\Users\User\AppData\Local\Cyberlink
2014-12-16 02:52:32 208896 ----a-w- C:\Windows\MBR.exe
2014-12-16 02:52:31 98816 ----a-w- C:\Windows\sed.exe
2014-12-16 02:52:31 256000 ----a-w- C:\Windows\PEV.exe
2014-12-14 03:48:37 -------- d-----w- C:\Program Files\CCleaner
2014-12-11 13:14:46 -------- d-----w- C:\Windows\System32\appraiser
2014-12-11 12:51:47 2048 ----a-w- C:\Windows\SysWow64\mferror.dll
2014-12-11 12:51:47 2048 ----a-w- C:\Windows\System32\mferror.dll
2014-12-11 12:51:46 24576 ----a-w- C:\Windows\System32\mfpmp.exe
2014-12-11 12:51:45 55808 ----a-w- C:\Windows\System32\rrinstaller.exe
2014-12-11 12:51:44 23040 ----a-w- C:\Windows\SysWow64\mfpmp.exe
2014-12-11 12:51:42 50176 ----a-w- C:\Windows\SysWow64\rrinstaller.exe
2014-12-11 12:51:40 103424 ----a-w- C:\Windows\SysWow64\mfps.dll
2014-12-11 12:51:39 206848 ----a-w- C:\Windows\System32\mfps.dll
2014-12-11 12:51:37 3209728 ----a-w- C:\Windows\SysWow64\mf.dll
2014-12-11 12:51:29 4121600 ----a-w- C:\Windows\System32\mf.dll
2014-12-10 00:49:29 -------- d-----w- C:\Users\User\AppData\Roaming\OpenOffice
2014-12-09 20:37:23 1232040 ----a-w- C:\Windows\System32\aitstatic.exe
2014-12-09 20:37:22 830976 ----a-w- C:\Windows\System32\appraiser.dll
2014-12-09 20:37:21 192000 ----a-w- C:\Windows\System32\aepic.dll
2014-12-09 20:37:20 1083392 ----a-w- C:\Windows\System32\aeinv.dll
2014-12-09 20:37:19 741376 ----a-w- C:\Windows\System32\invagent.dll
2014-12-09 20:37:14 413184 ----a-w- C:\Windows\System32\generaltel.dll
2014-12-09 20:37:14 396800 ----a-w- C:\Windows\System32\devinv.dll
2014-12-09 20:37:12 227328 ----a-w- C:\Windows\System32\aepdu.dll
2014-12-09 20:36:30 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-12-09 20:36:28 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-12-09 20:36:17 119296 ----a-w- C:\Windows\System32\drivers\tdx.sys
2014-12-09 20:34:36 66560 ----a-w- C:\Windows\System32\iesetup.dll
2014-12-09 20:34:02 742400 ----a-w- C:\Program Files\Internet Explorer\ieproxy.dll
2014-12-09 20:32:53 10949120 ----a-w- C:\Program Files\Internet Explorer\F12Resources.dll
2014-12-02 23:16:50 -------- d-----w- C:\Users\User\AppData\Local\Apple Computer
2014-12-02 23:16:23 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
2014-12-02 23:14:45 -------- d-----w- C:\Program Files\iPod
2014-12-02 23:14:39 -------- d-----w- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-12-02 23:14:39 -------- d-----w- C:\Program Files\iTunes
2014-12-02 23:14:39 -------- d-----w- C:\Program Files (x86)\iTunes
2014-12-02 23:12:27 -------- d-----w- C:\Users\User\AppData\Local\Apple
2014-12-02 23:10:47 -------- d-----w- C:\Program Files\Bonjour
2014-12-02 23:10:47 -------- d-----w- C:\Program Files (x86)\Bonjour
2014-12-02 03:09:21 -------- d-sh--w- C:\Users\User\AppData\Local\EmieBrowserModeList
2014-12-02 03:09:20 -------- d-sh--w- C:\Users\User\AppData\Local\EmieUserList
2014-12-02 03:09:20 -------- d-sh--w- C:\Users\User\AppData\Local\EmieSiteList
2014-12-01 00:42:16 -------- d-----w- C:\Users\User\AppData\Roaming\HpUpdate
2014-12-01 00:40:03 -------- d-----w- C:\Windows\Hewlett-Packard
2014-12-01 00:30:58 101376 ----a-w- C:\Windows\System32\Spool\prtprocs\x64\HPZPPWN7.DLL
2014-12-01 00:17:50 -------- d-----w- C:\Users\User\AppData\Local\ElevatedDiagnostics
2014-11-30 20:53:45 84992 ----a-w- C:\Windows\System32\esxwia8b.dll
2014-11-30 20:53:45 65793 ----a-w- C:\Windows\System32\esfw8b.bin
2014-11-30 20:53:45 4608 ----a-w- C:\Windows\System32\esxwiaml.dll
2014-11-30 20:53:45 207360 ----a-w- C:\Windows\System32\esxuin8b.dll
2014-11-30 20:53:45 204800 ----a-w- C:\Windows\SysWow64\esint8b.dll
2014-11-30 20:53:45 17408 ----a-w- C:\Windows\System32\esxcdev.dll
2014-11-30 20:53:45 128392 ----a-w- C:\Windows\System32\esdevapp.exe
2014-11-30 20:53:33 -------- d-----w- C:\Program Files (x86)\epson
2014-11-28 03:11:30 -------- d-----w- C:\Users\User\AppData\Roaming\TeamViewer
2014-11-28 00:50:53 -------- d-----w- C:\Program Files (x86)\TeamViewer
2014-11-27 17:44:44 -------- d-----w- C:\Users\User\AppData\Local\Windows Live
2014-11-27 16:23:32 -------- d-----w- C:\Windows\SysWow64\Wat
2014-11-27 16:23:31 -------- d-----w- C:\Windows\System32\Wat
2014-11-27 13:07:22 2777088 ----a-w- C:\Windows\System32\msmpeg2vdec.dll
2014-11-27 13:07:21 2285056 ----a-w- C:\Windows\SysWow64\msmpeg2vdec.dll
2014-11-27 01:39:58 3928064 ----a-w- C:\Windows\System32\d2d1.dll
2014-11-27 01:39:57 3419136 ----a-w- C:\Windows\SysWow64\d2d1.dll
2014-11-27 01:39:25 2565632 ----a-w- C:\Windows\System32\esent.dll
2014-11-27 01:39:23 96768 ----a-w- C:\Windows\System32\fsutil.exe
2014-11-27 01:39:21 1699328 ----a-w- C:\Windows\SysWow64\esent.dll
2014-11-27 01:39:19 410496 ----a-w- C:\Windows\System32\drivers\iaStorV.sys
2014-11-27 01:39:18 148352 ----a-w- C:\Windows\System32\drivers\nvraid.sys
2014-11-27 01:39:17 27008 ----a-w- C:\Windows\System32\drivers\amdxata.sys
2014-11-27 01:39:15 107904 ----a-w- C:\Windows\System32\drivers\amdsata.sys
2014-11-27 01:39:14 166272 ----a-w- C:\Windows\System32\drivers\nvstor.sys
2014-11-27 01:39:12 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe
2014-11-27 01:33:14 559104 ----a-w- C:\Windows\System32\spoolsv.exe
2014-11-27 01:33:11 67072 ----a-w- C:\Windows\splwow64.exe
2014-11-26 22:49:25 -------- d-----w- C:\Users\User\AppData\Local\Adobe
2014-11-26 22:43:29 -------- d-----w- C:\Users\User\AppData\Roaming\CANON INC
2014-11-26 22:32:04 -------- d-----w- C:\Users\User\AppData\Roaming\Canon_Inc_IC
2014-11-26 22:30:53 -------- d-----w- C:\Program Files (x86)\Common Files\Canon_Inc_IC
2014-11-26 22:28:58 -------- d-----w- C:\ProgramData\Canon_Inc_IC
2014-11-26 22:05:22 -------- d-----w- C:\Users\User\AppData\Roaming\NCH Software
2014-11-26 22:05:03 -------- d-----w- C:\Program Files (x86)\NCH Software
2014-11-26 08:59:49 167424 ----a-w- C:\Program Files\Windows Media Player\wmplayer.exe
2014-11-26 08:59:49 164864 ----a-w- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
2014-11-26 08:59:44 12625920 ----a-w- C:\Windows\System32\wmploc.DLL
2014-11-26 08:59:41 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL
2014-11-26 07:43:39 -------- d-----w- C:\Windows\Migration
2014-11-26 06:40:47 194048 ----a-w- C:\Windows\SysWow64\elshyph.dll
2014-11-26 06:40:03 645120 ----a-w- C:\Windows\SysWow64\jsIntl.dll
2014-11-26 06:40:03 235008 ----a-w- C:\Windows\System32\elshyph.dll
2014-11-26 06:40:02 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2014-11-26 06:40:02 182272 ----a-w- C:\Windows\SysWow64\msls31.dll
2014-11-26 05:58:38 9728 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-11-26 03:23:34 2560 ----a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
2014-11-25 23:23:00 11870360 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2014-11-25 22:24:39 259584 ----a-w- C:\Windows\System32\WebClnt.dll
2014-11-25 22:24:38 205824 ----a-w- C:\Windows\SysWow64\WebClnt.dll
2014-11-25 22:24:37 102400 ----a-w- C:\Windows\System32\davclnt.dll
2014-11-25 22:24:36 81920 ----a-w- C:\Windows\SysWow64\davclnt.dll
2014-11-25 22:24:34 140800 ----a-w- C:\Windows\System32\drivers\mrxdav.sys
2014-11-25 22:24:26 209920 ----a-w- C:\Windows\System32\profsvc.dll
2014-11-25 22:22:13 335360 ----a-w- C:\Windows\System32\msieftp.dll
2014-11-25 22:22:12 301568 ----a-w- C:\Windows\SysWow64\msieftp.dll
2014-11-25 22:20:50 633856 ----a-w- C:\Windows\System32\comctl32.dll
2014-11-25 22:20:46 530432 ----a-w- C:\Windows\SysWow64\comctl32.dll
2014-11-25 22:19:29 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll
2014-11-25 22:19:29 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll
2014-11-25 22:19:28 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll
2014-11-25 22:19:28 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll
2014-11-25 22:19:02 886784 ----a-w- C:\Program Files\Common Files\System\wab32.dll
2014-11-25 22:19:01 708608 ----a-w- C:\Program Files (x86)\Common Files\System\wab32.dll
2014-11-25 22:18:23 224256 ----a-w- C:\Windows\System32\wintrust.dll
2014-11-25 22:18:21 175104 ----a-w- C:\Windows\SysWow64\wintrust.dll
2014-11-25 22:16:24 961024 ----a-w- C:\Windows\System32\CPFilters.dll
2014-11-25 22:16:20 642048 ----a-w- C:\Windows\SysWow64\CPFilters.dll
2014-11-25 22:16:13 1118720 ----a-w- C:\Windows\System32\sbe.dll
2014-11-25 22:16:11 259072 ----a-w- C:\Windows\System32\mpg2splt.ax
2014-11-25 22:16:08 850944 ----a-w- C:\Windows\SysWow64\sbe.dll
2014-11-25 22:16:07 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax
2014-11-25 22:15:22 1572864 ----a-w- C:\Windows\System32\quartz.dll
2014-11-25 22:15:20 1328128 ----a-w- C:\Windows\SysWow64\quartz.dll
2014-11-25 22:14:42 509952 ----a-w- C:\Windows\System32\ntshrui.dll
2014-11-25 22:14:40 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll
2014-11-25 22:12:57 666624 ----a-w- C:\Windows\SysWow64\mssvp.dll
2014-11-25 22:12:56 86528 ----a-w- C:\Windows\SysWow64\SearchFilterHost.exe
2014-11-25 22:12:54 75264 ----a-w- C:\Windows\System32\msscntrs.dll
2014-11-25 22:12:54 197120 ----a-w- C:\Windows\SysWow64\mssphtb.dll
2014-11-25 22:12:50 59392 ----a-w- C:\Windows\SysWow64\msscntrs.dll
2014-11-25 22:11:39 1719296 ----a-w- C:\Program Files\Windows Journal\NBDoc.DLL
2014-11-25 22:11:37 1380864 ----a-w- C:\Program Files\Windows Journal\JNTFiltr.dll
2014-11-25 22:11:37 1354240 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
2014-11-25 22:11:36 1389568 ----a-w- C:\Program Files\Windows Journal\JNWDRV.dll
2014-11-25 22:11:34 936960 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2014-11-25 22:11:28 288768 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
2014-11-25 22:11:27 158208 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
2014-11-25 22:11:26 128000 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
2014-11-25 22:11:20 801280 ----a-w- C:\Windows\System32\usp10.dll
2014-11-25 22:11:19 626688 ----a-w- C:\Windows\SysWow64\usp10.dll
2014-11-25 22:10:58 314880 ----a-w- C:\Windows\SysWow64\webio.dll
2014-11-25 22:10:57 395776 ----a-w- C:\Windows\System32\webio.dll
2014-11-25 22:10:41 1031168 ----a-w- C:\Windows\System32\TSWorkspace.dll
2014-11-25 22:10:40 793600 ----a-w- C:\Windows\SysWow64\TSWorkspace.dll
2014-11-25 22:07:45 156824 ----a-w- C:\Windows\SysWow64\mscorier.dll
2014-11-25 22:07:44 156312 ----a-w- C:\Windows\System32\mscorier.dll
2014-11-25 22:07:42 1131664 ----a-w- C:\Windows\SysWow64\dfshim.dll
2014-11-25 22:07:38 1943696 ----a-w- C:\Windows\System32\dfshim.dll
2014-11-25 22:07:31 73880 ----a-w- C:\Windows\System32\mscories.dll
2014-11-25 22:07:29 81560 ----a-w- C:\Windows\SysWow64\mscories.dll
2014-11-25 13:08:45 1474048 ----a-w- C:\Windows\System32\crypt32.dll
2014-11-25 13:08:44 1168384 ----a-w- C:\Windows\SysWow64\crypt32.dll
2014-11-25 13:08:42 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2014-11-25 13:08:39 139776 ----a-w- C:\Windows\System32\cryptnet.dll
2014-11-25 13:08:38 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2014-11-25 13:08:36 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2014-11-25 13:07:40 484864 ----a-w- C:\Windows\System32\wer.dll
2014-11-25 13:07:40 381440 ----a-w- C:\Windows\SysWow64\wer.dll
2014-11-25 13:06:58 1903552 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2014-11-25 13:06:57 376768 ----a-w- C:\Windows\System32\drivers\netio.sys
2014-11-25 13:06:56 288192 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2014-11-25 13:06:54 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2014-11-25 13:06:53 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2014-11-25 13:06:28 683520 ----a-w- C:\Windows\System32\termsrv.dll
2014-11-25 13:06:25 681984 ----a-w- C:\Windows\System32\adtschema.dll
2014-11-25 13:06:24 681984 ----a-w- C:\Windows\SysWow64\adtschema.dll
2014-11-25 13:06:15 146432 ----a-w- C:\Windows\System32\msaudite.dll
2014-11-25 13:06:14 146432 ----a-w- C:\Windows\SysWow64\msaudite.dll
2014-11-25 13:05:04 515584 ----a-w- C:\Windows\System32\timedate.cpl
2014-11-25 13:05:01 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl
2014-11-25 13:04:48 2002432 ----a-w- C:\Windows\System32\msxml6.dll
2014-11-25 13:04:44 1389056 ----a-w- C:\Windows\SysWow64\msxml6.dll
2014-11-25 13:04:40 2048 ----a-w- C:\Windows\SysWow64\msxml6r.dll
2014-11-25 13:04:39 2048 ----a-w- C:\Windows\System32\msxml6r.dll
2014-11-25 13:04:29 78680 ----a-w- C:\Windows\System32\mcupdate_AuthenticAMD.dll
2014-11-25 13:02:25 230400 ----a-w- C:\Windows\System32\drivers\portcls.sys
2014-11-25 13:02:24 116736 ----a-w- C:\Windows\System32\drivers\drmk.sys
2014-11-25 13:00:42 197120 ----a-w- C:\Windows\System32\credui.dll
2014-11-25 12:59:58 1359872 ----a-w- C:\Windows\System32\mfc42u.dll
2014-11-25 12:58:57 1882624 ----a-w- C:\Windows\System32\msxml3.dll
2014-11-25 12:56:06 1888768 ----a-w- C:\Windows\System32\WMVDECOD.DLL
2014-11-25 12:56:04 1620992 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
2014-11-25 12:55:54 19968 ----a-w- C:\Windows\System32\drivers\usb8023.sys
2014-11-25 12:55:22 497152 ----a-w- C:\Windows\System32\drivers\afd.sys
2014-11-25 12:55:17 9728 ----a-w- C:\Windows\System32\Wdfres.dll
2014-11-25 12:55:16 785624 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys
2014-11-25 12:55:16 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys
2014-11-25 12:55:09 185344 ----a-w- C:\Windows\System32\drivers\usbvideo.sys
2014-11-25 12:55:09 100864 ----a-w- C:\Windows\System32\drivers\usbcir.sys
2014-11-25 12:49:46 478208 ----a-w- C:\Windows\System32\dpnet.dll
2014-11-25 12:49:44 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll
2014-11-25 12:44:20 6656 ----a-w- C:\Windows\SysWow64\apisetschema.dll
2014-11-25 12:44:20 6656 ----a-w- C:\Windows\System32\apisetschema.dll
2014-11-25 12:41:58 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe
2014-11-25 12:38:38 467456 ----a-w- C:\Windows\System32\drivers\srv.sys
2014-11-25 12:38:38 410112 ----a-w- C:\Windows\System32\drivers\srv2.sys
2014-11-25 12:38:35 168448 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2014-11-25 12:37:28 371712 ----a-w- C:\Windows\System32\qdvd.dll
2014-11-25 12:37:26 519680 ----a-w- C:\Windows\SysWow64\qdvd.dll
2014-11-25 12:36:36 878080 ----a-w- C:\Windows\System32\IMJP10K.DLL
2014-11-25 12:36:33 701440 ----a-w- C:\Windows\SysWow64\IMJP10K.DLL
2014-11-25 12:35:06 985536 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2014-11-25 12:35:05 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys
2014-11-25 12:35:04 144384 ----a-w- C:\Windows\System32\cdd.dll
2014-11-25 12:33:08 327168 ----a-w- C:\Windows\System32\mswsock.dll
2014-11-25 12:33:02 231424 ----a-w- C:\Windows\SysWow64\mswsock.dll
2014-11-25 12:32:12 45568 ----a-w- C:\Windows\SysWow64\oflc-nz.rs
2014-11-25 12:32:12 45568 ----a-w- C:\Windows\System32\oflc-nz.rs
2014-11-25 12:32:11 43520 ----a-w- C:\Windows\SysWow64\csrr.rs
2014-11-25 12:32:11 43520 ----a-w- C:\Windows\System32\csrr.rs
2014-11-25 12:32:07 46592 ----a-w- C:\Windows\SysWow64\fpb.rs
2014-11-25 12:32:07 46592 ----a-w- C:\Windows\System32\fpb.rs
2014-11-25 12:32:05 40960 ----a-w- C:\Windows\SysWow64\cob-au.rs
2014-11-25 12:32:04 40960 ----a-w- C:\Windows\System32\cob-au.rs
2014-11-25 12:32:03 44544 ----a-w- C:\Windows\SysWow64\pegibbfc.rs
2014-11-25 12:32:02 44544 ----a-w- C:\Windows\System32\pegibbfc.rs
2014-11-25 12:32:00 30720 ----a-w- C:\Windows\SysWow64\usk.rs
2014-11-25 12:32:00 30720 ----a-w- C:\Windows\System32\usk.rs
2014-11-25 12:29:51 613888 ----a-w- C:\Windows\System32\psisdecd.dll
2014-11-25 12:29:47 75776 ----a-w- C:\Windows\SysWow64\psisrndr.ax
2014-11-25 03:29:16 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll
2014-11-25 03:28:57 108032 ----a-w- C:\Windows\System32\psisrndr.ax
2014-11-25 00:25:14 878080 ----a-w- C:\Windows\System32\advapi32.dll
2014-11-25 00:25:12 1732032 ----a-w- C:\Windows\System32\ntdll.dll
2014-11-25 00:25:11 859648 ----a-w- C:\Windows\System32\tdh.dll
2014-11-25 00:25:09 619520 ----a-w- C:\Windows\SysWow64\tdh.dll
2014-11-25 00:25:08 1292192 ----a-w- C:\Windows\SysWow64\ntdll.dll
2014-11-25 00:25:05 640512 ----a-w- C:\Windows\SysWow64\advapi32.dll
2014-11-25 00:04:00 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys
2014-11-24 23:59:49 500224 ----a-w- C:\Windows\System32\AUDIOKSE.dll
2014-11-24 23:58:59 19328 ----a-w- C:\Windows\System32\kd1394.dll
2014-11-24 23:58:58 20352 ----a-w- C:\Windows\System32\kdusb.dll
2014-11-24 23:58:56 642944 ----a-w- C:\Windows\System32\winload.efi
2014-11-24 23:58:56 17792 ----a-w- C:\Windows\System32\kdcom.dll
2014-11-24 23:57:22 424448 ----a-w- C:\Windows\System32\rastls.dll
2014-11-24 23:57:21 372736 ----a-w- C:\Windows\SysWow64\rastls.dll
2014-11-24 23:57:11 3241984 ----a-w- C:\Windows\System32\msi.dll
2014-11-24 23:57:08 2363904 ----a-w- C:\Windows\SysWow64\msi.dll
2014-11-24 23:57:08 1941504 ----a-w- C:\Windows\System32\authui.dll
2014-11-24 23:57:07 1805824 ----a-w- C:\Windows\SysWow64\authui.dll
2014-11-24 23:57:06 70144 ----a-w- C:\Windows\System32\appinfo.dll
2014-11-24 23:57:06 112064 ----a-w- C:\Windows\System32\consent.exe
2014-11-24 23:57:05 504320 ----a-w- C:\Windows\System32\msihnd.dll
2014-11-24 23:57:04 337408 ----a-w- C:\Windows\SysWow64\msihnd.dll
2014-11-24 23:56:27 1192448 ----a-w- C:\Windows\System32\certutil.exe
2014-11-24 23:56:25 903168 ----a-w- C:\Windows\SysWow64\certutil.exe
2014-11-24 23:56:21 52224 ----a-w- C:\Windows\System32\certenc.dll
2014-11-24 23:56:21 43008 ----a-w- C:\Windows\SysWow64\certenc.dll
2014-11-24 23:55:43 150016 ----a-w- C:\Windows\System32\wshom.ocx
2014-11-24 23:55:43 121856 ----a-w- C:\Windows\SysWow64\wshom.ocx
2014-11-24 23:55:42 202752 ----a-w- C:\Windows\System32\scrrun.dll
2014-11-24 23:55:42 156160 ----a-w- C:\Windows\System32\cscript.exe
2014-11-24 23:55:41 141824 ----a-w- C:\Windows\SysWow64\wscript.exe
2014-11-24 23:55:40 168960 ----a-w- C:\Windows\System32\wscript.exe
2014-11-24 23:55:40 163840 ----a-w- C:\Windows\SysWow64\scrrun.dll
2014-11-24 23:55:39 126976 ----a-w- C:\Windows\SysWow64\cscript.exe
2014-11-24 23:55:12 458712 ----a-w- C:\Windows\System32\drivers\cng.sys
2014-11-24 23:54:10 956928 ----a-w- C:\Windows\System32\localspl.dll
2014-11-24 23:54:02 404480 ----a-w- C:\Windows\System32\gdi32.dll
2014-11-24 23:54:01 311808 ----a-w- C:\Windows\SysWow64\gdi32.dll
2014-11-24 23:53:52 90624 ----a-w- C:\Windows\System32\drivers\bowser.sys
2014-11-24 23:53:44 331776 ----a-w- C:\Windows\System32\oleacc.dll
2014-11-24 23:53:44 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll
2014-11-24 23:53:33 723456 ----a-w- C:\Windows\System32\EncDec.dll
2014-11-24 23:53:31 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2014-11-24 23:53:28 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2014-11-24 23:53:27 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2014-11-24 23:52:28 751104 ----a-w- C:\Windows\System32\win32spl.dll
2014-11-24 23:52:26 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll
2014-11-24 23:52:22 68608 ----a-w- C:\Windows\System32\taskhost.exe
2014-11-24 23:51:35 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
2014-11-24 23:51:35 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
2014-11-24 23:50:38 404480 ----a-w- C:\Windows\System32\umpnpmgr.dll
2014-11-24 23:50:37 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe
2014-11-24 23:50:35 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll
2014-11-24 23:50:33 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll
2014-11-24 23:50:32 64512 ----a-w- C:\Windows\SysWow64\devobj.dll
2014-11-24 23:48:22 124112 ----a-w- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2014-11-24 23:48:22 102608 ----a-w- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2014-11-24 23:48:07 342016 ----a-w- C:\Windows\System32\schannel.dll
2014-11-24 23:48:05 314880 ----a-w- C:\Windows\System32\msv1_0.dll
2014-11-24 23:48:05 248832 ----a-w- C:\Windows\SysWow64\schannel.dll
2014-11-24 23:48:04 259584 ----a-w- C:\Windows\SysWow64\msv1_0.dll
2014-11-24 23:48:02 309760 ----a-w- C:\Windows\System32\ncrypt.dll
2014-11-24 23:48:01 86528 ----a-w- C:\Windows\System32\TSpkg.dll
2014-11-24 23:48:01 221184 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2014-11-24 23:48:00 65536 ----a-w- C:\Windows\SysWow64\TSpkg.dll
2014-11-24 23:48:00 210944 ----a-w- C:\Windows\System32\wdigest.dll
2014-11-24 23:48:00 172032 ----a-w- C:\Windows\SysWow64\wdigest.dll
2014-11-24 23:47:55 22016 ----a-w- C:\Windows\System32\credssp.dll
2014-11-24 23:47:55 17408 ----a-w- C:\Windows\SysWow64\credssp.dll
2014-11-24 23:47:01 77824 ----a-w- C:\Windows\System32\packager.dll
2014-11-24 23:47:00 67584 ----a-w- C:\Windows\SysWow64\packager.dll
2014-11-24 23:45:10 59392 ----a-w- C:\Windows\System32\browcli.dll
2014-11-24 23:45:10 136704 ----a-w- C:\Windows\System32\browser.dll
2014-11-24 23:45:07 41984 ----a-w- C:\Windows\SysWow64\browcli.dll
2014-11-24 23:45:00 3198976 ----a-w- C:\Windows\System32\win32k.sys
2014-11-24 23:44:09 362496 ----a-w- C:\Windows\System32\wow64win.dll
2014-11-24 23:44:08 243712 ----a-w- C:\Windows\System32\wow64.dll
2014-11-24 23:44:07 215040 ----a-w- C:\Windows\System32\winsrv.dll
2014-11-24 23:44:06 338432 ----a-w- C:\Windows\System32\conhost.exe
2014-11-24 23:44:04 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2014-11-24 23:44:03 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2014-11-24 23:44:02 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2014-11-24 23:44:01 3584 ---ha-w- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-11-24 23:44:00 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-11-24 23:44:00 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2014-11-24 23:42:58 43008 ----a-w- C:\Windows\SysWow64\srclient.dll
2014-11-24 23:42:49 634880 ----a-w- C:\Windows\System32\msvcrt.dll
2014-11-24 23:42:47 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll
2014-11-24 23:42:28 976896 ----a-w- C:\Windows\System32\inetcomm.dll
2014-11-24 23:42:25 741376 ----a-w- C:\Windows\SysWow64\inetcomm.dll
2014-11-24 23:42:18 267776 ----a-w- C:\Windows\System32\FXSCOVER.exe
2014-11-24 23:42:13 1684928 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2014-11-24 23:42:01 1499136 ----a-w- C:\Program Files\Common Files\System\ado\msado15.dll
2014-11-24 23:42:01 1019904 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msado15.dll
2014-11-24 23:40:45 1216000 ----a-w- C:\Windows\System32\rpcrt4.dll
2014-11-24 23:40:42 664064 ----a-w- C:\Windows\SysWow64\rpcrt4.dll
2014-11-24 13:06:13 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys
2014-11-24 13:06:12 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys
2014-11-24 13:06:05 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll
2014-11-24 13:06:04 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll
2014-11-24 13:05:52 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll
2014-11-24 13:05:50 229888 ----a-w- C:\Windows\System32\WUDFHost.exe
2014-11-24 13:05:47 744448 ----a-w- C:\Windows\System32\WUDFx.dll
2014-11-24 12:46:51 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2014-11-24 12:46:43 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2014-11-24 12:46:43 5120 ----a-w- C:\Windows\System32\wmi.dll
2014-11-24 12:37:26 99480 ----a-w- C:\Windows\SysWow64\infocardapi.dll
2014-11-24 12:37:25 171160 ----a-w- C:\Windows\System32\infocardapi.dll
2014-11-24 12:37:24 1389208 ----a-w- C:\Windows\System32\icardagt.exe
2014-11-24 12:37:23 619672 ----a-w- C:\Windows\SysWow64\icardagt.exe
2014-11-24 12:37:14 8856 ----a-w- C:\Windows\SysWow64\icardres.dll
2014-11-24 12:37:14 8856 ----a-w- C:\Windows\System32\icardres.dll
2014-11-24 12:35:02 35480 ----a-w- C:\Windows\SysWow64\TsWpfWrp.exe
2014-11-24 12:35:02 35480 ----a-w- C:\Windows\System32\TsWpfWrp.exe
2014-11-23 23:46:50 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-11-23 23:45:59 -------- d-----w- C:\Users\User\AppData\Local\CrashDumps
2014-11-23 23:30:11 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2014-11-23 23:30:09 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2014-11-23 23:30:05 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2014-11-23 23:21:19 -------- d-----w- C:\ProgramData\Emsisoft
2014-11-23 23:07:14 -------- d-----w- C:\Users\User\AppData\Roaming\IrfanView
2014-11-23 23:06:46 2620928 ----a-w- C:\Windows\System32\wucltux.dll
2014-11-23 23:06:08 97792 ----a-w- C:\Windows\System32\wudriver.dll
2014-11-23 23:06:08 92672 ----a-w- C:\Windows\SysWow64\wudriver.dll
2014-11-23 23:05:44 33792 ----a-w- C:\Windows\SysWow64\wuapp.exe
2014-11-23 23:05:44 198600 ----a-w- C:\Windows\System32\wuwebv.dll
2014-11-23 23:05:44 179656 ----a-w- C:\Windows\SysWow64\wuwebv.dll
2014-11-23 23:05:43 36864 ----a-w- C:\Windows\System32\wuapp.exe
2014-11-23 13:51:27 -------- d-----w- C:\Users\User\AppData\Local\Disconnect Desktop
2014-11-23 13:49:00 -------- d-----w- C:\ProgramData\Caphyon
2014-11-23 04:52:18 -------- d-----w- C:\Program Files (x86)\Disconnect
2014-11-23 04:49:56 -------- d-----w- C:\Users\User\AppData\Roaming\Disconnect
2014-11-23 04:33:40 -------- d-----w- C:\Program Files (x86)\OpenOffice 4
2014-11-23 01:37:55 -------- d-----w- C:\Windows\System32\SPReview
2014-11-23 01:35:37 -------- d-----w- C:\Windows\System32\EventProviders
2014-11-23 01:15:41 -------- d-----w- C:\Users\User\AppData\Local\Hewlett-Packard
2014-11-23 01:14:41 -------- d-----w- C:\Program Files (x86)\Hp
2014-11-23 01:04:21 -------- d-----w- C:\Program Files (x86)\Emsisoft Anti-Malware
2014-11-23 00:57:07 48976 ----a-w- C:\Windows\System32\netfxperf.dll
2014-11-23 00:56:28 59392 ----a-w- C:\Windows\System32\drivers\TsUsbFlt.sys
2014-11-23 00:56:27 12288 ----a-w- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2014-11-23 00:56:25 14967808 ----a-w- C:\Program Files\DVD Maker\OmdBase.dll
2014-11-23 00:56:08 954752 ----a-w- C:\Windows\SysWow64\mfc40.dll
2014-11-23 00:56:08 954288 ----a-w- C:\Windows\SysWow64\mfc40u.dll
2014-11-23 00:56:07 1743360 ----a-w- C:\Windows\System32\sysmain.dll
2014-11-23 00:54:59 1115136 ----a-w- C:\Windows\SysWow64\RacEngn.dll
2014-11-23 00:53:59 2522624 ----a-w- C:\Windows\SysWow64\dbgeng.dll
2014-11-23 00:52:59 864256 ----a-w- C:\Program Files (x86)\Common Files\System\Ole DB\oledb32.dll
2014-11-23 00:50:59 59904 ----a-w- C:\Windows\SysWow64\fdeploy.dll
2014-11-23 00:49:59 71168 ----a-w- C:\Windows\bfsvc.exe
2014-11-23 00:48:59 26624 ----a-w- C:\Windows\System32\drivers\tdi.sys
2014-11-23 00:47:54 6144 ----a-w- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
2014-11-23 00:47:54 4608 ----a-w- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
2014-11-23 00:47:49 399872 ----a-w- C:\Windows\System32\dpx.dll
2014-11-23 00:47:49 189952 ----a-w- C:\Windows\SysWow64\wdscore.dll
2014-11-23 00:46:55 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll
2014-11-23 00:46:55 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll
2014-11-23 00:43:11 529408 ----a-w- C:\Windows\System32\wbemcomn.dll
2014-11-23 00:37:10 275080 ------w- C:\Windows\System32\MpSigStub.exe
2014-11-23 00:30:37 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
2014-11-23 00:30:36 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys
2014-11-23 00:30:36 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
2014-11-23 00:30:35 -------- d-----w- C:\ProgramData\Malwarebytes
2014-11-23 00:30:35 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-23 00:29:53 -------- d-----w- C:\Users\User\AppData\Local\Programs
2014-11-23 00:27:29 -------- d-----w- C:\Users\User\AppData\Roaming\AVAST Software
2014-11-23 00:26:22 116728 ----a-w- C:\Windows\System32\drivers\aswStm.sys
2014-11-23 00:26:20 267632 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
2014-11-23 00:26:19 65776 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
2014-11-23 00:26:18 83280 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2014-11-23 00:26:17 29208 ----a-w- C:\Windows\System32\drivers\aswHwid.sys
2014-11-23 00:26:15 93568 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2014-11-23 00:26:12 1050432 ----a-w- C:\Windows\System32\drivers\aswsnx.sys
2014-11-23 00:25:53 43152 ----a-w- C:\Windows\avastSS.scr
2014-11-23 00:23:25 -------- d-----w- C:\Program Files\AVAST Software
2014-11-23 00:22:12 -------- d-----w- C:\ProgramData\AVAST Software
2014-11-23 00:17:56 -------- d-----w- C:\Users\User\AppData\Local\Google
2014-11-23 00:00:47 -------- d-----w- C:\Users\User\AppData\Local\Diagnostics
.
==================== Find3M ====================
.
2014-11-26 05:58:38 9728 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-11-23 02:47:22 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2014-11-23 02:47:17 175616 ----a-w- C:\Windows\System32\msclmd.dll
2014-11-22 03:06:23 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-11-22 03:06:11 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-11-22 02:50:10 580096 ----a-w- C:\Windows\System32\vbscript.dll
2014-11-22 02:49:54 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-11-22 02:48:20 88064 ----a-w- C:\Windows\System32\MshtmlDac.dll
2014-11-22 02:35:29 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-11-22 02:34:51 814080 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-11-22 02:34:07 6039552 ----a-w- C:\Windows\System32\jscript9.dll
2014-11-22 02:26:31 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-11-22 02:20:44 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-11-22 02:14:16 77824 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-11-22 02:07:43 501248 ----a-w- C:\Windows\SysWow64\vbscript.dll
2014-11-22 02:07:17 62464 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-11-22 02:06:32 47616 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-11-22 02:05:02 64000 ----a-w- C:\Windows\SysWow64\MshtmlDac.dll
2014-11-22 01:54:30 620032 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-11-22 01:47:10 1359360 ----a-w- C:\Windows\System32\mshtmlmedia.dll
2014-11-22 01:46:58 2125312 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-11-22 01:40:04 60416 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-11-22 01:29:26 4299264 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-11-22 01:28:21 2358272 ----a-w- C:\Windows\System32\wininet.dll
2014-11-22 01:22:49 2052096 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-11-22 01:21:57 1155072 ----a-w- C:\Windows\SysWow64\mshtmlmedia.dll
2014-11-22 01:00:20 1888256 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-11-11 03:08:52 241152 ----a-w- C:\Windows\System32\pku2u.dll
2014-11-11 03:08:48 728064 ----a-w- C:\Windows\System32\kerberos.dll
2014-11-11 02:44:32 186880 ----a-w- C:\Windows\SysWow64\pku2u.dll
2014-11-11 02:44:25 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll
2014-11-08 03:16:08 2048 ----a-w- C:\Windows\System32\tzres.dll
2014-11-08 02:45:09 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2014-10-30 02:03:43 165888 ----a-w- C:\Windows\System32\charmap.exe
2014-10-30 01:45:43 155136 ----a-w- C:\Windows\SysWow64\charmap.exe
2014-10-14 02:16:37 155064 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2014-10-14 02:12:57 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
2014-10-14 01:50:47 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2014-10-14 01:49:38 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2014-10-03 02:12:23 310272 ----a-w- C:\Windows\System32\WsmWmiPl.dll
2014-10-03 02:12:23 2020352 ----a-w- C:\Windows\System32\WsmSvc.dll
2014-10-03 02:12:22 346624 ----a-w- C:\Windows\System32\WSManMigrationPlugin.dll
2014-10-03 02:12:22 181248 ----a-w- C:\Windows\System32\WsmAuto.dll
2014-10-03 02:11:54 284672 ----a-w- C:\Windows\System32\EncDump.dll
2014-10-03 02:11:51 680960 ----a-w- C:\Windows\System32\audiosrv.dll
2014-10-03 02:11:51 440832 ----a-w- C:\Windows\System32\AudioEng.dll
2014-10-03 02:11:51 296448 ----a-w- C:\Windows\System32\AudioSes.dll
2014-10-03 02:11:49 266240 ----a-w- C:\Windows\System32\WSManHTTPConfig.exe
2014-10-03 01:45:03 248832 ----a-w- C:\Windows\SysWow64\WSManMigrationPlugin.dll
2014-10-03 01:45:03 214016 ----a-w- C:\Windows\SysWow64\WsmWmiPl.dll
2014-10-03 01:45:03 145920 ----a-w- C:\Windows\SysWow64\WsmAuto.dll
2014-10-03 01:45:03 1177088 ----a-w- C:\Windows\SysWow64\WsmSvc.dll
2014-10-03 01:44:42 442880 ----a-w- C:\Windows\SysWow64\AUDIOKSE.dll
2014-10-03 01:44:26 374784 ----a-w- C:\Windows\SysWow64\AudioEng.dll
2014-10-03 01:44:26 195584 ----a-w- C:\Windows\SysWow64\AudioSes.dll
2014-10-03 01:44:25 198656 ----a-w- C:\Windows\SysWow64\WSManHTTPConfig.exe
2014-09-30 21:54:51 29480 ----a-w- C:\Windows\SysWow64\msxml3a.dll
2014-09-30 21:54:50 505128 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2014-09-30 21:54:50 353576 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2014-09-30 21:53:36 0 ----a-w- C:\Windows\ativpsrm.bin
2014-09-30 21:39:35 3 ----a-w- C:\Windows\System32\PLD_Framework.cmd
.
============= FINISH: 18:11:25.66 ===============
MWR 3 day Mod
December 25, 2014, 6:40 PM UTC
[3days:nuroee3y][/3days:nuroee3y]
NonSuch
December 28, 2014, 2:30 AM UTC
a failure to respond within two days as instructed,