There is definitely something going on.
My computer all of a sudden today is running at very high Disk, Memory and CPU levels. like random 90% + for seemingly no reason.
Especially the "Com Surrogate" process.
Slowed internet speeds, audio issues with youtube videos.
There is quite a bit of hanging and lagging and programs not responding, etc..
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer:
Run by ------ at 14:34:19 on 2013-01-28
Microsoft Windows 8 Enterprise 6.2.9200.0.1252.1.1033.18.2924.2121 [GMT -6:00]
.
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\dwm.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Windows\sppsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Windows\system32\taskhostex.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe\LiveComm.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Windows Defender\MpCmdRun.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.babylon.com/?affID=110195&babsrc=HP_ss&mntrId=124ff5b800000000000020cf306e65f0
uProxyOverride = <local>
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
uRun: [Google Update] "C:\Users\Scotty\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [F.lux] "C:\Users\Scotty\Local Settings\Apps\F.lux\flux.exe" /noshow
uRun: [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
uRun: [HP Deskjet 3050 J610 series (NET)] "C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN08L1D3GC05HX:NW" -scfn "HP Deskjet 3050 J610 series (NET)" -AutoStart 1
uRun: [BatteryCare] C:\Program Files (x86)\BatteryCare\BatteryCare.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
TCP: NameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{2B04CDB1-A591-4C6F-A600-95FB75076C04} : DHCPNameServer = 75.75.75.75 75.75.76.76
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
mASetup: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll",CreateReaderUserSettings
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - <orphaned>
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\Drivers\HECIx64.sys [2009-9-17 56344]
R3 ManyCam;ManyCam Virtual Webcam;C:\Windows\System32\Drivers\mcvidrv_x64.sys [2012-10-10 44928]
R3 mcaudrv_simple;ManyCam Virtual Microphone;C:\Windows\System32\Drivers\mcaudrv_x64.sys [2012-10-10 29696]
R3 NETJME;JMicron Ethernet Adapter NDIS6.30 Driver (Amd64 Bits);C:\Windows\System32\Drivers\NETJME.sys [2012-7-5 137728]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-1-8 161536]
S3 taphss6;Anchorfree HSS VPN Adapter;C:\Windows\System32\Drivers\taphss6.sys [2013-1-10 42184]
S3 vmbusr;Virtual Machine Bus Provider;C:\Windows\System32\Drivers\vmbusr.sys [2012-7-25 117248]
.
=============== File Associations ===============
.
FileExt: .txt: txtfile=C:\Windows\System32\NOTEPAD.EXE %1 [UserChoice]
FileExt: .vbs: VBSFile="C:\Windows\System32\WScript.exe" "%1" %* [UserChoice]
.
=============== Created Last 30 ================
.
2013-01-28 15:36:26 -------- d-----w- C:\Users\Scotty\AppData\Roaming\Malwarebytes
2013-01-28 15:36:15 -------- d-----w- C:\ProgramData\Malwarebytes
2013-01-28 15:36:12 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys
2013-01-28 15:36:12 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-01-28 15:33:12 -------- d-----w- C:\Users\Scotty\AppData\Local\Diagnostics
2013-01-28 15:14:12 -------- d-----w- C:\Users\Scotty\AppData\Local\MediaShow
2013-01-28 15:10:47 -------- d-----w- C:\Users\Scotty\AppData\Local\MediaServer
2013-01-28 14:12:11 76232 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5B60A979-3321-40B7-97CD-E0271CA8627D}\offreg.dll
2013-01-28 14:06:06 9161176 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5B60A979-3321-40B7-97CD-E0271CA8627D}\mpengine.dll
2013-01-28 13:23:50 -------- d-----w- C:\Users\Scotty\AppData\Roaming\deluge
2013-01-28 13:21:13 -------- d-----w- C:\Program Files (x86)\Deluge
2013-01-28 12:04:04 -------- d-----w- C:\Windows\SysWow64\searchplugins
2013-01-28 12:04:04 -------- d-----w- C:\Windows\SysWow64\Extensions
2013-01-28 12:03:48 -------- d-----w- C:\ProgramData\Babylon
2013-01-28 11:02:02 -------- d-----w- C:\Users\Scotty\AppData\Local\CyberLink
2013-01-27 20:10:02 9161176 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2013-01-25 15:06:55 -------- d-----w- C:\Program Files\CONEXANT
2013-01-25 14:46:09 375808 ----a-w- C:\Windows\System32\vsnp2uvc.dll
2013-01-25 14:46:09 35456 ----a-w- C:\Windows\System32\drivers\sncduvc.sys
2013-01-25 14:46:09 306176 ----a-w- C:\Windows\SysWow64\vsnp2uvc.dll
2013-01-25 14:46:09 306176 ----a-w- C:\Windows\System32\csnp2uvc.dll
2013-01-25 14:46:09 1800192 ----a-w- C:\Windows\System32\drivers\snp2uvc.sys
2013-01-25 14:44:40 -------- d-----w- C:\Program Files (x86)\Sonix
2013-01-25 14:20:36 -------- d-----w- C:\Program Files (x86)\MPC-HC
2013-01-25 13:32:11 -------- d-----w- C:\Program Files (x86)\madVR
2013-01-25 12:53:43 108448 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
2013-01-25 12:47:47 -------- d-----w- C:\Program Files (x86)\FileHippo.com
2013-01-19 14:36:52 -------- d-----w- C:\Users\Scotty\AppData\Local\Adobe
2013-01-19 14:01:47 -------- d-----w- C:\Program Files (x86)\foobar2000
2013-01-18 15:19:18 -------- d-----w- C:\Windows\System32\tokens
2013-01-18 15:19:02 10240 ----a-w- C:\Windows\sppsvc.exe
2013-01-18 15:19:02 10240 ----a-w- C:\Windows\slsvc.exe
2013-01-17 11:49:50 -------- d-----w- C:\Program Files (x86)\VstPlugins
2013-01-14 02:27:51 -------- d-----r- C:\Program Files (x86)\Skype
2013-01-14 02:19:19 -------- d-----w- C:\Users\Scotty\AppData\Roaming\BatteryCare
2013-01-14 02:19:09 -------- d-----w- C:\Program Files (x86)\BatteryCare
2013-01-13 05:02:40 -------- d-----w- C:\Users\Scotty\AppData\Local\VirtualStore
2013-01-12 21:31:23 -------- d-----w- C:\ProgramData\Freemake
2013-01-12 21:30:19 -------- d-----w- C:\Users\Scotty\AppData\Local\Programs
2013-01-12 16:40:47 -------- d--h--w- C:\Program Files (x86)\Temp
2013-01-12 16:40:43 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2013-01-12 16:40:43 204800 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2013-01-12 16:40:42 757760 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2013-01-12 16:40:42 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2013-01-12 16:40:42 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2013-01-12 16:40:42 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2013-01-12 16:40:40 331908 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2013-01-12 16:40:40 200836 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2013-01-10 19:43:36 42184 ----a-w- C:\Windows\System32\drivers\taphss6.sys
2013-01-10 19:33:50 42696 ----a-w- C:\Windows\System32\drivers\hssdrv6.sys
2013-01-09 20:56:48 2361344 ----a-w- C:\Windows\System32\msxml6.dll
2013-01-09 20:56:47 1836032 ----a-w- C:\Windows\System32\msxml3.dll
2013-01-09 20:56:46 1802240 ----a-w- C:\Windows\SysWow64\msxml6.dll
2013-01-09 20:56:46 1438720 ----a-w- C:\Windows\SysWow64\msxml3.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\SysWow64\msxml6r.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\SysWow64\msxml3r.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\System32\msxml6r.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\System32\msxml3r.dll
2013-01-09 20:56:44 86016 ----a-w- C:\Windows\System32\ncryptsslp.dll
2013-01-09 20:56:44 71168 ----a-w- C:\Windows\SysWow64\ncryptsslp.dll
2013-01-07 23:04:57 741480 ------w- C:\Windows\System32\HPDiscoPM9311.dll
2013-01-07 23:04:21 -------- d-----w- C:\Program Files (x86)\HP
2013-01-07 23:04:17 -------- d-----w- C:\Program Files\HP
2013-01-07 23:04:03 -------- d-----w- C:\Users\Scotty\AppData\Local\HP
2013-01-04 03:24:32 -------- d-----w- C:\Program Files\P4G
2013-01-04 00:32:58 438808 ----a-w- C:\Windows\System32\drivers\iaStor.sys
2013-01-04 00:19:04 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll
2012-12-29 22:25:04 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2012-12-29 22:25:04 1060864 ----a-w- C:\Windows\SysWow64\mfc71.dll
2012-12-29 22:04:59 83736 ----a-w- C:\Windows\System32\xinput1_2.dll
2012-12-29 22:02:02 -------- d--h--w- C:\Windows\msdownld.tmp
2012-12-29 22:01:56 -------- d-----w- C:\Windows\SysWow64\directx
.
==================== Find3M ====================
.
2018-08-27 06:11:05 132165 ----a-w- C:\Windows\System32\slmgr.vbs
2013-01-25 12:53:36 960416 ----a-w- C:\Windows\System32\deployJava1.dll
2013-01-25 12:53:36 1081760 ----a-w- C:\Windows\System32\npDeployJava1.dll
2013-01-19 13:19:32 56832 ----a-w- C:\Windows\System32\admwprox.dll
2013-01-19 13:19:32 190464 ----a-w- C:\Windows\System32\iisRtl.dll
2013-01-19 13:19:32 15872 ----a-w- C:\Windows\System32\wamregps.dll
2013-01-19 13:19:31 60416 ----a-w- C:\Windows\System32\ahadmin.dll
2013-01-19 13:19:31 17408 ----a-w- C:\Windows\System32\iisreset.exe
2013-01-19 13:19:30 156160 ----a-w- C:\Windows\SysWow64\iisRtl.dll
2013-01-19 13:19:30 11776 ----a-w- C:\Windows\System32\iisrstap.dll
2013-01-19 13:19:29 52736 ----a-w- C:\Windows\SysWow64\admwprox.dll
2013-01-19 13:19:29 10752 ----a-w- C:\Windows\SysWow64\wamregps.dll
2013-01-19 13:19:28 9728 ----a-w- C:\Windows\SysWow64\iisrstap.dll
2013-01-19 13:19:28 23552 ----a-w- C:\Windows\SysWow64\ahadmin.dll
2013-01-19 13:19:28 15872 ----a-w- C:\Windows\SysWow64\iisreset.exe
2013-01-12 23:24:20 269312 ----a-w- C:\Windows\SysWow64\aaclient.dll
2013-01-12 23:24:19 44544 ----a-w- C:\Windows\System32\tsgqec.dll
2013-01-12 23:24:19 37376 ----a-w- C:\Windows\SysWow64\tsgqec.dll
2013-01-12 23:24:19 322560 ----a-w- C:\Windows\System32\aaclient.dll
2013-01-12 23:24:18 96496 ----a-w- C:\Windows\System32\drivers\wfplwfs.sys
2013-01-04 04:06:10 859072 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-01-04 04:06:10 779704 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-12-25 16:42:48 76 ----a-w- C:\Windows\SysWow64\netjr32.dll
2012-12-18 23:32:58 80728 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-18 23:32:58 695640 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-12-16 08:28:20 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-12-16 08:20:01 35328 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-16 08:08:33 362496 ----a-w- C:\Windows\System32\atmfd.dll
2012-12-16 07:57:09 300032 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-06 04:23:00 170496 ----a-w- C:\Windows\System32\TimeBrokerServer.dll
2012-12-06 04:22:59 178176 ----a-w- C:\Windows\System32\SystemEventsBrokerServer.dll
2012-12-04 04:21:42 368640 ----a-w- C:\Windows\System32\sppwinob.dll
2012-12-04 03:59:08 4055552 ----a-w- C:\Windows\System32\win32k.sys
2012-11-29 05:05:57 707584 ----a-w- C:\Windows\System32\AppXDeploymentExtensions.dll
2012-11-29 05:05:57 1131520 ----a-w- C:\Windows\System32\AppXDeploymentServer.dll
2012-11-28 04:21:17 44032 ----a-w- C:\Windows\SysWow64\UXInit.dll
2012-11-28 04:20:59 53760 ----a-w- C:\Windows\System32\UXInit.dll
2012-11-27 07:00:32 194280 ----a-w- C:\Windows\System32\drivers\sdbus.sys
2012-11-27 07:00:29 124648 ----a-w- C:\Windows\System32\drivers\dumpsd.sys
2012-11-27 06:59:13 329960 ----a-w- C:\Windows\System32\drivers\storport.sys
2012-11-27 06:39:46 1122768 ----a-w- C:\Windows\System32\Taskmgr.exe
2012-11-27 04:49:20 1027152 ----a-w- C:\Windows\SysWow64\Taskmgr.exe
2012-11-27 04:20:50 1048064 ----a-w- C:\Windows\SysWow64\mstsc.exe
2012-11-27 04:20:42 179200 ----a-w- C:\Windows\SysWow64\wpnapps.dll
2012-11-27 04:20:35 891904 ----a-w- C:\Windows\SysWow64\winmde.dll
2012-11-27 04:20:31 798208 ----a-w- C:\Windows\SysWow64\WebcamUi.dll
2012-11-27 04:20:29 46592 ----a-w- C:\Windows\SysWow64\vds_ps.dll
2012-11-27 04:20:28 560128 ----a-w- C:\Windows\SysWow64\UserLanguagesCpl.dll
2012-11-27 04:20:23 1217536 ----a-w- C:\Windows\SysWow64\storagewmi.dll
2012-11-27 04:20:15 680960 ----a-w- C:\Windows\System32\vds.exe
2012-11-27 04:20:07 702464 ----a-w- C:\Windows\SysWow64\nshwfp.dll
2012-11-27 04:20:07 1123840 ----a-w- C:\Windows\System32\mstsc.exe
2012-11-27 04:19:52 5088256 ----a-w- C:\Windows\SysWow64\mstscax.dll
2012-11-27 04:19:51 256000 ----a-w- C:\Windows\System32\WSDMon.dll
2012-11-27 04:19:50 244736 ----a-w- C:\Windows\System32\wpnapps.dll
2012-11-27 04:19:42 1145856 ----a-w- C:\Windows\System32\winmde.dll
2012-11-27 04:19:37 955904 ----a-w- C:\Windows\System32\WebcamUi.dll
2012-11-27 04:19:33 631808 ----a-w- C:\Windows\System32\UserLanguagesCpl.dll
2012-11-27 04:19:32 245248 ----a-w- C:\Windows\System32\usbmon.dll
2012-11-27 04:19:25 173568 ----a-w- C:\Windows\System32\storewuauth.dll
2012-11-27 04:19:25 1536512 ----a-w- C:\Windows\System32\storagewmi.dll
2012-11-27 04:19:22 245248 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL
2012-11-27 04:19:09 3245568 ----a-w- C:\Windows\System32\rdpcorets.dll
2012-11-27 04:19:02 2033664 ----a-w- C:\Windows\SysWow64\authui.dll
2012-11-27 04:18:59 888832 ----a-w- C:\Windows\System32\nshwfp.dll
2012-11-27 04:18:39 5974528 ----a-w- C:\Windows\System32\mstscax.dll
2012-11-27 04:18:13 1071104 ----a-w- C:\Windows\System32\IKEEXT.DLL
2012-11-27 04:18:06 378880 ----a-w- C:\Windows\System32\FWPUCLNT.DLL
2012-11-27 04:17:32 718848 ----a-w- C:\Windows\System32\BFE.DLL
2012-11-27 04:17:31 2302464 ----a-w- C:\Windows\System32\authui.dll
2012-11-27 03:57:32 18432 ----a-w- C:\Windows\System32\drivers\BtaMPM.sys
2012-11-27 03:56:29 31104 ----a-w- C:\Windows\System32\drivers\BthAvrcpTg.sys
2012-11-27 03:55:44 29952 ----a-w- C:\Windows\System32\drivers\BthhfHid.sys
2012-11-20 08:00:23 6971624 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-11-20 05:24:19 1164800 ----a-w- C:\Windows\SysWow64\Display.dll
2012-11-20 05:24:17 36352 ----a-w- C:\Windows\SysWow64\DevDispItemProvider.dll
2012-11-20 05:17:23 1184256 ----a-w- C:\Windows\System32\Display.dll
2012-11-20 05:17:20 49152 ----a-w- C:\Windows\System32\DevDispItemProvider.dll
2012-11-20 05:02:46 6656 ----a-w- C:\Windows\SysWow64\KBDKURD.DLL
2012-11-20 04:59:26 7168 ----a-w- C:\Windows\System32\KBDKURD.DLL
2012-11-20 04:56:27 27136 ----a-w- C:\Windows\System32\drivers\usbohci.sys
2012-11-20 04:56:11 83456 ----a-w- C:\Windows\System32\drivers\hidclass.sys
2012-11-20 04:54:31 39936 ----a-w- C:\Windows\System32\drivers\hidi2c.sys
2012-11-15 06:08:41 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2012-11-15 06:06:34 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-11-13 04:20:30 1120768 ----a-w- C:\Windows\System32\msctf.dll
2012-11-13 04:19:23 890880 ----a-w- C:\Windows\SysWow64\msctf.dll
2012-11-10 04:23:25 132608 ----a-w- C:\Windows\SysWow64\poqexec.exe
2012-11-10 04:23:18 148480 ----a-w- C:\Windows\System32\poqexec.exe
2012-11-10 04:22:40 122880 ----a-w- C:\Windows\System32\VmHostAI.dll
2012-11-10 04:22:35 144384 ----a-w- C:\Windows\System32\tssdisai.dll
2012-11-10 04:22:14 126976 ----a-w- C:\Windows\System32\RDWebAI.dll
2012-11-10 04:20:20 135680 ----a-w- C:\Windows\System32\appserverai.dll
2012-11-09 04:49:51 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-11-09 04:03:48 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-11-08 04:25:36 523776 ----a-w- C:\Windows\SysWow64\WSShared.dll
2012-11-08 04:25:36 143872 ----a-w- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll
2012-11-08 04:25:36 124928 ----a-w- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2012-11-08 04:25:35 1775104 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-11-08 04:24:27 2881536 ----a-w- C:\Windows\SysWow64\jscript9.dll
.
============= FINISH: 14:35:03.20 ===============
My computer all of a sudden today is running at very high Disk, Memory and CPU levels. like random 90% + for seemingly no reason.
Especially the "Com Surrogate" process.
Slowed internet speeds, audio issues with youtube videos.
There is quite a bit of hanging and lagging and programs not responding, etc..
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer:
Run by ------ at 14:34:19 on 2013-01-28
Microsoft Windows 8 Enterprise 6.2.9200.0.1252.1.1033.18.2924.2121 [GMT -6:00]
.
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\dwm.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Windows\sppsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Windows\system32\taskhostex.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4396.1016_x64__8wekyb3d8bbwe\LiveComm.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Windows Defender\MpCmdRun.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.babylon.com/?affID=110195&babsrc=HP_ss&mntrId=124ff5b800000000000020cf306e65f0
uProxyOverride = <local>
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
uRun: [Google Update] "C:\Users\Scotty\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [F.lux] "C:\Users\Scotty\Local Settings\Apps\F.lux\flux.exe" /noshow
uRun: [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
uRun: [HP Deskjet 3050 J610 series (NET)] "C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN08L1D3GC05HX:NW" -scfn "HP Deskjet 3050 J610 series (NET)" -AutoStart 1
uRun: [BatteryCare] C:\Program Files (x86)\BatteryCare\BatteryCare.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab
TCP: NameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{2B04CDB1-A591-4C6F-A600-95FB75076C04} : DHCPNameServer = 75.75.75.75 75.75.76.76
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
mASetup: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll",CreateReaderUserSettings
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - <orphaned>
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\Drivers\HECIx64.sys [2009-9-17 56344]
R3 ManyCam;ManyCam Virtual Webcam;C:\Windows\System32\Drivers\mcvidrv_x64.sys [2012-10-10 44928]
R3 mcaudrv_simple;ManyCam Virtual Microphone;C:\Windows\System32\Drivers\mcaudrv_x64.sys [2012-10-10 29696]
R3 NETJME;JMicron Ethernet Adapter NDIS6.30 Driver (Amd64 Bits);C:\Windows\System32\Drivers\NETJME.sys [2012-7-5 137728]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-1-8 161536]
S3 taphss6;Anchorfree HSS VPN Adapter;C:\Windows\System32\Drivers\taphss6.sys [2013-1-10 42184]
S3 vmbusr;Virtual Machine Bus Provider;C:\Windows\System32\Drivers\vmbusr.sys [2012-7-25 117248]
.
=============== File Associations ===============
.
FileExt: .txt: txtfile=C:\Windows\System32\NOTEPAD.EXE %1 [UserChoice]
FileExt: .vbs: VBSFile="C:\Windows\System32\WScript.exe" "%1" %* [UserChoice]
.
=============== Created Last 30 ================
.
2013-01-28 15:36:26 -------- d-----w- C:\Users\Scotty\AppData\Roaming\Malwarebytes
2013-01-28 15:36:15 -------- d-----w- C:\ProgramData\Malwarebytes
2013-01-28 15:36:12 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys
2013-01-28 15:36:12 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-01-28 15:33:12 -------- d-----w- C:\Users\Scotty\AppData\Local\Diagnostics
2013-01-28 15:14:12 -------- d-----w- C:\Users\Scotty\AppData\Local\MediaShow
2013-01-28 15:10:47 -------- d-----w- C:\Users\Scotty\AppData\Local\MediaServer
2013-01-28 14:12:11 76232 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5B60A979-3321-40B7-97CD-E0271CA8627D}\offreg.dll
2013-01-28 14:06:06 9161176 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5B60A979-3321-40B7-97CD-E0271CA8627D}\mpengine.dll
2013-01-28 13:23:50 -------- d-----w- C:\Users\Scotty\AppData\Roaming\deluge
2013-01-28 13:21:13 -------- d-----w- C:\Program Files (x86)\Deluge
2013-01-28 12:04:04 -------- d-----w- C:\Windows\SysWow64\searchplugins
2013-01-28 12:04:04 -------- d-----w- C:\Windows\SysWow64\Extensions
2013-01-28 12:03:48 -------- d-----w- C:\ProgramData\Babylon
2013-01-28 11:02:02 -------- d-----w- C:\Users\Scotty\AppData\Local\CyberLink
2013-01-27 20:10:02 9161176 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2013-01-25 15:06:55 -------- d-----w- C:\Program Files\CONEXANT
2013-01-25 14:46:09 375808 ----a-w- C:\Windows\System32\vsnp2uvc.dll
2013-01-25 14:46:09 35456 ----a-w- C:\Windows\System32\drivers\sncduvc.sys
2013-01-25 14:46:09 306176 ----a-w- C:\Windows\SysWow64\vsnp2uvc.dll
2013-01-25 14:46:09 306176 ----a-w- C:\Windows\System32\csnp2uvc.dll
2013-01-25 14:46:09 1800192 ----a-w- C:\Windows\System32\drivers\snp2uvc.sys
2013-01-25 14:44:40 -------- d-----w- C:\Program Files (x86)\Sonix
2013-01-25 14:20:36 -------- d-----w- C:\Program Files (x86)\MPC-HC
2013-01-25 13:32:11 -------- d-----w- C:\Program Files (x86)\madVR
2013-01-25 12:53:43 108448 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
2013-01-25 12:47:47 -------- d-----w- C:\Program Files (x86)\FileHippo.com
2013-01-19 14:36:52 -------- d-----w- C:\Users\Scotty\AppData\Local\Adobe
2013-01-19 14:01:47 -------- d-----w- C:\Program Files (x86)\foobar2000
2013-01-18 15:19:18 -------- d-----w- C:\Windows\System32\tokens
2013-01-18 15:19:02 10240 ----a-w- C:\Windows\sppsvc.exe
2013-01-18 15:19:02 10240 ----a-w- C:\Windows\slsvc.exe
2013-01-17 11:49:50 -------- d-----w- C:\Program Files (x86)\VstPlugins
2013-01-14 02:27:51 -------- d-----r- C:\Program Files (x86)\Skype
2013-01-14 02:19:19 -------- d-----w- C:\Users\Scotty\AppData\Roaming\BatteryCare
2013-01-14 02:19:09 -------- d-----w- C:\Program Files (x86)\BatteryCare
2013-01-13 05:02:40 -------- d-----w- C:\Users\Scotty\AppData\Local\VirtualStore
2013-01-12 21:31:23 -------- d-----w- C:\ProgramData\Freemake
2013-01-12 21:30:19 -------- d-----w- C:\Users\Scotty\AppData\Local\Programs
2013-01-12 16:40:47 -------- d--h--w- C:\Program Files (x86)\Temp
2013-01-12 16:40:43 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2013-01-12 16:40:43 204800 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2013-01-12 16:40:42 757760 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2013-01-12 16:40:42 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2013-01-12 16:40:42 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2013-01-12 16:40:42 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2013-01-12 16:40:40 331908 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2013-01-12 16:40:40 200836 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2013-01-10 19:43:36 42184 ----a-w- C:\Windows\System32\drivers\taphss6.sys
2013-01-10 19:33:50 42696 ----a-w- C:\Windows\System32\drivers\hssdrv6.sys
2013-01-09 20:56:48 2361344 ----a-w- C:\Windows\System32\msxml6.dll
2013-01-09 20:56:47 1836032 ----a-w- C:\Windows\System32\msxml3.dll
2013-01-09 20:56:46 1802240 ----a-w- C:\Windows\SysWow64\msxml6.dll
2013-01-09 20:56:46 1438720 ----a-w- C:\Windows\SysWow64\msxml3.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\SysWow64\msxml6r.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\SysWow64\msxml3r.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\System32\msxml6r.dll
2013-01-09 20:56:45 2048 ----a-w- C:\Windows\System32\msxml3r.dll
2013-01-09 20:56:44 86016 ----a-w- C:\Windows\System32\ncryptsslp.dll
2013-01-09 20:56:44 71168 ----a-w- C:\Windows\SysWow64\ncryptsslp.dll
2013-01-07 23:04:57 741480 ------w- C:\Windows\System32\HPDiscoPM9311.dll
2013-01-07 23:04:21 -------- d-----w- C:\Program Files (x86)\HP
2013-01-07 23:04:17 -------- d-----w- C:\Program Files\HP
2013-01-07 23:04:03 -------- d-----w- C:\Users\Scotty\AppData\Local\HP
2013-01-04 03:24:32 -------- d-----w- C:\Program Files\P4G
2013-01-04 00:32:58 438808 ----a-w- C:\Windows\System32\drivers\iaStor.sys
2013-01-04 00:19:04 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll
2012-12-29 22:25:04 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2012-12-29 22:25:04 1060864 ----a-w- C:\Windows\SysWow64\mfc71.dll
2012-12-29 22:04:59 83736 ----a-w- C:\Windows\System32\xinput1_2.dll
2012-12-29 22:02:02 -------- d--h--w- C:\Windows\msdownld.tmp
2012-12-29 22:01:56 -------- d-----w- C:\Windows\SysWow64\directx
.
==================== Find3M ====================
.
2018-08-27 06:11:05 132165 ----a-w- C:\Windows\System32\slmgr.vbs
2013-01-25 12:53:36 960416 ----a-w- C:\Windows\System32\deployJava1.dll
2013-01-25 12:53:36 1081760 ----a-w- C:\Windows\System32\npDeployJava1.dll
2013-01-19 13:19:32 56832 ----a-w- C:\Windows\System32\admwprox.dll
2013-01-19 13:19:32 190464 ----a-w- C:\Windows\System32\iisRtl.dll
2013-01-19 13:19:32 15872 ----a-w- C:\Windows\System32\wamregps.dll
2013-01-19 13:19:31 60416 ----a-w- C:\Windows\System32\ahadmin.dll
2013-01-19 13:19:31 17408 ----a-w- C:\Windows\System32\iisreset.exe
2013-01-19 13:19:30 156160 ----a-w- C:\Windows\SysWow64\iisRtl.dll
2013-01-19 13:19:30 11776 ----a-w- C:\Windows\System32\iisrstap.dll
2013-01-19 13:19:29 52736 ----a-w- C:\Windows\SysWow64\admwprox.dll
2013-01-19 13:19:29 10752 ----a-w- C:\Windows\SysWow64\wamregps.dll
2013-01-19 13:19:28 9728 ----a-w- C:\Windows\SysWow64\iisrstap.dll
2013-01-19 13:19:28 23552 ----a-w- C:\Windows\SysWow64\ahadmin.dll
2013-01-19 13:19:28 15872 ----a-w- C:\Windows\SysWow64\iisreset.exe
2013-01-12 23:24:20 269312 ----a-w- C:\Windows\SysWow64\aaclient.dll
2013-01-12 23:24:19 44544 ----a-w- C:\Windows\System32\tsgqec.dll
2013-01-12 23:24:19 37376 ----a-w- C:\Windows\SysWow64\tsgqec.dll
2013-01-12 23:24:19 322560 ----a-w- C:\Windows\System32\aaclient.dll
2013-01-12 23:24:18 96496 ----a-w- C:\Windows\System32\drivers\wfplwfs.sys
2013-01-04 04:06:10 859072 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-01-04 04:06:10 779704 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-12-25 16:42:48 76 ----a-w- C:\Windows\SysWow64\netjr32.dll
2012-12-18 23:32:58 80728 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-18 23:32:58 695640 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-12-16 08:28:20 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-12-16 08:20:01 35328 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-16 08:08:33 362496 ----a-w- C:\Windows\System32\atmfd.dll
2012-12-16 07:57:09 300032 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-06 04:23:00 170496 ----a-w- C:\Windows\System32\TimeBrokerServer.dll
2012-12-06 04:22:59 178176 ----a-w- C:\Windows\System32\SystemEventsBrokerServer.dll
2012-12-04 04:21:42 368640 ----a-w- C:\Windows\System32\sppwinob.dll
2012-12-04 03:59:08 4055552 ----a-w- C:\Windows\System32\win32k.sys
2012-11-29 05:05:57 707584 ----a-w- C:\Windows\System32\AppXDeploymentExtensions.dll
2012-11-29 05:05:57 1131520 ----a-w- C:\Windows\System32\AppXDeploymentServer.dll
2012-11-28 04:21:17 44032 ----a-w- C:\Windows\SysWow64\UXInit.dll
2012-11-28 04:20:59 53760 ----a-w- C:\Windows\System32\UXInit.dll
2012-11-27 07:00:32 194280 ----a-w- C:\Windows\System32\drivers\sdbus.sys
2012-11-27 07:00:29 124648 ----a-w- C:\Windows\System32\drivers\dumpsd.sys
2012-11-27 06:59:13 329960 ----a-w- C:\Windows\System32\drivers\storport.sys
2012-11-27 06:39:46 1122768 ----a-w- C:\Windows\System32\Taskmgr.exe
2012-11-27 04:49:20 1027152 ----a-w- C:\Windows\SysWow64\Taskmgr.exe
2012-11-27 04:20:50 1048064 ----a-w- C:\Windows\SysWow64\mstsc.exe
2012-11-27 04:20:42 179200 ----a-w- C:\Windows\SysWow64\wpnapps.dll
2012-11-27 04:20:35 891904 ----a-w- C:\Windows\SysWow64\winmde.dll
2012-11-27 04:20:31 798208 ----a-w- C:\Windows\SysWow64\WebcamUi.dll
2012-11-27 04:20:29 46592 ----a-w- C:\Windows\SysWow64\vds_ps.dll
2012-11-27 04:20:28 560128 ----a-w- C:\Windows\SysWow64\UserLanguagesCpl.dll
2012-11-27 04:20:23 1217536 ----a-w- C:\Windows\SysWow64\storagewmi.dll
2012-11-27 04:20:15 680960 ----a-w- C:\Windows\System32\vds.exe
2012-11-27 04:20:07 702464 ----a-w- C:\Windows\SysWow64\nshwfp.dll
2012-11-27 04:20:07 1123840 ----a-w- C:\Windows\System32\mstsc.exe
2012-11-27 04:19:52 5088256 ----a-w- C:\Windows\SysWow64\mstscax.dll
2012-11-27 04:19:51 256000 ----a-w- C:\Windows\System32\WSDMon.dll
2012-11-27 04:19:50 244736 ----a-w- C:\Windows\System32\wpnapps.dll
2012-11-27 04:19:42 1145856 ----a-w- C:\Windows\System32\winmde.dll
2012-11-27 04:19:37 955904 ----a-w- C:\Windows\System32\WebcamUi.dll
2012-11-27 04:19:33 631808 ----a-w- C:\Windows\System32\UserLanguagesCpl.dll
2012-11-27 04:19:32 245248 ----a-w- C:\Windows\System32\usbmon.dll
2012-11-27 04:19:25 173568 ----a-w- C:\Windows\System32\storewuauth.dll
2012-11-27 04:19:25 1536512 ----a-w- C:\Windows\System32\storagewmi.dll
2012-11-27 04:19:22 245248 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL
2012-11-27 04:19:09 3245568 ----a-w- C:\Windows\System32\rdpcorets.dll
2012-11-27 04:19:02 2033664 ----a-w- C:\Windows\SysWow64\authui.dll
2012-11-27 04:18:59 888832 ----a-w- C:\Windows\System32\nshwfp.dll
2012-11-27 04:18:39 5974528 ----a-w- C:\Windows\System32\mstscax.dll
2012-11-27 04:18:13 1071104 ----a-w- C:\Windows\System32\IKEEXT.DLL
2012-11-27 04:18:06 378880 ----a-w- C:\Windows\System32\FWPUCLNT.DLL
2012-11-27 04:17:32 718848 ----a-w- C:\Windows\System32\BFE.DLL
2012-11-27 04:17:31 2302464 ----a-w- C:\Windows\System32\authui.dll
2012-11-27 03:57:32 18432 ----a-w- C:\Windows\System32\drivers\BtaMPM.sys
2012-11-27 03:56:29 31104 ----a-w- C:\Windows\System32\drivers\BthAvrcpTg.sys
2012-11-27 03:55:44 29952 ----a-w- C:\Windows\System32\drivers\BthhfHid.sys
2012-11-20 08:00:23 6971624 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-11-20 05:24:19 1164800 ----a-w- C:\Windows\SysWow64\Display.dll
2012-11-20 05:24:17 36352 ----a-w- C:\Windows\SysWow64\DevDispItemProvider.dll
2012-11-20 05:17:23 1184256 ----a-w- C:\Windows\System32\Display.dll
2012-11-20 05:17:20 49152 ----a-w- C:\Windows\System32\DevDispItemProvider.dll
2012-11-20 05:02:46 6656 ----a-w- C:\Windows\SysWow64\KBDKURD.DLL
2012-11-20 04:59:26 7168 ----a-w- C:\Windows\System32\KBDKURD.DLL
2012-11-20 04:56:27 27136 ----a-w- C:\Windows\System32\drivers\usbohci.sys
2012-11-20 04:56:11 83456 ----a-w- C:\Windows\System32\drivers\hidclass.sys
2012-11-20 04:54:31 39936 ----a-w- C:\Windows\System32\drivers\hidi2c.sys
2012-11-15 06:08:41 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2012-11-15 06:06:34 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-11-13 04:20:30 1120768 ----a-w- C:\Windows\System32\msctf.dll
2012-11-13 04:19:23 890880 ----a-w- C:\Windows\SysWow64\msctf.dll
2012-11-10 04:23:25 132608 ----a-w- C:\Windows\SysWow64\poqexec.exe
2012-11-10 04:23:18 148480 ----a-w- C:\Windows\System32\poqexec.exe
2012-11-10 04:22:40 122880 ----a-w- C:\Windows\System32\VmHostAI.dll
2012-11-10 04:22:35 144384 ----a-w- C:\Windows\System32\tssdisai.dll
2012-11-10 04:22:14 126976 ----a-w- C:\Windows\System32\RDWebAI.dll
2012-11-10 04:20:20 135680 ----a-w- C:\Windows\System32\appserverai.dll
2012-11-09 04:49:51 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-11-09 04:03:48 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-11-08 04:25:36 523776 ----a-w- C:\Windows\SysWow64\WSShared.dll
2012-11-08 04:25:36 143872 ----a-w- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll
2012-11-08 04:25:36 124928 ----a-w- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2012-11-08 04:25:35 1775104 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-11-08 04:24:27 2881536 ----a-w- C:\Windows\SysWow64\jscript9.dll
.
============= FINISH: 14:35:03.20 ===============