Results 1 to 8 of 8

Thread: New Comp Came w/ Pop-Ups and Re-Directs not controlled by Standard Means

  1. #1
    Junior Member
    Join Date
    Jul 2012
    Posts
    29

    Default New Comp Came w/ Pop-Ups and Re-Directs not controlled by Standard Means

    Here are the requested logs. Please help. Tower is less than a month old, and has re-directed to websites and flooded pages with pop-ups, even with the proper browser settings. It has to be rooted somewhere deep in the computer's many crappy pre-loaded software programs.

    Help?


    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
    Ran by Sharon (administrator) on MAIN-PC on 26-03-2015 21:51:40
    Running from C:\Users\Sharon\Downloads
    Loaded Profiles: Sharon (Available profiles: Sharon)
    Platform: Windows 8.1 (X64) OS Language: English (United States)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Microsoft Corporation) C:\Windows\System32\wlanext.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
    (Microsoft Corporation) C:\Windows\System32\dasHost.exe
    (McAfee, Inc.) C:\Windows\System32\mfevtps.exe
    () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
    (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
    (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
    (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
    (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
    (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-06-13] (Realtek Semiconductor)
    HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
    HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
    HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
    HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-06] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKLM\...\Policies\Explorer: [NoFolderOptions] 0
    HKLM\...\Policies\Explorer: [NoControlPanel] 0
    BootExecute: autocheck autochk * sdnclean64.exe
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstatio...Ptab&tp=iehome
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKLM -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    SearchScopes: HKLM-x32 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    SearchScopes: HKU\S-1-5-21-951477398-4118864522-2970026866-1001 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
    BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
    BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-04-04] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
    BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
    Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    StartMenuInternet: IEXPLORE.EXE - iexplore.exe

    FireFox:
    ========
    FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
    FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
    FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
    FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-03] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
    FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-12-04]

    Chrome:
    =======
    CHR Profile: C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-06]
    CHR Extension: (Google Docs) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-06]
    CHR Extension: (Google Drive) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-06]
    CHR Extension: (Strong Signal) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhcklkloafcpghahpjomodagghgpdmgb [2015-03-06]
    CHR Extension: (YouTube) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-06]
    CHR Extension: (Google Search) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-06]
    CHR Extension: (Google Sheets) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-06]
    CHR Extension: (Calm Beach By RB Themes) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\kghgclggfkhahhmdgjcpcfkfofdbikgf [2015-03-06]
    CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-06]
    CHR Extension: (Google Wallet) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
    CHR Extension: (Gmail) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-06]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
    R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-06-03] (Hewlett-Packard Company) [File not signed]
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
    R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
    S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
    R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
    R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
    S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
    R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
    R2 mfevtp; C:\windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
    R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
    R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
    R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-06-13] (Realtek Semiconductor)
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [51712 2014-06-16] (Advanced Micro Devices, Inc.)
    S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 amdkmcsp; C:\Windows\System32\drivers\amdkmcsp.sys [85704 2014-06-16] (Advanced Micro Devices, Inc. )
    R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2014-06-16] (Advanced Micro Devices, Inc.)
    R0 amdpsp; C:\Windows\System32\drivers\amdpsp.sys [230088 2014-06-16] (Advanced Micro Devices, Inc. )
    R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-06-16] (Advanced Micro Devices)
    R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
    R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
    S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
    S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
    R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-03-26] (Malwarebytes Corporation)
    S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
    R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
    R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
    S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
    R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
    R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
    R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
    S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
    R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
    R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-03-26 21:51 - 2015-03-26 21:52 - 00017985 _____ () C:\Users\Sharon\Downloads\FRST.txt
    2015-03-26 21:49 - 2015-03-26 21:49 - 00001162 _____ () C:\Users\Sharon\Desktop\FRST64 - Shortcut.lnk
    2015-03-26 21:47 - 2015-03-26 21:51 - 00000000 ____D () C:\FRST
    2015-03-26 21:47 - 2015-03-26 21:47 - 02095616 _____ (Farbar) C:\Users\Sharon\Downloads\FRST64.exe
    2015-03-26 21:41 - 2015-03-26 21:41 - 00000207 _____ () C:\windows\tweaking.com-regbackup-MAIN-PC-Windows-8.1-(64-bit).dat
    2015-03-26 21:40 - 2015-03-26 21:40 - 00000000 ____D () C:\RegBackup
    2015-03-26 21:32 - 2015-03-26 21:32 - 01367040 _____ (Indigo Rose Corporation) C:\Users\Sharon\Desktop\uninstall.exe
    2015-03-26 21:32 - 2015-03-26 21:32 - 00325960 _____ () C:\Users\Sharon\Desktop\lua5.1.dll
    2015-03-26 21:32 - 2015-03-26 21:32 - 00001526 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\Uninstall
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\files
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\color_presets
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2015-03-26 21:31 - 2015-03-26 21:31 - 04720448 _____ () C:\Users\Sharon\Downloads\tweaking.com_registry_backup_setup.exe
    2015-03-24 18:13 - 2015-03-10 18:08 - 01107456 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00943104 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00760320 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00677888 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
    2015-03-24 18:12 - 2015-03-10 22:38 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
    2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\MediaShow
    2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
    2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\Documents\CyberLink
    2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\CyberLink
    2015-03-21 14:27 - 2015-03-21 14:27 - 00000000 ____D () C:\Users\Sharon\AppData\Local\CyberLink
    2015-03-20 16:46 - 2015-03-20 16:46 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
    2015-03-14 14:40 - 2015-03-14 14:40 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieBrowserModeList
    2015-03-14 09:41 - 2015-03-04 17:24 - 00792032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
    2015-03-14 09:41 - 2015-03-04 17:24 - 00178144 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-03-13 23:47 - 2015-03-13 23:55 - 00000000 ____D () C:\windows\system32\MRT
    2015-03-13 23:47 - 2015-02-26 21:14 - 122905848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
    2015-03-13 22:49 - 2015-03-26 21:51 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
    2015-03-13 22:48 - 2015-03-26 17:27 - 00001081 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-03-13 22:48 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
    2015-03-13 22:48 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
    2015-03-13 22:48 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
    2015-03-13 22:48 - 2015-03-13 22:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2015-03-13 22:43 - 2015-03-13 22:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.4.1028.exe
    2015-03-13 22:41 - 2014-07-24 09:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
    2015-03-13 22:41 - 2014-07-24 09:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
    2015-03-13 22:41 - 2014-07-24 09:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
    2015-03-13 22:41 - 2014-07-24 09:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
    2015-03-13 22:41 - 2014-07-24 09:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
    2015-03-13 22:41 - 2014-07-24 09:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
    2015-03-13 22:41 - 2014-07-24 09:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
    2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
    2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
    2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
    2015-03-13 22:41 - 2014-07-24 06:33 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
    2015-03-13 22:41 - 2014-07-24 06:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
    2015-03-13 22:41 - 2014-07-24 06:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
    2015-03-13 22:41 - 2014-07-24 05:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
    2015-03-13 22:41 - 2014-07-24 05:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
    2015-03-13 22:41 - 2014-07-24 05:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
    2015-03-13 22:41 - 2014-07-24 05:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
    2015-03-13 22:41 - 2014-07-24 05:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
    2015-03-13 22:41 - 2014-07-24 05:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
    2015-03-13 22:41 - 2014-07-24 05:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
    2015-03-13 22:41 - 2014-07-24 05:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
    2015-03-13 22:41 - 2014-07-24 05:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
    2015-03-13 22:41 - 2014-07-24 04:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
    2015-03-13 22:41 - 2014-07-24 04:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
    2015-03-13 22:41 - 2014-07-24 04:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
    2015-03-13 22:41 - 2014-07-24 04:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
    2015-03-13 22:41 - 2014-07-24 04:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
    2015-03-13 22:41 - 2014-07-24 04:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
    2015-03-13 22:41 - 2014-07-24 04:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
    2015-03-13 22:41 - 2014-07-24 04:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
    2015-03-13 22:41 - 2014-07-24 04:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
    2015-03-13 22:41 - 2014-07-24 04:06 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
    2015-03-13 22:41 - 2014-07-24 04:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
    2015-03-13 22:41 - 2014-07-24 04:04 - 00667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
    2015-03-13 22:41 - 2014-07-24 03:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
    2015-03-13 22:41 - 2014-07-24 03:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
    2015-03-13 22:41 - 2014-07-24 03:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
    2015-03-13 22:41 - 2014-07-24 03:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
    2015-03-13 22:41 - 2014-07-12 00:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
    2015-03-13 22:41 - 2014-07-04 06:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
    2015-03-13 22:41 - 2014-07-04 06:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
    2015-03-13 22:41 - 2014-07-04 05:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
    2015-03-13 22:41 - 2014-06-25 20:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
    2015-03-13 22:41 - 2014-06-14 01:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
    2015-03-13 22:41 - 2014-06-07 06:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
    2015-03-13 22:41 - 2014-06-05 05:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
    2015-03-13 22:41 - 2014-05-31 00:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
    2015-03-13 22:41 - 2014-05-29 01:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
    2015-03-13 22:41 - 2014-05-10 04:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
    2015-03-13 22:41 - 2014-05-05 20:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
    2015-03-13 22:41 - 2014-03-24 21:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
    2015-03-13 22:41 - 2014-03-24 21:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
    2015-03-13 22:39 - 2015-03-13 22:39 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
    2015-03-13 22:38 - 2015-03-14 08:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2015-03-13 22:38 - 2015-03-13 22:41 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2015-03-13 22:38 - 2015-03-13 22:38 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2015-03-13 22:38 - 2015-03-13 22:38 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
    2015-03-13 22:38 - 2015-03-13 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2015-03-13 22:38 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
    2015-03-13 22:36 - 2015-03-13 22:37 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Sharon\Downloads\spybot-2.4.exe
    2015-03-13 22:35 - 2014-07-24 11:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
    2015-03-13 22:35 - 2014-07-24 11:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
    2015-03-13 22:35 - 2014-07-24 11:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
    2015-03-13 22:35 - 2014-07-24 11:25 - 00054752 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
    2015-03-13 22:35 - 2014-07-24 11:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
    2015-03-13 22:35 - 2014-07-24 11:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
    2015-03-13 22:35 - 2014-07-24 07:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
    2015-03-13 22:35 - 2014-07-24 07:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
    2015-03-13 22:35 - 2014-07-24 07:33 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
    2015-03-13 22:35 - 2014-07-24 07:33 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
    2015-03-13 22:35 - 2014-07-24 07:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
    2015-03-13 22:35 - 2014-07-24 07:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
    2015-03-13 22:35 - 2014-07-24 06:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
    2015-03-13 22:35 - 2014-07-24 06:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
    2015-03-13 22:35 - 2014-07-24 05:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
    2015-03-13 22:35 - 2014-07-24 05:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
    2015-03-13 22:35 - 2014-07-24 05:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
    2015-03-13 22:35 - 2014-07-24 05:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
    2015-03-13 22:35 - 2014-07-24 05:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
    2015-03-13 22:35 - 2014-07-24 04:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
    2015-03-13 22:35 - 2014-07-24 04:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
    2015-03-13 22:35 - 2014-07-24 04:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
    2015-03-13 22:35 - 2014-07-24 04:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
    2015-03-13 22:35 - 2014-07-24 04:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
    2015-03-13 22:35 - 2014-07-24 04:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
    2015-03-13 22:35 - 2014-07-24 04:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
    2015-03-13 22:35 - 2014-07-24 04:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
    2015-03-13 22:35 - 2014-07-24 04:19 - 00388608 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
    2015-03-13 22:35 - 2014-07-24 04:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
    2015-03-13 22:35 - 2014-07-24 04:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
    2015-03-13 22:35 - 2014-07-24 04:18 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
    2015-03-13 22:35 - 2014-07-24 04:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
    2015-03-13 22:35 - 2014-07-24 04:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
    2015-03-13 22:35 - 2014-07-24 04:15 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
    2015-03-13 22:35 - 2014-07-24 04:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
    2015-03-13 22:35 - 2014-07-24 04:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
    2015-03-13 22:35 - 2014-07-24 04:07 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
    2015-03-13 22:35 - 2014-07-24 04:02 - 03465216 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
    2015-03-13 22:35 - 2014-07-24 04:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
    2015-03-13 22:35 - 2014-07-24 04:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
    2015-03-13 22:35 - 2014-07-24 03:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
    2015-03-13 22:35 - 2014-07-24 03:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
    2015-03-13 22:35 - 2014-07-12 01:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
    2015-03-13 22:35 - 2014-07-04 06:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
    2015-03-13 22:35 - 2014-06-27 02:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
    2015-03-13 22:35 - 2014-06-19 19:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
    2015-03-13 22:35 - 2014-06-18 22:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
    2015-03-13 22:35 - 2014-06-07 08:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
    2015-03-13 22:35 - 2014-05-31 01:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
    2015-03-13 22:34 - 2014-07-24 11:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
    2015-03-13 22:34 - 2014-07-24 11:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
    2015-03-13 22:34 - 2014-07-24 11:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
    2015-03-13 22:34 - 2014-07-24 11:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
    2015-03-13 22:34 - 2014-07-24 11:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
    2015-03-13 22:34 - 2014-07-24 11:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
    2015-03-13 22:34 - 2014-07-24 11:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
    2015-03-13 22:34 - 2014-07-24 07:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
    2015-03-13 22:34 - 2014-07-24 07:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
    2015-03-13 22:34 - 2014-07-24 07:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
    2015-03-13 22:34 - 2014-07-24 07:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
    2015-03-13 22:34 - 2014-07-24 06:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
    2015-03-13 22:34 - 2014-07-24 06:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
    2015-03-13 22:34 - 2014-07-24 06:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
    2015-03-13 22:34 - 2014-07-24 06:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
    2015-03-13 22:34 - 2014-07-24 06:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
    2015-03-13 22:34 - 2014-07-24 06:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
    2015-03-13 22:34 - 2014-07-24 05:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
    2015-03-13 22:34 - 2014-07-24 05:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
    2015-03-13 22:34 - 2014-07-24 05:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
    2015-03-13 22:34 - 2014-07-24 05:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
    2015-03-13 22:34 - 2014-07-24 05:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
    2015-03-13 22:34 - 2014-07-24 05:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
    2015-03-13 22:34 - 2014-07-24 05:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
    2015-03-13 22:34 - 2014-07-24 04:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
    2015-03-13 22:34 - 2014-07-24 04:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
    2015-03-13 22:34 - 2014-07-24 04:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
    2015-03-13 22:34 - 2014-07-24 04:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
    2015-03-13 22:34 - 2014-07-24 04:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
    2015-03-13 22:34 - 2014-07-24 03:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
    2015-03-13 22:34 - 2014-07-24 03:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
    2015-03-13 22:34 - 2014-07-04 08:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
    2015-03-13 22:34 - 2014-07-04 05:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
    2015-03-13 22:34 - 2014-06-25 20:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
    2015-03-13 22:34 - 2014-06-14 02:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
    2015-03-13 22:34 - 2014-05-29 02:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
    2015-03-13 22:34 - 2014-05-10 06:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
    2015-03-13 22:34 - 2014-05-06 00:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
    2015-03-13 22:33 - 2014-07-24 11:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
    2015-03-13 22:33 - 2014-07-24 11:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
    2015-03-13 22:33 - 2014-07-24 07:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
    2015-03-13 22:33 - 2014-07-24 07:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
    2015-03-13 22:33 - 2014-07-24 04:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
    2015-03-13 22:33 - 2014-07-04 06:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
    2015-03-13 22:33 - 2014-06-05 06:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
    2015-03-13 22:33 - 2014-05-26 03:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
    2015-03-13 22:33 - 2014-03-24 22:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
    2015-03-13 22:33 - 2014-03-24 22:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
    2015-03-11 19:14 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
    2015-03-10 20:13 - 2015-02-06 19:09 - 00396419 _____ () C:\windows\system32\ApnDatabase.xml
    2015-03-10 20:13 - 2015-02-03 19:58 - 00264000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
    2015-03-10 20:13 - 2015-02-03 19:58 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
    2015-03-10 20:13 - 2015-02-03 19:58 - 00044024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
    2015-03-10 20:13 - 2015-02-02 19:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
    2015-03-10 20:13 - 2015-02-02 19:53 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
    2015-03-10 20:13 - 2015-01-26 23:44 - 00933888 _____ (Microsoft Corporation) C:\windows\system32\calc.exe
    2015-03-10 20:13 - 2015-01-23 21:51 - 00816128 _____ (Microsoft Corporation) C:\windows\SysWOW64\calc.exe
    2015-03-10 20:13 - 2015-01-23 03:17 - 00723072 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
    2015-03-10 20:13 - 2015-01-23 01:02 - 00560392 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
    2015-03-10 20:11 - 2015-03-05 22:53 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
    2015-03-10 20:11 - 2015-03-05 22:33 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
    2015-03-10 20:11 - 2015-02-25 19:26 - 04178944 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
    2015-03-10 20:11 - 2015-02-19 23:03 - 00358912 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
    2015-03-10 20:11 - 2015-02-19 22:58 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
    2015-03-10 20:11 - 2015-02-19 22:20 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
    2015-03-10 20:11 - 2015-02-19 22:15 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
    2015-03-10 20:11 - 2015-01-30 19:42 - 03097600 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
    2015-03-10 20:11 - 2015-01-30 19:29 - 02484224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
    2015-03-10 20:11 - 2015-01-28 21:58 - 00347136 _____ (Microsoft Corporation) C:\windows\system32\photowiz.dll
    2015-03-10 20:11 - 2015-01-28 21:29 - 00290816 _____ (Microsoft Corporation) C:\windows\SysWOW64\photowiz.dll
    2015-03-10 20:11 - 2014-10-28 22:49 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
    2015-03-10 20:11 - 2014-10-28 22:44 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
    2015-03-10 20:11 - 2014-10-28 22:44 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
    2015-03-10 20:11 - 2014-10-28 22:04 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
    2015-03-10 20:11 - 2014-10-28 22:00 - 00077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
    2015-03-10 20:11 - 2014-10-28 22:00 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
    2015-03-10 20:10 - 2015-02-05 16:24 - 01113920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
    2015-03-10 20:10 - 2015-01-28 21:04 - 01091072 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
    2015-03-10 20:10 - 2015-01-28 21:04 - 00864256 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
    2015-03-10 20:10 - 2014-10-28 22:43 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\printui.exe
    2015-03-10 20:10 - 2014-10-28 22:34 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
    2015-03-10 20:10 - 2014-10-28 22:04 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\findnetprinters.dll
    2015-03-10 20:10 - 2014-10-28 21:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.exe
    2015-03-10 20:10 - 2014-10-28 21:52 - 00289280 _____ (Microsoft Corporation) C:\windows\SysWOW64\compstui.dll
    2015-03-10 20:10 - 2014-10-28 21:51 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
    2015-03-10 20:10 - 2014-10-28 21:45 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
    2015-03-10 20:10 - 2014-10-28 21:28 - 00055808 _____ (Microsoft Corporation) C:\windows\SysWOW64\findnetprinters.dll
    2015-03-10 20:10 - 2014-10-28 21:20 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
    2015-03-10 20:10 - 2014-10-28 21:15 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
    2015-03-10 20:10 - 2014-10-28 20:55 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
    2015-03-10 20:10 - 2014-10-28 20:44 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
    2015-03-10 20:10 - 2014-10-28 20:41 - 00269312 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
    2015-03-10 20:10 - 2014-10-28 20:35 - 00203776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
    2015-03-10 20:09 - 2015-02-05 21:28 - 02257408 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
    2015-03-10 20:09 - 2015-02-05 21:08 - 01943040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
    2015-03-10 20:09 - 2015-02-02 20:03 - 03551744 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_47.dll
    2015-03-10 20:09 - 2015-02-02 20:02 - 04298240 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_47.dll
    2015-03-10 20:09 - 2015-01-29 23:01 - 00097792 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys
    2015-03-10 20:09 - 2015-01-29 22:03 - 01488896 _____ (Microsoft Corporation) C:\windows\system32\mfc42u.dll
    2015-03-10 20:09 - 2015-01-29 22:03 - 01464832 _____ (Microsoft Corporation) C:\windows\system32\mfc42.dll
    2015-03-10 20:09 - 2015-01-29 21:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42u.dll
    2015-03-10 20:09 - 2015-01-29 21:42 - 01204224 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42.dll
    2015-03-10 20:09 - 2015-01-29 21:29 - 00035840 _____ (Microsoft Corporation) C:\windows\SysWOW64\atlthunk.dll
    2015-03-10 20:09 - 2015-01-28 21:11 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
    2015-03-10 20:09 - 2015-01-28 21:00 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
    2015-03-10 20:09 - 2015-01-28 20:59 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
    2015-03-10 20:09 - 2015-01-28 20:55 - 00971776 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
    2015-03-10 20:09 - 2015-01-28 20:50 - 00811008 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
    2015-03-10 20:09 - 2015-01-28 20:49 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
    2015-03-10 20:09 - 2015-01-28 11:41 - 07472960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
    2015-03-10 20:09 - 2015-01-28 11:41 - 01733440 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
    2015-03-10 20:09 - 2015-01-28 11:41 - 01498360 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
    2015-03-10 20:09 - 2015-01-27 22:24 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\StorageContextHandler.dll
    2015-03-10 20:09 - 2015-01-27 21:47 - 00060928 _____ (Microsoft Corporation) C:\windows\SysWOW64\StorageContextHandler.dll
    2015-03-10 20:09 - 2014-10-28 22:34 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WSCollect.exe
    2015-03-10 20:09 - 2014-10-28 22:34 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe
    2015-03-10 20:09 - 2014-10-28 21:28 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\atlthunk.dll
    2015-03-10 20:09 - 2014-10-28 21:13 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
    2015-03-10 20:09 - 2014-10-28 20:55 - 00223744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
    2015-03-10 20:08 - 2015-01-30 19:20 - 00203264 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
    2015-03-10 20:08 - 2015-01-29 22:02 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\eappgnui.dll
    2015-03-10 20:08 - 2015-01-29 21:40 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappgnui.dll
    2015-03-10 20:08 - 2015-01-29 21:37 - 00331776 _____ (Microsoft Corporation) C:\windows\system32\eapp3hst.dll
    2015-03-10 20:08 - 2015-01-29 21:24 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\eapphost.dll
    2015-03-10 20:08 - 2015-01-29 21:24 - 00250880 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapp3hst.dll
    2015-03-10 20:08 - 2015-01-29 21:16 - 00266752 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapphost.dll
    2015-03-10 20:08 - 2015-01-29 21:08 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\eappcfg.dll
    2015-03-10 20:08 - 2015-01-29 21:06 - 00278016 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappcfg.dll
    2015-03-10 20:08 - 2015-01-27 00:22 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
    2015-03-10 20:08 - 2015-01-26 22:11 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
    2015-03-10 20:08 - 2014-10-28 23:56 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
    2015-03-10 20:08 - 2014-10-28 22:37 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
    2015-03-10 20:08 - 2014-10-28 21:19 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\eappprxy.dll
    2015-03-10 20:08 - 2014-10-28 20:59 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappprxy.dll
    2015-03-10 20:05 - 2015-02-20 21:16 - 25021440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
    2015-03-10 20:05 - 2015-02-20 20:41 - 12827648 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
    2015-03-10 20:05 - 2015-02-20 20:27 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
    2015-03-10 20:05 - 2015-02-20 20:27 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
    2015-03-10 20:05 - 2015-02-20 20:25 - 19720192 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
    2015-03-10 20:05 - 2015-02-20 19:58 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
    2015-03-10 20:05 - 2015-02-20 19:32 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
    2015-03-10 20:05 - 2015-02-19 22:49 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
    2015-03-10 20:05 - 2015-02-19 22:48 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
    2015-03-10 20:05 - 2015-02-19 22:47 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
    2015-03-10 20:05 - 2015-02-19 22:35 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
    2015-03-10 20:05 - 2015-02-19 22:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
    2015-03-10 20:05 - 2015-02-19 22:32 - 06035456 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
    2015-03-10 20:05 - 2015-02-19 22:09 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
    2015-03-10 20:05 - 2015-02-19 22:07 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
    2015-03-10 20:05 - 2015-02-19 22:06 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
    2015-03-10 20:05 - 2015-02-19 22:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
    2015-03-10 20:05 - 2015-02-19 22:03 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
    2015-03-10 20:05 - 2015-02-19 21:59 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
    2015-03-10 20:05 - 2015-02-19 21:56 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
    2015-03-10 20:05 - 2015-02-19 21:52 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
    2015-03-10 20:05 - 2015-02-19 21:49 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
    2015-03-10 20:05 - 2015-02-19 21:49 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
    2015-03-10 20:05 - 2015-02-19 21:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
    2015-03-10 20:05 - 2015-02-19 21:43 - 14398976 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
    2015-03-10 20:05 - 2015-02-19 21:30 - 04300288 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
    2015-03-10 20:05 - 2015-02-19 21:30 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
    2015-03-10 20:05 - 2015-02-19 21:29 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
    2015-03-10 20:05 - 2015-02-19 21:28 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
    2015-03-10 20:05 - 2015-02-19 21:26 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
    2015-03-10 20:05 - 2015-02-19 21:24 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
    2015-03-10 20:05 - 2015-02-19 21:24 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
    2015-03-10 20:05 - 2015-02-19 21:16 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
    2015-03-10 20:05 - 2015-02-19 21:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
    2015-03-10 20:05 - 2015-02-19 21:01 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
    2015-03-10 20:05 - 2015-02-19 20:57 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
    2015-03-10 20:05 - 2015-02-19 20:55 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
    2015-03-10 20:04 - 2015-02-12 13:40 - 22291584 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
    2015-03-10 20:04 - 2015-02-12 13:34 - 19731824 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
    2015-03-10 20:04 - 2015-02-07 19:57 - 01090048 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
    2015-03-10 20:04 - 2015-02-07 19:49 - 00791040 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
    2015-03-10 20:04 - 2015-01-29 14:45 - 01763352 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
    2015-03-10 20:04 - 2015-01-29 14:34 - 01488040 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
    2015-03-10 20:04 - 2015-01-27 21:31 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
    2015-03-10 20:04 - 2015-01-27 21:11 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
    2015-03-10 20:04 - 2015-01-27 19:47 - 02501368 _____ (Microsoft Corporation) C:\windows\explorer.exe
    2015-03-10 20:04 - 2015-01-27 19:41 - 02207488 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
    2015-03-10 20:04 - 2015-01-21 01:54 - 01384712 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
    2015-03-10 20:04 - 2015-01-21 01:15 - 01123848 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
    2015-03-10 20:04 - 2014-12-11 01:36 - 00046456 _____ (Microsoft Corporation) C:\windows\system32\LockScreenContentServer.exe
    2015-03-09 17:49 - 2015-03-09 17:49 - 00000258 __RSH () C:\ProgramData\ntuser.pol
    2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ___SD () C:\windows\system32\CompatTel
    2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ____D () C:\windows\system32\appraiser
    2015-03-08 19:48 - 2015-03-08 19:48 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\WildTangent
    2015-03-08 11:39 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
    2015-03-07 18:08 - 2014-12-08 23:45 - 00393728 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
    2015-03-07 18:08 - 2014-12-08 21:56 - 00538624 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
    2015-03-07 18:08 - 2014-09-27 03:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
    2015-03-07 18:08 - 2014-09-27 01:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
    2015-03-07 18:08 - 2014-09-26 23:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
    2015-03-07 18:08 - 2014-08-14 20:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
    2015-03-07 18:08 - 2014-07-29 21:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
    2015-03-07 18:08 - 2014-07-29 01:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
    2015-03-07 18:07 - 2014-06-19 21:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
    2015-03-07 18:07 - 2014-06-19 19:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
    2015-03-07 12:29 - 2015-01-15 18:43 - 00563504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
    2015-03-07 12:29 - 2015-01-15 18:43 - 00177984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
    2015-03-07 12:29 - 2015-01-14 00:22 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
    2015-03-07 12:29 - 2015-01-13 23:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
    2015-03-07 12:29 - 2014-10-28 22:51 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
    2015-03-07 12:29 - 2014-10-28 22:50 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
    2015-03-07 12:29 - 2014-10-28 22:06 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
    2015-03-07 12:29 - 2014-10-28 22:06 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
    2015-03-07 12:29 - 2014-10-28 21:31 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
    2015-03-07 12:26 - 2014-06-12 21:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
    2015-03-07 12:26 - 2014-06-12 21:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
    2015-03-07 12:26 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
    2015-03-07 12:25 - 2014-12-08 21:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
    2015-03-07 12:25 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
    2015-03-07 12:23 - 2014-11-09 22:29 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\DeviceSetupStatusProvider.dll
    2015-03-07 12:23 - 2014-11-09 21:51 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\DeviceSetupStatusProvider.dll
    2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\SysWOW64\locale.nls
    2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\system32\locale.nls
    2015-03-07 12:22 - 2014-10-28 21:27 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll
    2015-03-07 12:22 - 2014-10-28 21:04 - 00868352 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll
    2015-03-07 12:22 - 2014-10-28 21:04 - 00200704 _____ (Microsoft Corporation) C:\windows\SysWOW64\GlobCollationHost.dll
    2015-03-07 12:22 - 2014-10-12 22:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
    2015-03-07 12:22 - 2014-10-10 20:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
    2015-03-07 12:22 - 2014-10-10 20:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
    2015-03-07 12:22 - 2014-10-08 03:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
    2015-03-07 12:22 - 2014-10-08 03:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
    2015-03-07 12:22 - 2014-10-08 02:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
    2015-03-07 12:22 - 2014-03-13 03:42 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
    2015-03-07 12:22 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
    2015-03-07 12:21 - 2014-10-28 21:27 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\GlobCollationHost.dll
    2015-03-07 12:21 - 2014-09-22 00:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
    2015-03-07 12:21 - 2014-09-18 20:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
    2015-03-07 12:20 - 2014-12-19 04:57 - 00788680 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
    2015-03-07 12:20 - 2014-12-19 04:25 - 00602776 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
    2015-03-07 09:16 - 2014-10-30 19:39 - 01970432 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
    2015-03-07 09:16 - 2014-10-30 19:38 - 01612992 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
    2015-03-07 09:16 - 2014-08-23 00:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
    2015-03-07 09:15 - 2015-01-11 22:21 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
    2015-03-07 09:15 - 2015-01-11 21:48 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
    2015-03-07 09:15 - 2015-01-11 21:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
    2015-03-07 09:15 - 2015-01-11 21:23 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
    2015-03-07 09:15 - 2014-10-31 00:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
    2015-03-07 09:15 - 2014-10-31 00:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
    2015-03-07 09:15 - 2014-10-31 00:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
    2015-03-07 09:15 - 2014-10-30 23:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
    2015-03-07 09:15 - 2014-10-30 22:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
    2015-03-07 09:15 - 2014-10-30 22:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
    2015-03-07 09:15 - 2014-10-30 22:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
    2015-03-07 09:15 - 2014-08-23 02:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
    2015-03-07 09:15 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
    2015-03-07 09:14 - 2014-11-21 22:49 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
    2015-03-07 09:14 - 2014-11-21 22:06 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
    2015-03-07 09:14 - 2014-10-31 01:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
    2015-03-07 09:14 - 2014-10-31 01:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
    2015-03-07 09:14 - 2014-10-31 01:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
    2015-03-07 09:14 - 2014-10-31 01:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
    2015-03-07 09:14 - 2014-10-31 01:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
    2015-03-07 09:14 - 2014-10-31 01:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
    2015-03-07 09:14 - 2014-10-31 01:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
    2015-03-07 09:14 - 2014-10-31 01:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
    2015-03-07 09:14 - 2014-10-31 00:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
    2015-03-07 09:14 - 2014-10-31 00:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
    2015-03-07 09:14 - 2014-10-31 00:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
    2015-03-07 09:14 - 2014-10-31 00:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
    2015-03-07 09:14 - 2014-10-31 00:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
    2015-03-07 09:14 - 2014-10-31 00:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
    2015-03-07 09:14 - 2014-10-31 00:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
    2015-03-07 09:14 - 2014-10-31 00:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
    2015-03-07 09:14 - 2014-10-31 00:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
    2015-03-07 09:14 - 2014-10-31 00:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
    2015-03-07 09:14 - 2014-10-31 00:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
    2015-03-07 09:14 - 2014-10-31 00:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
    2015-03-07 09:14 - 2014-10-30 23:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
    2015-03-07 09:14 - 2014-10-30 23:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
    2015-03-07 09:14 - 2014-10-30 23:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
    2015-03-07 09:14 - 2014-10-30 23:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
    2015-03-07 09:14 - 2014-10-30 23:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
    2015-03-07 09:14 - 2014-10-30 23:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
    2015-03-07 09:14 - 2014-10-30 23:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
    2015-03-07 09:14 - 2014-10-30 23:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
    2015-03-07 09:14 - 2014-10-30 23:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
    2015-03-07 09:14 - 2014-10-30 23:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
    2015-03-07 09:14 - 2014-10-30 23:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
    2015-03-07 09:14 - 2014-10-30 23:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
    2015-03-07 09:14 - 2014-10-30 23:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
    2015-03-07 09:14 - 2014-10-30 23:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
    2015-03-07 09:14 - 2014-10-30 23:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
    2015-03-07 09:14 - 2014-10-30 23:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
    2015-03-07 09:14 - 2014-10-30 22:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
    2015-03-07 09:14 - 2014-10-30 22:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
    2015-03-07 09:14 - 2014-10-30 22:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
    2015-03-07 09:14 - 2014-10-30 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
    2015-03-07 09:14 - 2014-10-30 22:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
    2015-03-07 09:14 - 2014-10-30 22:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
    2015-03-07 09:14 - 2014-02-06 07:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
    2015-03-07 09:11 - 2014-10-28 22:02 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
    2015-03-07 09:11 - 2014-10-28 22:02 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
    2015-03-07 09:11 - 2014-10-28 21:57 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
    2015-03-07 09:11 - 2014-10-28 21:15 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
    2015-03-07 09:11 - 2014-10-28 21:15 - 00005632 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
    2015-03-07 09:11 - 2014-10-28 21:14 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
    2015-03-07 09:11 - 2014-10-28 21:13 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
    2015-03-07 09:11 - 2014-10-28 21:13 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
    2015-03-07 09:11 - 2014-08-16 00:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
    2015-03-07 09:11 - 2014-08-15 23:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
    2015-03-07 09:11 - 2014-08-15 23:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
    2015-03-07 09:11 - 2014-08-15 21:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
    2015-03-07 09:11 - 2014-08-15 21:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
    2015-03-07 09:11 - 2014-08-15 20:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
    2015-03-07 09:11 - 2014-08-15 20:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
    2015-03-07 09:11 - 2014-08-15 20:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
    2015-03-07 09:11 - 2014-08-15 20:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
    2015-03-07 09:11 - 2014-08-15 20:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
    2015-03-07 09:11 - 2014-08-15 20:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
    2015-03-07 09:11 - 2014-08-15 20:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
    2015-03-07 09:11 - 2014-08-15 20:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
    2015-03-07 09:11 - 2014-08-15 20:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
    2015-03-07 09:11 - 2014-08-15 20:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
    2015-03-07 09:11 - 2014-08-15 20:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
    2015-03-07 09:11 - 2014-08-15 20:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
    2015-03-07 09:11 - 2014-08-15 20:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
    2015-03-07 09:11 - 2014-08-15 20:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
    2015-03-07 09:11 - 2014-08-15 20:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
    2015-03-07 09:11 - 2014-08-15 20:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
    2015-03-07 09:11 - 2014-08-15 20:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
    2015-03-07 09:11 - 2014-08-15 20:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
    2015-03-07 09:11 - 2014-08-15 20:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
    2015-03-07 09:11 - 2014-07-24 11:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
    2015-03-07 09:11 - 2014-07-24 07:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
    2015-03-07 09:11 - 2014-07-24 06:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
    2015-03-07 09:11 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
    2015-03-07 09:09 - 2014-12-19 02:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
    2015-03-07 09:09 - 2014-12-11 22:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
    2015-03-07 09:09 - 2014-12-11 20:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
    2015-03-07 09:09 - 2014-09-03 20:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
    2015-03-07 09:09 - 2014-09-03 20:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
    2015-03-07 09:09 - 2014-08-23 01:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
    2015-03-07 09:09 - 2014-08-23 01:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
    2015-03-07 09:09 - 2014-08-06 22:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
    2015-03-07 09:09 - 2014-08-01 23:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
    2015-03-07 09:09 - 2014-08-01 20:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
    2015-03-07 09:09 - 2014-07-15 14:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
    2015-03-07 09:09 - 2014-07-15 04:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
    2015-03-07 09:09 - 2014-07-15 04:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
    2015-03-07 09:09 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
    2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
    2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
    2015-03-07 09:09 - 2014-05-19 02:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
    2015-03-07 09:09 - 2014-05-19 02:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
    2015-03-07 09:09 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
    2015-03-07 09:09 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll
    2015-03-07 09:09 - 2014-04-10 23:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
    2015-03-07 09:09 - 2014-04-10 23:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
    2015-03-07 09:09 - 2014-04-10 23:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
    2015-03-07 09:09 - 2014-04-10 23:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
    2015-03-07 09:09 - 2014-04-10 22:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
    2015-03-07 09:08 - 2014-10-23 01:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
    2015-03-07 09:08 - 2014-10-23 01:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
    2015-03-07 09:08 - 2014-05-03 01:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
    2015-03-07 09:08 - 2014-05-03 01:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
    2015-03-07 09:08 - 2014-05-03 01:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
    2015-03-07 09:08 - 2014-05-03 01:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
    2015-03-07 09:08 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
    2015-03-07 09:08 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
    2015-03-07 09:08 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
    2015-03-07 09:08 - 2014-05-02 19:26 - 00050745 _____ () C:\windows\system32\srms.dat
    2015-03-07 09:08 - 2014-04-30 02:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
    2015-03-07 09:08 - 2014-04-30 02:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
    2015-03-07 09:08 - 2014-04-30 02:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
    2015-03-07 09:08 - 2014-04-30 02:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
    2015-03-07 09:08 - 2014-04-30 01:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
    2015-03-07 09:08 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
    2015-03-07 09:08 - 2014-04-30 00:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
    2015-03-07 09:08 - 2014-04-30 00:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
    2015-03-07 09:08 - 2014-04-30 00:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
    2015-03-07 09:08 - 2014-04-30 00:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
    2015-03-07 09:08 - 2014-04-30 00:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
    2015-03-07 09:08 - 2014-04-30 00:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
    2015-03-07 09:08 - 2014-04-30 00:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
    2015-03-07 09:08 - 2014-04-29 23:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
    2015-03-07 09:08 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
    2015-03-07 09:08 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
    2015-03-07 09:08 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
    2015-03-07 09:08 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
    2015-03-07 09:08 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
    2015-03-07 09:08 - 2014-04-29 23:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
    2015-03-07 09:08 - 2014-04-28 18:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
    2015-03-07 09:08 - 2014-04-26 12:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
    2015-03-07 09:08 - 2014-04-18 10:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll
    2015-03-07 09:08 - 2014-04-18 05:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll
    2015-03-07 09:08 - 2014-04-14 05:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
    2015-03-07 09:08 - 2014-04-14 05:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll
    2015-03-07 09:08 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
    2015-03-07 09:08 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll
    2015-03-07 09:08 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
    2015-03-07 09:08 - 2014-04-11 00:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
    2015-03-07 09:08 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
    2015-03-07 09:08 - 2014-04-09 07:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
    2015-03-07 09:08 - 2014-04-09 02:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
    2015-03-07 09:08 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
    2015-03-07 09:08 - 2014-04-08 23:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll
    2015-03-07 09:08 - 2014-04-08 18:46 - 00086688 _____ (Microsoft Corporation) C:\windows\system32\mrt_map.dll
    2015-03-07 09:08 - 2014-04-08 18:46 - 00028320 _____ (Microsoft Corporation) C:\windows\system32\mrt100.dll
    2015-03-07 09:08 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt_map.dll
    2015-03-07 09:08 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt100.dll
    2015-03-07 09:08 - 2014-04-07 22:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys
    2015-03-07 09:08 - 2014-04-06 12:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
    2015-03-07 09:08 - 2014-04-06 12:34 - 00275800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
    2015-03-07 09:08 - 2014-04-06 12:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll
    2015-03-07 09:08 - 2014-04-06 12:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys
    2015-03-07 09:08 - 2014-04-06 12:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
    2015-03-07 09:08 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
    2015-03-07 09:08 - 2014-04-06 08:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
    2015-03-07 09:08 - 2014-04-06 08:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
    2015-03-07 09:08 - 2014-04-06 08:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe
    2015-03-07 09:08 - 2014-04-06 08:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
    2015-03-07 09:08 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
    2015-03-07 09:08 - 2014-04-06 07:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll
    2015-03-07 09:08 - 2014-04-06 06:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll
    2015-03-07 09:08 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll
    2015-03-07 09:08 - 2014-04-03 04:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
    2015-03-07 09:08 - 2014-04-03 04:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll
    2015-03-07 09:08 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
    2015-03-07 09:08 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll
    2015-03-07 09:08 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll
    2015-03-07 09:08 - 2014-04-02 22:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll
    2015-03-07 09:08 - 2014-03-28 11:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe
    2015-03-07 09:08 - 2014-03-27 01:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll
    2015-03-07 09:08 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll
    2015-03-07 09:08 - 2014-03-26 23:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll
    2015-03-07 09:08 - 2014-03-26 23:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe
    2015-03-07 09:08 - 2014-03-19 03:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
    2015-03-07 09:08 - 2014-03-18 01:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
    2015-03-07 09:08 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
    2015-03-07 09:08 - 2014-03-17 01:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll
    2015-03-07 09:08 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll
    2015-03-07 09:08 - 2014-03-14 02:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll
    2015-03-07 09:08 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll
    2015-03-07 09:08 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
    2015-03-07 09:07 - 2015-01-19 14:42 - 01487976 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
    2015-03-07 09:07 - 2014-12-02 19:09 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
    2015-03-07 09:07 - 2014-11-09 19:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
    2015-03-07 09:07 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
    2015-03-07 09:07 - 2014-11-09 19:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
    2015-03-07 09:07 - 2014-11-09 19:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
    2015-03-07 09:07 - 2014-10-12 22:43 - 00238912 ____C (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
    2015-03-07 09:07 - 2014-10-12 22:43 - 00153920 ____C (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
    2015-03-07 09:07 - 2014-10-12 22:43 - 00086336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys
    2015-03-07 09:07 - 2014-10-12 22:43 - 00039744 ____C (Microsoft Corporation) C:\windows\system32\Drivers\intelpep.sys
    2015-03-07 09:07 - 2014-09-10 02:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
    2015-03-07 09:07 - 2014-09-07 23:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
    2015-03-07 09:07 - 2014-09-07 23:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
    2015-03-07 09:07 - 2014-09-03 23:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
    2015-03-07 09:07 - 2014-09-03 22:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
    2015-03-07 09:07 - 2014-09-03 20:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
    2015-03-07 09:07 - 2014-08-30 20:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
    2015-03-07 09:07 - 2014-08-30 18:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
    2015-03-07 09:07 - 2014-08-30 17:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
    2015-03-07 09:07 - 2014-08-30 17:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
    2015-03-07 09:07 - 2014-08-30 16:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
    2015-03-07 09:07 - 2014-08-30 16:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
    2015-03-07 09:07 - 2014-08-27 20:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
    2015-03-07 09:07 - 2014-08-27 20:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
    2015-03-07 09:07 - 2014-08-23 01:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
    2015-03-07 09:07 - 2014-08-23 01:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
    2015-03-07 09:07 - 2014-08-23 00:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
    2015-03-07 09:07 - 2014-08-01 20:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
    2015-03-07 09:07 - 2014-08-01 20:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
    2015-03-07 09:07 - 2014-05-13 03:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
    2015-03-07 09:07 - 2014-03-19 04:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll
    2015-03-07 09:07 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
    2015-03-07 09:06 - 2014-12-08 15:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
    2015-03-07 09:06 - 2014-12-05 23:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
    2015-03-07 09:06 - 2014-12-05 21:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
    2015-03-07 09:06 - 2014-12-05 21:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
    2015-03-07 09:06 - 2014-10-30 18:37 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
    2015-03-07 09:06 - 2014-10-30 18:34 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
    2015-03-07 09:06 - 2014-10-29 00:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
    2015-03-07 09:06 - 2014-10-29 00:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
    2015-03-07 09:06 - 2014-10-28 23:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
    2015-03-07 09:06 - 2014-10-28 23:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
    2015-03-07 09:06 - 2014-10-28 23:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
    2015-03-07 09:06 - 2014-10-28 23:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
    2015-03-07 09:06 - 2014-10-28 23:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
    2015-03-07 09:06 - 2014-10-28 23:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
    2015-03-07 09:06 - 2014-10-28 23:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
    2015-03-07 09:06 - 2014-10-28 23:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
    2015-03-07 09:06 - 2014-10-28 23:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
    2015-03-07 09:06 - 2014-10-28 22:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
    2015-03-07 09:06 - 2014-10-28 21:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
    2015-03-07 09:06 - 2014-10-28 21:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
    2015-03-07 09:06 - 2014-10-28 21:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
    2015-03-07 09:06 - 2014-10-28 21:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
    2015-03-07 09:06 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
    2015-03-07 09:06 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
    2015-03-07 09:06 - 2014-07-12 00:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
    2015-03-07 09:06 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
    2015-03-07 09:06 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
    2015-03-07 09:06 - 2014-06-01 22:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
    2015-03-07 09:06 - 2014-05-31 06:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
    2015-03-07 09:06 - 2014-05-31 06:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
    2015-03-07 09:06 - 2014-05-31 06:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
    2015-03-07 09:06 - 2014-05-31 02:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
    2015-03-07 09:06 - 2014-05-31 02:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
    2015-03-07 09:06 - 2014-05-31 02:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
    2015-03-07 09:06 - 2014-05-31 00:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
    2015-03-07 09:06 - 2014-05-31 00:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
    2015-03-07 09:06 - 2014-05-31 00:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
    2015-03-07 09:06 - 2014-05-27 05:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
    2015-03-07 09:06 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
    2015-03-07 09:06 - 2014-05-01 09:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
    2015-03-07 09:06 - 2014-05-01 01:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
    2015-03-07 08:53 - 2015-03-07 08:53 - 00274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
    2015-03-07 08:53 - 2015-03-07 08:53 - 00161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat
    2015-03-06 23:53 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
    2015-03-06 23:53 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
    2015-03-06 23:53 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
    2015-03-06 19:43 - 2015-03-20 21:48 - 00002170 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2015-03-06 19:43 - 2015-03-06 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2015-03-06 19:42 - 2015-03-26 21:47 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-03-06 19:42 - 2015-03-26 17:26 - 00000910 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-03-06 19:42 - 2015-03-06 19:43 - 00000000 ____D () C:\Program Files (x86)\Google
    2015-03-06 19:42 - 2015-03-06 19:42 - 00003886 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-03-06 19:42 - 2015-03-06 19:42 - 00003650 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-03-05 09:33 - 2015-03-05 09:33 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\hpqlog
    2015-03-05 09:33 - 2015-03-05 09:33 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Hewlett-Packard
    2015-03-05 09:26 - 2015-03-08 11:12 - 00000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
    2015-03-05 09:15 - 2015-03-06 19:43 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Google
    2015-03-05 08:53 - 2015-03-26 21:53 - 00000312 _____ () C:\windows\Tasks\UpdaterEX.job
    2015-03-05 08:53 - 2015-03-14 08:51 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\UpdaterEX
    2015-03-05 08:53 - 2015-03-05 08:53 - 00002650 _____ () C:\windows\System32\Tasks\UpdaterEX
    2015-03-05 08:53 - 2015-03-05 08:53 - 00000000 ____D () C:\ProgramData\Unchecky
    2015-03-05 08:53 - 2015-03-05 08:52 - 00000000 _____ () C:\Users\Sharon\Downloads\ChromeSetup.exe
    2015-03-05 08:46 - 2015-03-05 08:46 - 00000000 ____D () C:\Users\Sharon\Documents\Fax
    2015-03-04 19:05 - 2015-03-04 19:05 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
    2015-03-03 20:44 - 2015-03-14 16:00 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Foxit Software
    2015-03-03 19:45 - 2015-03-26 19:51 - 00004974 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc
    2015-03-03 19:45 - 2015-03-13 22:15 - 00003096 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001
    2015-03-03 19:45 - 2015-03-03 19:45 - 00000000 __RHD () C:\MSOCache
    2015-03-03 19:44 - 2015-03-03 19:44 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
    2015-03-03 19:40 - 2015-03-13 22:23 - 00000000 ____D () C:\Program Files\Microsoft Office 15
    2015-03-03 19:40 - 2015-03-03 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
    2015-03-03 19:15 - 2015-03-26 20:30 - 00003926 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{120BF034-A944-406B-B750-6DB584AB32BF}
    2015-03-03 19:15 - 2015-03-03 19:16 - 00007177 _____ () C:\windows\system32\lvcoinst.log
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieUserList
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieSiteList
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Macromedia
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Program Files\Common Files\logishrd
    2015-03-03 19:13 - 2015-03-26 21:41 - 00003596 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-951477398-4118864522-2970026866-1001
    2015-03-03 19:12 - 2015-03-26 17:26 - 00000000 ___DO () C:\Users\Sharon\OneDrive
    2015-03-03 19:12 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Hewlett-Packard
    2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\ATI
    2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Local\ATI
    2015-03-03 19:08 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Packages
    2015-03-03 19:08 - 2015-03-03 19:08 - 00003374 _____ () C:\windows\System32\Tasks\HPCheckDropBoxStatus
    2015-03-03 19:08 - 2015-03-03 19:08 - 00001449 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000184 _____ () C:\windows\insFileSpec
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\windows\System32\Tasks\WPD
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Adobe
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Local\VirtualStore
    2015-03-03 19:08 - 2014-12-04 13:02 - 00002270 _____ () C:\Users\Public\Desktop\Get Dropbox Offer.lnk
    2015-03-03 19:08 - 2014-12-04 13:02 - 00001306 _____ () C:\Users\Public\Desktop\TripAdvisor.lnk
    2015-03-03 19:08 - 2014-12-04 12:47 - 00002240 _____ () C:\Users\Public\Desktop\Snapfish.lnk
    2015-03-03 19:07 - 2015-03-04 19:18 - 00000000 ____D () C:\Users\Sharon
    2015-03-03 19:07 - 2015-03-03 19:07 - 00000020 ___SH () C:\Users\Sharon\ntuser.ini
    2015-03-03 19:07 - 2014-12-04 13:09 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-03-03 19:07 - 2014-12-04 12:27 - 00000000 ___HD () C:\Users\Sharon\Documents\hp.system.package.metadata
    2015-03-03 19:07 - 2014-03-18 06:06 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
    2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
    2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    2015-03-03 18:59 - 2015-03-26 21:42 - 01270643 _____ () C:\windows\WindowsUpdate.log
    2015-03-03 18:54 - 2015-03-03 18:54 - 00000000 ____D () C:\ProgramData\HP

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-03-26 21:44 - 2012-05-17 22:51 - 00000796 _____ () C:\Users\Sharon\Desktop\Settings.ini
    2015-03-26 21:00 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sru
    2015-03-26 14:39 - 2014-03-18 05:53 - 00891920 _____ () C:\windows\system32\PerfStringBackup.INI
    2015-03-26 14:32 - 2013-08-22 10:46 - 00019991 _____ () C:\windows\setupact.log
    2015-03-26 14:32 - 2013-08-22 10:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
    2015-03-26 14:32 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
    2015-03-26 14:31 - 2014-12-04 12:15 - 00499669 _____ () C:\windows\SysWOW64\rootpa.e2e
    2015-03-26 14:31 - 2014-12-04 12:13 - 00065536 _____ () C:\windows\system32\spu_storage.bin
    2015-03-26 14:31 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\BBI
    2015-03-24 19:09 - 2013-08-22 11:20 - 00000000 ____D () C:\windows\CbsTemp
    2015-03-21 14:27 - 2014-12-04 12:40 - 00000000 ____D () C:\ProgramData\CyberLink
    2015-03-20 16:46 - 2014-12-04 12:27 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
    2015-03-19 16:45 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files (x86)\McAfee
    2015-03-19 14:10 - 2014-03-18 05:44 - 00020016 _____ () C:\windows\PFRO.log
    2015-03-18 08:19 - 2014-12-04 12:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\ProgramData\WildTangent
    2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
    2015-03-16 14:33 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\rescache
    2015-03-14 09:40 - 2013-08-22 10:44 - 00385656 _____ () C:\windows\system32\FNTCACHE.DAT
    2015-03-14 09:38 - 2014-03-18 05:38 - 00000000 ____D () C:\Program Files\Windows Journal
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ToastData
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\WinStore
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\setup
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\setup
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
    2015-03-14 09:38 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\oobe
    2015-03-14 09:26 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\AppReadiness
    2015-03-11 19:15 - 2014-12-04 12:59 - 00000000 ____D () C:\ProgramData\McAfee
    2015-03-11 19:13 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files\Common Files\mcafee
    2015-03-11 19:12 - 2013-08-22 11:36 - 00000000 ___HD () C:\windows\ELAMBKUP
    2015-03-11 19:10 - 2014-12-04 13:00 - 00001867 _____ () C:\Users\Public\Desktop\McAfee LiveSafe - Internet Security.lnk
    2015-03-11 19:10 - 2014-12-04 12:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
    2015-03-09 19:59 - 2012-05-02 18:59 - 01406208 _____ (Tweaking.com) C:\Users\Sharon\Desktop\TweakingRegistryBackup.exe
    2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-RS
    2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-CS
    2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\PolicyDefinitions
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\inetsrv
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\inetsrv
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\MediaViewer
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\FileManager
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\Camera
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
    2015-03-08 11:25 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\restore
    2015-03-06 20:06 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\GroupPolicy
    2015-03-05 09:33 - 2014-12-04 12:28 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
    2015-03-03 19:09 - 2014-12-04 12:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
    2015-03-03 19:08 - 2014-12-04 12:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
    2015-03-03 19:08 - 2014-05-27 19:27 - 00000000 _RSHD () C:\SYSTEM.SAV
    2015-03-03 19:08 - 2014-04-02 18:17 - 00000000 ____D () C:\windows\Panther

    ==================== Files in the root of some directories =======

    2015-03-05 09:26 - 2015-03-08 11:12 - 0000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
    2015-03-07 08:53 - 2015-03-07 08:53 - 0274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
    2015-03-07 08:53 - 2015-03-07 08:53 - 0161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat

    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-03-19 13:52

    ==================== End Of Log ============================

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
    Ran by Sharon at 2015-03-26 21:53:49
    Running from C:\Users\Sharon\Downloads
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
    AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
    FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
    Alcor Micro USB Card Reader Driver (HKLM-x32\...\AmUStor) (Version: 20.21.3317.03861 - Alcor Micro Corp.)
    Alcor Micro USB Card Reader Driver (x32 Version: 20.21.3317.03861 - Alcor Micro Corp.) Hidden
    AMD Catalyst Install Manager (HKLM\...\{305CB43D-5CDD-9E9A-6DF3-56B71B2B1E31}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.7.4023 - CyberLink Corp.)
    Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.2.5426 - CyberLink Corp.)
    Cyberlink PhotoDirector (Version: 5.0.2.5426 - CyberLink Corp.) Hidden
    CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.7.4016 - CyberLink Corp.)
    CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.1.3004 - CyberLink Corp.)
    CyberLink PowerDirector 12 (Version: 12.0.1.3004 - CyberLink Corp.) Hidden
    CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4.4119 - CyberLink Corp.)
    DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
    Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
    Evernote v. 5.3 (HKLM-x32\...\{E461B1AC-BC3C-11E3-B5B8-00163E98E7D6}) (Version: 5.3.0.3360 - Evernote Corp.)
    Extended Update (HKU\S-1-5-21-951477398-4118864522-2970026866-1001\...\UpdaterEX) (Version: - Extended Update) <==== ATTENTION
    Foxit PhantomPDF (HKLM-x32\...\{00CD7D62-056A-4F0F-9143-44522D44E6DD}) (Version: 6.0.32.507 - Foxit Corporation)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
    Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
    HP Documentation (HKLM-x32\...\{4B4EDB7B-4F54-4B86-8A4A-E1C5803CA374}) (Version: 1.2.0.0 - Hewlett-Packard)
    HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7745.4851 - Hewlett-Packard)
    HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
    HP Support Assistant (HKLM-x32\...\{7FE016CC-DAA9-4E21-BD2F-98390D1E6F3F}) (Version: 7.6.23.8 - Hewlett-Packard Company)
    HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
    Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
    Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
    Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
    McAfee LiveSafe - Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1529 - McAfee, Inc.)
    Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4701.1002 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-951477398-4118864522-2970026866-1001\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7255 - Realtek Semiconductor Corp.)
    REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.13.1216 - REALTEK Semiconductor Corp.)
    Recovery Manager (x32 Version: 5.5.0.7316 - CyberLink Corp.) Hidden
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 2.2.0 - Tweaking.com)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-951477398-4118864522-2970026866-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)

    ==================== Restore Points =========================

    13-03-2015 23:37:19 Windows Update
    21-03-2015 15:26:30 Scheduled Checkpoint
    24-03-2015 19:07:44 Windows Update

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 09:25 - 2015-03-18 08:16 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {405A74E2-A0D8-485B-BAAC-40DF0D6B4144} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
    Task: {450C4BA9-B957-4E81-9181-86E4D048B8CE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
    Task: {4F8AC08F-9464-4664-8011-F5BA654CEE50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
    Task: {507B06B7-3F6B-4A8D-A994-FEB21D3C030A} - System32\Tasks\UpdaterEX => C:\Users\Sharon\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
    Task: {547060BA-88FC-4131-8403-65A8DF68BE3E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-01-21] (Hewlett-Packard)
    Task: {72466A41-B216-4EE0-989E-8823BDCB4E3E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-02-26] (Microsoft Corporation)
    Task: {8004FDB0-8539-4E3B-B8B8-4F5329C52F76} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-01-21] (Hewlett-Packard)
    Task: {86347858-435B-4A29-99A7-995871CA305B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
    Task: {8A8E3C7D-39D7-4D1E-9EB0-E2F34525B014} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
    Task: {97EDAFF7-52E8-440A-8BDC-5A613812097F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
    Task: {ADCA5DB7-75A5-4800-852B-4F765387A92D} - System32\Tasks\HPCheckDropBoxStatus => c:\hp\HPQWare\DropBox\HPAppDetector.exe [2014-06-03] ()
    Task: {B896D781-EB7C-459E-83F2-AB5213A40118} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
    Task: {C028C951-60E1-4E48-AD9E-7316A7784239} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
    Task: {C555508D-FAD1-41BA-81CF-0DEFFD58F5F9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
    Task: {DE40F89E-35EB-4A7F-8EB2-E085B0BB5F97} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
    Task: {F1A6BA9D-CFA9-4A2B-B482-467E741020A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
    Task: {F8A01FEA-6DB0-4CBB-9BA4-0296566E82F7} - System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
    Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\windows\Tasks\UpdaterEX.job => C:\Users\Sharon\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

    ==================== Loaded Modules (whitelisted) ==============

    2014-03-28 17:31 - 2014-03-28 17:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
    2014-03-28 17:27 - 2014-03-28 17:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
    2014-03-28 17:27 - 2014-03-28 17:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
    2014-03-28 17:27 - 2014-03-28 17:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
    2014-03-28 17:48 - 2014-03-28 17:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
    2014-03-28 17:48 - 2014-03-28 17:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
    2015-03-03 19:40 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
    2014-12-04 12:42 - 2014-04-14 22:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
    2015-03-13 22:21 - 2015-01-27 11:29 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
    2014-03-28 17:36 - 2014-03-28 17:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
    2014-02-07 14:37 - 2014-02-07 14:37 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
    2015-03-13 22:38 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2015-03-13 22:38 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2015-03-13 22:38 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
    2015-03-13 22:38 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
    2015-03-13 22:38 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
    2015-03-04 20:02 - 2015-03-04 20:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 14974280 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\PepperFlash\pepflashplayer.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\Users\Sharon\OneDrive:ms-properties

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

    ==================== EXE Association (whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP\HP_Svinoya_Norway_Sunset.jpg
    DNS Servers: 192.168.1.1

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== Accounts: =============================

    Administrator (S-1-5-21-951477398-4118864522-2970026866-500 - Administrator - Disabled)
    Guest (S-1-5-21-951477398-4118864522-2970026866-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-951477398-4118864522-2970026866-1003 - Limited - Enabled)
    Sharon (S-1-5-21-951477398-4118864522-2970026866-1001 - Administrator - Enabled) => C:\Users\Sharon

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (03/26/2015 06:53:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
    Description: 80070005

    Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
    Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
    Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (03/26/2015 02:42:55 PM) (Source: Perflib) (EventID: 1008) (User: )
    Description: .NETFrameworkC:\windows\system32\mscoree.dll8

    Error: (03/24/2015 08:53:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MAIN-PC)
    Description: Package DefaultBrowser_NOPUBLISHERID+Chrome was terminated because it took too long to suspend.

    Error: (03/24/2015 07:22:46 PM) (Source: Perflib) (EventID: 1008) (User: )
    Description: .NETFrameworkC:\windows\system32\mscoree.dll8

    Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
    Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
    Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
    Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
    Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.


    System errors:
    =============
    Error: (03/25/2015 02:39:59 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/25/2015 02:39:59 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/21/2015 11:26:09 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}

    Error: (03/20/2015 09:49:57 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4

    Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/16/2015 08:35:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

    Error: (03/16/2015 08:35:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
    Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


    Microsoft Office Sessions:
    =========================
    Error: (03/26/2015 06:53:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
    Description: 80070005

    Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest

    Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest

    Error: (03/26/2015 02:42:55 PM) (Source: Perflib) (EventID: 1008) (User: )
    Description: .NETFrameworkC:\windows\system32\mscoree.dll8

    Error: (03/24/2015 08:53:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MAIN-PC)
    Description: DefaultBrowser_NOPUBLISHERID+Chrome

    Error: (03/24/2015 07:22:46 PM) (Source: Perflib) (EventID: 1008) (User: )
    Description: .NETFrameworkC:\windows\system32\mscoree.dll8

    Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest

    Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest

    Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest

    Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
    Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest


    ==================== Memory info ===========================

    Processor: AMD A8-6410 APU with AMD Radeon R5 Graphics
    Percentage of memory in use: 41%
    Total physical RAM: 7869.93 MB
    Available physical RAM: 4614.92 MB
    Total Pagefile: 9085.93 MB
    Available Pagefile: 4866.08 MB
    Total Virtual: 131072 MB
    Available Virtual: 131071.84 MB

    ==================== Drives ================================

    Drive c: (Windows) (Fixed) (Total:1845.67 GB) (Free:1804.61 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive d: (Recovery Image) (Fixed) (Total:15.87 GB) (Free:1.98 GB) NTFS ==>[System with boot components (obtained from reading drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 1863 GB) (Disk ID: 1F11A08A)

    Partition: GPT Partition Type.

    ==================== End Of Log ============================

    aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
    Run date: 2015-03-26 22:15:41
    -----------------------------
    22:15:41.553 OS Version: Windows x64 6.2.9200
    22:15:41.553 Number of processors: 4 586 0x3001
    22:15:41.555 ComputerName: MAIN-PC UserName: Sharon
    22:15:43.694 Initialize success
    22:15:43.697 VM: initialized successfully
    22:15:43.699 VM: Amd CPU BiosDisabled
    22:16:26.565 AVAST engine defs: 15032601
    22:16:47.778 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000001e
    22:16:47.781 Disk 0 Vendor: ST2000DM001-1ER164 HP51 Size: 1907729MB BusType: 11
    22:16:47.882 Disk 0 MBR read successfully
    22:16:47.886 Disk 0 MBR scan
    22:16:47.896 Disk 0 unknown MBR code
    22:16:47.900 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
    22:16:47.942 Disk 0 scanning C:\windows\system32\drivers
    22:17:01.098 Service scanning
    22:17:28.660 Modules scanning
    22:17:28.665 Disk 0 trace - called modules:
    22:17:28.697 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll storahci.sys
    22:17:28.716 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001557d2060]
    22:17:28.724 3 CLASSPNP.SYS[fffff800f200227b] -> nt!IofCallDriver -> \Device\0000001e[0xffffe001556f9060]
    22:17:30.781 AVAST engine scan C:\windows
    22:17:36.059 AVAST engine scan C:\windows\system32
    22:26:21.072 AVAST engine scan C:\windows\system32\drivers
    22:27:40.805 AVAST engine scan C:\Users\Sharon
    22:28:06.889 Disk 0 MBR has been saved successfully to "C:\Users\Sharon\Desktop\MBR.dat"
    22:28:06.904 The log file has been saved successfully to "C:\Users\Sharon\Desktop\aswMBR.txt"

  2. #2
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default



    Lets do some basic cleanup and go from there, I am also including the download link and instructions for Malwarebytes , if its installed and running ok than just open it and follow the instructions for removing bad entries


    -AdwCleaner-by Xplode

    Click on this link to download : ADWCleaner
    Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.
    Use my link only, do not do a search for AdwCleaner as there is a bogus copy going around by scammers


    Do not click on any links in the top Advertisment.

    • Close all open programs and internet browsers.
    • Double click on AdwCleaner.exe to run the tool.
    • Click on Scan.
    • After the scan is complete click on "Clean"
    • Confirm each time with Ok.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the content of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.



    ===============================================================================


    Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.




    ===============================================================================

    Download Malwarebytes' Anti-Malware to your desktop.

    • Windows XP : Double click on the icon to run it.
    • Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"




    • On the Dashboard click on Update Now
    • Go to the Setting Tab
    • Under Setting go to Detection and Protection
    • Under PUP and PUM make sure both are set to show Treat Detections as Malware
    • Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
    • Then on the Dashboard click on Scan
    • Make sure to select THREAT SCAN
    • Then click on Scan
    • When the scan is finished and the log pops up...select Copy to Clipboard
    • Please paste the log back into this thread for review
    • Exit Malwarebytes
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  3. #3
    Junior Member
    Join Date
    Jul 2012
    Posts
    29

    Default

    AdW Cleaner Log:
    # AdwCleaner v4.113 - Logfile created 28/03/2015 at 09:40:57
    # Updated 22/03/2015 by Xplode
    # Database : 2015-03-27.1 [Server]
    # Operating system : Windows 8.1 (x64)
    # Username : Sharon - MAIN-PC
    # Running from : C:\Users\Sharon\Downloads\AdwCleaner.exe
    # Option : Cleaning

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\Sharon\AppData\Roaming\UpdaterEX
    File Deleted : C:\Users\Sharon\Desktop\Uninstall.exe
    File Deleted : C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
    File Deleted : C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage

    ***** [ Scheduled tasks ] *****

    Task Deleted : UpdaterEX

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKCU\Software\UpdaterEX
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UpdaterEX
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\binkiland.com

    ***** [ Web browsers ] *****

    -\\ Internet Explorer v11.0.9600.17416


    -\\ Google Chrome v41.0.2272.101


    *************************

    AdwCleaner[R0].txt - [1394 bytes] - [28/03/2015 09:30:30]
    AdwCleaner[S0].txt - [1270 bytes] - [28/03/2015 09:40:57]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1329 bytes] ##########


    JRT Log:
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.4.7 (03.28.2015:1)
    OS: Windows 8.1 x64
    Ran by Sharon on Sat 03/28/2015 at 9:50:07.31
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Registry Values



    ~~~ Registry Keys



    ~~~ Files



    ~~~ Folders



    ~~~ Event Viewer Logs were cleared





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Sat 03/28/2015 at 9:56:36.74
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Malaware Bytes Log:
    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 3/28/2015
    Scan Time: 10:27:58 AM
    Logfile:
    Administrator: Yes

    Version: 2.01.4.1018
    Malware Database: v2015.03.28.03
    Rootkit Database: v2015.03.26.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 8.1
    CPU: x64
    File System: NTFS
    User: Sharon

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 346222
    Time Elapsed: 10 min, 42 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 0
    (No malicious items detected)

    Physical Sectors: 0
    (No malicious items detected)


    (end)

    I'm still getting pop-ups, esp when links are clicked.
    Last edited by tashi; 2015-03-29 at 01:55. Reason: Removed quoted instructions, not necessary. ;-)

  4. #4
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    OK, go ahead and run a new scan with FRST, open it and make sure Additions is check and post both new logs please

    Take your time as i will be away most of the day and may not return until this evening
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  5. #5
    Junior Member
    Join Date
    Jul 2012
    Posts
    29

    Default

    Quote Originally Posted by ken545 View Post
    OK, go ahead and run a new scan with FRST, open it and make sure Additions is check and post both new logs please

    Take your time as i will be away most of the day and may not return until this evening


    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
    Ran by Sharon (administrator) on MAIN-PC on 28-03-2015 14:44:04
    Running from C:\Users\Sharon\Downloads
    Loaded Profiles: Sharon (Available profiles: Sharon)
    Platform: Windows 8.1 (X64) OS Language: English (United States)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Microsoft Corporation) C:\Windows\System32\wlanext.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
    (Microsoft Corporation) C:\Windows\System32\dasHost.exe
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (McAfee, Inc.) C:\Windows\System32\mfevtps.exe
    () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
    (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
    (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
    (Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
    (McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
    (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-06-13] (Realtek Semiconductor)
    HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
    HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
    HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
    HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-06] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKLM\...\Policies\Explorer: [NoFolderOptions] 0
    HKLM\...\Policies\Explorer: [NoControlPanel] 0
    BootExecute: autocheck autochk * sdnclean64.exe
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstatio...Ptab&tp=iehome
    SearchScopes: HKLM -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    SearchScopes: HKLM-x32 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-951477398-4118864522-2970026866-1001 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
    BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
    BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-04-04] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
    BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
    Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    StartMenuInternet: IEXPLORE.EXE - iexplore.exe

    FireFox:
    ========
    FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
    FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
    FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
    FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-03] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
    FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-12-04]

    Chrome:
    =======
    CHR Profile: C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-06]
    CHR Extension: (Google Docs) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-06]
    CHR Extension: (Google Drive) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-06]
    CHR Extension: (Strong Signal) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhcklkloafcpghahpjomodagghgpdmgb [2015-03-06]
    CHR Extension: (YouTube) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-06]
    CHR Extension: (Google Search) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-06]
    CHR Extension: (Google Sheets) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-06]
    CHR Extension: (Calm Beach By RB Themes) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\kghgclggfkhahhmdgjcpcfkfofdbikgf [2015-03-06]
    CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-06]
    CHR Extension: (Google Wallet) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
    CHR Extension: (Gmail) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-06]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
    R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-06-03] (Hewlett-Packard Company) [File not signed]
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
    R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
    S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
    R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
    R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
    S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
    R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
    R2 mfevtp; C:\windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
    R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
    R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
    R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
    R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-06-13] (Realtek Semiconductor)
    R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
    R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [51712 2014-06-16] (Advanced Micro Devices, Inc.)
    S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 amdkmcsp; C:\Windows\System32\drivers\amdkmcsp.sys [85704 2014-06-16] (Advanced Micro Devices, Inc. )
    R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2014-06-16] (Advanced Micro Devices, Inc.)
    R0 amdpsp; C:\Windows\System32\drivers\amdpsp.sys [230088 2014-06-16] (Advanced Micro Devices, Inc. )
    R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-06-16] (Advanced Micro Devices)
    R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
    R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
    S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
    R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
    S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
    R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
    R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
    S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
    R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
    R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
    R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
    S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
    R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
    R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-03-28 10:53 - 2015-03-28 10:53 - 00000623 _____ () C:\Users\Sharon\Desktop\JRT.txt
    2015-03-28 09:49 - 2015-03-28 09:49 - 00001438 _____ () C:\Users\Sharon\Desktop\JRT - Shortcut.lnk
    2015-03-28 09:48 - 2015-03-28 09:48 - 01389240 _____ (Thisisu) C:\Users\Sharon\Downloads\JRT.exe
    2015-03-28 09:32 - 2015-03-28 09:42 - 00000352 _____ () C:\windows\Tasks\HPCeeScheduleForSharon.job
    2015-03-28 09:32 - 2015-03-28 09:32 - 00003168 _____ () C:\windows\System32\Tasks\HPCeeScheduleForSharon
    2015-03-28 09:29 - 2015-03-28 09:41 - 00000000 ____D () C:\AdwCleaner
    2015-03-28 09:29 - 2015-03-28 09:29 - 02168320 _____ () C:\Users\Sharon\Downloads\AdwCleaner.exe
    2015-03-26 22:28 - 2015-03-26 22:28 - 00001682 _____ () C:\Users\Sharon\Desktop\aswMBR.txt
    2015-03-26 22:28 - 2015-03-26 22:28 - 00000512 _____ () C:\Users\Sharon\Desktop\MBR.dat
    2015-03-26 22:15 - 2015-03-26 22:15 - 00001162 _____ () C:\Users\Sharon\Desktop\aswMBR - Shortcut.lnk
    2015-03-26 22:11 - 2015-03-26 22:11 - 05198336 _____ (AVAST Software) C:\Users\Sharon\Downloads\aswMBR.exe
    2015-03-26 21:53 - 2015-03-26 21:55 - 00024426 _____ () C:\Users\Sharon\Downloads\Addition.txt
    2015-03-26 21:51 - 2015-03-28 14:44 - 00017616 _____ () C:\Users\Sharon\Downloads\FRST.txt
    2015-03-26 21:49 - 2015-03-26 21:49 - 00001162 _____ () C:\Users\Sharon\Desktop\FRST64 - Shortcut.lnk
    2015-03-26 21:47 - 2015-03-28 14:44 - 00000000 ____D () C:\FRST
    2015-03-26 21:47 - 2015-03-26 21:47 - 02095616 _____ (Farbar) C:\Users\Sharon\Downloads\FRST64.exe
    2015-03-26 21:41 - 2015-03-26 21:41 - 00000207 _____ () C:\windows\tweaking.com-regbackup-MAIN-PC-Windows-8.1-(64-bit).dat
    2015-03-26 21:40 - 2015-03-26 21:40 - 00000000 ____D () C:\RegBackup
    2015-03-26 21:32 - 2015-03-26 21:32 - 00325960 _____ () C:\Users\Sharon\Desktop\lua5.1.dll
    2015-03-26 21:32 - 2015-03-26 21:32 - 00001526 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\Uninstall
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\files
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\color_presets
    2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
    2015-03-26 21:31 - 2015-03-26 21:31 - 04720448 _____ () C:\Users\Sharon\Downloads\tweaking.com_registry_backup_setup.exe
    2015-03-24 18:13 - 2015-03-10 18:08 - 01107456 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00943104 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00760320 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00677888 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
    2015-03-24 18:13 - 2015-03-10 18:08 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
    2015-03-24 18:12 - 2015-03-10 22:38 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
    2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\MediaShow
    2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
    2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\Documents\CyberLink
    2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\CyberLink
    2015-03-21 14:27 - 2015-03-21 14:27 - 00000000 ____D () C:\Users\Sharon\AppData\Local\CyberLink
    2015-03-20 16:46 - 2015-03-28 09:32 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
    2015-03-14 14:40 - 2015-03-14 14:40 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieBrowserModeList
    2015-03-14 09:41 - 2015-03-04 17:24 - 00792032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
    2015-03-14 09:41 - 2015-03-04 17:24 - 00178144 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-03-13 23:47 - 2015-03-13 23:55 - 00000000 ____D () C:\windows\system32\MRT
    2015-03-13 23:47 - 2015-02-26 21:14 - 122905848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
    2015-03-13 22:49 - 2015-03-28 14:32 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
    2015-03-13 22:48 - 2015-03-26 17:27 - 00001081 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-03-13 22:48 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
    2015-03-13 22:48 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
    2015-03-13 22:48 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
    2015-03-13 22:48 - 2015-03-13 22:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2015-03-13 22:43 - 2015-03-13 22:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.4.1028.exe
    2015-03-13 22:41 - 2014-07-24 09:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
    2015-03-13 22:41 - 2014-07-24 09:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
    2015-03-13 22:41 - 2014-07-24 09:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
    2015-03-13 22:41 - 2014-07-24 09:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
    2015-03-13 22:41 - 2014-07-24 09:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
    2015-03-13 22:41 - 2014-07-24 09:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
    2015-03-13 22:41 - 2014-07-24 09:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
    2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
    2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
    2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
    2015-03-13 22:41 - 2014-07-24 06:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
    2015-03-13 22:41 - 2014-07-24 06:33 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
    2015-03-13 22:41 - 2014-07-24 06:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
    2015-03-13 22:41 - 2014-07-24 06:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
    2015-03-13 22:41 - 2014-07-24 05:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
    2015-03-13 22:41 - 2014-07-24 05:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
    2015-03-13 22:41 - 2014-07-24 05:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
    2015-03-13 22:41 - 2014-07-24 05:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
    2015-03-13 22:41 - 2014-07-24 05:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
    2015-03-13 22:41 - 2014-07-24 05:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
    2015-03-13 22:41 - 2014-07-24 05:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
    2015-03-13 22:41 - 2014-07-24 05:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
    2015-03-13 22:41 - 2014-07-24 05:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
    2015-03-13 22:41 - 2014-07-24 04:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
    2015-03-13 22:41 - 2014-07-24 04:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
    2015-03-13 22:41 - 2014-07-24 04:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
    2015-03-13 22:41 - 2014-07-24 04:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
    2015-03-13 22:41 - 2014-07-24 04:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
    2015-03-13 22:41 - 2014-07-24 04:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
    2015-03-13 22:41 - 2014-07-24 04:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
    2015-03-13 22:41 - 2014-07-24 04:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
    2015-03-13 22:41 - 2014-07-24 04:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
    2015-03-13 22:41 - 2014-07-24 04:06 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
    2015-03-13 22:41 - 2014-07-24 04:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
    2015-03-13 22:41 - 2014-07-24 04:04 - 00667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
    2015-03-13 22:41 - 2014-07-24 03:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
    2015-03-13 22:41 - 2014-07-24 03:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
    2015-03-13 22:41 - 2014-07-24 03:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
    2015-03-13 22:41 - 2014-07-24 03:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
    2015-03-13 22:41 - 2014-07-12 00:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
    2015-03-13 22:41 - 2014-07-04 06:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
    2015-03-13 22:41 - 2014-07-04 06:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
    2015-03-13 22:41 - 2014-07-04 05:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
    2015-03-13 22:41 - 2014-06-25 20:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
    2015-03-13 22:41 - 2014-06-14 01:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
    2015-03-13 22:41 - 2014-06-07 06:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
    2015-03-13 22:41 - 2014-06-05 05:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
    2015-03-13 22:41 - 2014-05-31 00:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
    2015-03-13 22:41 - 2014-05-29 01:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
    2015-03-13 22:41 - 2014-05-10 04:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
    2015-03-13 22:41 - 2014-05-05 20:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
    2015-03-13 22:41 - 2014-03-24 21:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
    2015-03-13 22:41 - 2014-03-24 21:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
    2015-03-13 22:39 - 2015-03-13 22:39 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
    2015-03-13 22:38 - 2015-03-14 08:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
    2015-03-13 22:38 - 2015-03-13 22:41 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
    2015-03-13 22:38 - 2015-03-13 22:38 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2015-03-13 22:38 - 2015-03-13 22:38 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
    2015-03-13 22:38 - 2015-03-13 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2015-03-13 22:38 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
    2015-03-13 22:36 - 2015-03-13 22:37 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Sharon\Downloads\spybot-2.4.exe
    2015-03-13 22:35 - 2014-07-24 11:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
    2015-03-13 22:35 - 2014-07-24 11:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
    2015-03-13 22:35 - 2014-07-24 11:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
    2015-03-13 22:35 - 2014-07-24 11:25 - 00054752 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
    2015-03-13 22:35 - 2014-07-24 11:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
    2015-03-13 22:35 - 2014-07-24 11:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
    2015-03-13 22:35 - 2014-07-24 07:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
    2015-03-13 22:35 - 2014-07-24 07:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
    2015-03-13 22:35 - 2014-07-24 07:33 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
    2015-03-13 22:35 - 2014-07-24 07:33 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
    2015-03-13 22:35 - 2014-07-24 07:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
    2015-03-13 22:35 - 2014-07-24 07:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
    2015-03-13 22:35 - 2014-07-24 06:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
    2015-03-13 22:35 - 2014-07-24 06:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
    2015-03-13 22:35 - 2014-07-24 05:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
    2015-03-13 22:35 - 2014-07-24 05:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
    2015-03-13 22:35 - 2014-07-24 05:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
    2015-03-13 22:35 - 2014-07-24 05:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
    2015-03-13 22:35 - 2014-07-24 05:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
    2015-03-13 22:35 - 2014-07-24 04:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
    2015-03-13 22:35 - 2014-07-24 04:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
    2015-03-13 22:35 - 2014-07-24 04:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
    2015-03-13 22:35 - 2014-07-24 04:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
    2015-03-13 22:35 - 2014-07-24 04:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
    2015-03-13 22:35 - 2014-07-24 04:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
    2015-03-13 22:35 - 2014-07-24 04:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
    2015-03-13 22:35 - 2014-07-24 04:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
    2015-03-13 22:35 - 2014-07-24 04:19 - 00388608 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
    2015-03-13 22:35 - 2014-07-24 04:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
    2015-03-13 22:35 - 2014-07-24 04:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
    2015-03-13 22:35 - 2014-07-24 04:18 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
    2015-03-13 22:35 - 2014-07-24 04:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
    2015-03-13 22:35 - 2014-07-24 04:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
    2015-03-13 22:35 - 2014-07-24 04:15 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
    2015-03-13 22:35 - 2014-07-24 04:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
    2015-03-13 22:35 - 2014-07-24 04:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
    2015-03-13 22:35 - 2014-07-24 04:07 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
    2015-03-13 22:35 - 2014-07-24 04:02 - 03465216 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
    2015-03-13 22:35 - 2014-07-24 04:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
    2015-03-13 22:35 - 2014-07-24 04:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
    2015-03-13 22:35 - 2014-07-24 03:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
    2015-03-13 22:35 - 2014-07-24 03:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
    2015-03-13 22:35 - 2014-07-12 01:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
    2015-03-13 22:35 - 2014-07-04 06:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
    2015-03-13 22:35 - 2014-06-27 02:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
    2015-03-13 22:35 - 2014-06-19 19:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
    2015-03-13 22:35 - 2014-06-18 22:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
    2015-03-13 22:35 - 2014-06-07 08:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
    2015-03-13 22:35 - 2014-05-31 01:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
    2015-03-13 22:34 - 2014-07-24 11:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
    2015-03-13 22:34 - 2014-07-24 11:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
    2015-03-13 22:34 - 2014-07-24 11:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
    2015-03-13 22:34 - 2014-07-24 11:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
    2015-03-13 22:34 - 2014-07-24 11:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
    2015-03-13 22:34 - 2014-07-24 11:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
    2015-03-13 22:34 - 2014-07-24 11:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
    2015-03-13 22:34 - 2014-07-24 11:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
    2015-03-13 22:34 - 2014-07-24 07:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
    2015-03-13 22:34 - 2014-07-24 07:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
    2015-03-13 22:34 - 2014-07-24 07:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
    2015-03-13 22:34 - 2014-07-24 07:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
    2015-03-13 22:34 - 2014-07-24 07:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
    2015-03-13 22:34 - 2014-07-24 06:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
    2015-03-13 22:34 - 2014-07-24 06:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
    2015-03-13 22:34 - 2014-07-24 06:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
    2015-03-13 22:34 - 2014-07-24 06:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
    2015-03-13 22:34 - 2014-07-24 06:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
    2015-03-13 22:34 - 2014-07-24 06:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
    2015-03-13 22:34 - 2014-07-24 05:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
    2015-03-13 22:34 - 2014-07-24 05:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
    2015-03-13 22:34 - 2014-07-24 05:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
    2015-03-13 22:34 - 2014-07-24 05:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
    2015-03-13 22:34 - 2014-07-24 05:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
    2015-03-13 22:34 - 2014-07-24 05:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
    2015-03-13 22:34 - 2014-07-24 05:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
    2015-03-13 22:34 - 2014-07-24 04:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
    2015-03-13 22:34 - 2014-07-24 04:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
    2015-03-13 22:34 - 2014-07-24 04:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
    2015-03-13 22:34 - 2014-07-24 04:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
    2015-03-13 22:34 - 2014-07-24 04:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
    2015-03-13 22:34 - 2014-07-24 03:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
    2015-03-13 22:34 - 2014-07-24 03:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
    2015-03-13 22:34 - 2014-07-04 08:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
    2015-03-13 22:34 - 2014-07-04 05:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
    2015-03-13 22:34 - 2014-06-25 20:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
    2015-03-13 22:34 - 2014-06-14 02:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
    2015-03-13 22:34 - 2014-05-29 02:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
    2015-03-13 22:34 - 2014-05-10 06:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
    2015-03-13 22:34 - 2014-05-06 00:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
    2015-03-13 22:33 - 2014-07-24 11:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
    2015-03-13 22:33 - 2014-07-24 11:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
    2015-03-13 22:33 - 2014-07-24 07:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
    2015-03-13 22:33 - 2014-07-24 07:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
    2015-03-13 22:33 - 2014-07-24 04:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
    2015-03-13 22:33 - 2014-07-04 06:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
    2015-03-13 22:33 - 2014-06-05 06:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
    2015-03-13 22:33 - 2014-05-26 03:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
    2015-03-13 22:33 - 2014-03-24 22:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
    2015-03-13 22:33 - 2014-03-24 22:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
    2015-03-11 19:14 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
    2015-03-10 20:13 - 2015-02-06 19:09 - 00396419 _____ () C:\windows\system32\ApnDatabase.xml
    2015-03-10 20:13 - 2015-02-03 19:58 - 00264000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
    2015-03-10 20:13 - 2015-02-03 19:58 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
    2015-03-10 20:13 - 2015-02-03 19:58 - 00044024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
    2015-03-10 20:13 - 2015-02-02 19:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
    2015-03-10 20:13 - 2015-02-02 19:53 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
    2015-03-10 20:13 - 2015-01-26 23:44 - 00933888 _____ (Microsoft Corporation) C:\windows\system32\calc.exe
    2015-03-10 20:13 - 2015-01-23 21:51 - 00816128 _____ (Microsoft Corporation) C:\windows\SysWOW64\calc.exe
    2015-03-10 20:13 - 2015-01-23 03:17 - 00723072 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
    2015-03-10 20:13 - 2015-01-23 01:02 - 00560392 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
    2015-03-10 20:11 - 2015-03-05 22:53 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
    2015-03-10 20:11 - 2015-03-05 22:33 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
    2015-03-10 20:11 - 2015-02-25 19:26 - 04178944 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
    2015-03-10 20:11 - 2015-02-19 23:03 - 00358912 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
    2015-03-10 20:11 - 2015-02-19 22:58 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
    2015-03-10 20:11 - 2015-02-19 22:20 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
    2015-03-10 20:11 - 2015-02-19 22:15 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
    2015-03-10 20:11 - 2015-01-30 19:42 - 03097600 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
    2015-03-10 20:11 - 2015-01-30 19:29 - 02484224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
    2015-03-10 20:11 - 2015-01-28 21:58 - 00347136 _____ (Microsoft Corporation) C:\windows\system32\photowiz.dll
    2015-03-10 20:11 - 2015-01-28 21:29 - 00290816 _____ (Microsoft Corporation) C:\windows\SysWOW64\photowiz.dll
    2015-03-10 20:11 - 2014-10-28 22:49 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
    2015-03-10 20:11 - 2014-10-28 22:44 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
    2015-03-10 20:11 - 2014-10-28 22:44 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
    2015-03-10 20:11 - 2014-10-28 22:04 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
    2015-03-10 20:11 - 2014-10-28 22:00 - 00077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
    2015-03-10 20:11 - 2014-10-28 22:00 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
    2015-03-10 20:10 - 2015-02-05 16:24 - 01113920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
    2015-03-10 20:10 - 2015-01-28 21:04 - 01091072 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
    2015-03-10 20:10 - 2015-01-28 21:04 - 00864256 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
    2015-03-10 20:10 - 2014-10-28 22:43 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\printui.exe
    2015-03-10 20:10 - 2014-10-28 22:34 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
    2015-03-10 20:10 - 2014-10-28 22:04 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\findnetprinters.dll
    2015-03-10 20:10 - 2014-10-28 21:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.exe
    2015-03-10 20:10 - 2014-10-28 21:52 - 00289280 _____ (Microsoft Corporation) C:\windows\SysWOW64\compstui.dll
    2015-03-10 20:10 - 2014-10-28 21:51 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
    2015-03-10 20:10 - 2014-10-28 21:45 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
    2015-03-10 20:10 - 2014-10-28 21:28 - 00055808 _____ (Microsoft Corporation) C:\windows\SysWOW64\findnetprinters.dll
    2015-03-10 20:10 - 2014-10-28 21:20 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
    2015-03-10 20:10 - 2014-10-28 21:15 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
    2015-03-10 20:10 - 2014-10-28 20:55 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
    2015-03-10 20:10 - 2014-10-28 20:44 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
    2015-03-10 20:10 - 2014-10-28 20:41 - 00269312 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
    2015-03-10 20:10 - 2014-10-28 20:35 - 00203776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
    2015-03-10 20:09 - 2015-02-05 21:28 - 02257408 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
    2015-03-10 20:09 - 2015-02-05 21:08 - 01943040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
    2015-03-10 20:09 - 2015-02-02 20:03 - 03551744 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_47.dll
    2015-03-10 20:09 - 2015-02-02 20:02 - 04298240 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_47.dll
    2015-03-10 20:09 - 2015-01-29 23:01 - 00097792 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys
    2015-03-10 20:09 - 2015-01-29 22:03 - 01488896 _____ (Microsoft Corporation) C:\windows\system32\mfc42u.dll
    2015-03-10 20:09 - 2015-01-29 22:03 - 01464832 _____ (Microsoft Corporation) C:\windows\system32\mfc42.dll
    2015-03-10 20:09 - 2015-01-29 21:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42u.dll
    2015-03-10 20:09 - 2015-01-29 21:42 - 01204224 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42.dll
    2015-03-10 20:09 - 2015-01-29 21:29 - 00035840 _____ (Microsoft Corporation) C:\windows\SysWOW64\atlthunk.dll
    2015-03-10 20:09 - 2015-01-28 21:11 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
    2015-03-10 20:09 - 2015-01-28 21:00 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
    2015-03-10 20:09 - 2015-01-28 20:59 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
    2015-03-10 20:09 - 2015-01-28 20:55 - 00971776 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
    2015-03-10 20:09 - 2015-01-28 20:50 - 00811008 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
    2015-03-10 20:09 - 2015-01-28 20:49 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
    2015-03-10 20:09 - 2015-01-28 11:41 - 07472960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
    2015-03-10 20:09 - 2015-01-28 11:41 - 01733440 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
    2015-03-10 20:09 - 2015-01-28 11:41 - 01498360 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
    2015-03-10 20:09 - 2015-01-27 22:24 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\StorageContextHandler.dll
    2015-03-10 20:09 - 2015-01-27 21:47 - 00060928 _____ (Microsoft Corporation) C:\windows\SysWOW64\StorageContextHandler.dll
    2015-03-10 20:09 - 2014-10-28 22:34 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WSCollect.exe
    2015-03-10 20:09 - 2014-10-28 22:34 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe
    2015-03-10 20:09 - 2014-10-28 21:28 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\atlthunk.dll
    2015-03-10 20:09 - 2014-10-28 21:13 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
    2015-03-10 20:09 - 2014-10-28 20:55 - 00223744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
    2015-03-10 20:08 - 2015-01-30 19:20 - 00203264 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
    2015-03-10 20:08 - 2015-01-29 22:02 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\eappgnui.dll
    2015-03-10 20:08 - 2015-01-29 21:40 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappgnui.dll
    2015-03-10 20:08 - 2015-01-29 21:37 - 00331776 _____ (Microsoft Corporation) C:\windows\system32\eapp3hst.dll
    2015-03-10 20:08 - 2015-01-29 21:24 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\eapphost.dll
    2015-03-10 20:08 - 2015-01-29 21:24 - 00250880 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapp3hst.dll
    2015-03-10 20:08 - 2015-01-29 21:16 - 00266752 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapphost.dll
    2015-03-10 20:08 - 2015-01-29 21:08 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\eappcfg.dll
    2015-03-10 20:08 - 2015-01-29 21:06 - 00278016 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappcfg.dll
    2015-03-10 20:08 - 2015-01-27 00:22 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
    2015-03-10 20:08 - 2015-01-26 22:11 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
    2015-03-10 20:08 - 2014-10-28 23:56 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
    2015-03-10 20:08 - 2014-10-28 22:37 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
    2015-03-10 20:08 - 2014-10-28 21:19 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\eappprxy.dll
    2015-03-10 20:08 - 2014-10-28 20:59 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappprxy.dll
    2015-03-10 20:05 - 2015-02-20 21:16 - 25021440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
    2015-03-10 20:05 - 2015-02-20 20:41 - 12827648 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
    2015-03-10 20:05 - 2015-02-20 20:27 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
    2015-03-10 20:05 - 2015-02-20 20:27 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
    2015-03-10 20:05 - 2015-02-20 20:25 - 19720192 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
    2015-03-10 20:05 - 2015-02-20 19:58 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
    2015-03-10 20:05 - 2015-02-20 19:32 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
    2015-03-10 20:05 - 2015-02-19 22:49 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
    2015-03-10 20:05 - 2015-02-19 22:48 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
    2015-03-10 20:05 - 2015-02-19 22:47 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
    2015-03-10 20:05 - 2015-02-19 22:35 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
    2015-03-10 20:05 - 2015-02-19 22:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
    2015-03-10 20:05 - 2015-02-19 22:32 - 06035456 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
    2015-03-10 20:05 - 2015-02-19 22:09 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
    2015-03-10 20:05 - 2015-02-19 22:07 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
    2015-03-10 20:05 - 2015-02-19 22:06 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
    2015-03-10 20:05 - 2015-02-19 22:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
    2015-03-10 20:05 - 2015-02-19 22:03 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
    2015-03-10 20:05 - 2015-02-19 21:59 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
    2015-03-10 20:05 - 2015-02-19 21:56 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
    2015-03-10 20:05 - 2015-02-19 21:52 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
    2015-03-10 20:05 - 2015-02-19 21:49 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
    2015-03-10 20:05 - 2015-02-19 21:49 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
    2015-03-10 20:05 - 2015-02-19 21:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
    2015-03-10 20:05 - 2015-02-19 21:43 - 14398976 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
    2015-03-10 20:05 - 2015-02-19 21:30 - 04300288 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
    2015-03-10 20:05 - 2015-02-19 21:30 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
    2015-03-10 20:05 - 2015-02-19 21:29 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
    2015-03-10 20:05 - 2015-02-19 21:28 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
    2015-03-10 20:05 - 2015-02-19 21:26 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
    2015-03-10 20:05 - 2015-02-19 21:24 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
    2015-03-10 20:05 - 2015-02-19 21:24 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
    2015-03-10 20:05 - 2015-02-19 21:16 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
    2015-03-10 20:05 - 2015-02-19 21:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
    2015-03-10 20:05 - 2015-02-19 21:01 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
    2015-03-10 20:05 - 2015-02-19 20:57 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
    2015-03-10 20:05 - 2015-02-19 20:55 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
    2015-03-10 20:04 - 2015-02-12 13:40 - 22291584 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
    2015-03-10 20:04 - 2015-02-12 13:34 - 19731824 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
    2015-03-10 20:04 - 2015-02-07 19:57 - 01090048 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
    2015-03-10 20:04 - 2015-02-07 19:49 - 00791040 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
    2015-03-10 20:04 - 2015-01-29 14:45 - 01763352 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
    2015-03-10 20:04 - 2015-01-29 14:34 - 01488040 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
    2015-03-10 20:04 - 2015-01-27 21:31 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
    2015-03-10 20:04 - 2015-01-27 21:11 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
    2015-03-10 20:04 - 2015-01-27 19:47 - 02501368 _____ (Microsoft Corporation) C:\windows\explorer.exe
    2015-03-10 20:04 - 2015-01-27 19:41 - 02207488 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
    2015-03-10 20:04 - 2015-01-21 01:54 - 01384712 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
    2015-03-10 20:04 - 2015-01-21 01:15 - 01123848 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
    2015-03-10 20:04 - 2014-12-11 01:36 - 00046456 _____ (Microsoft Corporation) C:\windows\system32\LockScreenContentServer.exe
    2015-03-09 17:49 - 2015-03-09 17:49 - 00000258 __RSH () C:\ProgramData\ntuser.pol
    2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ___SD () C:\windows\system32\CompatTel
    2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ____D () C:\windows\system32\appraiser
    2015-03-08 19:48 - 2015-03-08 19:48 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\WildTangent
    2015-03-08 11:39 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
    2015-03-07 18:08 - 2014-12-08 23:45 - 00393728 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
    2015-03-07 18:08 - 2014-12-08 21:56 - 00538624 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
    2015-03-07 18:08 - 2014-09-27 03:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
    2015-03-07 18:08 - 2014-09-27 01:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
    2015-03-07 18:08 - 2014-09-26 23:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
    2015-03-07 18:08 - 2014-08-14 20:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
    2015-03-07 18:08 - 2014-07-29 21:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
    2015-03-07 18:08 - 2014-07-29 01:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
    2015-03-07 18:07 - 2014-06-19 21:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
    2015-03-07 18:07 - 2014-06-19 19:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
    2015-03-07 12:29 - 2015-01-15 18:43 - 00563504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
    2015-03-07 12:29 - 2015-01-15 18:43 - 00177984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
    2015-03-07 12:29 - 2015-01-14 00:22 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
    2015-03-07 12:29 - 2015-01-13 23:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
    2015-03-07 12:29 - 2014-10-28 22:51 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
    2015-03-07 12:29 - 2014-10-28 22:50 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
    2015-03-07 12:29 - 2014-10-28 22:06 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
    2015-03-07 12:29 - 2014-10-28 22:06 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
    2015-03-07 12:29 - 2014-10-28 21:31 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
    2015-03-07 12:26 - 2014-06-12 21:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
    2015-03-07 12:26 - 2014-06-12 21:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
    2015-03-07 12:26 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
    2015-03-07 12:25 - 2014-12-08 21:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
    2015-03-07 12:25 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
    2015-03-07 12:23 - 2014-11-09 22:29 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\DeviceSetupStatusProvider.dll
    2015-03-07 12:23 - 2014-11-09 21:51 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\DeviceSetupStatusProvider.dll
    2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\SysWOW64\locale.nls
    2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\system32\locale.nls
    2015-03-07 12:22 - 2014-10-28 21:27 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll
    2015-03-07 12:22 - 2014-10-28 21:04 - 00868352 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll
    2015-03-07 12:22 - 2014-10-28 21:04 - 00200704 _____ (Microsoft Corporation) C:\windows\SysWOW64\GlobCollationHost.dll
    2015-03-07 12:22 - 2014-10-12 22:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
    2015-03-07 12:22 - 2014-10-10 20:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
    2015-03-07 12:22 - 2014-10-10 20:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
    2015-03-07 12:22 - 2014-10-08 03:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
    2015-03-07 12:22 - 2014-10-08 03:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
    2015-03-07 12:22 - 2014-10-08 02:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
    2015-03-07 12:22 - 2014-03-13 03:42 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
    2015-03-07 12:22 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
    2015-03-07 12:21 - 2014-10-28 21:27 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\GlobCollationHost.dll
    2015-03-07 12:21 - 2014-09-22 00:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
    2015-03-07 12:21 - 2014-09-18 20:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
    2015-03-07 12:20 - 2014-12-19 04:57 - 00788680 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
    2015-03-07 12:20 - 2014-12-19 04:25 - 00602776 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
    2015-03-07 09:16 - 2014-10-30 19:39 - 01970432 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
    2015-03-07 09:16 - 2014-10-30 19:38 - 01612992 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
    2015-03-07 09:16 - 2014-08-23 00:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
    2015-03-07 09:15 - 2015-01-11 22:21 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
    2015-03-07 09:15 - 2015-01-11 21:48 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
    2015-03-07 09:15 - 2015-01-11 21:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
    2015-03-07 09:15 - 2015-01-11 21:23 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
    2015-03-07 09:15 - 2014-10-31 00:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
    2015-03-07 09:15 - 2014-10-31 00:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
    2015-03-07 09:15 - 2014-10-31 00:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
    2015-03-07 09:15 - 2014-10-30 23:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
    2015-03-07 09:15 - 2014-10-30 22:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
    2015-03-07 09:15 - 2014-10-30 22:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
    2015-03-07 09:15 - 2014-10-30 22:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
    2015-03-07 09:15 - 2014-08-23 02:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
    2015-03-07 09:15 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
    2015-03-07 09:14 - 2014-11-21 22:49 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
    2015-03-07 09:14 - 2014-11-21 22:06 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
    2015-03-07 09:14 - 2014-10-31 01:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
    2015-03-07 09:14 - 2014-10-31 01:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
    2015-03-07 09:14 - 2014-10-31 01:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
    2015-03-07 09:14 - 2014-10-31 01:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
    2015-03-07 09:14 - 2014-10-31 01:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
    2015-03-07 09:14 - 2014-10-31 01:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
    2015-03-07 09:14 - 2014-10-31 01:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
    2015-03-07 09:14 - 2014-10-31 01:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
    2015-03-07 09:14 - 2014-10-31 00:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
    2015-03-07 09:14 - 2014-10-31 00:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
    2015-03-07 09:14 - 2014-10-31 00:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
    2015-03-07 09:14 - 2014-10-31 00:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
    2015-03-07 09:14 - 2014-10-31 00:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
    2015-03-07 09:14 - 2014-10-31 00:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
    2015-03-07 09:14 - 2014-10-31 00:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
    2015-03-07 09:14 - 2014-10-31 00:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
    2015-03-07 09:14 - 2014-10-31 00:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
    2015-03-07 09:14 - 2014-10-31 00:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
    2015-03-07 09:14 - 2014-10-31 00:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
    2015-03-07 09:14 - 2014-10-31 00:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
    2015-03-07 09:14 - 2014-10-30 23:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
    2015-03-07 09:14 - 2014-10-30 23:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
    2015-03-07 09:14 - 2014-10-30 23:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
    2015-03-07 09:14 - 2014-10-30 23:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
    2015-03-07 09:14 - 2014-10-30 23:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
    2015-03-07 09:14 - 2014-10-30 23:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
    2015-03-07 09:14 - 2014-10-30 23:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
    2015-03-07 09:14 - 2014-10-30 23:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
    2015-03-07 09:14 - 2014-10-30 23:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
    2015-03-07 09:14 - 2014-10-30 23:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
    2015-03-07 09:14 - 2014-10-30 23:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
    2015-03-07 09:14 - 2014-10-30 23:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
    2015-03-07 09:14 - 2014-10-30 23:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
    2015-03-07 09:14 - 2014-10-30 23:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
    2015-03-07 09:14 - 2014-10-30 23:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
    2015-03-07 09:14 - 2014-10-30 23:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
    2015-03-07 09:14 - 2014-10-30 22:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
    2015-03-07 09:14 - 2014-10-30 22:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
    2015-03-07 09:14 - 2014-10-30 22:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
    2015-03-07 09:14 - 2014-10-30 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
    2015-03-07 09:14 - 2014-10-30 22:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
    2015-03-07 09:14 - 2014-10-30 22:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
    2015-03-07 09:14 - 2014-02-06 07:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
    2015-03-07 09:11 - 2014-10-28 22:02 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
    2015-03-07 09:11 - 2014-10-28 22:02 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
    2015-03-07 09:11 - 2014-10-28 21:57 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
    2015-03-07 09:11 - 2014-10-28 21:15 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
    2015-03-07 09:11 - 2014-10-28 21:15 - 00005632 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
    2015-03-07 09:11 - 2014-10-28 21:14 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
    2015-03-07 09:11 - 2014-10-28 21:13 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
    2015-03-07 09:11 - 2014-10-28 21:13 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
    2015-03-07 09:11 - 2014-08-16 00:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
    2015-03-07 09:11 - 2014-08-15 23:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
    2015-03-07 09:11 - 2014-08-15 23:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
    2015-03-07 09:11 - 2014-08-15 21:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
    2015-03-07 09:11 - 2014-08-15 21:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
    2015-03-07 09:11 - 2014-08-15 20:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
    2015-03-07 09:11 - 2014-08-15 20:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
    2015-03-07 09:11 - 2014-08-15 20:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
    2015-03-07 09:11 - 2014-08-15 20:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
    2015-03-07 09:11 - 2014-08-15 20:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
    2015-03-07 09:11 - 2014-08-15 20:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
    2015-03-07 09:11 - 2014-08-15 20:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
    2015-03-07 09:11 - 2014-08-15 20:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
    2015-03-07 09:11 - 2014-08-15 20:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
    2015-03-07 09:11 - 2014-08-15 20:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
    2015-03-07 09:11 - 2014-08-15 20:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
    2015-03-07 09:11 - 2014-08-15 20:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
    2015-03-07 09:11 - 2014-08-15 20:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
    2015-03-07 09:11 - 2014-08-15 20:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
    2015-03-07 09:11 - 2014-08-15 20:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
    2015-03-07 09:11 - 2014-08-15 20:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
    2015-03-07 09:11 - 2014-08-15 20:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
    2015-03-07 09:11 - 2014-08-15 20:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
    2015-03-07 09:11 - 2014-08-15 20:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
    2015-03-07 09:11 - 2014-07-24 11:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
    2015-03-07 09:11 - 2014-07-24 07:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
    2015-03-07 09:11 - 2014-07-24 06:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
    2015-03-07 09:11 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
    2015-03-07 09:09 - 2014-12-19 02:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
    2015-03-07 09:09 - 2014-12-11 22:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
    2015-03-07 09:09 - 2014-12-11 20:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
    2015-03-07 09:09 - 2014-09-03 20:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
    2015-03-07 09:09 - 2014-09-03 20:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
    2015-03-07 09:09 - 2014-08-23 01:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
    2015-03-07 09:09 - 2014-08-23 01:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
    2015-03-07 09:09 - 2014-08-06 22:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
    2015-03-07 09:09 - 2014-08-01 23:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
    2015-03-07 09:09 - 2014-08-01 20:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
    2015-03-07 09:09 - 2014-07-15 14:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
    2015-03-07 09:09 - 2014-07-15 04:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
    2015-03-07 09:09 - 2014-07-15 04:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
    2015-03-07 09:09 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
    2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
    2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
    2015-03-07 09:09 - 2014-05-19 02:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
    2015-03-07 09:09 - 2014-05-19 02:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
    2015-03-07 09:09 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
    2015-03-07 09:09 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll
    2015-03-07 09:09 - 2014-04-10 23:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
    2015-03-07 09:09 - 2014-04-10 23:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
    2015-03-07 09:09 - 2014-04-10 23:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
    2015-03-07 09:09 - 2014-04-10 23:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
    2015-03-07 09:09 - 2014-04-10 22:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
    2015-03-07 09:08 - 2014-10-23 01:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
    2015-03-07 09:08 - 2014-10-23 01:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
    2015-03-07 09:08 - 2014-05-03 01:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
    2015-03-07 09:08 - 2014-05-03 01:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
    2015-03-07 09:08 - 2014-05-03 01:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
    2015-03-07 09:08 - 2014-05-03 01:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
    2015-03-07 09:08 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
    2015-03-07 09:08 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
    2015-03-07 09:08 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
    2015-03-07 09:08 - 2014-05-02 19:26 - 00050745 _____ () C:\windows\system32\srms.dat
    2015-03-07 09:08 - 2014-04-30 02:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
    2015-03-07 09:08 - 2014-04-30 02:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
    2015-03-07 09:08 - 2014-04-30 02:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
    2015-03-07 09:08 - 2014-04-30 02:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
    2015-03-07 09:08 - 2014-04-30 01:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
    2015-03-07 09:08 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
    2015-03-07 09:08 - 2014-04-30 00:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
    2015-03-07 09:08 - 2014-04-30 00:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
    2015-03-07 09:08 - 2014-04-30 00:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
    2015-03-07 09:08 - 2014-04-30 00:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
    2015-03-07 09:08 - 2014-04-30 00:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
    2015-03-07 09:08 - 2014-04-30 00:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
    2015-03-07 09:08 - 2014-04-30 00:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
    2015-03-07 09:08 - 2014-04-29 23:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
    2015-03-07 09:08 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
    2015-03-07 09:08 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
    2015-03-07 09:08 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
    2015-03-07 09:08 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
    2015-03-07 09:08 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
    2015-03-07 09:08 - 2014-04-29 23:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
    2015-03-07 09:08 - 2014-04-28 18:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
    2015-03-07 09:08 - 2014-04-26 12:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
    2015-03-07 09:08 - 2014-04-18 10:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll
    2015-03-07 09:08 - 2014-04-18 05:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll
    2015-03-07 09:08 - 2014-04-14 05:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
    2015-03-07 09:08 - 2014-04-14 05:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll
    2015-03-07 09:08 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
    2015-03-07 09:08 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll
    2015-03-07 09:08 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
    2015-03-07 09:08 - 2014-04-11 00:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
    2015-03-07 09:08 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
    2015-03-07 09:08 - 2014-04-09 07:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
    2015-03-07 09:08 - 2014-04-09 02:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
    2015-03-07 09:08 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
    2015-03-07 09:08 - 2014-04-08 23:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll
    2015-03-07 09:08 - 2014-04-08 18:46 - 00086688 _____ (Microsoft Corporation) C:\windows\system32\mrt_map.dll
    2015-03-07 09:08 - 2014-04-08 18:46 - 00028320 _____ (Microsoft Corporation) C:\windows\system32\mrt100.dll
    2015-03-07 09:08 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt_map.dll
    2015-03-07 09:08 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt100.dll
    2015-03-07 09:08 - 2014-04-07 22:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys
    2015-03-07 09:08 - 2014-04-06 12:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
    2015-03-07 09:08 - 2014-04-06 12:34 - 00275800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
    2015-03-07 09:08 - 2014-04-06 12:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll
    2015-03-07 09:08 - 2014-04-06 12:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys
    2015-03-07 09:08 - 2014-04-06 12:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
    2015-03-07 09:08 - 2014-04-06 12:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
    2015-03-07 09:08 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
    2015-03-07 09:08 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
    2015-03-07 09:08 - 2014-04-06 08:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
    2015-03-07 09:08 - 2014-04-06 08:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
    2015-03-07 09:08 - 2014-04-06 08:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe
    2015-03-07 09:08 - 2014-04-06 08:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
    2015-03-07 09:08 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
    2015-03-07 09:08 - 2014-04-06 07:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll
    2015-03-07 09:08 - 2014-04-06 06:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll
    2015-03-07 09:08 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll
    2015-03-07 09:08 - 2014-04-03 04:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
    2015-03-07 09:08 - 2014-04-03 04:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll
    2015-03-07 09:08 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
    2015-03-07 09:08 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll
    2015-03-07 09:08 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll
    2015-03-07 09:08 - 2014-04-02 22:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll
    2015-03-07 09:08 - 2014-03-28 11:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe
    2015-03-07 09:08 - 2014-03-27 01:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll
    2015-03-07 09:08 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll
    2015-03-07 09:08 - 2014-03-26 23:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll
    2015-03-07 09:08 - 2014-03-26 23:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe
    2015-03-07 09:08 - 2014-03-19 03:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
    2015-03-07 09:08 - 2014-03-18 01:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
    2015-03-07 09:08 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
    2015-03-07 09:08 - 2014-03-17 01:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll
    2015-03-07 09:08 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll
    2015-03-07 09:08 - 2014-03-14 02:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll
    2015-03-07 09:08 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll
    2015-03-07 09:08 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
    2015-03-07 09:07 - 2015-01-19 14:42 - 01487976 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
    2015-03-07 09:07 - 2014-12-02 19:09 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
    2015-03-07 09:07 - 2014-11-09 19:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
    2015-03-07 09:07 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
    2015-03-07 09:07 - 2014-11-09 19:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
    2015-03-07 09:07 - 2014-11-09 19:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
    2015-03-07 09:07 - 2014-10-12 22:43 - 00238912 ____C (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
    2015-03-07 09:07 - 2014-10-12 22:43 - 00153920 ____C (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
    2015-03-07 09:07 - 2014-10-12 22:43 - 00086336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys
    2015-03-07 09:07 - 2014-10-12 22:43 - 00039744 ____C (Microsoft Corporation) C:\windows\system32\Drivers\intelpep.sys
    2015-03-07 09:07 - 2014-09-10 02:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
    2015-03-07 09:07 - 2014-09-07 23:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
    2015-03-07 09:07 - 2014-09-07 23:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
    2015-03-07 09:07 - 2014-09-03 23:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
    2015-03-07 09:07 - 2014-09-03 22:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
    2015-03-07 09:07 - 2014-09-03 20:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
    2015-03-07 09:07 - 2014-08-30 20:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
    2015-03-07 09:07 - 2014-08-30 18:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
    2015-03-07 09:07 - 2014-08-30 17:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
    2015-03-07 09:07 - 2014-08-30 17:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
    2015-03-07 09:07 - 2014-08-30 16:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
    2015-03-07 09:07 - 2014-08-30 16:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
    2015-03-07 09:07 - 2014-08-27 20:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
    2015-03-07 09:07 - 2014-08-27 20:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
    2015-03-07 09:07 - 2014-08-23 01:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
    2015-03-07 09:07 - 2014-08-23 01:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
    2015-03-07 09:07 - 2014-08-23 00:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
    2015-03-07 09:07 - 2014-08-01 20:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
    2015-03-07 09:07 - 2014-08-01 20:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
    2015-03-07 09:07 - 2014-05-13 03:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
    2015-03-07 09:07 - 2014-03-19 04:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll
    2015-03-07 09:07 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
    2015-03-07 09:06 - 2014-12-08 15:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
    2015-03-07 09:06 - 2014-12-08 15:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
    2015-03-07 09:06 - 2014-12-05 23:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
    2015-03-07 09:06 - 2014-12-05 21:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
    2015-03-07 09:06 - 2014-12-05 21:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
    2015-03-07 09:06 - 2014-10-30 18:37 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
    2015-03-07 09:06 - 2014-10-30 18:34 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
    2015-03-07 09:06 - 2014-10-29 00:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
    2015-03-07 09:06 - 2014-10-29 00:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
    2015-03-07 09:06 - 2014-10-28 23:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
    2015-03-07 09:06 - 2014-10-28 23:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
    2015-03-07 09:06 - 2014-10-28 23:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
    2015-03-07 09:06 - 2014-10-28 23:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
    2015-03-07 09:06 - 2014-10-28 23:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
    2015-03-07 09:06 - 2014-10-28 23:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
    2015-03-07 09:06 - 2014-10-28 23:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
    2015-03-07 09:06 - 2014-10-28 23:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
    2015-03-07 09:06 - 2014-10-28 23:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
    2015-03-07 09:06 - 2014-10-28 22:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
    2015-03-07 09:06 - 2014-10-28 21:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
    2015-03-07 09:06 - 2014-10-28 21:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
    2015-03-07 09:06 - 2014-10-28 21:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
    2015-03-07 09:06 - 2014-10-28 21:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
    2015-03-07 09:06 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
    2015-03-07 09:06 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
    2015-03-07 09:06 - 2014-07-12 00:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
    2015-03-07 09:06 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
    2015-03-07 09:06 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
    2015-03-07 09:06 - 2014-06-01 22:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
    2015-03-07 09:06 - 2014-05-31 06:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
    2015-03-07 09:06 - 2014-05-31 06:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
    2015-03-07 09:06 - 2014-05-31 06:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
    2015-03-07 09:06 - 2014-05-31 02:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
    2015-03-07 09:06 - 2014-05-31 02:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
    2015-03-07 09:06 - 2014-05-31 02:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
    2015-03-07 09:06 - 2014-05-31 00:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
    2015-03-07 09:06 - 2014-05-31 00:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
    2015-03-07 09:06 - 2014-05-31 00:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
    2015-03-07 09:06 - 2014-05-27 05:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
    2015-03-07 09:06 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
    2015-03-07 09:06 - 2014-05-01 09:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
    2015-03-07 09:06 - 2014-05-01 01:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
    2015-03-07 08:53 - 2015-03-07 08:53 - 00274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
    2015-03-07 08:53 - 2015-03-07 08:53 - 00161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat
    2015-03-06 23:53 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
    2015-03-06 23:53 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
    2015-03-06 23:53 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
    2015-03-06 19:43 - 2015-03-20 21:48 - 00002170 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2015-03-06 19:43 - 2015-03-06 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2015-03-06 19:42 - 2015-03-28 13:47 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-03-06 19:42 - 2015-03-28 09:44 - 00000910 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-03-06 19:42 - 2015-03-06 19:43 - 00000000 ____D () C:\Program Files (x86)\Google
    2015-03-06 19:42 - 2015-03-06 19:42 - 00003886 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-03-06 19:42 - 2015-03-06 19:42 - 00003650 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-03-05 09:33 - 2015-03-28 09:32 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Hewlett-Packard
    2015-03-05 09:33 - 2015-03-05 09:33 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\hpqlog
    2015-03-05 09:26 - 2015-03-08 11:12 - 00000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
    2015-03-05 09:15 - 2015-03-06 19:43 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Google
    2015-03-05 08:53 - 2015-03-05 08:53 - 00000000 ____D () C:\ProgramData\Unchecky
    2015-03-05 08:53 - 2015-03-05 08:52 - 00000000 _____ () C:\Users\Sharon\Downloads\ChromeSetup.exe
    2015-03-05 08:46 - 2015-03-05 08:46 - 00000000 ____D () C:\Users\Sharon\Documents\Fax
    2015-03-04 19:05 - 2015-03-04 19:05 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
    2015-03-03 20:44 - 2015-03-14 16:00 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Foxit Software
    2015-03-03 19:45 - 2015-03-28 10:06 - 00004974 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc
    2015-03-03 19:45 - 2015-03-13 22:15 - 00003096 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001
    2015-03-03 19:45 - 2015-03-03 19:45 - 00000000 __RHD () C:\MSOCache
    2015-03-03 19:44 - 2015-03-03 19:44 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
    2015-03-03 19:40 - 2015-03-13 22:23 - 00000000 ____D () C:\Program Files\Microsoft Office 15
    2015-03-03 19:40 - 2015-03-03 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
    2015-03-03 19:15 - 2015-03-28 09:27 - 00003926 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{120BF034-A944-406B-B750-6DB584AB32BF}
    2015-03-03 19:15 - 2015-03-03 19:16 - 00007177 _____ () C:\windows\system32\lvcoinst.log
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieUserList
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieSiteList
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Macromedia
    2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Program Files\Common Files\logishrd
    2015-03-03 19:13 - 2015-03-28 10:00 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-951477398-4118864522-2970026866-1001
    2015-03-03 19:12 - 2015-03-28 09:44 - 00000000 ___DO () C:\Users\Sharon\OneDrive
    2015-03-03 19:12 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Hewlett-Packard
    2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\ATI
    2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Local\ATI
    2015-03-03 19:08 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Packages
    2015-03-03 19:08 - 2015-03-03 19:08 - 00003374 _____ () C:\windows\System32\Tasks\HPCheckDropBoxStatus
    2015-03-03 19:08 - 2015-03-03 19:08 - 00001449 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000184 _____ () C:\windows\insFileSpec
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\windows\System32\Tasks\WPD
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Adobe
    2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Local\VirtualStore
    2015-03-03 19:08 - 2014-12-04 13:02 - 00002270 _____ () C:\Users\Public\Desktop\Get Dropbox Offer.lnk
    2015-03-03 19:08 - 2014-12-04 13:02 - 00001306 _____ () C:\Users\Public\Desktop\TripAdvisor.lnk
    2015-03-03 19:08 - 2014-12-04 12:47 - 00002240 _____ () C:\Users\Public\Desktop\Snapfish.lnk
    2015-03-03 19:07 - 2015-03-04 19:18 - 00000000 ____D () C:\Users\Sharon
    2015-03-03 19:07 - 2015-03-03 19:07 - 00000020 ___SH () C:\Users\Sharon\ntuser.ini
    2015-03-03 19:07 - 2014-12-04 13:09 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-03-03 19:07 - 2014-12-04 12:27 - 00000000 ___HD () C:\Users\Sharon\Documents\hp.system.package.metadata
    2015-03-03 19:07 - 2014-03-18 06:06 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
    2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
    2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    2015-03-03 18:59 - 2015-03-28 14:43 - 01352625 _____ () C:\windows\WindowsUpdate.log
    2015-03-03 18:54 - 2015-03-03 18:54 - 00000000 ____D () C:\ProgramData\HP

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-03-28 14:00 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sru
    2015-03-28 09:48 - 2014-03-18 05:53 - 00891920 _____ () C:\windows\system32\PerfStringBackup.INI
    2015-03-28 09:43 - 2014-12-04 12:15 - 00531152 _____ () C:\windows\SysWOW64\rootpa.e2e
    2015-03-28 09:42 - 2013-08-22 10:46 - 00020107 _____ () C:\windows\setupact.log
    2015-03-28 09:42 - 2013-08-22 10:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
    2015-03-28 09:41 - 2014-12-04 12:13 - 00065536 _____ () C:\windows\system32\spu_storage.bin
    2015-03-28 09:41 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\BBI
    2015-03-26 21:44 - 2012-05-17 22:51 - 00000796 _____ () C:\Users\Sharon\Desktop\Settings.ini
    2015-03-26 14:32 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
    2015-03-24 19:09 - 2013-08-22 11:20 - 00000000 ____D () C:\windows\CbsTemp
    2015-03-21 14:27 - 2014-12-04 12:40 - 00000000 ____D () C:\ProgramData\CyberLink
    2015-03-20 16:46 - 2014-12-04 12:27 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
    2015-03-19 16:45 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files (x86)\McAfee
    2015-03-19 14:10 - 2014-03-18 05:44 - 00020016 _____ () C:\windows\PFRO.log
    2015-03-18 08:19 - 2014-12-04 12:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\ProgramData\WildTangent
    2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
    2015-03-16 14:33 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\rescache
    2015-03-14 09:40 - 2013-08-22 10:44 - 00385656 _____ () C:\windows\system32\FNTCACHE.DAT
    2015-03-14 09:38 - 2014-03-18 05:38 - 00000000 ____D () C:\Program Files\Windows Journal
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ToastData
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\WinStore
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\setup
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\setup
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender
    2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
    2015-03-14 09:38 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\oobe
    2015-03-14 09:26 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\AppReadiness
    2015-03-11 19:15 - 2014-12-04 12:59 - 00000000 ____D () C:\ProgramData\McAfee
    2015-03-11 19:13 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files\Common Files\mcafee
    2015-03-11 19:12 - 2013-08-22 11:36 - 00000000 ___HD () C:\windows\ELAMBKUP
    2015-03-11 19:10 - 2014-12-04 13:00 - 00001867 _____ () C:\Users\Public\Desktop\McAfee LiveSafe - Internet Security.lnk
    2015-03-11 19:10 - 2014-12-04 12:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
    2015-03-09 19:59 - 2012-05-02 18:59 - 01406208 _____ (Tweaking.com) C:\Users\Sharon\Desktop\TweakingRegistryBackup.exe
    2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-RS
    2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-CS
    2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\PolicyDefinitions
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\inetsrv
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\inetsrv
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\MediaViewer
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\FileManager
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\Camera
    2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
    2015-03-08 11:25 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\restore
    2015-03-06 20:06 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\GroupPolicy
    2015-03-05 09:33 - 2014-12-04 12:28 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
    2015-03-03 19:09 - 2014-12-04 12:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
    2015-03-03 19:08 - 2014-12-04 12:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
    2015-03-03 19:08 - 2014-05-27 19:27 - 00000000 _RSHD () C:\SYSTEM.SAV
    2015-03-03 19:08 - 2014-04-02 18:17 - 00000000 ____D () C:\windows\Panther

    ==================== Files in the root of some directories =======

    2015-03-05 09:26 - 2015-03-08 11:12 - 0000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
    2015-03-07 08:53 - 2015-03-07 08:53 - 0274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
    2015-03-07 08:53 - 2015-03-07 08:53 - 0161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat

    Some content of TEMP:
    ====================
    C:\Users\Sharon\AppData\Local\Temp\Quarantine.exe
    C:\Users\Sharon\AppData\Local\Temp\sqlite3.dll


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-03-19 13:52

    ==================== End Of Log ============================

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
    Ran by Sharon at 2015-03-28 14:45:53
    Running from C:\Users\Sharon\Downloads
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
    AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
    FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
    Alcor Micro USB Card Reader Driver (HKLM-x32\...\AmUStor) (Version: 20.21.3317.03861 - Alcor Micro Corp.)
    Alcor Micro USB Card Reader Driver (x32 Version: 20.21.3317.03861 - Alcor Micro Corp.) Hidden
    AMD Catalyst Install Manager (HKLM\...\{305CB43D-5CDD-9E9A-6DF3-56B71B2B1E31}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.7.4023 - CyberLink Corp.)
    Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.2.5426 - CyberLink Corp.)
    Cyberlink PhotoDirector (Version: 5.0.2.5426 - CyberLink Corp.) Hidden
    CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.7.4016 - CyberLink Corp.)
    CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.1.3004 - CyberLink Corp.)
    CyberLink PowerDirector 12 (Version: 12.0.1.3004 - CyberLink Corp.) Hidden
    CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4.4119 - CyberLink Corp.)
    DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
    Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
    Evernote v. 5.3 (HKLM-x32\...\{E461B1AC-BC3C-11E3-B5B8-00163E98E7D6}) (Version: 5.3.0.3360 - Evernote Corp.)
    Foxit PhantomPDF (HKLM-x32\...\{00CD7D62-056A-4F0F-9143-44522D44E6DD}) (Version: 6.0.32.507 - Foxit Corporation)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
    Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
    HP Documentation (HKLM-x32\...\{4B4EDB7B-4F54-4B86-8A4A-E1C5803CA374}) (Version: 1.2.0.0 - Hewlett-Packard)
    HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7745.4851 - Hewlett-Packard)
    HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
    HP Support Assistant (HKLM-x32\...\{7FE016CC-DAA9-4E21-BD2F-98390D1E6F3F}) (Version: 7.6.23.8 - Hewlett-Packard Company)
    HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
    Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
    Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
    Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
    McAfee LiveSafe - Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1529 - McAfee, Inc.)
    Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4701.1002 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-951477398-4118864522-2970026866-1001\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
    Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7255 - Realtek Semiconductor Corp.)
    REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.13.1216 - REALTEK Semiconductor Corp.)
    Recovery Manager (x32 Version: 5.5.0.7316 - CyberLink Corp.) Hidden
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 2.2.0 - Tweaking.com)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-951477398-4118864522-2970026866-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)

    ==================== Restore Points =========================

    13-03-2015 23:37:19 Windows Update
    21-03-2015 15:26:30 Scheduled Checkpoint
    24-03-2015 19:07:44 Windows Update

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 09:25 - 2015-03-18 08:16 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {30BA6C99-48A9-491B-9557-0E99C7155930} - System32\Tasks\HPCeeScheduleForSharon => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
    Task: {37F12DC8-F2A4-4208-A75C-1A8275A92A61} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-02-26] (Microsoft Corporation)
    Task: {405A74E2-A0D8-485B-BAAC-40DF0D6B4144} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
    Task: {450C4BA9-B957-4E81-9181-86E4D048B8CE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
    Task: {4F8AC08F-9464-4664-8011-F5BA654CEE50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
    Task: {547060BA-88FC-4131-8403-65A8DF68BE3E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-03-10] (Hewlett-Packard)
    Task: {8004FDB0-8539-4E3B-B8B8-4F5329C52F76} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-03-10] (Hewlett-Packard)
    Task: {86347858-435B-4A29-99A7-995871CA305B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
    Task: {8A8E3C7D-39D7-4D1E-9EB0-E2F34525B014} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
    Task: {97EDAFF7-52E8-440A-8BDC-5A613812097F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
    Task: {ADCA5DB7-75A5-4800-852B-4F765387A92D} - System32\Tasks\HPCheckDropBoxStatus => c:\hp\HPQWare\DropBox\HPAppDetector.exe [2014-06-03] ()
    Task: {B896D781-EB7C-459E-83F2-AB5213A40118} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
    Task: {C028C951-60E1-4E48-AD9E-7316A7784239} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
    Task: {C555508D-FAD1-41BA-81CF-0DEFFD58F5F9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
    Task: {DE40F89E-35EB-4A7F-8EB2-E085B0BB5F97} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
    Task: {F1A6BA9D-CFA9-4A2B-B482-467E741020A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
    Task: {F8A01FEA-6DB0-4CBB-9BA4-0296566E82F7} - System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
    Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\windows\Tasks\HPCeeScheduleForSharon.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

    ==================== Loaded Modules (whitelisted) ==============

    2014-03-28 17:31 - 2014-03-28 17:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
    2014-03-28 17:27 - 2014-03-28 17:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
    2014-03-28 17:27 - 2014-03-28 17:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
    2014-03-28 17:27 - 2014-03-28 17:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
    2014-03-28 17:48 - 2014-03-28 17:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
    2014-03-28 17:48 - 2014-03-28 17:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
    2015-03-03 19:40 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
    2014-12-04 12:42 - 2014-04-14 22:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
    2014-03-28 17:36 - 2014-03-28 17:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
    2014-02-07 14:37 - 2014-02-07 14:37 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
    2015-03-13 22:21 - 2015-01-27 11:29 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
    2015-03-13 22:38 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2015-03-13 22:38 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
    2015-03-13 22:38 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
    2015-03-13 22:38 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
    2015-03-13 22:38 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
    2015-03-04 20:02 - 2015-03-04 20:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll
    2015-03-20 21:48 - 2015-03-14 06:12 - 14974280 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\PepperFlash\pepflashplayer.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\Users\Sharon\OneDrive:ms-properties

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

    ==================== EXE Association (whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP\HP_Svinoya_Norway_Sunset.jpg
    DNS Servers: 192.168.1.1

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== Accounts: =============================

    Administrator (S-1-5-21-951477398-4118864522-2970026866-500 - Administrator - Disabled)
    Guest (S-1-5-21-951477398-4118864522-2970026866-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-951477398-4118864522-2970026866-1003 - Limited - Enabled)
    Sharon (S-1-5-21-951477398-4118864522-2970026866-1001 - Administrator - Enabled) => C:\Users\Sharon

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (03/28/2015 02:41:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
    Description: Activation of app DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (03/28/2015 00:56:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
    Description: Activation of app DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (03/28/2015 00:56:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
    Description: Activation of app DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information.


    System errors:
    =============

    Microsoft Office Sessions:
    =========================
    Error: (03/28/2015 02:41:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
    Description: DefaultBrowser_NOPUBLISHERID!Chrome-2144927151

    Error: (03/28/2015 00:56:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
    Description: DefaultBrowser_NOPUBLISHERID!Chrome-2144927151

    Error: (03/28/2015 00:56:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
    Description: DefaultBrowser_NOPUBLISHERID!Chrome-2144927151


    ==================== Memory info ===========================

    Processor: AMD A8-6410 APU with AMD Radeon R5 Graphics
    Percentage of memory in use: 36%
    Total physical RAM: 7869.93 MB
    Available physical RAM: 4965.79 MB
    Total Pagefile: 9085.93 MB
    Available Pagefile: 6141.09 MB
    Total Virtual: 131072 MB
    Available Virtual: 131071.84 MB

    ==================== Drives ================================

    Drive c: (Windows) (Fixed) (Total:1845.67 GB) (Free:1803.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive d: (Recovery Image) (Fixed) (Total:15.87 GB) (Free:1.98 GB) NTFS ==>[System with boot components (obtained from reading drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 1863 GB) (Disk ID: 1F11A08A)

    Partition: GPT Partition Type.

    ==================== End Of Log ============================

    Thanks for the warning on your availablity. I truly appreciate any direction you provide and the time you commit to helping!

  6. #6
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Hey

    Your running FRST from your downloads folder, FRST runs more efficiently if run from the desktop in lieu of some folder so go into your downloads folder and look for FRST64, right click on it and select CUT, then come back to your desktop and right click on a blank space and select PASTE


    Start
    CreateRestorePoint:
    CloseProcesses:
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstatio...Ptab&tp=iehome
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    StartMenuInternet: IEXPLORE.EXE - iexplore.exe
    CMD: ipconfig /flushdns
    Hosts:
    EmptyTemp:
    End
    Open up Notepad, it will only work with Notepad and copy the text inside the Quote box and paste it into Notepad and save to your desktop <----IMPORTANT........ and name it Fixlist, then open up FRST64 and click on FIX (Not Scan) it wont take long and when it reboots your system you will have a FIXLOG file on your desktop, post it please and let me know if this helped
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  7. #7
    Junior Member
    Join Date
    Jul 2012
    Posts
    29

    Default

    Quote Originally Posted by ken545 View Post
    Hey

    Your running FRST from your downloads folder, FRST runs more efficiently if run from the desktop in lieu of some folder so go into your downloads folder and look for FRST64, right click on it and select CUT, then come back to your desktop and right click on a blank space and select PASTE




    Open up Notepad, it will only work with Notepad and copy the text inside the Quote box and paste it into Notepad and save to your desktop <----IMPORTANT........ and name it Fixlist, then open up FRST64 and click on FIX (Not Scan) it wont take long and when it reboots your system you will have a FIXLOG file on your desktop, post it please and let me know if this helped

    Ok. Now I got it! Thanks for the patience; I followed instructions clearly. Here's the FixLog post:

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
    Ran by Sharon at 2015-03-29 18:44:36 Run:1
    Running from C:\Users\Sharon\Desktop
    Loaded Profiles: Sharon (Available profiles: Sharon)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************
    Start
    CreateRestorePoint:
    CloseProcesses:
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstatio...Ptab&tp=iehome
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    StartMenuInternet: IEXPLORE.EXE - iexplore.exe
    CMD: ipconfig /flushdns
    Hosts:
    EmptyTemp:
    End
    *****************

    Restore point was successfully created.
    Processes closed successfully.
    C:\windows\system32\GroupPolicy\Machine => Moved successfully.
    C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully.
    "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
    HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value deleted successfully.
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
    HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
    HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
    HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
    HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
    HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.

    ========= ipconfig /flushdns =========


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.

    ========= End of CMD: =========

    C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
    Hosts was reset successfully.
    EmptyTemp: => Removed 1 GB temporary data.


    The system needed a reboot.

    ==== End of Fixlog 18:45:54 ====

    It appears to have worked! Pop ups or "page bending" pop ups that were bothersome are gone, too.

    Is there anything else I need to do to maintain the health of the computer? I normally scan regularly with SpyBot and Malware Bytes. Any other suggestions you can provide would be GREATLY appreciated!

    Again, thank you!!

    Lucas

  8. #8
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default



    You have McAfee antivirus, you just need one, more than one is overkill and will severely hamper system performance, just keep it updated and run regular scans. Same thing with Spybot and Malwarebytes, with these your pretty well protected


    Double click on AdwCleaner.exe to run the tool again.
    • Click on the Uninstall button.
    • Click Yes when asked are you sure you want to uninstall.
    • Both AdwCleaner.exe, its folder and all logs will be removed.



    ==========================================================


    Please download DelFix and save the file to your Desktop.



    • Windows XP Double Click DelFix.exe to run the program.
    • Windows Vista > Win 7 > Win 8 Right Click on DelFix.exe and select RUN AS ADMINISTRATOR
    • Checkmark " Remove Disinfection Tools"
    • Click the Run button


    This will remove the specialised tools we used to clean your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually



    ==========================================================






    Safe Surfn
    Ken
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •