PDA

View Full Version : New Comp Came w/ Pop-Ups and Re-Directs not controlled by Standard Means



luke1am
2015-03-27, 04:49
Here are the requested logs. Please help. Tower is less than a month old, and has re-directed to websites and flooded pages with pop-ups, even with the proper browser settings. It has to be rooted somewhere deep in the computer's many crappy pre-loaded software programs.

Help?


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Sharon (administrator) on MAIN-PC on 26-03-2015 21:51:40
Running from C:\Users\Sharon\Downloads
Loaded Profiles: Sharon (Available profiles: Sharon)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-06-13] (Realtek Semiconductor)
HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstation?bd=all&c=144&locale=ww_ww&pf=cndt&s=ieHPtab&tp=iehome
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-951477398-4118864522-2970026866-1001 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-04-04] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-03] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-12-04]

Chrome:
=======
CHR Profile: C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-06]
CHR Extension: (Google Docs) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-06]
CHR Extension: (Google Drive) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-06]
CHR Extension: (Strong Signal) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhcklkloafcpghahpjomodagghgpdmgb [2015-03-06]
CHR Extension: (YouTube) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-06]
CHR Extension: (Google Search) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-06]
CHR Extension: (Google Sheets) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-06]
CHR Extension: (Calm Beach By RB Themes) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\kghgclggfkhahhmdgjcpcfkfofdbikgf [2015-03-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-06]
CHR Extension: (Google Wallet) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
CHR Extension: (Gmail) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-06]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-06-03] (Hewlett-Packard Company) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-06-13] (Realtek Semiconductor)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [51712 2014-06-16] (Advanced Micro Devices, Inc.)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdkmcsp; C:\Windows\System32\drivers\amdkmcsp.sys [85704 2014-06-16] (Advanced Micro Devices, Inc. )
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2014-06-16] (Advanced Micro Devices, Inc.)
R0 amdpsp; C:\Windows\System32\drivers\amdpsp.sys [230088 2014-06-16] (Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-06-16] (Advanced Micro Devices)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-03-26] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-26 21:51 - 2015-03-26 21:52 - 00017985 _____ () C:\Users\Sharon\Downloads\FRST.txt
2015-03-26 21:49 - 2015-03-26 21:49 - 00001162 _____ () C:\Users\Sharon\Desktop\FRST64 - Shortcut.lnk
2015-03-26 21:47 - 2015-03-26 21:51 - 00000000 ____D () C:\FRST
2015-03-26 21:47 - 2015-03-26 21:47 - 02095616 _____ (Farbar) C:\Users\Sharon\Downloads\FRST64.exe
2015-03-26 21:41 - 2015-03-26 21:41 - 00000207 _____ () C:\windows\tweaking.com-regbackup-MAIN-PC-Windows-8.1-(64-bit).dat
2015-03-26 21:40 - 2015-03-26 21:40 - 00000000 ____D () C:\RegBackup
2015-03-26 21:32 - 2015-03-26 21:32 - 01367040 _____ (Indigo Rose Corporation) C:\Users\Sharon\Desktop\uninstall.exe
2015-03-26 21:32 - 2015-03-26 21:32 - 00325960 _____ () C:\Users\Sharon\Desktop\lua5.1.dll
2015-03-26 21:32 - 2015-03-26 21:32 - 00001526 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\Uninstall
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\files
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\color_presets
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-03-26 21:31 - 2015-03-26 21:31 - 04720448 _____ () C:\Users\Sharon\Downloads\tweaking.com_registry_backup_setup.exe
2015-03-24 18:13 - 2015-03-10 18:08 - 01107456 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00943104 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00760320 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00677888 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-03-24 18:12 - 2015-03-10 22:38 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\MediaShow
2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\Documents\CyberLink
2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\CyberLink
2015-03-21 14:27 - 2015-03-21 14:27 - 00000000 ____D () C:\Users\Sharon\AppData\Local\CyberLink
2015-03-20 16:46 - 2015-03-20 16:46 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2015-03-14 14:40 - 2015-03-14 14:40 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieBrowserModeList
2015-03-14 09:41 - 2015-03-04 17:24 - 00792032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 09:41 - 2015-03-04 17:24 - 00178144 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-13 23:47 - 2015-03-13 23:55 - 00000000 ____D () C:\windows\system32\MRT
2015-03-13 23:47 - 2015-02-26 21:14 - 122905848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-03-13 22:49 - 2015-03-26 21:51 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-13 22:48 - 2015-03-26 17:27 - 00001081 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-13 22:48 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-03-13 22:48 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-03-13 22:48 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-03-13 22:48 - 2015-03-13 22:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-13 22:43 - 2015-03-13 22:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-13 22:41 - 2014-07-24 09:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-03-13 22:41 - 2014-07-24 09:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2015-03-13 22:41 - 2014-07-24 09:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
2015-03-13 22:41 - 2014-07-24 09:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2015-03-13 22:41 - 2014-07-24 09:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2015-03-13 22:41 - 2014-07-24 09:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
2015-03-13 22:41 - 2014-07-24 09:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2015-03-13 22:41 - 2014-07-24 06:33 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-03-13 22:41 - 2014-07-24 06:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2015-03-13 22:41 - 2014-07-24 06:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
2015-03-13 22:41 - 2014-07-24 05:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
2015-03-13 22:41 - 2014-07-24 05:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2015-03-13 22:41 - 2014-07-24 05:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2015-03-13 22:41 - 2014-07-24 05:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2015-03-13 22:41 - 2014-07-24 05:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
2015-03-13 22:41 - 2014-07-24 05:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
2015-03-13 22:41 - 2014-07-24 05:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2015-03-13 22:41 - 2014-07-24 05:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
2015-03-13 22:41 - 2014-07-24 05:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
2015-03-13 22:41 - 2014-07-24 04:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
2015-03-13 22:41 - 2014-07-24 04:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
2015-03-13 22:41 - 2014-07-24 04:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
2015-03-13 22:41 - 2014-07-24 04:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-03-13 22:41 - 2014-07-24 04:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2015-03-13 22:41 - 2014-07-24 04:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
2015-03-13 22:41 - 2014-07-24 04:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
2015-03-13 22:41 - 2014-07-24 04:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2015-03-13 22:41 - 2014-07-24 04:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
2015-03-13 22:41 - 2014-07-24 04:06 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-03-13 22:41 - 2014-07-24 04:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
2015-03-13 22:41 - 2014-07-24 04:04 - 00667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-03-13 22:41 - 2014-07-24 03:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2015-03-13 22:41 - 2014-07-24 03:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
2015-03-13 22:41 - 2014-07-24 03:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
2015-03-13 22:41 - 2014-07-24 03:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2015-03-13 22:41 - 2014-07-12 00:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
2015-03-13 22:41 - 2014-07-04 06:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
2015-03-13 22:41 - 2014-07-04 06:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2015-03-13 22:41 - 2014-07-04 05:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
2015-03-13 22:41 - 2014-06-25 20:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
2015-03-13 22:41 - 2014-06-14 01:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-03-13 22:41 - 2014-06-07 06:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
2015-03-13 22:41 - 2014-06-05 05:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
2015-03-13 22:41 - 2014-05-31 00:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
2015-03-13 22:41 - 2014-05-29 01:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2015-03-13 22:41 - 2014-05-10 04:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2015-03-13 22:41 - 2014-05-05 20:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
2015-03-13 22:41 - 2014-03-24 21:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2015-03-13 22:41 - 2014-03-24 21:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2015-03-13 22:39 - 2015-03-13 22:39 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
2015-03-13 22:38 - 2015-03-14 08:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-13 22:38 - 2015-03-13 22:41 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-03-13 22:38 - 2015-03-13 22:38 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-03-13 22:38 - 2015-03-13 22:38 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-03-13 22:38 - 2015-03-13 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-03-13 22:38 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2015-03-13 22:36 - 2015-03-13 22:37 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Sharon\Downloads\spybot-2.4.exe
2015-03-13 22:35 - 2014-07-24 11:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2015-03-13 22:35 - 2014-07-24 11:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2015-03-13 22:35 - 2014-07-24 11:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2015-03-13 22:35 - 2014-07-24 11:25 - 00054752 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-03-13 22:35 - 2014-07-24 11:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2015-03-13 22:35 - 2014-07-24 11:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2015-03-13 22:35 - 2014-07-24 07:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2015-03-13 22:35 - 2014-07-24 07:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2015-03-13 22:35 - 2014-07-24 07:33 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-03-13 22:35 - 2014-07-24 07:33 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-03-13 22:35 - 2014-07-24 07:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
2015-03-13 22:35 - 2014-07-24 07:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2015-03-13 22:35 - 2014-07-24 06:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
2015-03-13 22:35 - 2014-07-24 06:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2015-03-13 22:35 - 2014-07-24 05:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
2015-03-13 22:35 - 2014-07-24 05:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
2015-03-13 22:35 - 2014-07-24 05:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2015-03-13 22:35 - 2014-07-24 05:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
2015-03-13 22:35 - 2014-07-24 05:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2015-03-13 22:35 - 2014-07-24 04:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
2015-03-13 22:35 - 2014-07-24 04:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2015-03-13 22:35 - 2014-07-24 04:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2015-03-13 22:35 - 2014-07-24 04:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2015-03-13 22:35 - 2014-07-24 04:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2015-03-13 22:35 - 2014-07-24 04:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2015-03-13 22:35 - 2014-07-24 04:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
2015-03-13 22:35 - 2014-07-24 04:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2015-03-13 22:35 - 2014-07-24 04:19 - 00388608 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2015-03-13 22:35 - 2014-07-24 04:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2015-03-13 22:35 - 2014-07-24 04:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
2015-03-13 22:35 - 2014-07-24 04:18 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-03-13 22:35 - 2014-07-24 04:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
2015-03-13 22:35 - 2014-07-24 04:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2015-03-13 22:35 - 2014-07-24 04:15 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-03-13 22:35 - 2014-07-24 04:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2015-03-13 22:35 - 2014-07-24 04:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2015-03-13 22:35 - 2014-07-24 04:07 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-03-13 22:35 - 2014-07-24 04:02 - 03465216 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-03-13 22:35 - 2014-07-24 04:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2015-03-13 22:35 - 2014-07-24 04:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2015-03-13 22:35 - 2014-07-24 03:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2015-03-13 22:35 - 2014-07-24 03:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2015-03-13 22:35 - 2014-07-12 01:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
2015-03-13 22:35 - 2014-07-04 06:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2015-03-13 22:35 - 2014-06-27 02:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2015-03-13 22:35 - 2014-06-19 19:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-03-13 22:35 - 2014-06-18 22:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2015-03-13 22:35 - 2014-06-07 08:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
2015-03-13 22:35 - 2014-05-31 01:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
2015-03-13 22:34 - 2014-07-24 11:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-03-13 22:34 - 2014-07-24 11:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2015-03-13 22:34 - 2014-07-24 11:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-03-13 22:34 - 2014-07-24 11:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2015-03-13 22:34 - 2014-07-24 11:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-03-13 22:34 - 2014-07-24 11:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2015-03-13 22:34 - 2014-07-24 11:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
2015-03-13 22:34 - 2014-07-24 07:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2015-03-13 22:34 - 2014-07-24 07:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2015-03-13 22:34 - 2014-07-24 07:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
2015-03-13 22:34 - 2014-07-24 07:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
2015-03-13 22:34 - 2014-07-24 06:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
2015-03-13 22:34 - 2014-07-24 06:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2015-03-13 22:34 - 2014-07-24 06:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
2015-03-13 22:34 - 2014-07-24 06:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
2015-03-13 22:34 - 2014-07-24 06:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2015-03-13 22:34 - 2014-07-24 06:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
2015-03-13 22:34 - 2014-07-24 05:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
2015-03-13 22:34 - 2014-07-24 05:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2015-03-13 22:34 - 2014-07-24 05:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2015-03-13 22:34 - 2014-07-24 05:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
2015-03-13 22:34 - 2014-07-24 05:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-03-13 22:34 - 2014-07-24 05:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
2015-03-13 22:34 - 2014-07-24 05:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2015-03-13 22:34 - 2014-07-24 04:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
2015-03-13 22:34 - 2014-07-24 04:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2015-03-13 22:34 - 2014-07-24 04:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2015-03-13 22:34 - 2014-07-24 04:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2015-03-13 22:34 - 2014-07-24 04:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
2015-03-13 22:34 - 2014-07-24 03:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
2015-03-13 22:34 - 2014-07-24 03:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2015-03-13 22:34 - 2014-07-04 08:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
2015-03-13 22:34 - 2014-07-04 05:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
2015-03-13 22:34 - 2014-06-25 20:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
2015-03-13 22:34 - 2014-06-14 02:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-03-13 22:34 - 2014-05-29 02:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2015-03-13 22:34 - 2014-05-10 06:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2015-03-13 22:34 - 2014-05-06 00:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
2015-03-13 22:33 - 2014-07-24 11:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2015-03-13 22:33 - 2014-07-24 11:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
2015-03-13 22:33 - 2014-07-24 07:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2015-03-13 22:33 - 2014-07-24 07:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2015-03-13 22:33 - 2014-07-24 04:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
2015-03-13 22:33 - 2014-07-04 06:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
2015-03-13 22:33 - 2014-06-05 06:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
2015-03-13 22:33 - 2014-05-26 03:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
2015-03-13 22:33 - 2014-03-24 22:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2015-03-13 22:33 - 2014-03-24 22:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2015-03-11 19:14 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
2015-03-10 20:13 - 2015-02-06 19:09 - 00396419 _____ () C:\windows\system32\ApnDatabase.xml
2015-03-10 20:13 - 2015-02-03 19:58 - 00264000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2015-03-10 20:13 - 2015-02-03 19:58 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
2015-03-10 20:13 - 2015-02-03 19:58 - 00044024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2015-03-10 20:13 - 2015-02-02 19:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
2015-03-10 20:13 - 2015-02-02 19:53 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
2015-03-10 20:13 - 2015-01-26 23:44 - 00933888 _____ (Microsoft Corporation) C:\windows\system32\calc.exe
2015-03-10 20:13 - 2015-01-23 21:51 - 00816128 _____ (Microsoft Corporation) C:\windows\SysWOW64\calc.exe
2015-03-10 20:13 - 2015-01-23 03:17 - 00723072 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2015-03-10 20:13 - 2015-01-23 01:02 - 00560392 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2015-03-10 20:11 - 2015-03-05 22:53 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-03-10 20:11 - 2015-03-05 22:33 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-03-10 20:11 - 2015-02-25 19:26 - 04178944 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-03-10 20:11 - 2015-02-19 23:03 - 00358912 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-03-10 20:11 - 2015-02-19 22:58 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-03-10 20:11 - 2015-02-19 22:20 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-03-10 20:11 - 2015-02-19 22:15 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-03-10 20:11 - 2015-01-30 19:42 - 03097600 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2015-03-10 20:11 - 2015-01-30 19:29 - 02484224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2015-03-10 20:11 - 2015-01-28 21:58 - 00347136 _____ (Microsoft Corporation) C:\windows\system32\photowiz.dll
2015-03-10 20:11 - 2015-01-28 21:29 - 00290816 _____ (Microsoft Corporation) C:\windows\SysWOW64\photowiz.dll
2015-03-10 20:11 - 2014-10-28 22:49 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-03-10 20:11 - 2014-10-28 22:44 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-03-10 20:11 - 2014-10-28 22:44 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-03-10 20:11 - 2014-10-28 22:04 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-03-10 20:11 - 2014-10-28 22:00 - 00077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-03-10 20:11 - 2014-10-28 22:00 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-03-10 20:10 - 2015-02-05 16:24 - 01113920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2015-03-10 20:10 - 2015-01-28 21:04 - 01091072 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2015-03-10 20:10 - 2015-01-28 21:04 - 00864256 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2015-03-10 20:10 - 2014-10-28 22:43 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\printui.exe
2015-03-10 20:10 - 2014-10-28 22:34 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2015-03-10 20:10 - 2014-10-28 22:04 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\findnetprinters.dll
2015-03-10 20:10 - 2014-10-28 21:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.exe
2015-03-10 20:10 - 2014-10-28 21:52 - 00289280 _____ (Microsoft Corporation) C:\windows\SysWOW64\compstui.dll
2015-03-10 20:10 - 2014-10-28 21:51 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2015-03-10 20:10 - 2014-10-28 21:45 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
2015-03-10 20:10 - 2014-10-28 21:28 - 00055808 _____ (Microsoft Corporation) C:\windows\SysWOW64\findnetprinters.dll
2015-03-10 20:10 - 2014-10-28 21:20 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2015-03-10 20:10 - 2014-10-28 21:15 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
2015-03-10 20:10 - 2014-10-28 20:55 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2015-03-10 20:10 - 2014-10-28 20:44 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2015-03-10 20:10 - 2014-10-28 20:41 - 00269312 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2015-03-10 20:10 - 2014-10-28 20:35 - 00203776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2015-03-10 20:09 - 2015-02-05 21:28 - 02257408 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-03-10 20:09 - 2015-02-05 21:08 - 01943040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-03-10 20:09 - 2015-02-02 20:03 - 03551744 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_47.dll
2015-03-10 20:09 - 2015-02-02 20:02 - 04298240 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_47.dll
2015-03-10 20:09 - 2015-01-29 23:01 - 00097792 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys
2015-03-10 20:09 - 2015-01-29 22:03 - 01488896 _____ (Microsoft Corporation) C:\windows\system32\mfc42u.dll
2015-03-10 20:09 - 2015-01-29 22:03 - 01464832 _____ (Microsoft Corporation) C:\windows\system32\mfc42.dll
2015-03-10 20:09 - 2015-01-29 21:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42u.dll
2015-03-10 20:09 - 2015-01-29 21:42 - 01204224 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42.dll
2015-03-10 20:09 - 2015-01-29 21:29 - 00035840 _____ (Microsoft Corporation) C:\windows\SysWOW64\atlthunk.dll
2015-03-10 20:09 - 2015-01-28 21:11 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:09 - 2015-01-28 21:00 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:09 - 2015-01-28 20:59 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-03-10 20:09 - 2015-01-28 20:55 - 00971776 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2015-03-10 20:09 - 2015-01-28 20:50 - 00811008 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2015-03-10 20:09 - 2015-01-28 20:49 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-03-10 20:09 - 2015-01-28 11:41 - 07472960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-03-10 20:09 - 2015-01-28 11:41 - 01733440 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-03-10 20:09 - 2015-01-28 11:41 - 01498360 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-03-10 20:09 - 2015-01-27 22:24 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\StorageContextHandler.dll
2015-03-10 20:09 - 2015-01-27 21:47 - 00060928 _____ (Microsoft Corporation) C:\windows\SysWOW64\StorageContextHandler.dll
2015-03-10 20:09 - 2014-10-28 22:34 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WSCollect.exe
2015-03-10 20:09 - 2014-10-28 22:34 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe
2015-03-10 20:09 - 2014-10-28 21:28 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\atlthunk.dll
2015-03-10 20:09 - 2014-10-28 21:13 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2015-03-10 20:09 - 2014-10-28 20:55 - 00223744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-03-10 20:08 - 2015-01-30 19:20 - 00203264 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
2015-03-10 20:08 - 2015-01-29 22:02 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\eappgnui.dll
2015-03-10 20:08 - 2015-01-29 21:40 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappgnui.dll
2015-03-10 20:08 - 2015-01-29 21:37 - 00331776 _____ (Microsoft Corporation) C:\windows\system32\eapp3hst.dll
2015-03-10 20:08 - 2015-01-29 21:24 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\eapphost.dll
2015-03-10 20:08 - 2015-01-29 21:24 - 00250880 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapp3hst.dll
2015-03-10 20:08 - 2015-01-29 21:16 - 00266752 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapphost.dll
2015-03-10 20:08 - 2015-01-29 21:08 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\eappcfg.dll
2015-03-10 20:08 - 2015-01-29 21:06 - 00278016 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappcfg.dll
2015-03-10 20:08 - 2015-01-27 00:22 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-03-10 20:08 - 2015-01-26 22:11 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-03-10 20:08 - 2014-10-28 23:56 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-03-10 20:08 - 2014-10-28 22:37 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
2015-03-10 20:08 - 2014-10-28 21:19 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\eappprxy.dll
2015-03-10 20:08 - 2014-10-28 20:59 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappprxy.dll
2015-03-10 20:05 - 2015-02-20 21:16 - 25021440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-03-10 20:05 - 2015-02-20 20:41 - 12827648 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-03-10 20:05 - 2015-02-20 20:27 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-03-10 20:05 - 2015-02-20 20:27 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-03-10 20:05 - 2015-02-20 20:25 - 19720192 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-03-10 20:05 - 2015-02-20 19:58 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-03-10 20:05 - 2015-02-20 19:32 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-03-10 20:05 - 2015-02-19 22:49 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-03-10 20:05 - 2015-02-19 22:48 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-03-10 20:05 - 2015-02-19 22:47 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-03-10 20:05 - 2015-02-19 22:35 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-03-10 20:05 - 2015-02-19 22:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-03-10 20:05 - 2015-02-19 22:32 - 06035456 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-03-10 20:05 - 2015-02-19 22:09 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-03-10 20:05 - 2015-02-19 22:07 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2015-03-10 20:05 - 2015-02-19 22:06 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-03-10 20:05 - 2015-02-19 22:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-03-10 20:05 - 2015-02-19 22:03 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-03-10 20:05 - 2015-02-19 21:59 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-03-10 20:05 - 2015-02-19 21:56 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-03-10 20:05 - 2015-02-19 21:52 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-03-10 20:05 - 2015-02-19 21:49 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-03-10 20:05 - 2015-02-19 21:49 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-03-10 20:05 - 2015-02-19 21:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-03-10 20:05 - 2015-02-19 21:43 - 14398976 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-03-10 20:05 - 2015-02-19 21:30 - 04300288 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-03-10 20:05 - 2015-02-19 21:30 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-03-10 20:05 - 2015-02-19 21:29 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2015-03-10 20:05 - 2015-02-19 21:28 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-03-10 20:05 - 2015-02-19 21:26 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-03-10 20:05 - 2015-02-19 21:24 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-03-10 20:05 - 2015-02-19 21:24 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-03-10 20:05 - 2015-02-19 21:16 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-03-10 20:05 - 2015-02-19 21:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-03-10 20:05 - 2015-02-19 21:01 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-03-10 20:05 - 2015-02-19 20:57 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-03-10 20:05 - 2015-02-19 20:55 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-03-10 20:04 - 2015-02-12 13:40 - 22291584 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-03-10 20:04 - 2015-02-12 13:34 - 19731824 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-03-10 20:04 - 2015-02-07 19:57 - 01090048 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2015-03-10 20:04 - 2015-02-07 19:49 - 00791040 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2015-03-10 20:04 - 2015-01-29 14:45 - 01763352 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-03-10 20:04 - 2015-01-29 14:34 - 01488040 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-03-10 20:04 - 2015-01-27 21:31 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2015-03-10 20:04 - 2015-01-27 21:11 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2015-03-10 20:04 - 2015-01-27 19:47 - 02501368 _____ (Microsoft Corporation) C:\windows\explorer.exe
2015-03-10 20:04 - 2015-01-27 19:41 - 02207488 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2015-03-10 20:04 - 2015-01-21 01:54 - 01384712 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2015-03-10 20:04 - 2015-01-21 01:15 - 01123848 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
2015-03-10 20:04 - 2014-12-11 01:36 - 00046456 _____ (Microsoft Corporation) C:\windows\system32\LockScreenContentServer.exe
2015-03-09 17:49 - 2015-03-09 17:49 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ___SD () C:\windows\system32\CompatTel
2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ____D () C:\windows\system32\appraiser
2015-03-08 19:48 - 2015-03-08 19:48 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\WildTangent
2015-03-08 11:39 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2015-03-07 18:08 - 2014-12-08 23:45 - 00393728 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
2015-03-07 18:08 - 2014-12-08 21:56 - 00538624 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
2015-03-07 18:08 - 2014-09-27 03:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2015-03-07 18:08 - 2014-09-27 01:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2015-03-07 18:08 - 2014-09-26 23:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2015-03-07 18:08 - 2014-08-14 20:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2015-03-07 18:08 - 2014-07-29 21:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
2015-03-07 18:08 - 2014-07-29 01:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
2015-03-07 18:07 - 2014-06-19 21:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-03-07 18:07 - 2014-06-19 19:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-03-07 12:29 - 2015-01-15 18:43 - 00563504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-03-07 12:29 - 2015-01-15 18:43 - 00177984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-03-07 12:29 - 2015-01-14 00:22 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-03-07 12:29 - 2015-01-13 23:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2015-03-07 12:29 - 2014-10-28 22:51 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-03-07 12:29 - 2014-10-28 22:50 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-03-07 12:29 - 2014-10-28 22:06 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-03-07 12:29 - 2014-10-28 22:06 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-03-07 12:29 - 2014-10-28 21:31 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-03-07 12:26 - 2014-06-12 21:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
2015-03-07 12:26 - 2014-06-12 21:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2015-03-07 12:26 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
2015-03-07 12:25 - 2014-12-08 21:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-03-07 12:25 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-03-07 12:23 - 2014-11-09 22:29 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\DeviceSetupStatusProvider.dll
2015-03-07 12:23 - 2014-11-09 21:51 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\SysWOW64\locale.nls
2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\system32\locale.nls
2015-03-07 12:22 - 2014-10-28 21:27 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll
2015-03-07 12:22 - 2014-10-28 21:04 - 00868352 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll
2015-03-07 12:22 - 2014-10-28 21:04 - 00200704 _____ (Microsoft Corporation) C:\windows\SysWOW64\GlobCollationHost.dll
2015-03-07 12:22 - 2014-10-12 22:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-03-07 12:22 - 2014-10-10 20:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-03-07 12:22 - 2014-10-10 20:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-03-07 12:22 - 2014-10-08 03:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2015-03-07 12:22 - 2014-10-08 03:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2015-03-07 12:22 - 2014-10-08 02:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2015-03-07 12:22 - 2014-03-13 03:42 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
2015-03-07 12:22 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
2015-03-07 12:21 - 2014-10-28 21:27 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\GlobCollationHost.dll
2015-03-07 12:21 - 2014-09-22 00:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2015-03-07 12:21 - 2014-09-18 20:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2015-03-07 12:20 - 2014-12-19 04:57 - 00788680 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-03-07 12:20 - 2014-12-19 04:25 - 00602776 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-03-07 09:16 - 2014-10-30 19:39 - 01970432 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2015-03-07 09:16 - 2014-10-30 19:38 - 01612992 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2015-03-07 09:16 - 2014-08-23 00:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2015-03-07 09:15 - 2015-01-11 22:21 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-03-07 09:15 - 2015-01-11 21:48 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-03-07 09:15 - 2015-01-11 21:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-03-07 09:15 - 2015-01-11 21:23 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-03-07 09:15 - 2014-10-31 00:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-03-07 09:15 - 2014-10-31 00:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-03-07 09:15 - 2014-10-31 00:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-03-07 09:15 - 2014-10-30 23:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-03-07 09:15 - 2014-10-30 22:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-07 09:15 - 2014-10-30 22:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-03-07 09:15 - 2014-10-30 22:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2015-03-07 09:15 - 2014-08-23 02:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2015-03-07 09:15 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2015-03-07 09:14 - 2014-11-21 22:49 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-03-07 09:14 - 2014-11-21 22:06 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-03-07 09:14 - 2014-10-31 01:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2015-03-07 09:14 - 2014-10-31 01:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2015-03-07 09:14 - 2014-10-31 01:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2015-03-07 09:14 - 2014-10-31 01:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2015-03-07 09:14 - 2014-10-31 01:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2015-03-07 09:14 - 2014-10-31 01:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2015-03-07 09:14 - 2014-10-31 01:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-03-07 09:14 - 2014-10-31 01:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-03-07 09:14 - 2014-10-31 00:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-03-07 09:14 - 2014-10-31 00:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2015-03-07 09:14 - 2014-10-31 00:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-03-07 09:14 - 2014-10-31 00:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2015-03-07 09:14 - 2014-10-31 00:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-03-07 09:14 - 2014-10-31 00:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-03-07 09:14 - 2014-10-31 00:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2015-03-07 09:14 - 2014-10-31 00:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2015-03-07 09:14 - 2014-10-31 00:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2015-03-07 09:14 - 2014-10-31 00:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2015-03-07 09:14 - 2014-10-31 00:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-03-07 09:14 - 2014-10-31 00:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2015-03-07 09:14 - 2014-10-30 23:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2015-03-07 09:14 - 2014-10-30 23:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2015-03-07 09:14 - 2014-10-30 23:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2015-03-07 09:14 - 2014-10-30 23:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2015-03-07 09:14 - 2014-10-30 23:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2015-03-07 09:14 - 2014-10-30 23:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2015-03-07 09:14 - 2014-10-30 23:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2015-03-07 09:14 - 2014-10-30 23:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-03-07 09:14 - 2014-10-30 23:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-03-07 09:14 - 2014-10-30 23:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-03-07 09:14 - 2014-10-30 23:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-03-07 09:14 - 2014-10-30 23:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2015-03-07 09:14 - 2014-10-30 23:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-03-07 09:14 - 2014-10-30 23:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2015-03-07 09:14 - 2014-10-30 23:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-03-07 09:14 - 2014-10-30 23:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2015-03-07 09:14 - 2014-10-30 22:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2015-03-07 09:14 - 2014-10-30 22:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2015-03-07 09:14 - 2014-10-30 22:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2015-03-07 09:14 - 2014-10-30 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-03-07 09:14 - 2014-10-30 22:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2015-03-07 09:14 - 2014-10-30 22:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2015-03-07 09:14 - 2014-02-06 07:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-03-07 09:11 - 2014-10-28 22:02 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-03-07 09:11 - 2014-10-28 22:02 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-03-07 09:11 - 2014-10-28 21:57 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-03-07 09:11 - 2014-10-28 21:15 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-03-07 09:11 - 2014-10-28 21:15 - 00005632 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-03-07 09:11 - 2014-10-28 21:14 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-03-07 09:11 - 2014-10-28 21:13 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-03-07 09:11 - 2014-10-28 21:13 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-03-07 09:11 - 2014-08-16 00:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2015-03-07 09:11 - 2014-08-15 23:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-03-07 09:11 - 2014-08-15 23:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2015-03-07 09:11 - 2014-08-15 21:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-03-07 09:11 - 2014-08-15 21:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2015-03-07 09:11 - 2014-08-15 20:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2015-03-07 09:11 - 2014-08-15 20:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
2015-03-07 09:11 - 2014-08-15 20:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
2015-03-07 09:11 - 2014-08-15 20:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2015-03-07 09:11 - 2014-08-15 20:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
2015-03-07 09:11 - 2014-08-15 20:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
2015-03-07 09:11 - 2014-08-15 20:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
2015-03-07 09:11 - 2014-08-15 20:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
2015-03-07 09:11 - 2014-08-15 20:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2015-03-07 09:11 - 2014-08-15 20:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2015-03-07 09:11 - 2014-08-15 20:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2015-03-07 09:11 - 2014-08-15 20:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2015-03-07 09:11 - 2014-08-15 20:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2015-03-07 09:11 - 2014-08-15 20:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2015-03-07 09:11 - 2014-08-15 20:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-03-07 09:11 - 2014-08-15 20:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2015-03-07 09:11 - 2014-08-15 20:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2015-03-07 09:11 - 2014-08-15 20:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2015-03-07 09:11 - 2014-08-15 20:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-03-07 09:11 - 2014-07-24 11:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2015-03-07 09:11 - 2014-07-24 07:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
2015-03-07 09:11 - 2014-07-24 06:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-03-07 09:11 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-03-07 09:09 - 2014-12-19 02:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-03-07 09:09 - 2014-12-11 22:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-03-07 09:09 - 2014-12-11 20:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-03-07 09:09 - 2014-09-03 20:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-03-07 09:09 - 2014-09-03 20:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-03-07 09:09 - 2014-08-23 01:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-03-07 09:09 - 2014-08-23 01:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-03-07 09:09 - 2014-08-06 22:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-03-07 09:09 - 2014-08-01 23:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-03-07 09:09 - 2014-08-01 20:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2015-03-07 09:09 - 2014-07-15 14:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
2015-03-07 09:09 - 2014-07-15 04:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2015-03-07 09:09 - 2014-07-15 04:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
2015-03-07 09:09 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2015-03-07 09:09 - 2014-05-19 02:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
2015-03-07 09:09 - 2014-05-19 02:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
2015-03-07 09:09 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
2015-03-07 09:09 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll
2015-03-07 09:09 - 2014-04-10 23:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-03-07 09:09 - 2014-04-10 23:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-03-07 09:09 - 2014-04-10 23:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-03-07 09:09 - 2014-04-10 23:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-03-07 09:09 - 2014-04-10 22:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2015-03-07 09:08 - 2014-10-23 01:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-03-07 09:08 - 2014-10-23 01:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-03-07 09:08 - 2014-05-03 01:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2015-03-07 09:08 - 2014-05-03 01:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
2015-03-07 09:08 - 2014-05-03 01:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
2015-03-07 09:08 - 2014-05-03 01:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
2015-03-07 09:08 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
2015-03-07 09:08 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
2015-03-07 09:08 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
2015-03-07 09:08 - 2014-05-02 19:26 - 00050745 _____ () C:\windows\system32\srms.dat
2015-03-07 09:08 - 2014-04-30 02:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
2015-03-07 09:08 - 2014-04-30 02:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-03-07 09:08 - 2014-04-30 02:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
2015-03-07 09:08 - 2014-04-30 02:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
2015-03-07 09:08 - 2014-04-30 01:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2015-03-07 09:08 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2015-03-07 09:08 - 2014-04-30 00:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-03-07 09:08 - 2014-04-30 00:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-03-07 09:08 - 2014-04-30 00:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
2015-03-07 09:08 - 2014-04-30 00:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
2015-03-07 09:08 - 2014-04-30 00:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
2015-03-07 09:08 - 2014-04-30 00:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
2015-03-07 09:08 - 2014-04-30 00:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2015-03-07 09:08 - 2014-04-29 23:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2015-03-07 09:08 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2015-03-07 09:08 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
2015-03-07 09:08 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
2015-03-07 09:08 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
2015-03-07 09:08 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
2015-03-07 09:08 - 2014-04-29 23:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
2015-03-07 09:08 - 2014-04-28 18:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
2015-03-07 09:08 - 2014-04-26 12:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
2015-03-07 09:08 - 2014-04-18 10:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll
2015-03-07 09:08 - 2014-04-18 05:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll
2015-03-07 09:08 - 2014-04-14 05:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
2015-03-07 09:08 - 2014-04-14 05:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll
2015-03-07 09:08 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
2015-03-07 09:08 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll
2015-03-07 09:08 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
2015-03-07 09:08 - 2014-04-11 00:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
2015-03-07 09:08 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
2015-03-07 09:08 - 2014-04-09 07:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2015-03-07 09:08 - 2014-04-09 02:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2015-03-07 09:08 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
2015-03-07 09:08 - 2014-04-08 23:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll
2015-03-07 09:08 - 2014-04-08 18:46 - 00086688 _____ (Microsoft Corporation) C:\windows\system32\mrt_map.dll
2015-03-07 09:08 - 2014-04-08 18:46 - 00028320 _____ (Microsoft Corporation) C:\windows\system32\mrt100.dll
2015-03-07 09:08 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt_map.dll
2015-03-07 09:08 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt100.dll
2015-03-07 09:08 - 2014-04-07 22:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys
2015-03-07 09:08 - 2014-04-06 12:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2015-03-07 09:08 - 2014-04-06 12:34 - 00275800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2015-03-07 09:08 - 2014-04-06 12:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll
2015-03-07 09:08 - 2014-04-06 12:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys
2015-03-07 09:08 - 2014-04-06 12:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-03-07 09:08 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
2015-03-07 09:08 - 2014-04-06 08:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-03-07 09:08 - 2014-04-06 08:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-03-07 09:08 - 2014-04-06 08:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe
2015-03-07 09:08 - 2014-04-06 08:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-03-07 09:08 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-03-07 09:08 - 2014-04-06 07:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll
2015-03-07 09:08 - 2014-04-06 06:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll
2015-03-07 09:08 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll
2015-03-07 09:08 - 2014-04-03 04:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2015-03-07 09:08 - 2014-04-03 04:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll
2015-03-07 09:08 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2015-03-07 09:08 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll
2015-03-07 09:08 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll
2015-03-07 09:08 - 2014-04-02 22:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll
2015-03-07 09:08 - 2014-03-28 11:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe
2015-03-07 09:08 - 2014-03-27 01:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll
2015-03-07 09:08 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll
2015-03-07 09:08 - 2014-03-26 23:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll
2015-03-07 09:08 - 2014-03-26 23:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe
2015-03-07 09:08 - 2014-03-19 03:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-03-07 09:08 - 2014-03-18 01:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
2015-03-07 09:08 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
2015-03-07 09:08 - 2014-03-17 01:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll
2015-03-07 09:08 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll
2015-03-07 09:08 - 2014-03-14 02:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll
2015-03-07 09:08 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll
2015-03-07 09:08 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-03-07 09:07 - 2015-01-19 14:42 - 01487976 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2015-03-07 09:07 - 2014-12-02 19:09 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-03-07 09:07 - 2014-11-09 19:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-03-07 09:07 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-03-07 09:07 - 2014-11-09 19:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-03-07 09:07 - 2014-11-09 19:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-03-07 09:07 - 2014-10-12 22:43 - 00238912 ____C (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2015-03-07 09:07 - 2014-10-12 22:43 - 00153920 ____C (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2015-03-07 09:07 - 2014-10-12 22:43 - 00086336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys
2015-03-07 09:07 - 2014-10-12 22:43 - 00039744 ____C (Microsoft Corporation) C:\windows\system32\Drivers\intelpep.sys
2015-03-07 09:07 - 2014-09-10 02:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2015-03-07 09:07 - 2014-09-07 23:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2015-03-07 09:07 - 2014-09-07 23:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2015-03-07 09:07 - 2014-09-03 23:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2015-03-07 09:07 - 2014-09-03 22:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2015-03-07 09:07 - 2014-09-03 20:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2015-03-07 09:07 - 2014-08-30 20:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2015-03-07 09:07 - 2014-08-30 18:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2015-03-07 09:07 - 2014-08-30 17:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2015-03-07 09:07 - 2014-08-30 17:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2015-03-07 09:07 - 2014-08-30 16:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2015-03-07 09:07 - 2014-08-30 16:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2015-03-07 09:07 - 2014-08-27 20:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-03-07 09:07 - 2014-08-27 20:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-03-07 09:07 - 2014-08-23 01:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2015-03-07 09:07 - 2014-08-23 01:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2015-03-07 09:07 - 2014-08-23 00:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2015-03-07 09:07 - 2014-08-01 20:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
2015-03-07 09:07 - 2014-08-01 20:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
2015-03-07 09:07 - 2014-05-13 03:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
2015-03-07 09:07 - 2014-03-19 04:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll
2015-03-07 09:07 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2015-03-07 09:06 - 2014-12-08 15:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2015-03-07 09:06 - 2014-12-05 23:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2015-03-07 09:06 - 2014-12-05 21:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-03-07 09:06 - 2014-12-05 21:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2015-03-07 09:06 - 2014-10-30 18:37 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2015-03-07 09:06 - 2014-10-30 18:34 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2015-03-07 09:06 - 2014-10-29 00:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2015-03-07 09:06 - 2014-10-29 00:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2015-03-07 09:06 - 2014-10-28 23:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-03-07 09:06 - 2014-10-28 23:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-03-07 09:06 - 2014-10-28 23:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-03-07 09:06 - 2014-10-28 23:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-03-07 09:06 - 2014-10-28 23:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2015-03-07 09:06 - 2014-10-28 23:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2015-03-07 09:06 - 2014-10-28 23:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-03-07 09:06 - 2014-10-28 23:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-03-07 09:06 - 2014-10-28 23:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-03-07 09:06 - 2014-10-28 22:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2015-03-07 09:06 - 2014-10-28 21:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2015-03-07 09:06 - 2014-10-28 21:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2015-03-07 09:06 - 2014-10-28 21:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-03-07 09:06 - 2014-10-28 21:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-03-07 09:06 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2015-03-07 09:06 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2015-03-07 09:06 - 2014-07-12 00:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2015-03-07 09:06 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2015-03-07 09:06 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2015-03-07 09:06 - 2014-06-01 22:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2015-03-07 09:06 - 2014-05-31 06:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2015-03-07 09:06 - 2014-05-31 06:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2015-03-07 09:06 - 2014-05-31 06:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2015-03-07 09:06 - 2014-05-31 02:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2015-03-07 09:06 - 2014-05-31 02:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2015-03-07 09:06 - 2014-05-31 02:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2015-03-07 09:06 - 2014-05-31 00:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2015-03-07 09:06 - 2014-05-31 00:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2015-03-07 09:06 - 2014-05-31 00:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2015-03-07 09:06 - 2014-05-27 05:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
2015-03-07 09:06 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
2015-03-07 09:06 - 2014-05-01 09:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
2015-03-07 09:06 - 2014-05-01 01:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
2015-03-07 08:53 - 2015-03-07 08:53 - 00274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
2015-03-07 08:53 - 2015-03-07 08:53 - 00161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat
2015-03-06 23:53 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2015-03-06 23:53 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2015-03-06 23:53 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2015-03-06 19:43 - 2015-03-20 21:48 - 00002170 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-06 19:43 - 2015-03-06 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-06 19:42 - 2015-03-26 21:47 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-06 19:42 - 2015-03-26 17:26 - 00000910 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-06 19:42 - 2015-03-06 19:43 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-06 19:42 - 2015-03-06 19:42 - 00003886 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-03-06 19:42 - 2015-03-06 19:42 - 00003650 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-03-05 09:33 - 2015-03-05 09:33 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\hpqlog
2015-03-05 09:33 - 2015-03-05 09:33 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Hewlett-Packard
2015-03-05 09:26 - 2015-03-08 11:12 - 00000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
2015-03-05 09:15 - 2015-03-06 19:43 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Google
2015-03-05 08:53 - 2015-03-26 21:53 - 00000312 _____ () C:\windows\Tasks\UpdaterEX.job
2015-03-05 08:53 - 2015-03-14 08:51 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\UpdaterEX
2015-03-05 08:53 - 2015-03-05 08:53 - 00002650 _____ () C:\windows\System32\Tasks\UpdaterEX
2015-03-05 08:53 - 2015-03-05 08:53 - 00000000 ____D () C:\ProgramData\Unchecky
2015-03-05 08:53 - 2015-03-05 08:52 - 00000000 _____ () C:\Users\Sharon\Downloads\ChromeSetup.exe
2015-03-05 08:46 - 2015-03-05 08:46 - 00000000 ____D () C:\Users\Sharon\Documents\Fax
2015-03-04 19:05 - 2015-03-04 19:05 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-03-03 20:44 - 2015-03-14 16:00 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Foxit Software
2015-03-03 19:45 - 2015-03-26 19:51 - 00004974 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc
2015-03-03 19:45 - 2015-03-13 22:15 - 00003096 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001
2015-03-03 19:45 - 2015-03-03 19:45 - 00000000 __RHD () C:\MSOCache
2015-03-03 19:44 - 2015-03-03 19:44 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-03-03 19:40 - 2015-03-13 22:23 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-03 19:40 - 2015-03-03 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-03 19:15 - 2015-03-26 20:30 - 00003926 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{120BF034-A944-406B-B750-6DB584AB32BF}
2015-03-03 19:15 - 2015-03-03 19:16 - 00007177 _____ () C:\windows\system32\lvcoinst.log
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieUserList
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieSiteList
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Macromedia
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Program Files\Common Files\logishrd
2015-03-03 19:13 - 2015-03-26 21:41 - 00003596 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-951477398-4118864522-2970026866-1001
2015-03-03 19:12 - 2015-03-26 17:26 - 00000000 ___DO () C:\Users\Sharon\OneDrive
2015-03-03 19:12 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Hewlett-Packard
2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\ATI
2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Local\ATI
2015-03-03 19:08 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Packages
2015-03-03 19:08 - 2015-03-03 19:08 - 00003374 _____ () C:\windows\System32\Tasks\HPCheckDropBoxStatus
2015-03-03 19:08 - 2015-03-03 19:08 - 00001449 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-03 19:08 - 2015-03-03 19:08 - 00000184 _____ () C:\windows\insFileSpec
2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Adobe
2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Local\VirtualStore
2015-03-03 19:08 - 2014-12-04 13:02 - 00002270 _____ () C:\Users\Public\Desktop\Get Dropbox Offer.lnk
2015-03-03 19:08 - 2014-12-04 13:02 - 00001306 _____ () C:\Users\Public\Desktop\TripAdvisor.lnk
2015-03-03 19:08 - 2014-12-04 12:47 - 00002240 _____ () C:\Users\Public\Desktop\Snapfish.lnk
2015-03-03 19:07 - 2015-03-04 19:18 - 00000000 ____D () C:\Users\Sharon
2015-03-03 19:07 - 2015-03-03 19:07 - 00000020 ___SH () C:\Users\Sharon\ntuser.ini
2015-03-03 19:07 - 2014-12-04 13:09 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-03 19:07 - 2014-12-04 12:27 - 00000000 ___HD () C:\Users\Sharon\Documents\hp.system.package.metadata
2015-03-03 19:07 - 2014-03-18 06:06 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-03 18:59 - 2015-03-26 21:42 - 01270643 _____ () C:\windows\WindowsUpdate.log
2015-03-03 18:54 - 2015-03-03 18:54 - 00000000 ____D () C:\ProgramData\HP

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-26 21:44 - 2012-05-17 22:51 - 00000796 _____ () C:\Users\Sharon\Desktop\Settings.ini
2015-03-26 21:00 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sru
2015-03-26 14:39 - 2014-03-18 05:53 - 00891920 _____ () C:\windows\system32\PerfStringBackup.INI
2015-03-26 14:32 - 2013-08-22 10:46 - 00019991 _____ () C:\windows\setupact.log
2015-03-26 14:32 - 2013-08-22 10:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-03-26 14:32 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2015-03-26 14:31 - 2014-12-04 12:15 - 00499669 _____ () C:\windows\SysWOW64\rootpa.e2e
2015-03-26 14:31 - 2014-12-04 12:13 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2015-03-26 14:31 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2015-03-24 19:09 - 2013-08-22 11:20 - 00000000 ____D () C:\windows\CbsTemp
2015-03-21 14:27 - 2014-12-04 12:40 - 00000000 ____D () C:\ProgramData\CyberLink
2015-03-20 16:46 - 2014-12-04 12:27 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-03-19 16:45 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-03-19 14:10 - 2014-03-18 05:44 - 00020016 _____ () C:\windows\PFRO.log
2015-03-18 08:19 - 2014-12-04 12:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\ProgramData\WildTangent
2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2015-03-16 14:33 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\rescache
2015-03-14 09:40 - 2013-08-22 10:44 - 00385656 _____ () C:\windows\system32\FNTCACHE.DAT
2015-03-14 09:38 - 2014-03-18 05:38 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ToastData
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\WinStore
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\setup
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\setup
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-14 09:38 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\oobe
2015-03-14 09:26 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\AppReadiness
2015-03-11 19:15 - 2014-12-04 12:59 - 00000000 ____D () C:\ProgramData\McAfee
2015-03-11 19:13 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-03-11 19:12 - 2013-08-22 11:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2015-03-11 19:10 - 2014-12-04 13:00 - 00001867 _____ () C:\Users\Public\Desktop\McAfee LiveSafe - Internet Security.lnk
2015-03-11 19:10 - 2014-12-04 12:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2015-03-09 19:59 - 2012-05-02 18:59 - 01406208 _____ (Tweaking.com) C:\Users\Sharon\Desktop\TweakingRegistryBackup.exe
2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-RS
2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-CS
2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\inetsrv
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\inetsrv
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\MediaViewer
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\FileManager
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\Camera
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-08 11:25 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\restore
2015-03-06 20:06 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\GroupPolicy
2015-03-05 09:33 - 2014-12-04 12:28 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-03-03 19:09 - 2014-12-04 12:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-03-03 19:08 - 2014-12-04 12:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-03-03 19:08 - 2014-05-27 19:27 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-03-03 19:08 - 2014-04-02 18:17 - 00000000 ____D () C:\windows\Panther

==================== Files in the root of some directories =======

2015-03-05 09:26 - 2015-03-08 11:12 - 0000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
2015-03-07 08:53 - 2015-03-07 08:53 - 0274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
2015-03-07 08:53 - 2015-03-07 08:53 - 0161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-19 13:52

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sharon at 2015-03-26 21:53:49
Running from C:\Users\Sharon\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\AmUStor) (Version: 20.21.3317.03861 - Alcor Micro Corp.)
Alcor Micro USB Card Reader Driver (x32 Version: 20.21.3317.03861 - Alcor Micro Corp.) Hidden
AMD Catalyst Install Manager (HKLM\...\{305CB43D-5CDD-9E9A-6DF3-56B71B2B1E31}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.7.4023 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.2.5426 - CyberLink Corp.)
Cyberlink PhotoDirector (Version: 5.0.2.5426 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.7.4016 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.1.3004 - CyberLink Corp.)
CyberLink PowerDirector 12 (Version: 12.0.1.3004 - CyberLink Corp.) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4.4119 - CyberLink Corp.)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Evernote v. 5.3 (HKLM-x32\...\{E461B1AC-BC3C-11E3-B5B8-00163E98E7D6}) (Version: 5.3.0.3360 - Evernote Corp.)
Extended Update (HKU\S-1-5-21-951477398-4118864522-2970026866-1001\...\UpdaterEX) (Version: - Extended Update) <==== ATTENTION
Foxit PhantomPDF (HKLM-x32\...\{00CD7D62-056A-4F0F-9143-44522D44E6DD}) (Version: 6.0.32.507 - Foxit Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Documentation (HKLM-x32\...\{4B4EDB7B-4F54-4B86-8A4A-E1C5803CA374}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7745.4851 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{7FE016CC-DAA9-4E21-BD2F-98390D1E6F3F}) (Version: 7.6.23.8 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
McAfee LiveSafe - Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1529 - McAfee, Inc.)
Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4701.1002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-951477398-4118864522-2970026866-1001\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7255 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.13.1216 - REALTEK Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.0.7316 - CyberLink Corp.) Hidden
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 2.2.0 - Tweaking.com)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-951477398-4118864522-2970026866-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

13-03-2015 23:37:19 Windows Update
21-03-2015 15:26:30 Scheduled Checkpoint
24-03-2015 19:07:44 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 09:25 - 2015-03-18 08:16 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {405A74E2-A0D8-485B-BAAC-40DF0D6B4144} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
Task: {450C4BA9-B957-4E81-9181-86E4D048B8CE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {4F8AC08F-9464-4664-8011-F5BA654CEE50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {507B06B7-3F6B-4A8D-A994-FEB21D3C030A} - System32\Tasks\UpdaterEX => C:\Users\Sharon\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {547060BA-88FC-4131-8403-65A8DF68BE3E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-01-21] (Hewlett-Packard)
Task: {72466A41-B216-4EE0-989E-8823BDCB4E3E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-02-26] (Microsoft Corporation)
Task: {8004FDB0-8539-4E3B-B8B8-4F5329C52F76} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-01-21] (Hewlett-Packard)
Task: {86347858-435B-4A29-99A7-995871CA305B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {8A8E3C7D-39D7-4D1E-9EB0-E2F34525B014} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
Task: {97EDAFF7-52E8-440A-8BDC-5A613812097F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
Task: {ADCA5DB7-75A5-4800-852B-4F765387A92D} - System32\Tasks\HPCheckDropBoxStatus => c:\hp\HPQWare\DropBox\HPAppDetector.exe [2014-06-03] ()
Task: {B896D781-EB7C-459E-83F2-AB5213A40118} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {C028C951-60E1-4E48-AD9E-7316A7784239} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {C555508D-FAD1-41BA-81CF-0DEFFD58F5F9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {DE40F89E-35EB-4A7F-8EB2-E085B0BB5F97} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {F1A6BA9D-CFA9-4A2B-B482-467E741020A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
Task: {F8A01FEA-6DB0-4CBB-9BA4-0296566E82F7} - System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\UpdaterEX.job => C:\Users\Sharon\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2014-03-28 17:31 - 2014-03-28 17:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
2014-03-28 17:27 - 2014-03-28 17:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
2014-03-28 17:27 - 2014-03-28 17:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
2014-03-28 17:27 - 2014-03-28 17:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
2014-03-28 17:48 - 2014-03-28 17:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
2014-03-28 17:48 - 2014-03-28 17:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
2015-03-03 19:40 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-12-04 12:42 - 2014-04-14 22:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2015-03-13 22:21 - 2015-01-27 11:29 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-03-28 17:36 - 2014-03-28 17:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
2014-02-07 14:37 - 2014-02-07 14:37 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
2015-03-13 22:38 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-03-13 22:38 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-03-13 22:38 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-13 22:38 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-03-13 22:38 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-03-04 20:02 - 2015-03-04 20:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 14974280 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Sharon\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP\HP_Svinoya_Norway_Sunset.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-951477398-4118864522-2970026866-500 - Administrator - Disabled)
Guest (S-1-5-21-951477398-4118864522-2970026866-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-951477398-4118864522-2970026866-1003 - Limited - Enabled)
Sharon (S-1-5-21-951477398-4118864522-2970026866-1001 - Administrator - Enabled) => C:\Users\Sharon

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/26/2015 06:53:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/26/2015 02:42:55 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (03/24/2015 08:53:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MAIN-PC)
Description: Package DefaultBrowser_NOPUBLISHERID+Chrome was terminated because it took too long to suspend.

Error: (03/24/2015 07:22:46 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "PDR.X,type="win32",version="1.0.0.0"1".
Dependent Assembly PDR.X,type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (03/25/2015 02:39:59 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/25/2015 02:39:59 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/21/2015 11:26:09 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}

Error: (03/20/2015 09:49:57 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: Windows.Networking.BackgroundTransfer.Internal.BackgroundTransferTask.ClassId.4

Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/20/2015 09:49:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/16/2015 08:35:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (03/16/2015 08:35:56 PM) (Source: DCOM) (EventID: 10010) (User: MAIN-PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (03/26/2015 06:53:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest

Error: (03/26/2015 02:43:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest

Error: (03/26/2015 02:42:55 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (03/24/2015 08:53:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: MAIN-PC)
Description: DefaultBrowser_NOPUBLISHERID+Chrome

Error: (03/24/2015 07:22:46 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: .NETFrameworkC:\windows\system32\mscoree.dll8

Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest

Error: (03/24/2015 07:21:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest

Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest

Error: (03/24/2015 07:08:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: PDR.X,type="win32",version="1.0.0.0"c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest


==================== Memory info ===========================

Processor: AMD A8-6410 APU with AMD Radeon R5 Graphics
Percentage of memory in use: 41%
Total physical RAM: 7869.93 MB
Available physical RAM: 4614.92 MB
Total Pagefile: 9085.93 MB
Available Pagefile: 4866.08 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:1845.67 GB) (Free:1804.61 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery Image) (Fixed) (Total:15.87 GB) (Free:1.98 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 1F11A08A)

Partition: GPT Partition Type.

==================== End Of Log ============================

aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
Run date: 2015-03-26 22:15:41
-----------------------------
22:15:41.553 OS Version: Windows x64 6.2.9200
22:15:41.553 Number of processors: 4 586 0x3001
22:15:41.555 ComputerName: MAIN-PC UserName: Sharon
22:15:43.694 Initialize success
22:15:43.697 VM: initialized successfully
22:15:43.699 VM: Amd CPU BiosDisabled
22:16:26.565 AVAST engine defs: 15032601
22:16:47.778 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000001e
22:16:47.781 Disk 0 Vendor: ST2000DM001-1ER164 HP51 Size: 1907729MB BusType: 11
22:16:47.882 Disk 0 MBR read successfully
22:16:47.886 Disk 0 MBR scan
22:16:47.896 Disk 0 unknown MBR code
22:16:47.900 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
22:16:47.942 Disk 0 scanning C:\windows\system32\drivers
22:17:01.098 Service scanning
22:17:28.660 Modules scanning
22:17:28.665 Disk 0 trace - called modules:
22:17:28.697 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll storahci.sys
22:17:28.716 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe001557d2060]
22:17:28.724 3 CLASSPNP.SYS[fffff800f200227b] -> nt!IofCallDriver -> \Device\0000001e[0xffffe001556f9060]
22:17:30.781 AVAST engine scan C:\windows
22:17:36.059 AVAST engine scan C:\windows\system32
22:26:21.072 AVAST engine scan C:\windows\system32\drivers
22:27:40.805 AVAST engine scan C:\Users\Sharon
22:28:06.889 Disk 0 MBR has been saved successfully to "C:\Users\Sharon\Desktop\MBR.dat"
22:28:06.904 The log file has been saved successfully to "C:\Users\Sharon\Desktop\aswMBR.txt"

ken545
2015-03-28, 13:20
:snwelcome:

Lets do some basic cleanup and go from there, I am also including the download link and instructions for Malwarebytes , if its installed and running ok than just open it and follow the instructions for removing bad entries


-AdwCleaner-by Xplode

Click on this link to download : ADWCleaner (http://www.bleepingcomputer.com/download/adwcleaner/)
Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.
Use my link only, do not do a search for AdwCleaner as there is a bogus copy going around by scammers


Do not click on any links in the top Advertisment.


Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Scan.
After the scan is complete click on "Clean"
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.



===============================================================================


http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool (http://thisisudax.org/downloads/JRT.exe) to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.




===============================================================================

Download Malwarebytes' Anti-Malware (http://www.malwarebytes.org/mbam-download.php) to your desktop.


Windows XP : Double click on the icon to run it.
Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"


http://i1269.photobucket.com/albums/jj590/OCD-WTT/MBAMDashboard_zpsddef9b5f.gif (http://s1269.photobucket.com/user/OCD-WTT/media/MBAMDashboard_zpsddef9b5f.gif.html)


On the Dashboard click on Update Now
Go to the Setting Tab
Under Setting go to Detection and Protection
Under PUP and PUM make sure both are set to show Treat Detections as Malware
Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
Then on the Dashboard click on Scan
Make sure to select THREAT SCAN
Then click on Scan
When the scan is finished and the log pops up...select Copy to Clipboard
Please paste the log back into this thread for review
Exit Malwarebytes

luke1am
2015-03-28, 16:47
AdW Cleaner Log:
# AdwCleaner v4.113 - Logfile created 28/03/2015 at 09:40:57
# Updated 22/03/2015 by Xplode
# Database : 2015-03-27.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Sharon - MAIN-PC
# Running from : C:\Users\Sharon\Downloads\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Sharon\AppData\Roaming\UpdaterEX
File Deleted : C:\Users\Sharon\Desktop\Uninstall.exe
File Deleted : C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
File Deleted : C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage

***** [ Scheduled tasks ] *****

Task Deleted : UpdaterEX

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\UpdaterEX
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UpdaterEX
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\binkiland.com

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v41.0.2272.101


*************************

AdwCleaner[R0].txt - [1394 bytes] - [28/03/2015 09:30:30]
AdwCleaner[S0].txt - [1270 bytes] - [28/03/2015 09:40:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1329 bytes] ##########


JRT Log:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.7 (03.28.2015:1)
OS: Windows 8.1 x64
Ran by Sharon on Sat 03/28/2015 at 9:50:07.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 03/28/2015 at 9:56:36.74
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malaware Bytes Log:
Malwarebytes Anti-Malware
www.malwarebytes.org (http://www.malwarebytes.org)

Scan Date: 3/28/2015
Scan Time: 10:27:58 AM
Logfile:
Administrator: Yes

Version: 2.01.4.1018
Malware Database: v2015.03.28.03
Rootkit Database: v2015.03.26.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Sharon

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 346222
Time Elapsed: 10 min, 42 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

I'm still getting pop-ups, esp when links are clicked.

ken545
2015-03-28, 17:13
OK, go ahead and run a new scan with FRST, open it and make sure Additions is check and post both new logs please

Take your time as i will be away most of the day and may not return until this evening

luke1am
2015-03-28, 20:51
OK, go ahead and run a new scan with FRST, open it and make sure Additions is check and post both new logs please

Take your time as i will be away most of the day and may not return until this evening



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Sharon (administrator) on MAIN-PC on 28-03-2015 14:44:04
Running from C:\Users\Sharon\Downloads
Loaded Profiles: Sharon (Available profiles: Sharon)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-06-13] (Realtek Semiconductor)
HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK14/1
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstation?bd=all&c=144&locale=ww_ww&pf=cndt&s=ieHPtab&tp=iehome
SearchScopes: HKLM -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-951477398-4118864522-2970026866-1001 -> {6E249E78-EAE1-412A-A55E-1F722A3C37D2} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-04-04] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-03] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-06] (Google Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-12-04]

Chrome:
=======
CHR Profile: C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-06]
CHR Extension: (Google Docs) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-06]
CHR Extension: (Google Drive) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-06]
CHR Extension: (Strong Signal) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhcklkloafcpghahpjomodagghgpdmgb [2015-03-06]
CHR Extension: (YouTube) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-06]
CHR Extension: (Google Search) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-06]
CHR Extension: (Google Sheets) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-06]
CHR Extension: (Calm Beach By RB Themes) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\kghgclggfkhahhmdgjcpcfkfofdbikgf [2015-03-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-06]
CHR Extension: (Google Wallet) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-06]
CHR Extension: (Gmail) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-06]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-06-03] (Hewlett-Packard Company) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-06-13] (Realtek Semiconductor)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [51712 2014-06-16] (Advanced Micro Devices, Inc.)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdkmcsp; C:\Windows\System32\drivers\amdkmcsp.sys [85704 2014-06-16] (Advanced Micro Devices, Inc. )
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2014-06-16] (Advanced Micro Devices, Inc.)
R0 amdpsp; C:\Windows\System32\drivers\amdpsp.sys [230088 2014-06-16] (Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-06-16] (Advanced Micro Devices)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-28 10:53 - 2015-03-28 10:53 - 00000623 _____ () C:\Users\Sharon\Desktop\JRT.txt
2015-03-28 09:49 - 2015-03-28 09:49 - 00001438 _____ () C:\Users\Sharon\Desktop\JRT - Shortcut.lnk
2015-03-28 09:48 - 2015-03-28 09:48 - 01389240 _____ (Thisisu) C:\Users\Sharon\Downloads\JRT.exe
2015-03-28 09:32 - 2015-03-28 09:42 - 00000352 _____ () C:\windows\Tasks\HPCeeScheduleForSharon.job
2015-03-28 09:32 - 2015-03-28 09:32 - 00003168 _____ () C:\windows\System32\Tasks\HPCeeScheduleForSharon
2015-03-28 09:29 - 2015-03-28 09:41 - 00000000 ____D () C:\AdwCleaner
2015-03-28 09:29 - 2015-03-28 09:29 - 02168320 _____ () C:\Users\Sharon\Downloads\AdwCleaner.exe
2015-03-26 22:28 - 2015-03-26 22:28 - 00001682 _____ () C:\Users\Sharon\Desktop\aswMBR.txt
2015-03-26 22:28 - 2015-03-26 22:28 - 00000512 _____ () C:\Users\Sharon\Desktop\MBR.dat
2015-03-26 22:15 - 2015-03-26 22:15 - 00001162 _____ () C:\Users\Sharon\Desktop\aswMBR - Shortcut.lnk
2015-03-26 22:11 - 2015-03-26 22:11 - 05198336 _____ (AVAST Software) C:\Users\Sharon\Downloads\aswMBR.exe
2015-03-26 21:53 - 2015-03-26 21:55 - 00024426 _____ () C:\Users\Sharon\Downloads\Addition.txt
2015-03-26 21:51 - 2015-03-28 14:44 - 00017616 _____ () C:\Users\Sharon\Downloads\FRST.txt
2015-03-26 21:49 - 2015-03-26 21:49 - 00001162 _____ () C:\Users\Sharon\Desktop\FRST64 - Shortcut.lnk
2015-03-26 21:47 - 2015-03-28 14:44 - 00000000 ____D () C:\FRST
2015-03-26 21:47 - 2015-03-26 21:47 - 02095616 _____ (Farbar) C:\Users\Sharon\Downloads\FRST64.exe
2015-03-26 21:41 - 2015-03-26 21:41 - 00000207 _____ () C:\windows\tweaking.com-regbackup-MAIN-PC-Windows-8.1-(64-bit).dat
2015-03-26 21:40 - 2015-03-26 21:40 - 00000000 ____D () C:\RegBackup
2015-03-26 21:32 - 2015-03-26 21:32 - 00325960 _____ () C:\Users\Sharon\Desktop\lua5.1.dll
2015-03-26 21:32 - 2015-03-26 21:32 - 00001526 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\Uninstall
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\files
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\Users\Sharon\Desktop\color_presets
2015-03-26 21:32 - 2015-03-26 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-03-26 21:31 - 2015-03-26 21:31 - 04720448 _____ () C:\Users\Sharon\Downloads\tweaking.com_registry_backup_setup.exe
2015-03-24 18:13 - 2015-03-10 18:08 - 01107456 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00943104 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00760320 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00677888 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-03-24 18:13 - 2015-03-10 18:08 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-03-24 18:12 - 2015-03-10 22:38 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\MediaShow
2015-03-21 14:29 - 2015-03-21 14:29 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\Documents\CyberLink
2015-03-21 14:28 - 2015-03-21 14:28 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\CyberLink
2015-03-21 14:27 - 2015-03-21 14:27 - 00000000 ____D () C:\Users\Sharon\AppData\Local\CyberLink
2015-03-20 16:46 - 2015-03-28 09:32 - 00000052 _____ () C:\windows\SysWOW64\DOErrors.log
2015-03-14 14:40 - 2015-03-14 14:40 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieBrowserModeList
2015-03-14 09:41 - 2015-03-04 17:24 - 00792032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-03-14 09:41 - 2015-03-04 17:24 - 00178144 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-13 23:47 - 2015-03-13 23:55 - 00000000 ____D () C:\windows\system32\MRT
2015-03-13 23:47 - 2015-02-26 21:14 - 122905848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-03-13 22:49 - 2015-03-28 14:32 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-13 22:48 - 2015-03-26 17:27 - 00001081 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-03-13 22:48 - 2015-03-26 17:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-03-13 22:48 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-03-13 22:48 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-03-13 22:48 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-03-13 22:48 - 2015-03-13 22:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-13 22:43 - 2015-03-13 22:43 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sharon\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-13 22:41 - 2014-07-24 09:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-03-13 22:41 - 2014-07-24 09:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2015-03-13 22:41 - 2014-07-24 09:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
2015-03-13 22:41 - 2014-07-24 09:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2015-03-13 22:41 - 2014-07-24 09:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2015-03-13 22:41 - 2014-07-24 09:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
2015-03-13 22:41 - 2014-07-24 09:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
2015-03-13 22:41 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2015-03-13 22:41 - 2014-07-24 06:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2015-03-13 22:41 - 2014-07-24 06:33 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-03-13 22:41 - 2014-07-24 06:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2015-03-13 22:41 - 2014-07-24 06:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
2015-03-13 22:41 - 2014-07-24 05:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
2015-03-13 22:41 - 2014-07-24 05:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2015-03-13 22:41 - 2014-07-24 05:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2015-03-13 22:41 - 2014-07-24 05:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2015-03-13 22:41 - 2014-07-24 05:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
2015-03-13 22:41 - 2014-07-24 05:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
2015-03-13 22:41 - 2014-07-24 05:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2015-03-13 22:41 - 2014-07-24 05:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
2015-03-13 22:41 - 2014-07-24 05:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
2015-03-13 22:41 - 2014-07-24 04:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
2015-03-13 22:41 - 2014-07-24 04:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
2015-03-13 22:41 - 2014-07-24 04:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
2015-03-13 22:41 - 2014-07-24 04:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-03-13 22:41 - 2014-07-24 04:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2015-03-13 22:41 - 2014-07-24 04:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
2015-03-13 22:41 - 2014-07-24 04:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
2015-03-13 22:41 - 2014-07-24 04:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2015-03-13 22:41 - 2014-07-24 04:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
2015-03-13 22:41 - 2014-07-24 04:06 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-03-13 22:41 - 2014-07-24 04:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
2015-03-13 22:41 - 2014-07-24 04:04 - 00667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-03-13 22:41 - 2014-07-24 03:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2015-03-13 22:41 - 2014-07-24 03:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
2015-03-13 22:41 - 2014-07-24 03:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
2015-03-13 22:41 - 2014-07-24 03:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2015-03-13 22:41 - 2014-07-12 00:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
2015-03-13 22:41 - 2014-07-04 06:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
2015-03-13 22:41 - 2014-07-04 06:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2015-03-13 22:41 - 2014-07-04 05:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
2015-03-13 22:41 - 2014-06-25 20:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
2015-03-13 22:41 - 2014-06-14 01:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2015-03-13 22:41 - 2014-06-07 06:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
2015-03-13 22:41 - 2014-06-05 05:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
2015-03-13 22:41 - 2014-05-31 00:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
2015-03-13 22:41 - 2014-05-29 01:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2015-03-13 22:41 - 2014-05-10 04:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2015-03-13 22:41 - 2014-05-05 20:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
2015-03-13 22:41 - 2014-03-24 21:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2015-03-13 22:41 - 2014-03-24 21:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2015-03-13 22:39 - 2015-03-13 22:39 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
2015-03-13 22:38 - 2015-03-14 08:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-13 22:38 - 2015-03-13 22:41 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-03-13 22:38 - 2015-03-13 22:38 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-03-13 22:38 - 2015-03-13 22:38 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-03-13 22:38 - 2015-03-13 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-03-13 22:38 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe
2015-03-13 22:36 - 2015-03-13 22:37 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Sharon\Downloads\spybot-2.4.exe
2015-03-13 22:35 - 2014-07-24 11:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2015-03-13 22:35 - 2014-07-24 11:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2015-03-13 22:35 - 2014-07-24 11:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2015-03-13 22:35 - 2014-07-24 11:25 - 00054752 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-03-13 22:35 - 2014-07-24 11:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2015-03-13 22:35 - 2014-07-24 11:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2015-03-13 22:35 - 2014-07-24 07:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2015-03-13 22:35 - 2014-07-24 07:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2015-03-13 22:35 - 2014-07-24 07:33 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-03-13 22:35 - 2014-07-24 07:33 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-03-13 22:35 - 2014-07-24 07:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
2015-03-13 22:35 - 2014-07-24 07:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2015-03-13 22:35 - 2014-07-24 06:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
2015-03-13 22:35 - 2014-07-24 06:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2015-03-13 22:35 - 2014-07-24 05:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
2015-03-13 22:35 - 2014-07-24 05:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
2015-03-13 22:35 - 2014-07-24 05:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2015-03-13 22:35 - 2014-07-24 05:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
2015-03-13 22:35 - 2014-07-24 05:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2015-03-13 22:35 - 2014-07-24 04:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
2015-03-13 22:35 - 2014-07-24 04:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2015-03-13 22:35 - 2014-07-24 04:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2015-03-13 22:35 - 2014-07-24 04:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2015-03-13 22:35 - 2014-07-24 04:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2015-03-13 22:35 - 2014-07-24 04:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2015-03-13 22:35 - 2014-07-24 04:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
2015-03-13 22:35 - 2014-07-24 04:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2015-03-13 22:35 - 2014-07-24 04:19 - 00388608 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2015-03-13 22:35 - 2014-07-24 04:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2015-03-13 22:35 - 2014-07-24 04:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
2015-03-13 22:35 - 2014-07-24 04:18 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-03-13 22:35 - 2014-07-24 04:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
2015-03-13 22:35 - 2014-07-24 04:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2015-03-13 22:35 - 2014-07-24 04:15 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-03-13 22:35 - 2014-07-24 04:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2015-03-13 22:35 - 2014-07-24 04:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2015-03-13 22:35 - 2014-07-24 04:07 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-03-13 22:35 - 2014-07-24 04:02 - 03465216 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-03-13 22:35 - 2014-07-24 04:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2015-03-13 22:35 - 2014-07-24 04:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2015-03-13 22:35 - 2014-07-24 03:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2015-03-13 22:35 - 2014-07-24 03:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2015-03-13 22:35 - 2014-07-12 01:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
2015-03-13 22:35 - 2014-07-04 06:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2015-03-13 22:35 - 2014-06-27 02:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2015-03-13 22:35 - 2014-06-19 19:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-03-13 22:35 - 2014-06-18 22:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2015-03-13 22:35 - 2014-06-07 08:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
2015-03-13 22:35 - 2014-05-31 01:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
2015-03-13 22:34 - 2014-07-24 11:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-03-13 22:34 - 2014-07-24 11:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2015-03-13 22:34 - 2014-07-24 11:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-03-13 22:34 - 2014-07-24 11:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2015-03-13 22:34 - 2014-07-24 11:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-03-13 22:34 - 2014-07-24 11:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2015-03-13 22:34 - 2014-07-24 11:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-03-13 22:34 - 2014-07-24 11:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
2015-03-13 22:34 - 2014-07-24 07:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2015-03-13 22:34 - 2014-07-24 07:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2015-03-13 22:34 - 2014-07-24 07:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2015-03-13 22:34 - 2014-07-24 07:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
2015-03-13 22:34 - 2014-07-24 07:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
2015-03-13 22:34 - 2014-07-24 06:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
2015-03-13 22:34 - 2014-07-24 06:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2015-03-13 22:34 - 2014-07-24 06:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
2015-03-13 22:34 - 2014-07-24 06:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
2015-03-13 22:34 - 2014-07-24 06:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2015-03-13 22:34 - 2014-07-24 06:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
2015-03-13 22:34 - 2014-07-24 05:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
2015-03-13 22:34 - 2014-07-24 05:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2015-03-13 22:34 - 2014-07-24 05:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2015-03-13 22:34 - 2014-07-24 05:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
2015-03-13 22:34 - 2014-07-24 05:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-03-13 22:34 - 2014-07-24 05:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
2015-03-13 22:34 - 2014-07-24 05:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2015-03-13 22:34 - 2014-07-24 04:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
2015-03-13 22:34 - 2014-07-24 04:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2015-03-13 22:34 - 2014-07-24 04:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2015-03-13 22:34 - 2014-07-24 04:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2015-03-13 22:34 - 2014-07-24 04:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
2015-03-13 22:34 - 2014-07-24 03:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
2015-03-13 22:34 - 2014-07-24 03:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2015-03-13 22:34 - 2014-07-04 08:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
2015-03-13 22:34 - 2014-07-04 05:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
2015-03-13 22:34 - 2014-06-25 20:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
2015-03-13 22:34 - 2014-06-14 02:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-03-13 22:34 - 2014-05-29 02:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2015-03-13 22:34 - 2014-05-10 06:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2015-03-13 22:34 - 2014-05-06 00:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
2015-03-13 22:33 - 2014-07-24 11:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2015-03-13 22:33 - 2014-07-24 11:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
2015-03-13 22:33 - 2014-07-24 07:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2015-03-13 22:33 - 2014-07-24 07:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2015-03-13 22:33 - 2014-07-24 04:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
2015-03-13 22:33 - 2014-07-04 06:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
2015-03-13 22:33 - 2014-06-05 06:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
2015-03-13 22:33 - 2014-05-26 03:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
2015-03-13 22:33 - 2014-03-24 22:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2015-03-13 22:33 - 2014-03-24 22:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2015-03-11 19:14 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
2015-03-10 20:13 - 2015-02-06 19:09 - 00396419 _____ () C:\windows\system32\ApnDatabase.xml
2015-03-10 20:13 - 2015-02-03 19:58 - 00264000 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2015-03-10 20:13 - 2015-02-03 19:58 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
2015-03-10 20:13 - 2015-02-03 19:58 - 00044024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2015-03-10 20:13 - 2015-02-02 19:53 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
2015-03-10 20:13 - 2015-02-02 19:53 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
2015-03-10 20:13 - 2015-01-26 23:44 - 00933888 _____ (Microsoft Corporation) C:\windows\system32\calc.exe
2015-03-10 20:13 - 2015-01-23 21:51 - 00816128 _____ (Microsoft Corporation) C:\windows\SysWOW64\calc.exe
2015-03-10 20:13 - 2015-01-23 03:17 - 00723072 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2015-03-10 20:13 - 2015-01-23 01:02 - 00560392 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2015-03-10 20:11 - 2015-03-05 22:53 - 00430080 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-03-10 20:11 - 2015-03-05 22:33 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-03-10 20:11 - 2015-02-25 19:26 - 04178944 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-03-10 20:11 - 2015-02-19 23:03 - 00358912 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-03-10 20:11 - 2015-02-19 22:58 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-03-10 20:11 - 2015-02-19 22:20 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-03-10 20:11 - 2015-02-19 22:15 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-03-10 20:11 - 2015-01-30 19:42 - 03097600 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2015-03-10 20:11 - 2015-01-30 19:29 - 02484224 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2015-03-10 20:11 - 2015-01-28 21:58 - 00347136 _____ (Microsoft Corporation) C:\windows\system32\photowiz.dll
2015-03-10 20:11 - 2015-01-28 21:29 - 00290816 _____ (Microsoft Corporation) C:\windows\SysWOW64\photowiz.dll
2015-03-10 20:11 - 2014-10-28 22:49 - 00003072 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-03-10 20:11 - 2014-10-28 22:44 - 00096256 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-03-10 20:11 - 2014-10-28 22:44 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-03-10 20:11 - 2014-10-28 22:04 - 00003072 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-03-10 20:11 - 2014-10-28 22:00 - 00077824 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-03-10 20:11 - 2014-10-28 22:00 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-03-10 20:10 - 2015-02-05 16:24 - 01113920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2015-03-10 20:10 - 2015-01-28 21:04 - 01091072 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2015-03-10 20:10 - 2015-01-28 21:04 - 00864256 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2015-03-10 20:10 - 2014-10-28 22:43 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\printui.exe
2015-03-10 20:10 - 2014-10-28 22:34 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2015-03-10 20:10 - 2014-10-28 22:04 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\findnetprinters.dll
2015-03-10 20:10 - 2014-10-28 21:58 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.exe
2015-03-10 20:10 - 2014-10-28 21:52 - 00289280 _____ (Microsoft Corporation) C:\windows\SysWOW64\compstui.dll
2015-03-10 20:10 - 2014-10-28 21:51 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2015-03-10 20:10 - 2014-10-28 21:45 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
2015-03-10 20:10 - 2014-10-28 21:28 - 00055808 _____ (Microsoft Corporation) C:\windows\SysWOW64\findnetprinters.dll
2015-03-10 20:10 - 2014-10-28 21:20 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2015-03-10 20:10 - 2014-10-28 21:15 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
2015-03-10 20:10 - 2014-10-28 20:55 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2015-03-10 20:10 - 2014-10-28 20:44 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2015-03-10 20:10 - 2014-10-28 20:41 - 00269312 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2015-03-10 20:10 - 2014-10-28 20:35 - 00203776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2015-03-10 20:09 - 2015-02-05 21:28 - 02257408 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-03-10 20:09 - 2015-02-05 21:08 - 01943040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-03-10 20:09 - 2015-02-02 20:03 - 03551744 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_47.dll
2015-03-10 20:09 - 2015-02-02 20:02 - 04298240 _____ (Microsoft Corporation) C:\windows\system32\D3DCompiler_47.dll
2015-03-10 20:09 - 2015-01-29 23:01 - 00097792 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hidbth.sys
2015-03-10 20:09 - 2015-01-29 22:03 - 01488896 _____ (Microsoft Corporation) C:\windows\system32\mfc42u.dll
2015-03-10 20:09 - 2015-01-29 22:03 - 01464832 _____ (Microsoft Corporation) C:\windows\system32\mfc42.dll
2015-03-10 20:09 - 2015-01-29 21:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42u.dll
2015-03-10 20:09 - 2015-01-29 21:42 - 01204224 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfc42.dll
2015-03-10 20:09 - 2015-01-29 21:29 - 00035840 _____ (Microsoft Corporation) C:\windows\SysWOW64\atlthunk.dll
2015-03-10 20:09 - 2015-01-28 21:11 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:09 - 2015-01-28 21:00 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-03-10 20:09 - 2015-01-28 20:59 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-03-10 20:09 - 2015-01-28 20:55 - 00971776 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2015-03-10 20:09 - 2015-01-28 20:50 - 00811008 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2015-03-10 20:09 - 2015-01-28 20:49 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-03-10 20:09 - 2015-01-28 11:41 - 07472960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-03-10 20:09 - 2015-01-28 11:41 - 01733440 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-03-10 20:09 - 2015-01-28 11:41 - 01498360 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-03-10 20:09 - 2015-01-27 22:24 - 00075264 _____ (Microsoft Corporation) C:\windows\system32\StorageContextHandler.dll
2015-03-10 20:09 - 2015-01-27 21:47 - 00060928 _____ (Microsoft Corporation) C:\windows\SysWOW64\StorageContextHandler.dll
2015-03-10 20:09 - 2014-10-28 22:34 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\WSCollect.exe
2015-03-10 20:09 - 2014-10-28 22:34 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe
2015-03-10 20:09 - 2014-10-28 21:28 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\atlthunk.dll
2015-03-10 20:09 - 2014-10-28 21:13 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2015-03-10 20:09 - 2014-10-28 20:55 - 00223744 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-03-10 20:08 - 2015-01-30 19:20 - 00203264 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
2015-03-10 20:08 - 2015-01-29 22:02 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\eappgnui.dll
2015-03-10 20:08 - 2015-01-29 21:40 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappgnui.dll
2015-03-10 20:08 - 2015-01-29 21:37 - 00331776 _____ (Microsoft Corporation) C:\windows\system32\eapp3hst.dll
2015-03-10 20:08 - 2015-01-29 21:24 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\eapphost.dll
2015-03-10 20:08 - 2015-01-29 21:24 - 00250880 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapp3hst.dll
2015-03-10 20:08 - 2015-01-29 21:16 - 00266752 _____ (Microsoft Corporation) C:\windows\SysWOW64\eapphost.dll
2015-03-10 20:08 - 2015-01-29 21:08 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\eappcfg.dll
2015-03-10 20:08 - 2015-01-29 21:06 - 00278016 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappcfg.dll
2015-03-10 20:08 - 2015-01-27 00:22 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2015-03-10 20:08 - 2015-01-26 22:11 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2015-03-10 20:08 - 2014-10-28 23:56 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2015-03-10 20:08 - 2014-10-28 22:37 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
2015-03-10 20:08 - 2014-10-28 21:19 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\eappprxy.dll
2015-03-10 20:08 - 2014-10-28 20:59 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\eappprxy.dll
2015-03-10 20:05 - 2015-02-20 21:16 - 25021440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-03-10 20:05 - 2015-02-20 20:41 - 12827648 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-03-10 20:05 - 2015-02-20 20:27 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-03-10 20:05 - 2015-02-20 20:27 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2015-03-10 20:05 - 2015-02-20 20:25 - 19720192 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-03-10 20:05 - 2015-02-20 19:58 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-03-10 20:05 - 2015-02-20 19:32 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-03-10 20:05 - 2015-02-19 22:49 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-03-10 20:05 - 2015-02-19 22:48 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-03-10 20:05 - 2015-02-19 22:47 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-03-10 20:05 - 2015-02-19 22:35 - 00816128 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-03-10 20:05 - 2015-02-19 22:34 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-03-10 20:05 - 2015-02-19 22:32 - 06035456 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-03-10 20:05 - 2015-02-19 22:09 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-03-10 20:05 - 2015-02-19 22:07 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2015-03-10 20:05 - 2015-02-19 22:06 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-03-10 20:05 - 2015-02-19 22:05 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-03-10 20:05 - 2015-02-19 22:03 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-03-10 20:05 - 2015-02-19 21:59 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2015-03-10 20:05 - 2015-02-19 21:56 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-03-10 20:05 - 2015-02-19 21:52 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-03-10 20:05 - 2015-02-19 21:49 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-03-10 20:05 - 2015-02-19 21:49 - 00374272 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-03-10 20:05 - 2015-02-19 21:46 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-03-10 20:05 - 2015-02-19 21:43 - 14398976 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-03-10 20:05 - 2015-02-19 21:30 - 04300288 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-03-10 20:05 - 2015-02-19 21:30 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2015-03-10 20:05 - 2015-02-19 21:29 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2015-03-10 20:05 - 2015-02-19 21:28 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-03-10 20:05 - 2015-02-19 21:26 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-03-10 20:05 - 2015-02-19 21:24 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-03-10 20:05 - 2015-02-19 21:24 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-03-10 20:05 - 2015-02-19 21:16 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-03-10 20:05 - 2015-02-19 21:03 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-03-10 20:05 - 2015-02-19 21:01 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-03-10 20:05 - 2015-02-19 20:57 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-03-10 20:05 - 2015-02-19 20:55 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-03-10 20:04 - 2015-02-12 13:40 - 22291584 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-03-10 20:04 - 2015-02-12 13:34 - 19731824 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-03-10 20:04 - 2015-02-07 19:57 - 01090048 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2015-03-10 20:04 - 2015-02-07 19:49 - 00791040 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2015-03-10 20:04 - 2015-01-29 14:45 - 01763352 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-03-10 20:04 - 2015-01-29 14:34 - 01488040 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2015-03-10 20:04 - 2015-01-27 21:31 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2015-03-10 20:04 - 2015-01-27 21:11 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2015-03-10 20:04 - 2015-01-27 19:47 - 02501368 _____ (Microsoft Corporation) C:\windows\explorer.exe
2015-03-10 20:04 - 2015-01-27 19:41 - 02207488 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2015-03-10 20:04 - 2015-01-21 01:54 - 01384712 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2015-03-10 20:04 - 2015-01-21 01:15 - 01123848 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
2015-03-10 20:04 - 2014-12-11 01:36 - 00046456 _____ (Microsoft Corporation) C:\windows\system32\LockScreenContentServer.exe
2015-03-09 17:49 - 2015-03-09 17:49 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ___SD () C:\windows\system32\CompatTel
2015-03-08 22:07 - 2015-03-24 19:09 - 00000000 ____D () C:\windows\system32\appraiser
2015-03-08 19:48 - 2015-03-08 19:48 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\WildTangent
2015-03-08 11:39 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2015-03-07 18:08 - 2014-12-08 23:45 - 00393728 _____ (Microsoft Corporation) C:\windows\SysWOW64\scesrv.dll
2015-03-07 18:08 - 2014-12-08 21:56 - 00538624 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
2015-03-07 18:08 - 2014-09-27 03:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2015-03-07 18:08 - 2014-09-27 01:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2015-03-07 18:08 - 2014-09-26 23:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2015-03-07 18:08 - 2014-08-14 20:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2015-03-07 18:08 - 2014-07-29 21:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
2015-03-07 18:08 - 2014-07-29 01:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
2015-03-07 18:07 - 2014-06-19 21:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-03-07 18:07 - 2014-06-19 19:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-03-07 12:29 - 2015-01-15 18:43 - 00563504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-03-07 12:29 - 2015-01-15 18:43 - 00177984 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-03-07 12:29 - 2015-01-14 00:22 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2015-03-07 12:29 - 2015-01-13 23:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2015-03-07 12:29 - 2014-10-28 22:51 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-03-07 12:29 - 2014-10-28 22:50 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-03-07 12:29 - 2014-10-28 22:06 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-03-07 12:29 - 2014-10-28 22:06 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-03-07 12:29 - 2014-10-28 21:31 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-03-07 12:26 - 2014-06-12 21:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
2015-03-07 12:26 - 2014-06-12 21:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2015-03-07 12:26 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
2015-03-07 12:25 - 2014-12-08 21:50 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-03-07 12:25 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2015-03-07 12:23 - 2014-11-09 22:29 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\DeviceSetupStatusProvider.dll
2015-03-07 12:23 - 2014-11-09 21:51 - 00028672 _____ (Microsoft Corporation) C:\windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\SysWOW64\locale.nls
2015-03-07 12:22 - 2014-12-13 17:28 - 00513488 _____ () C:\windows\system32\locale.nls
2015-03-07 12:22 - 2014-10-28 21:27 - 01200128 _____ (Microsoft Corporation) C:\windows\system32\Windows.Globalization.dll
2015-03-07 12:22 - 2014-10-28 21:04 - 00868352 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Globalization.dll
2015-03-07 12:22 - 2014-10-28 21:04 - 00200704 _____ (Microsoft Corporation) C:\windows\SysWOW64\GlobCollationHost.dll
2015-03-07 12:22 - 2014-10-12 22:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-03-07 12:22 - 2014-10-10 20:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2015-03-07 12:22 - 2014-10-10 20:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2015-03-07 12:22 - 2014-10-08 03:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2015-03-07 12:22 - 2014-10-08 03:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2015-03-07 12:22 - 2014-10-08 02:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2015-03-07 12:22 - 2014-03-13 03:42 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe
2015-03-07 12:22 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe
2015-03-07 12:21 - 2014-10-28 21:27 - 00323072 _____ (Microsoft Corporation) C:\windows\system32\GlobCollationHost.dll
2015-03-07 12:21 - 2014-09-22 00:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2015-03-07 12:21 - 2014-09-18 20:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2015-03-07 12:20 - 2014-12-19 04:57 - 00788680 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-03-07 12:20 - 2014-12-19 04:25 - 00602776 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2015-03-07 09:16 - 2014-10-30 19:39 - 01970432 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2015-03-07 09:16 - 2014-10-30 19:38 - 01612992 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2015-03-07 09:16 - 2014-08-23 00:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2015-03-07 09:15 - 2015-01-11 22:21 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-03-07 09:15 - 2015-01-11 21:48 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-03-07 09:15 - 2015-01-11 21:45 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-03-07 09:15 - 2015-01-11 21:23 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-03-07 09:15 - 2014-10-31 00:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-03-07 09:15 - 2014-10-31 00:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-03-07 09:15 - 2014-10-31 00:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-03-07 09:15 - 2014-10-30 23:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-03-07 09:15 - 2014-10-30 22:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-07 09:15 - 2014-10-30 22:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-03-07 09:15 - 2014-10-30 22:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2015-03-07 09:15 - 2014-08-23 02:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2015-03-07 09:15 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2015-03-07 09:14 - 2014-11-21 22:49 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-03-07 09:14 - 2014-11-21 22:06 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-03-07 09:14 - 2014-10-31 01:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2015-03-07 09:14 - 2014-10-31 01:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2015-03-07 09:14 - 2014-10-31 01:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2015-03-07 09:14 - 2014-10-31 01:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2015-03-07 09:14 - 2014-10-31 01:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2015-03-07 09:14 - 2014-10-31 01:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2015-03-07 09:14 - 2014-10-31 01:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-03-07 09:14 - 2014-10-31 01:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-03-07 09:14 - 2014-10-31 00:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-03-07 09:14 - 2014-10-31 00:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2015-03-07 09:14 - 2014-10-31 00:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-03-07 09:14 - 2014-10-31 00:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2015-03-07 09:14 - 2014-10-31 00:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-03-07 09:14 - 2014-10-31 00:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-03-07 09:14 - 2014-10-31 00:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2015-03-07 09:14 - 2014-10-31 00:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2015-03-07 09:14 - 2014-10-31 00:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2015-03-07 09:14 - 2014-10-31 00:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2015-03-07 09:14 - 2014-10-31 00:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-03-07 09:14 - 2014-10-31 00:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2015-03-07 09:14 - 2014-10-30 23:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2015-03-07 09:14 - 2014-10-30 23:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2015-03-07 09:14 - 2014-10-30 23:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2015-03-07 09:14 - 2014-10-30 23:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2015-03-07 09:14 - 2014-10-30 23:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2015-03-07 09:14 - 2014-10-30 23:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2015-03-07 09:14 - 2014-10-30 23:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2015-03-07 09:14 - 2014-10-30 23:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-03-07 09:14 - 2014-10-30 23:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-03-07 09:14 - 2014-10-30 23:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-03-07 09:14 - 2014-10-30 23:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-03-07 09:14 - 2014-10-30 23:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2015-03-07 09:14 - 2014-10-30 23:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-03-07 09:14 - 2014-10-30 23:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2015-03-07 09:14 - 2014-10-30 23:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-03-07 09:14 - 2014-10-30 23:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2015-03-07 09:14 - 2014-10-30 22:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2015-03-07 09:14 - 2014-10-30 22:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2015-03-07 09:14 - 2014-10-30 22:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2015-03-07 09:14 - 2014-10-30 22:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-03-07 09:14 - 2014-10-30 22:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2015-03-07 09:14 - 2014-10-30 22:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2015-03-07 09:14 - 2014-02-06 07:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-03-07 09:11 - 2014-10-28 22:02 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-03-07 09:11 - 2014-10-28 22:02 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-03-07 09:11 - 2014-10-28 21:57 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-03-07 09:11 - 2014-10-28 21:15 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-03-07 09:11 - 2014-10-28 21:15 - 00005632 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-03-07 09:11 - 2014-10-28 21:14 - 00004096 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-03-07 09:11 - 2014-10-28 21:13 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-03-07 09:11 - 2014-10-28 21:13 - 00008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-03-07 09:11 - 2014-08-16 00:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2015-03-07 09:11 - 2014-08-15 23:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-03-07 09:11 - 2014-08-15 23:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2015-03-07 09:11 - 2014-08-15 21:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-03-07 09:11 - 2014-08-15 21:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2015-03-07 09:11 - 2014-08-15 20:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2015-03-07 09:11 - 2014-08-15 20:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
2015-03-07 09:11 - 2014-08-15 20:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
2015-03-07 09:11 - 2014-08-15 20:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2015-03-07 09:11 - 2014-08-15 20:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
2015-03-07 09:11 - 2014-08-15 20:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
2015-03-07 09:11 - 2014-08-15 20:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
2015-03-07 09:11 - 2014-08-15 20:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
2015-03-07 09:11 - 2014-08-15 20:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2015-03-07 09:11 - 2014-08-15 20:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2015-03-07 09:11 - 2014-08-15 20:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2015-03-07 09:11 - 2014-08-15 20:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2015-03-07 09:11 - 2014-08-15 20:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2015-03-07 09:11 - 2014-08-15 20:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2015-03-07 09:11 - 2014-08-15 20:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-03-07 09:11 - 2014-08-15 20:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2015-03-07 09:11 - 2014-08-15 20:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2015-03-07 09:11 - 2014-08-15 20:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2015-03-07 09:11 - 2014-08-15 20:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2015-03-07 09:11 - 2014-07-24 11:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2015-03-07 09:11 - 2014-07-24 07:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
2015-03-07 09:11 - 2014-07-24 06:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2015-03-07 09:11 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2015-03-07 09:09 - 2014-12-19 02:26 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2015-03-07 09:09 - 2014-12-11 22:04 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-03-07 09:09 - 2014-12-11 20:51 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ahcache.sys
2015-03-07 09:09 - 2014-09-03 20:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2015-03-07 09:09 - 2014-09-03 20:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2015-03-07 09:09 - 2014-08-23 01:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-03-07 09:09 - 2014-08-23 01:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-03-07 09:09 - 2014-08-06 22:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-03-07 09:09 - 2014-08-01 23:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-03-07 09:09 - 2014-08-01 20:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2015-03-07 09:09 - 2014-07-15 14:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
2015-03-07 09:09 - 2014-07-15 04:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2015-03-07 09:09 - 2014-07-15 04:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
2015-03-07 09:09 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2015-03-07 09:09 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2015-03-07 09:09 - 2014-05-19 02:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
2015-03-07 09:09 - 2014-05-19 02:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
2015-03-07 09:09 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
2015-03-07 09:09 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll
2015-03-07 09:09 - 2014-04-10 23:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-03-07 09:09 - 2014-04-10 23:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-03-07 09:09 - 2014-04-10 23:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-03-07 09:09 - 2014-04-10 23:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-03-07 09:09 - 2014-04-10 22:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2015-03-07 09:08 - 2014-10-23 01:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2015-03-07 09:08 - 2014-10-23 01:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2015-03-07 09:08 - 2014-05-03 01:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2015-03-07 09:08 - 2014-05-03 01:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
2015-03-07 09:08 - 2014-05-03 01:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
2015-03-07 09:08 - 2014-05-03 01:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
2015-03-07 09:08 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
2015-03-07 09:08 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
2015-03-07 09:08 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
2015-03-07 09:08 - 2014-05-02 19:26 - 00050745 _____ () C:\windows\system32\srms.dat
2015-03-07 09:08 - 2014-04-30 02:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
2015-03-07 09:08 - 2014-04-30 02:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-03-07 09:08 - 2014-04-30 02:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
2015-03-07 09:08 - 2014-04-30 02:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
2015-03-07 09:08 - 2014-04-30 01:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2015-03-07 09:08 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2015-03-07 09:08 - 2014-04-30 00:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-03-07 09:08 - 2014-04-30 00:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-03-07 09:08 - 2014-04-30 00:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
2015-03-07 09:08 - 2014-04-30 00:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
2015-03-07 09:08 - 2014-04-30 00:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
2015-03-07 09:08 - 2014-04-30 00:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
2015-03-07 09:08 - 2014-04-30 00:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2015-03-07 09:08 - 2014-04-29 23:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2015-03-07 09:08 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2015-03-07 09:08 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
2015-03-07 09:08 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
2015-03-07 09:08 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
2015-03-07 09:08 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
2015-03-07 09:08 - 2014-04-29 23:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
2015-03-07 09:08 - 2014-04-28 18:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
2015-03-07 09:08 - 2014-04-26 12:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
2015-03-07 09:08 - 2014-04-18 10:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll
2015-03-07 09:08 - 2014-04-18 05:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll
2015-03-07 09:08 - 2014-04-14 05:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
2015-03-07 09:08 - 2014-04-14 05:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll
2015-03-07 09:08 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
2015-03-07 09:08 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll
2015-03-07 09:08 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
2015-03-07 09:08 - 2014-04-11 00:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll
2015-03-07 09:08 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll
2015-03-07 09:08 - 2014-04-09 07:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2015-03-07 09:08 - 2014-04-09 02:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2015-03-07 09:08 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll
2015-03-07 09:08 - 2014-04-08 23:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll
2015-03-07 09:08 - 2014-04-08 18:46 - 00086688 _____ (Microsoft Corporation) C:\windows\system32\mrt_map.dll
2015-03-07 09:08 - 2014-04-08 18:46 - 00028320 _____ (Microsoft Corporation) C:\windows\system32\mrt100.dll
2015-03-07 09:08 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt_map.dll
2015-03-07 09:08 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt100.dll
2015-03-07 09:08 - 2014-04-07 22:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys
2015-03-07 09:08 - 2014-04-06 12:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2015-03-07 09:08 - 2014-04-06 12:34 - 00275800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2015-03-07 09:08 - 2014-04-06 12:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll
2015-03-07 09:08 - 2014-04-06 12:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys
2015-03-07 09:08 - 2014-04-06 12:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll
2015-03-07 09:08 - 2014-04-06 12:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-03-07 09:08 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll
2015-03-07 09:08 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll
2015-03-07 09:08 - 2014-04-06 08:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-03-07 09:08 - 2014-04-06 08:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-03-07 09:08 - 2014-04-06 08:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe
2015-03-07 09:08 - 2014-04-06 08:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-03-07 09:08 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-03-07 09:08 - 2014-04-06 07:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll
2015-03-07 09:08 - 2014-04-06 06:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll
2015-03-07 09:08 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll
2015-03-07 09:08 - 2014-04-03 04:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2015-03-07 09:08 - 2014-04-03 04:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll
2015-03-07 09:08 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2015-03-07 09:08 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll
2015-03-07 09:08 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll
2015-03-07 09:08 - 2014-04-02 22:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll
2015-03-07 09:08 - 2014-03-28 11:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe
2015-03-07 09:08 - 2014-03-27 01:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll
2015-03-07 09:08 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll
2015-03-07 09:08 - 2014-03-26 23:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll
2015-03-07 09:08 - 2014-03-26 23:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe
2015-03-07 09:08 - 2014-03-19 03:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-03-07 09:08 - 2014-03-18 01:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
2015-03-07 09:08 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
2015-03-07 09:08 - 2014-03-17 01:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll
2015-03-07 09:08 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll
2015-03-07 09:08 - 2014-03-14 02:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll
2015-03-07 09:08 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll
2015-03-07 09:08 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2015-03-07 09:07 - 2015-01-19 14:42 - 01487976 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2015-03-07 09:07 - 2014-12-02 19:09 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-03-07 09:07 - 2014-11-09 19:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-03-07 09:07 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-03-07 09:07 - 2014-11-09 19:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2015-03-07 09:07 - 2014-11-09 19:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2015-03-07 09:07 - 2014-10-12 22:43 - 00238912 ____C (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2015-03-07 09:07 - 2014-10-12 22:43 - 00153920 ____C (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2015-03-07 09:07 - 2014-10-12 22:43 - 00086336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pdc.sys
2015-03-07 09:07 - 2014-10-12 22:43 - 00039744 ____C (Microsoft Corporation) C:\windows\system32\Drivers\intelpep.sys
2015-03-07 09:07 - 2014-09-10 02:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2015-03-07 09:07 - 2014-09-07 23:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2015-03-07 09:07 - 2014-09-07 23:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2015-03-07 09:07 - 2014-09-03 23:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2015-03-07 09:07 - 2014-09-03 22:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2015-03-07 09:07 - 2014-09-03 20:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2015-03-07 09:07 - 2014-08-30 20:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2015-03-07 09:07 - 2014-08-30 18:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2015-03-07 09:07 - 2014-08-30 17:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2015-03-07 09:07 - 2014-08-30 17:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2015-03-07 09:07 - 2014-08-30 16:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2015-03-07 09:07 - 2014-08-30 16:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2015-03-07 09:07 - 2014-08-27 20:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2015-03-07 09:07 - 2014-08-27 20:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2015-03-07 09:07 - 2014-08-23 01:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2015-03-07 09:07 - 2014-08-23 01:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2015-03-07 09:07 - 2014-08-23 00:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2015-03-07 09:07 - 2014-08-01 20:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
2015-03-07 09:07 - 2014-08-01 20:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
2015-03-07 09:07 - 2014-05-13 03:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
2015-03-07 09:07 - 2014-03-19 04:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll
2015-03-07 09:07 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00535640 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00531616 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00448792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00413248 _____ (Microsoft Corporation) C:\windows\system32\Faultrep.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00372408 _____ (Microsoft Corporation) C:\windows\SysWOW64\Faultrep.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00108944 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-03-07 09:06 - 2014-12-08 15:42 - 00038264 _____ (Microsoft Corporation) C:\windows\system32\WerFaultSecure.exe
2015-03-07 09:06 - 2014-12-08 15:42 - 00033584 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFaultSecure.exe
2015-03-07 09:06 - 2014-12-05 23:17 - 00360448 _____ (Microsoft Corporation) C:\windows\system32\ncsi.dll
2015-03-07 09:06 - 2014-12-05 21:41 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll
2015-03-07 09:06 - 2014-12-05 21:35 - 00229888 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2015-03-07 09:06 - 2014-10-30 18:37 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2015-03-07 09:06 - 2014-10-30 18:34 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2015-03-07 09:06 - 2014-10-29 00:00 - 00465320 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2015-03-07 09:06 - 2014-10-29 00:00 - 00139984 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2015-03-07 09:06 - 2014-10-28 23:52 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-03-07 09:06 - 2014-10-28 23:52 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-03-07 09:06 - 2014-10-28 23:52 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-03-07 09:06 - 2014-10-28 23:52 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-03-07 09:06 - 2014-10-28 23:12 - 00413136 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2015-03-07 09:06 - 2014-10-28 23:12 - 00136296 _____ (Microsoft Corporation) C:\windows\SysWOW64\wermgr.exe
2015-03-07 09:06 - 2014-10-28 23:07 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2015-03-07 09:06 - 2014-10-28 23:07 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2015-03-07 09:06 - 2014-10-28 23:07 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2015-03-07 09:06 - 2014-10-28 22:44 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2015-03-07 09:06 - 2014-10-28 21:59 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\werdiagcontroller.dll
2015-03-07 09:06 - 2014-10-28 21:24 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\nlaapi.dll
2015-03-07 09:06 - 2014-10-28 21:02 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-03-07 09:06 - 2014-10-28 21:01 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlaapi.dll
2015-03-07 09:06 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2015-03-07 09:06 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2015-03-07 09:06 - 2014-07-12 00:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2015-03-07 09:06 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2015-03-07 09:06 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2015-03-07 09:06 - 2014-06-01 22:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2015-03-07 09:06 - 2014-05-31 06:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2015-03-07 09:06 - 2014-05-31 06:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2015-03-07 09:06 - 2014-05-31 06:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2015-03-07 09:06 - 2014-05-31 02:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2015-03-07 09:06 - 2014-05-31 02:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2015-03-07 09:06 - 2014-05-31 02:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2015-03-07 09:06 - 2014-05-31 00:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2015-03-07 09:06 - 2014-05-31 00:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2015-03-07 09:06 - 2014-05-31 00:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2015-03-07 09:06 - 2014-05-27 05:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
2015-03-07 09:06 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
2015-03-07 09:06 - 2014-05-01 09:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
2015-03-07 09:06 - 2014-05-01 01:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
2015-03-07 08:53 - 2015-03-07 08:53 - 00274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
2015-03-07 08:53 - 2015-03-07 08:53 - 00161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat
2015-03-06 23:53 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2015-03-06 23:53 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2015-03-06 23:53 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2015-03-06 19:43 - 2015-03-20 21:48 - 00002170 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-06 19:43 - 2015-03-06 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-06 19:42 - 2015-03-28 13:47 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-06 19:42 - 2015-03-28 09:44 - 00000910 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-06 19:42 - 2015-03-06 19:43 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-06 19:42 - 2015-03-06 19:42 - 00003886 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-03-06 19:42 - 2015-03-06 19:42 - 00003650 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-03-05 09:33 - 2015-03-28 09:32 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Hewlett-Packard
2015-03-05 09:33 - 2015-03-05 09:33 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\hpqlog
2015-03-05 09:26 - 2015-03-08 11:12 - 00000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
2015-03-05 09:15 - 2015-03-06 19:43 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Google
2015-03-05 08:53 - 2015-03-05 08:53 - 00000000 ____D () C:\ProgramData\Unchecky
2015-03-05 08:53 - 2015-03-05 08:52 - 00000000 _____ () C:\Users\Sharon\Downloads\ChromeSetup.exe
2015-03-05 08:46 - 2015-03-05 08:46 - 00000000 ____D () C:\Users\Sharon\Documents\Fax
2015-03-04 19:05 - 2015-03-04 19:05 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-03-03 20:44 - 2015-03-14 16:00 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Foxit Software
2015-03-03 19:45 - 2015-03-28 10:06 - 00004974 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc
2015-03-03 19:45 - 2015-03-13 22:15 - 00003096 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001
2015-03-03 19:45 - 2015-03-03 19:45 - 00000000 __RHD () C:\MSOCache
2015-03-03 19:44 - 2015-03-03 19:44 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-03-03 19:40 - 2015-03-13 22:23 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-03 19:40 - 2015-03-03 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-03-03 19:15 - 2015-03-28 09:27 - 00003926 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{120BF034-A944-406B-B750-6DB584AB32BF}
2015-03-03 19:15 - 2015-03-03 19:16 - 00007177 _____ () C:\windows\system32\lvcoinst.log
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieUserList
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 __SHD () C:\Users\Sharon\AppData\Local\EmieSiteList
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Macromedia
2015-03-03 19:15 - 2015-03-03 19:15 - 00000000 ____D () C:\Program Files\Common Files\logishrd
2015-03-03 19:13 - 2015-03-28 10:00 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-951477398-4118864522-2970026866-1001
2015-03-03 19:12 - 2015-03-28 09:44 - 00000000 ___DO () C:\Users\Sharon\OneDrive
2015-03-03 19:12 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Hewlett-Packard
2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\ATI
2015-03-03 19:09 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Sharon\AppData\Local\ATI
2015-03-03 19:08 - 2015-03-03 19:29 - 00000000 ____D () C:\Users\Sharon\AppData\Local\Packages
2015-03-03 19:08 - 2015-03-03 19:08 - 00003374 _____ () C:\windows\System32\Tasks\HPCheckDropBoxStatus
2015-03-03 19:08 - 2015-03-03 19:08 - 00001449 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-03 19:08 - 2015-03-03 19:08 - 00000184 _____ () C:\windows\insFileSpec
2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\windows\System32\Tasks\WPD
2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Adobe
2015-03-03 19:08 - 2015-03-03 19:08 - 00000000 ____D () C:\Users\Sharon\AppData\Local\VirtualStore
2015-03-03 19:08 - 2014-12-04 13:02 - 00002270 _____ () C:\Users\Public\Desktop\Get Dropbox Offer.lnk
2015-03-03 19:08 - 2014-12-04 13:02 - 00001306 _____ () C:\Users\Public\Desktop\TripAdvisor.lnk
2015-03-03 19:08 - 2014-12-04 12:47 - 00002240 _____ () C:\Users\Public\Desktop\Snapfish.lnk
2015-03-03 19:07 - 2015-03-04 19:18 - 00000000 ____D () C:\Users\Sharon
2015-03-03 19:07 - 2015-03-03 19:07 - 00000020 ___SH () C:\Users\Sharon\ntuser.ini
2015-03-03 19:07 - 2014-12-04 13:09 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-03 19:07 - 2014-12-04 12:27 - 00000000 ___HD () C:\Users\Sharon\Documents\hp.system.package.metadata
2015-03-03 19:07 - 2014-03-18 06:06 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-03-03 19:07 - 2014-03-18 05:54 - 00000369 _____ () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-03 19:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-03 18:59 - 2015-03-28 14:43 - 01352625 _____ () C:\windows\WindowsUpdate.log
2015-03-03 18:54 - 2015-03-03 18:54 - 00000000 ____D () C:\ProgramData\HP

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-28 14:00 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sru
2015-03-28 09:48 - 2014-03-18 05:53 - 00891920 _____ () C:\windows\system32\PerfStringBackup.INI
2015-03-28 09:43 - 2014-12-04 12:15 - 00531152 _____ () C:\windows\SysWOW64\rootpa.e2e
2015-03-28 09:42 - 2013-08-22 10:46 - 00020107 _____ () C:\windows\setupact.log
2015-03-28 09:42 - 2013-08-22 10:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-03-28 09:41 - 2014-12-04 12:13 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2015-03-28 09:41 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2015-03-26 21:44 - 2012-05-17 22:51 - 00000796 _____ () C:\Users\Sharon\Desktop\Settings.ini
2015-03-26 14:32 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2015-03-24 19:09 - 2013-08-22 11:20 - 00000000 ____D () C:\windows\CbsTemp
2015-03-21 14:27 - 2014-12-04 12:40 - 00000000 ____D () C:\ProgramData\CyberLink
2015-03-20 16:46 - 2014-12-04 12:27 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-03-19 16:45 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-03-19 14:10 - 2014-03-18 05:44 - 00020016 _____ () C:\windows\PFRO.log
2015-03-18 08:19 - 2014-12-04 12:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\ProgramData\WildTangent
2015-03-18 08:17 - 2014-12-04 12:50 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2015-03-16 14:33 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\rescache
2015-03-14 09:40 - 2013-08-22 10:44 - 00385656 _____ () C:\windows\system32\FNTCACHE.DAT
2015-03-14 09:38 - 2014-03-18 05:38 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ToastData
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\WinStore
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\setup
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\setup
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-14 09:38 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-14 09:38 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\oobe
2015-03-14 09:26 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\AppReadiness
2015-03-11 19:15 - 2014-12-04 12:59 - 00000000 ____D () C:\ProgramData\McAfee
2015-03-11 19:13 - 2014-12-04 12:59 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-03-11 19:12 - 2013-08-22 11:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2015-03-11 19:10 - 2014-12-04 13:00 - 00001867 _____ () C:\Users\Public\Desktop\McAfee LiveSafe - Internet Security.lnk
2015-03-11 19:10 - 2014-12-04 12:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2015-03-09 19:59 - 2012-05-02 18:59 - 01406208 _____ (Tweaking.com) C:\Users\Sharon\Desktop\TweakingRegistryBackup.exe
2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-RS
2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sr-Latn-CS
2015-03-08 22:08 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\inetsrv
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\inetsrv
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\MediaViewer
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\FileManager
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\Camera
2015-03-08 22:07 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-03-08 11:25 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\restore
2015-03-06 20:06 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\GroupPolicy
2015-03-05 09:33 - 2014-12-04 12:28 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2015-03-03 19:09 - 2014-12-04 12:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-03-03 19:08 - 2014-12-04 12:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-03-03 19:08 - 2014-05-27 19:27 - 00000000 _RSHD () C:\SYSTEM.SAV
2015-03-03 19:08 - 2014-04-02 18:17 - 00000000 ____D () C:\windows\Panther

==================== Files in the root of some directories =======

2015-03-05 09:26 - 2015-03-08 11:12 - 0000132 _____ () C:\Users\Sharon\AppData\Roaming\WB.CFG
2015-03-07 08:53 - 2015-03-07 08:53 - 0274045 _____ () C:\Users\Sharon\AppData\Local\dsi1.dat
2015-03-07 08:53 - 2015-03-07 08:53 - 0161916 _____ () C:\Users\Sharon\AppData\Local\dsi2.dat

Some content of TEMP:
====================
C:\Users\Sharon\AppData\Local\Temp\Quarantine.exe
C:\Users\Sharon\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-19 13:52

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sharon at 2015-03-28 14:45:53
Running from C:\Users\Sharon\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Alcor Micro USB Card Reader Driver (HKLM-x32\...\AmUStor) (Version: 20.21.3317.03861 - Alcor Micro Corp.)
Alcor Micro USB Card Reader Driver (x32 Version: 20.21.3317.03861 - Alcor Micro Corp.) Hidden
AMD Catalyst Install Manager (HKLM\...\{305CB43D-5CDD-9E9A-6DF3-56B71B2B1E31}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.7.4023 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.2.5426 - CyberLink Corp.)
Cyberlink PhotoDirector (Version: 5.0.2.5426 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.7.4016 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.1.3004 - CyberLink Corp.)
CyberLink PowerDirector 12 (Version: 12.0.1.3004 - CyberLink Corp.) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4.4119 - CyberLink Corp.)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Evernote v. 5.3 (HKLM-x32\...\{E461B1AC-BC3C-11E3-B5B8-00163E98E7D6}) (Version: 5.3.0.3360 - Evernote Corp.)
Foxit PhantomPDF (HKLM-x32\...\{00CD7D62-056A-4F0F-9143-44522D44E6DD}) (Version: 6.0.32.507 - Foxit Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Documentation (HKLM-x32\...\{4B4EDB7B-4F54-4B86-8A4A-E1C5803CA374}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7745.4851 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{7FE016CC-DAA9-4E21-BD2F-98390D1E6F3F}) (Version: 7.6.23.8 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
McAfee LiveSafe - Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1529 - McAfee, Inc.)
Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4701.1002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-951477398-4118864522-2970026866-1001\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7255 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.13.1216 - REALTEK Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.0.7316 - CyberLink Corp.) Hidden
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 2.2.0 - Tweaking.com)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-951477398-4118864522-2970026866-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

13-03-2015 23:37:19 Windows Update
21-03-2015 15:26:30 Scheduled Checkpoint
24-03-2015 19:07:44 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 09:25 - 2015-03-18 08:16 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {30BA6C99-48A9-491B-9557-0E99C7155930} - System32\Tasks\HPCeeScheduleForSharon => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {37F12DC8-F2A4-4208-A75C-1A8275A92A61} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-02-26] (Microsoft Corporation)
Task: {405A74E2-A0D8-485B-BAAC-40DF0D6B4144} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
Task: {450C4BA9-B957-4E81-9181-86E4D048B8CE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {4F8AC08F-9464-4664-8011-F5BA654CEE50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {547060BA-88FC-4131-8403-65A8DF68BE3E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-03-10] (Hewlett-Packard)
Task: {8004FDB0-8539-4E3B-B8B8-4F5329C52F76} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-03-10] (Hewlett-Packard)
Task: {86347858-435B-4A29-99A7-995871CA305B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {8A8E3C7D-39D7-4D1E-9EB0-E2F34525B014} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
Task: {97EDAFF7-52E8-440A-8BDC-5A613812097F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-04] (Hewlett-Packard Company)
Task: {ADCA5DB7-75A5-4800-852B-4F765387A92D} - System32\Tasks\HPCheckDropBoxStatus => c:\hp\HPQWare\DropBox\HPAppDetector.exe [2014-06-03] ()
Task: {B896D781-EB7C-459E-83F2-AB5213A40118} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-951477398-4118864522-2970026866-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {C028C951-60E1-4E48-AD9E-7316A7784239} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {C555508D-FAD1-41BA-81CF-0DEFFD58F5F9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {DE40F89E-35EB-4A7F-8EB2-E085B0BB5F97} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {F1A6BA9D-CFA9-4A2B-B482-467E741020A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-06] (Google Inc.)
Task: {F8A01FEA-6DB0-4CBB-9BA4-0296566E82F7} - System32\Tasks\Microsoft Office 15 Sync Maintenance for main-pc-Sharon main-pc => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForSharon.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) ==============

2014-03-28 17:31 - 2014-03-28 17:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
2014-03-28 17:27 - 2014-03-28 17:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
2014-03-28 17:27 - 2014-03-28 17:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
2014-03-28 17:27 - 2014-03-28 17:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
2014-03-28 17:48 - 2014-03-28 17:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
2014-03-28 17:48 - 2014-03-28 17:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
2015-03-03 19:40 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-12-04 12:42 - 2014-04-14 22:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2014-03-28 17:36 - 2014-03-28 17:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
2014-02-07 14:37 - 2014-02-07 14:37 - 00098304 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
2015-03-13 22:21 - 2015-01-27 11:29 - 08898720 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2015-03-13 22:38 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-03-13 22:38 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-03-13 22:38 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-13 22:38 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-03-13 22:38 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-03-04 20:02 - 2015-03-04 20:02 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll
2015-03-20 21:48 - 2015-03-14 06:12 - 14974280 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Sharon\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP\HP_Svinoya_Norway_Sunset.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-951477398-4118864522-2970026866-500 - Administrator - Disabled)
Guest (S-1-5-21-951477398-4118864522-2970026866-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-951477398-4118864522-2970026866-1003 - Limited - Enabled)
Sharon (S-1-5-21-951477398-4118864522-2970026866-1001 - Administrator - Enabled) => C:\Users\Sharon

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/28/2015 02:41:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
Description: Activation of app DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (03/28/2015 00:56:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
Description: Activation of app DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (03/28/2015 00:56:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
Description: Activation of app DefaultBrowser_NOPUBLISHERID!Chrome failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information.


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (03/28/2015 02:41:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
Description: DefaultBrowser_NOPUBLISHERID!Chrome-2144927151

Error: (03/28/2015 00:56:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
Description: DefaultBrowser_NOPUBLISHERID!Chrome-2144927151

Error: (03/28/2015 00:56:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MAIN-PC)
Description: DefaultBrowser_NOPUBLISHERID!Chrome-2144927151


==================== Memory info ===========================

Processor: AMD A8-6410 APU with AMD Radeon R5 Graphics
Percentage of memory in use: 36%
Total physical RAM: 7869.93 MB
Available physical RAM: 4965.79 MB
Total Pagefile: 9085.93 MB
Available Pagefile: 6141.09 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:1845.67 GB) (Free:1803.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery Image) (Fixed) (Total:15.87 GB) (Free:1.98 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 1F11A08A)

Partition: GPT Partition Type.

==================== End Of Log ============================

Thanks for the warning on your availablity. I truly appreciate any direction you provide and the time you commit to helping!

ken545
2015-03-29, 07:23
Hey

Your running FRST from your downloads folder, FRST runs more efficiently if run from the desktop in lieu of some folder so go into your downloads folder and look for FRST64, right click on it and select CUT, then come back to your desktop and right click on a blank space and select PASTE




Start
CreateRestorePoint:
CloseProcesses:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstatio...Ptab&tp=iehome
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
CMD: ipconfig /flushdns
Hosts:
EmptyTemp:
End


Open up Notepad, it will only work with Notepad and copy the text inside the Quote box and paste it into Notepad and save to your desktop <----IMPORTANT........ and name it Fixlist, then open up FRST64 and click on FIX (Not Scan) it wont take long and when it reboots your system you will have a FIXLOG file on your desktop, post it please and let me know if this helped

luke1am
2015-03-30, 01:54
Hey

Your running FRST from your downloads folder, FRST runs more efficiently if run from the desktop in lieu of some folder so go into your downloads folder and look for FRST64, right click on it and select CUT, then come back to your desktop and right click on a blank space and select PASTE




Open up Notepad, it will only work with Notepad and copy the text inside the Quote box and paste it into Notepad and save to your desktop <----IMPORTANT........ and name it Fixlist, then open up FRST64 and click on FIX (Not Scan) it wont take long and when it reboots your system you will have a FIXLOG file on your desktop, post it please and let me know if this helped


Ok. Now I got it! Thanks for the patience; I followed instructions clearly. Here's the FixLog post:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Sharon at 2015-03-29 18:44:36 Run:1
Running from C:\Users\Sharon\Desktop
Loaded Profiles: Sharon (Available profiles: Sharon)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CreateRestorePoint:
CloseProcesses:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://js.redirect.hp.com/jumpstatio...Ptab&tp=iehome
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
CMD: ipconfig /flushdns
Hosts:
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
C:\windows\system32\GroupPolicy\Machine => Moved successfully.
C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value deleted successfully.
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-951477398-4118864522-2970026866-1001\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 1 GB temporary data.


The system needed a reboot.

==== End of Fixlog 18:45:54 ====

It appears to have worked! Pop ups or "page bending" pop ups that were bothersome are gone, too.

Is there anything else I need to do to maintain the health of the computer? I normally scan regularly with SpyBot and Malware Bytes. Any other suggestions you can provide would be GREATLY appreciated!

Again, thank you!!

Lucas

ken545
2015-03-30, 05:54
:bigthumb:

You have McAfee antivirus, you just need one, more than one is overkill and will severely hamper system performance, just keep it updated and run regular scans. Same thing with Spybot and Malwarebytes, with these your pretty well protected


Double click on AdwCleaner.exe to run the tool again.

Click on the Uninstall button.
Click Yes when asked are you sure you want to uninstall.
Both AdwCleaner.exe, its folder and all logs will be removed.



==========================================================


Please download DelFix (http://general-changelog-team.fr/en/downloads/finish/20-outils-de-xplode/9-delfix) and save the file to your Desktop.

http://i24.photobucket.com/albums/c30/ken545/DelFix_zps139e2ea1.jpg (http://s24.photobucket.com/user/ken545/media/DelFix_zps139e2ea1.jpg.html)


Windows XP Double Click DelFix.exe to run the program.
Windows Vista > Win 7 > Win 8 Right Click on DelFix.exe and select RUN AS ADMINISTRATOR
Checkmark " Remove Disinfection Tools"
Click the Run button


This will remove the specialised tools we used to clean your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually



==========================================================




How did I get infected in the first place ?
Read these links and find out how to prevent getting infected again.
Tutorial for System Restore (http://www.bleepingcomputer.com/tutorials/tutorial56.html) <-- Do this first to prevent yourself from being reinfected.
WhattheTech (http://forums.whatthetech.com/index.php?showtopic=97186)
Grinler BleepingComputer (http://www.bleepingcomputer.com/forums/topic2520.html)
GeeksTo Go (http://www.geekstogo.com/forum/index.php?autocom=custom&page=How_did_I)
Dslreports (http://www.dslreports.com/faq/10002)



Safe Surfn
Ken