As title states, was having malicious site blocked popups from malwarebytes that were outgoing, coming from svchost in system32. I had two popups on login, did scans, and they seemed to have stopped - but I had the popups nonetheless so I'd like to make sure. Here's my farbar scan text: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016 Ran by Beau Whiteside (administrator) on LAPTOP-24CQGMKN (27-01-2016 15:29:07) Running from C:\Users\Beau Whiteside\Downloads Loaded Profiles: Beau Whiteside (Available Profiles: Beau Whiteside) Platform: Windows 10 Home Version 1511 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Amazon Inc.) C:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe () C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (PC Health Labs) C:\Program Files (x86)\PC Driver Kit\PCDKTray.exe (SweetLabs, Inc) C:\Users\Beau Whiteside\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe (Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (© 2015 Microsoft Corporation) C:\Users\Beau Whiteside\AppData\Local\Microsoft\BingSvc\BingSvc.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Dashlane SAS) C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe (AVAST Software) C:\Program Files\AVAST Software\SecureLine\SecureLine.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe () C:\Program Files (x86)\Acer\Care Center\ACCStd.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.92.3.0\OverwolfHelper.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.92.3.0\OverwolfHelper64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe (acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe (TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\0.92.3.0\OverwolfBrowser.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-09-23] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-09-23] (Realtek Semiconductor) HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [628736 2015-06-16] () HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-08] (NVIDIA Corporation) HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKU\S-1-5-21-581276770-3067302781-3257354416-1001\...\Run: [AcerPortal] => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2732760 2015-11-19] (Acer) HKU\S-1-5-21-581276770-3067302781-3257354416-1001\...\Run: [steam] => C:\Program Files (x86)\Steam\steam.exe [3013712 2015-12-14] (Valve Corporation) HKU\S-1-5-21-581276770-3067302781-3257354416-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50378880 2015-12-17] (Skype Technologies S.A.) HKU\S-1-5-21-581276770-3067302781-3257354416-1001\...\Run: [bingSvc] => C:\Users\Beau Whiteside\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-12-25] (© 2015 Microsoft Corporation) HKU\S-1-5-21-581276770-3067302781-3257354416-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [45296 2016-01-20] (Overwolf LTD) ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-11-19] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-11-19] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-11-19] (Acer Incorporated) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62 Tcpip\..\Interfaces\{26d38aea-2cf1-4743-9394-f6961b47946b}: [DhcpNameServer] 209.18.47.61 209.18.47.62 Tcpip\..\Interfaces\{b6560bff-902b-4abb-a8b6-d7f4f8e548a4}: [DhcpNameServer] 209.18.47.61 209.18.47.62 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-581276770-3067302781-3257354416-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP HKU\S-1-5-21-581276770-3067302781-3257354416-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE HKU\S-1-5-21-581276770-3067302781-3257354416-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SK2M_FRPage SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKU\S-1-5-21-581276770-3067302781-3257354416-1001 -> DefaultScope {7E37BB52-9EAD-4FA6-8ABB-D88D3790FB79} URL = SearchScopes: HKU\S-1-5-21-581276770-3067302781-3257354416-1001 -> {7E37BB52-9EAD-4FA6-8ABB-D88D3790FB79} URL = SearchScopes: HKU\S-1-5-21-581276770-3067302781-3257354416-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2016-01-11] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2016-01-11] (McAfee, Inc.) FireFox: ======== FF ProfilePath: C:\Users\Beau Whiteside\AppData\Roaming\Mozilla\Firefox\Profiles\ioh62jpj.default FF DefaultSearchEngine: Web Search FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Web Search FF Homepage: hxxps://www.malwarebytes.org/restorebrowser//?s=acer&m=start FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2EDF&PC=SK2E&q= FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-01-11] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-01-11] () FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-14] () FF SearchPlugin: C:\Users\Beau Whiteside\AppData\Roaming\Mozilla\Firefox\Profiles\ioh62jpj.default\searchplugins\bing-.xml [2015-12-25] FF SearchPlugin: C:\Users\Beau Whiteside\AppData\Roaming\Mozilla\Firefox\Profiles\ioh62jpj.default\searchplugins\McSiteAdvisor.xml [2016-01-27] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2015-12-30] FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23] FF Extension: Bing Search - C:\Users\Beau Whiteside\AppData\Roaming\Mozilla\Firefox\Profiles\ioh62jpj.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-12-25] FF Extension: Dashlane - C:\Users\Beau Whiteside\AppData\Roaming\Mozilla\Firefox\Profiles\ioh62jpj.default\Extensions\jetpack-extension@dashlane.com.xpi [2015-12-30] FF Extension: English (US) Language Pack - C:\Users\Beau Whiteside\AppData\Roaming\Mozilla\Firefox\Profiles\ioh62jpj.default\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2015-12-30] FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06] FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-12-25] [not signed] Chrome: ======= CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-25] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-25] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 0195821453924652mcinstcleanup; C:\WINDOWS\TEMP\019582~1.EXE [883024 2015-05-04] (McAfee, Inc.) R2 Amazon 1Button App Service; c:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe [456000 2015-09-17] (Amazon Inc.) R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [309328 2015-08-31] (Qualcomm Atheros) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2015-11-16] (Acer Incorporated) S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [595560 2015-09-05] (Intel Corporation) R2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [82944 2015-12-04] (Dashlane SAS) R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [176640 2015-09-15] () [File not signed] R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573568 2015-05-14] (Acer Incorporated) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-08] (NVIDIA Corporation) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [350312 2015-09-05] (Intel Corporation) S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Corporation) R3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed] R2 IntelSSTSvc; C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe [25928 2015-09-03] (Intel Corporation) S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed] R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [207648 2015-08-07] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [157928 2015-12-02] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [782608 2016-01-11] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-07-17] (McAfee, Inc.) S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-06-29] (McAfee, Inc.) R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-07-30] (McAfee, Inc.) R3 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-06-29] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-08] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-08] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-08] (NVIDIA Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1009392 2016-01-20] (Overwolf LTD) R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [401248 2015-09-04] (Acer Incorporated) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [453984 2015-09-04] (Acer Incorporated) R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [445240 2015-04-29] () S3 ThunderboltService; C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe [1770136 2015-08-04] (Intel Corporation) R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [251232 2015-09-14] (acer) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [77536 2015-07-02] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.) R3 IntcAudioBus; C:\Windows\System32\drivers\IntcAudioBus.sys [188200 2015-09-05] (Intel® Corporation) R3 IntcDMic; C:\Windows\system32\DRIVERS\IntcDMic.sys [585024 2015-09-14] (Intel® Corporation) R3 IntcOED; C:\Windows\System32\drivers\IntcOED.sys [580904 2015-09-05] (Intel® Corporation) R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21344 2015-09-04] (Acer Incorporated) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-01-27] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-28] (Intel Corporation) R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [412440 2015-07-02] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [347800 2015-07-02] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496888 2015-07-02] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [875928 2015-07-02] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [529080 2015-06-29] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109728 2015-06-29] (McAfee, Inc.) R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344704 2015-07-02] (McAfee, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-08] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-10] (NVIDIA Corporation) R3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2327040 2015-10-30] (Qualcomm Atheros, Inc.) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14688 2015-09-04] (Acer Incorporated) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-22] (Realtek ) R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [411712 2015-05-18] (Realsil Semiconductor Corporation) R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [47784 2015-05-27] (Synaptics Incorporated) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-01-27 15:29 - 2016-01-27 15:29 - 00025481 _____ C:\Users\Beau Whiteside\Downloads\FRST.txt 2016-01-27 15:28 - 2016-01-27 15:29 - 00000000 ____D C:\FRST 2016-01-27 15:27 - 2016-01-27 15:28 - 02370560 _____ (Farbar) C:\Users\Beau Whiteside\Downloads\FRST64.exe 2016-01-26 22:38 - 2016-01-26 22:38 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-01-26 22:35 - 2016-01-26 22:35 - 00000410 _____ C:\Users\Beau Whiteside\Desktop\bookmarks_1_26_16.html 2016-01-26 22:14 - 2016-01-26 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2016-01-26 22:08 - 2016-01-26 22:08 - 00000000 ___HD C:\OneDriveTemp 2016-01-26 21:43 - 2016-01-27 15:08 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-01-26 21:43 - 2016-01-26 21:43 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-01-26 21:43 - 2016-01-26 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-01-26 21:43 - 2016-01-26 21:43 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-01-26 21:43 - 2016-01-26 21:43 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-01-26 21:43 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-01-26 21:43 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-01-26 21:43 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-01-26 21:42 - 2016-01-26 21:42 - 22908888 _____ (Malwarebytes ) C:\Users\Beau Whiteside\Downloads\mbam-setup-2.2.0.1024.exe 2016-01-26 21:07 - 2016-01-26 21:07 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\ElevatedDiagnostics 2016-01-26 09:56 - 2016-01-26 09:56 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Awesomium 2016-01-26 09:55 - 2016-01-26 09:55 - 00000000 ____D C:\Program Files\Common Files\INCA Shared 2016-01-24 20:01 - 2016-01-24 20:01 - 00000000 ____D C:\Program Files (x86)\NCSOFT 2016-01-24 20:00 - 2016-01-24 20:00 - 00000000 ____D C:\Program Files (x86)\NCWest 2016-01-16 23:09 - 2016-01-16 23:16 - 131015648 _____ C:\Users\Beau Whiteside\Downloads\Pokemon - Storm Silver (patched).nds 2016-01-16 23:08 - 2016-01-16 23:08 - 00000000 ____D C:\Users\Beau Whiteside\Downloads\2sg2ss4105 2016-01-16 23:05 - 2016-01-16 23:05 - 13122151 _____ C:\Users\Beau Whiteside\Downloads\2sg2ss4105.zip 2016-01-16 23:03 - 2016-01-16 23:03 - 00000000 ___RD C:\Users\Beau Whiteside\Downloads\DeviceDoctor.RAROpener_mkdtfchztkfbm!App 2016-01-16 22:45 - 2016-01-16 22:46 - 42558818 _____ C:\Users\Beau Whiteside\Downloads\4788 - Pokemon - SoulSilver Version (U).rar 2016-01-16 22:31 - 2016-01-16 22:31 - 00001266 _____ C:\Users\Beau Whiteside\Desktop\NO$GBA - Shortcut.lnk 2016-01-16 22:30 - 2016-01-16 23:06 - 00000000 ____D C:\Users\Beau Whiteside\Downloads\nocashgba-w_2.8a 2016-01-16 22:28 - 2016-01-16 22:28 - 00195512 _____ C:\Users\Beau Whiteside\Downloads\nocashgba-w_2.8a.zip 2016-01-12 21:33 - 2016-01-04 21:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-01-12 21:33 - 2016-01-04 21:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-01-12 21:33 - 2016-01-04 21:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-01-12 21:33 - 2016-01-04 21:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-12 21:33 - 2016-01-04 21:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-12 21:33 - 2016-01-04 21:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-01-12 21:33 - 2016-01-04 21:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-12 21:33 - 2016-01-04 21:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-12 21:33 - 2016-01-04 21:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-01-12 21:33 - 2016-01-04 21:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-01-12 21:33 - 2016-01-04 21:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-01-12 21:33 - 2016-01-04 21:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-01-12 21:33 - 2016-01-04 21:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-12 21:33 - 2016-01-04 21:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-12 21:33 - 2016-01-04 21:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-12 21:33 - 2016-01-04 21:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-12 21:33 - 2016-01-04 21:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-12 21:33 - 2016-01-04 21:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-01-12 21:33 - 2016-01-04 21:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-01-12 21:33 - 2016-01-04 21:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-01-12 21:33 - 2016-01-04 21:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-01-12 21:33 - 2016-01-04 21:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-01-12 21:33 - 2016-01-04 21:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-12 21:33 - 2016-01-04 21:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-01-12 21:33 - 2016-01-04 21:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-01-12 21:33 - 2016-01-04 21:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-12 21:33 - 2016-01-04 21:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-12 21:33 - 2016-01-04 21:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-01-12 21:33 - 2016-01-04 21:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-01-12 21:33 - 2016-01-04 20:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-01-12 21:33 - 2016-01-04 20:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-01-12 21:33 - 2016-01-04 20:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll 2016-01-12 21:33 - 2016-01-04 20:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-01-12 21:33 - 2016-01-04 20:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-01-12 21:33 - 2016-01-04 20:54 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys 2016-01-12 21:33 - 2016-01-04 20:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-01-12 21:33 - 2016-01-04 20:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2016-01-12 21:33 - 2016-01-04 20:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-01-12 21:33 - 2016-01-04 20:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-01-12 21:33 - 2016-01-04 20:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-01-12 21:33 - 2016-01-04 20:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-01-12 21:33 - 2016-01-04 20:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-01-12 21:33 - 2016-01-04 20:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-01-12 21:33 - 2016-01-04 20:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-01-12 21:33 - 2016-01-04 20:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-01-12 21:33 - 2016-01-04 20:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-12 21:33 - 2016-01-04 20:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-01-12 21:33 - 2016-01-04 20:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-01-12 21:33 - 2016-01-04 20:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2016-01-12 21:33 - 2016-01-04 20:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-12 21:33 - 2016-01-04 20:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-01-12 21:33 - 2016-01-04 20:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-01-12 21:33 - 2016-01-04 20:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-01-12 21:33 - 2016-01-04 20:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-01-12 21:33 - 2016-01-04 20:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-01-12 21:33 - 2016-01-04 20:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-01-12 21:33 - 2016-01-04 20:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-01-12 21:33 - 2016-01-04 20:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2016-01-12 21:33 - 2016-01-04 20:43 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2016-01-12 21:33 - 2016-01-04 20:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-01-12 21:33 - 2016-01-04 20:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-01-12 21:33 - 2016-01-04 20:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-01-12 21:33 - 2016-01-04 20:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-01-12 21:33 - 2016-01-04 20:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-01-12 21:33 - 2016-01-04 20:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-01-12 21:33 - 2016-01-04 20:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-01-12 21:33 - 2016-01-04 20:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-01-12 21:33 - 2016-01-04 20:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2016-01-12 21:33 - 2016-01-04 20:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-01-12 21:33 - 2016-01-04 20:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-01-12 21:33 - 2016-01-04 20:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-01-12 21:33 - 2016-01-04 20:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-01-12 21:33 - 2016-01-04 20:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-01-12 21:33 - 2016-01-04 20:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-01-12 21:33 - 2016-01-04 20:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-01-12 21:33 - 2016-01-04 20:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-01-12 21:33 - 2016-01-04 20:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-01-12 21:33 - 2016-01-04 20:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-01-12 21:33 - 2016-01-04 20:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-01-12 21:33 - 2016-01-04 20:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-01-12 21:33 - 2016-01-04 20:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-01-12 21:33 - 2016-01-04 20:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-01-12 21:33 - 2016-01-04 20:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-01-10 03:35 - 2016-01-02 20:40 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-01-10 03:35 - 2016-01-02 20:40 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-01-09 11:45 - 2016-01-09 11:45 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-01-08 19:22 - 2015-12-06 23:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-01-08 19:22 - 2015-12-06 23:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-01-08 19:22 - 2015-12-06 23:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2016-01-08 19:22 - 2015-12-06 23:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2016-01-08 19:22 - 2015-12-06 23:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2016-01-08 19:22 - 2015-12-06 23:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2016-01-08 19:22 - 2015-12-06 23:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-01-08 19:22 - 2015-12-06 23:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-01-08 19:22 - 2015-12-06 23:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2016-01-08 19:22 - 2015-12-06 22:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-01-08 19:22 - 2015-12-06 22:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-01-08 19:22 - 2015-12-06 22:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-01-08 19:22 - 2015-12-06 22:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-01-08 19:22 - 2015-12-06 22:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-01-08 19:22 - 2015-12-06 22:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-01-08 19:22 - 2015-12-06 22:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-01-08 19:22 - 2015-12-01 02:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-01-08 19:22 - 2015-11-24 07:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-01-08 19:22 - 2015-11-24 06:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-01-08 19:22 - 2015-11-24 03:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-01-08 19:22 - 2015-11-24 03:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-01-08 19:22 - 2015-11-24 03:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2016-01-08 19:22 - 2015-11-24 02:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-01-08 19:22 - 2015-11-24 02:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2016-01-08 19:22 - 2015-11-24 02:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2016-01-08 19:22 - 2015-11-24 02:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-01-08 19:22 - 2015-11-24 02:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-01-08 19:22 - 2015-11-24 02:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2016-01-08 19:22 - 2015-11-22 05:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-01-08 19:22 - 2015-11-22 05:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-01-08 19:22 - 2015-11-22 05:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-01-08 19:22 - 2015-11-22 05:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2016-01-08 19:22 - 2015-11-22 05:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2016-01-08 19:22 - 2015-11-22 04:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll 2016-01-08 19:22 - 2015-11-22 04:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll 2016-01-08 19:22 - 2015-11-22 04:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll 2016-01-08 19:22 - 2015-11-22 04:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-01-08 19:22 - 2015-11-22 04:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-01-08 19:22 - 2015-11-22 04:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-01-08 19:22 - 2015-11-22 04:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-01-08 19:22 - 2015-11-22 04:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2016-01-08 19:22 - 2015-11-22 04:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-01-08 19:22 - 2015-11-22 04:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-01-08 19:22 - 2015-11-22 04:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2016-01-08 19:22 - 2015-11-22 04:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2016-01-08 19:22 - 2015-11-22 04:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2016-01-08 19:22 - 2015-11-22 04:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2016-01-08 19:22 - 2015-11-22 04:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2016-01-08 19:22 - 2015-11-22 04:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-01-08 19:22 - 2015-11-22 04:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-01-08 19:22 - 2015-11-22 04:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2016-01-08 19:22 - 2015-11-22 04:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-01-08 19:22 - 2015-11-22 04:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2016-01-08 19:22 - 2015-11-22 04:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-01-08 19:22 - 2015-11-22 04:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2016-01-08 19:22 - 2015-11-22 04:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-01-08 19:22 - 2015-11-22 04:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2016-01-08 19:22 - 2015-11-22 04:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2016-01-08 19:22 - 2015-11-22 04:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-01-08 19:22 - 2015-11-22 04:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2016-01-08 19:22 - 2015-11-13 01:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2016-01-08 19:22 - 2015-11-13 01:41 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-01-08 19:22 - 2015-11-13 01:33 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2016-01-08 19:22 - 2015-11-13 01:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2016-01-08 19:22 - 2015-11-13 01:18 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-01-08 19:22 - 2015-11-13 00:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-01-08 19:22 - 2015-11-13 00:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-01-08 19:22 - 2015-11-13 00:39 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-01-08 19:22 - 2015-11-13 00:29 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-01-08 19:22 - 2015-11-13 00:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-01-08 19:22 - 2015-11-05 04:13 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-01-08 19:22 - 2015-11-05 04:10 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-01-08 19:21 - 2015-12-06 23:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-01-08 19:21 - 2015-12-06 23:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-01-08 19:21 - 2015-12-06 23:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-01-08 19:21 - 2015-12-06 23:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-01-08 19:21 - 2015-12-06 23:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2016-01-08 19:21 - 2015-12-06 23:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2016-01-08 19:21 - 2015-12-06 23:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll 2016-01-08 19:21 - 2015-12-06 23:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll 2016-01-08 19:21 - 2015-12-06 23:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2016-01-08 19:21 - 2015-12-06 23:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2016-01-08 19:21 - 2015-12-06 23:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2016-01-08 19:21 - 2015-12-06 23:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2016-01-08 19:21 - 2015-12-06 23:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-01-08 19:21 - 2015-12-06 23:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-01-08 19:21 - 2015-12-06 23:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-01-08 19:21 - 2015-12-06 23:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2016-01-08 19:21 - 2015-12-06 23:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-01-08 19:21 - 2015-12-06 23:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-01-08 19:21 - 2015-12-06 23:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-01-08 19:21 - 2015-12-06 23:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-01-08 19:21 - 2015-12-06 23:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2016-01-08 19:21 - 2015-12-06 23:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2016-01-08 19:21 - 2015-12-06 23:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-01-08 19:21 - 2015-12-06 22:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2016-01-08 19:21 - 2015-12-06 22:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-01-08 19:21 - 2015-12-06 22:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-01-08 19:21 - 2015-12-06 22:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2016-01-08 19:21 - 2015-12-06 22:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-01-08 19:21 - 2015-12-06 22:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-01-08 19:21 - 2015-12-06 22:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2016-01-08 19:21 - 2015-12-06 22:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-01-08 19:21 - 2015-12-06 22:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2016-01-08 19:21 - 2015-12-06 22:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-01-08 19:21 - 2015-12-06 22:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-01-08 19:21 - 2015-12-06 22:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-01-08 19:21 - 2015-12-06 22:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2016-01-08 19:21 - 2015-12-06 22:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-01-08 19:21 - 2015-12-06 22:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2016-01-08 19:21 - 2015-12-06 22:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2016-01-08 19:21 - 2015-12-06 22:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-01-08 19:21 - 2015-12-06 22:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-01-08 19:21 - 2015-12-06 22:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2016-01-08 19:21 - 2015-12-06 22:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2016-01-08 19:21 - 2015-12-06 22:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL 2016-01-08 19:21 - 2015-12-06 22:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-01-08 19:21 - 2015-12-06 22:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2016-01-08 19:21 - 2015-12-06 22:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL 2016-01-08 19:21 - 2015-12-06 22:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2016-01-08 19:21 - 2015-12-06 22:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2016-01-08 19:21 - 2015-11-24 05:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-01-08 19:21 - 2015-11-24 04:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-01-08 19:21 - 2015-11-24 04:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll 2016-01-08 19:21 - 2015-11-24 04:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2016-01-08 19:21 - 2015-11-24 04:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-01-08 19:21 - 2015-11-24 04:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2016-01-08 19:21 - 2015-11-24 04:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2016-01-08 19:21 - 2015-11-24 03:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2016-01-08 19:21 - 2015-11-22 05:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-01-08 19:21 - 2015-11-22 05:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2016-01-08 19:21 - 2015-11-22 05:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll 2016-01-08 19:21 - 2015-11-22 05:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2016-01-08 19:21 - 2015-11-22 05:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-01-08 19:21 - 2015-11-22 05:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll 2016-01-08 19:21 - 2015-11-22 05:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-01-08 19:21 - 2015-11-22 05:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-01-08 19:21 - 2015-11-22 05:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2016-01-08 19:21 - 2015-11-22 05:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll 2016-01-08 19:21 - 2015-11-22 04:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll 2016-01-08 19:21 - 2015-11-22 04:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys 2016-01-08 19:21 - 2015-11-22 04:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2016-01-08 19:21 - 2015-11-22 04:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll 2016-01-08 19:21 - 2015-11-22 04:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2016-01-08 19:21 - 2015-11-22 04:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2016-01-08 19:21 - 2015-11-22 04:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-01-08 19:21 - 2015-11-22 04:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll 2016-01-08 19:21 - 2015-11-22 04:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-01-08 19:21 - 2015-11-22 04:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-01-08 19:21 - 2015-11-22 04:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll 2016-01-08 19:21 - 2015-11-22 04:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-01-08 19:21 - 2015-11-22 04:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2016-01-08 19:21 - 2015-11-22 04:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2016-01-08 19:21 - 2015-11-22 04:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll 2016-01-08 19:21 - 2015-11-22 04:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-01-08 19:21 - 2015-11-22 04:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-01-08 19:21 - 2015-11-22 04:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2016-01-08 19:21 - 2015-11-22 04:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-01-08 19:21 - 2015-11-22 04:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll 2016-01-08 19:21 - 2015-11-22 04:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-01-08 19:21 - 2015-11-22 04:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-01-08 19:21 - 2015-11-22 04:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-01-08 19:21 - 2015-11-22 04:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2016-01-08 19:21 - 2015-11-22 04:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-01-08 19:21 - 2015-11-22 04:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-01-08 19:21 - 2015-11-22 04:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-01-08 19:21 - 2015-11-22 04:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-01-08 19:21 - 2015-11-22 04:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-01-08 19:21 - 2015-11-22 04:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2016-01-08 19:21 - 2015-11-21 00:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll 2016-01-08 19:21 - 2015-11-21 00:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2016-01-08 19:21 - 2015-11-21 00:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2016-01-08 19:21 - 2015-11-13 01:55 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys 2016-01-08 19:21 - 2015-11-13 01:51 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2016-01-08 19:21 - 2015-11-13 01:51 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2016-01-08 19:21 - 2015-11-13 01:51 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2016-01-08 19:21 - 2015-11-13 01:43 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-01-08 19:21 - 2015-11-13 01:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-01-08 19:21 - 2015-11-13 01:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll 2016-01-08 19:21 - 2015-11-13 01:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2016-01-08 19:21 - 2015-11-13 01:42 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2016-01-08 19:21 - 2015-11-13 01:42 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-01-08 19:21 - 2015-11-13 01:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2016-01-08 19:21 - 2015-11-13 01:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2016-01-08 19:21 - 2015-11-13 01:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-01-08 19:21 - 2015-11-13 01:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2016-01-08 19:21 - 2015-11-13 01:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2016-01-08 19:21 - 2015-11-13 01:21 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2016-01-08 19:21 - 2015-11-13 01:21 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2016-01-08 19:21 - 2015-11-13 01:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2016-01-08 19:21 - 2015-11-13 01:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2016-01-08 19:21 - 2015-11-13 01:09 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2016-01-08 19:21 - 2015-11-13 00:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2016-01-08 19:21 - 2015-11-13 00:55 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2016-01-08 19:21 - 2015-11-13 00:53 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-01-08 19:21 - 2015-11-13 00:50 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-01-08 19:21 - 2015-11-13 00:49 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-01-08 19:21 - 2015-11-13 00:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-01-08 19:21 - 2015-11-13 00:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2016-01-08 19:21 - 2015-11-13 00:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2016-01-08 19:21 - 2015-11-13 00:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-01-08 19:21 - 2015-11-13 00:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-01-08 19:21 - 2015-11-05 07:05 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2016-01-08 19:21 - 2015-11-05 05:40 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-01-08 19:21 - 2015-11-05 05:25 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2016-01-08 19:21 - 2015-11-05 04:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-01-08 19:21 - 2015-11-05 03:18 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-01-08 19:21 - 2015-11-05 03:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-01-08 19:20 - 2015-12-06 23:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll 2016-01-08 19:20 - 2015-12-06 23:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2016-01-08 19:20 - 2015-12-06 23:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-01-08 19:20 - 2015-12-06 23:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe 2016-01-08 19:20 - 2015-12-06 23:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe 2016-01-08 19:20 - 2015-11-24 05:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2016-01-08 19:20 - 2015-11-24 04:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2016-01-08 19:20 - 2015-11-24 03:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2016-01-08 19:20 - 2015-11-22 05:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-01-08 19:20 - 2015-11-22 05:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2016-01-08 19:20 - 2015-11-22 04:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2016-01-08 19:20 - 2015-11-22 04:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll 2016-01-08 19:20 - 2015-11-22 04:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2016-01-08 19:20 - 2015-11-22 04:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2016-01-08 19:20 - 2015-11-22 04:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2016-01-08 19:20 - 2015-11-22 04:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-01-08 19:20 - 2015-11-22 04:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll 2016-01-08 19:20 - 2015-11-22 04:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll 2016-01-08 19:20 - 2015-11-22 04:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2016-01-08 19:20 - 2015-11-22 04:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2016-01-08 19:20 - 2015-11-22 04:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-01-08 19:20 - 2015-11-22 04:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2016-01-08 19:20 - 2015-11-22 04:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-01-08 19:20 - 2015-11-22 04:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-01-08 19:20 - 2015-11-22 04:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe 2016-01-08 19:20 - 2015-11-22 04:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-01-08 19:20 - 2015-11-22 04:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-01-08 19:20 - 2015-11-22 04:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2016-01-08 19:20 - 2015-11-22 04:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll 2016-01-08 19:20 - 2015-11-22 04:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2016-01-08 19:20 - 2015-11-22 04:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2016-01-08 19:20 - 2015-11-22 04:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2016-01-08 19:20 - 2015-11-22 04:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll 2016-01-08 19:20 - 2015-11-22 04:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll 2016-01-08 19:20 - 2015-11-22 04:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2016-01-08 19:20 - 2015-11-22 04:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2016-01-08 19:20 - 2015-11-22 04:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2016-01-08 19:20 - 2015-11-22 04:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-01-08 19:20 - 2015-11-22 04:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2016-01-08 19:20 - 2015-11-22 04:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll 2016-01-08 19:20 - 2015-11-22 04:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2016-01-08 19:20 - 2015-11-22 04:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2016-01-08 19:20 - 2015-11-22 04:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-01-08 19:20 - 2015-11-22 04:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2016-01-08 19:20 - 2015-11-22 04:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-01-08 19:20 - 2015-11-22 04:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2016-01-08 19:20 - 2015-11-22 04:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2016-01-08 19:20 - 2015-11-22 04:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-01-08 19:20 - 2015-11-22 04:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2016-01-08 19:20 - 2015-11-22 04:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-01-08 19:20 - 2015-11-22 04:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-01-08 19:20 - 2015-11-22 04:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-01-08 19:20 - 2015-11-22 04:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-01-08 19:20 - 2015-11-22 04:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-01-08 19:20 - 2015-11-22 04:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2016-01-08 19:20 - 2015-11-22 04:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2016-01-08 19:20 - 2015-11-22 04:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-01-08 19:20 - 2015-11-22 04:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-01-08 19:20 - 2015-11-22 04:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2016-01-08 19:20 - 2015-11-22 04:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-01-08 19:20 - 2015-11-22 04:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2016-01-08 19:20 - 2015-11-22 04:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-01-08 19:20 - 2015-11-22 04:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-01-08 19:20 - 2015-11-22 04:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-01-08 19:20 - 2015-11-22 04:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-01-08 19:20 - 2015-11-22 04:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll 2016-01-08 19:20 - 2015-11-22 04:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-01-08 19:20 - 2015-11-13 01:07 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2016-01-08 19:20 - 2015-11-13 01:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2016-01-08 19:20 - 2015-11-13 01:05 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2016-01-08 19:20 - 2015-11-13 01:05 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2016-01-08 19:20 - 2015-11-13 01:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2016-01-08 19:20 - 2015-11-13 01:05 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll 2016-01-08 19:20 - 2015-11-13 01:04 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-01-08 19:20 - 2015-11-13 01:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-01-08 19:20 - 2015-11-13 01:04 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe 2016-01-08 19:20 - 2015-11-13 01:03 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll 2016-01-08 19:20 - 2015-11-13 01:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2016-01-08 19:20 - 2015-11-13 00:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-01-08 19:20 - 2015-11-13 00:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2016-01-08 19:20 - 2015-11-13 00:54 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-01-08 19:20 - 2015-11-13 00:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-01-08 19:20 - 2015-11-13 00:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2016-01-08 19:20 - 2015-11-13 00:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2016-01-08 19:20 - 2015-11-05 05:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2016-01-08 19:20 - 2015-11-05 05:08 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2016-01-08 19:20 - 2015-11-05 05:04 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-01-08 19:20 - 2015-11-05 05:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2016-01-08 19:20 - 2015-11-05 04:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-01-08 19:20 - 2015-11-05 04:03 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2016-01-08 19:20 - 2015-11-05 04:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2016-01-08 19:20 - 2015-11-05 03:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-01-08 19:20 - 2015-11-05 03:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2016-01-08 19:20 - 2015-11-05 03:42 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-01-08 17:13 - 2016-01-08 17:13 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\ActiveSync 2016-01-08 17:11 - 2016-01-08 17:11 - 00000020 ___SH C:\Users\Beau Whiteside\ntuser.ini 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default\My Documents 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default\Documents\My Videos 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default\Documents\My Music 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures 2016-01-08 07:16 - 2016-01-08 07:16 - 00000000 _SHDL C:\Users\Default User\Documents\My Music 2016-01-08 07:09 - 2016-01-26 22:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-01-08 07:09 - 2016-01-08 07:09 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat 2016-01-08 07:00 - 2016-01-08 07:00 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-01-08 07:00 - 2016-01-08 07:00 - 00000000 ____D C:\Users\Default\AppData\Local\Host App Service 2016-01-08 07:00 - 2016-01-08 07:00 - 00000000 ____D C:\Users\Default User\AppData\Local\Host App Service 2016-01-08 06:58 - 2016-01-08 07:02 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2016-01-08 06:57 - 2016-01-26 21:38 - 00000000 ____D C:\Users\Beau Whiteside 2016-01-08 06:57 - 2016-01-08 06:57 - 00000000 _SHDL C:\Users\Beau Whiteside\My Documents 2016-01-08 06:57 - 2016-01-08 06:57 - 00000000 _SHDL C:\Users\Beau Whiteside\Documents\My Videos 2016-01-08 06:57 - 2016-01-08 06:57 - 00000000 _SHDL C:\Users\Beau Whiteside\Documents\My Pictures 2016-01-08 06:57 - 2016-01-08 06:57 - 00000000 _SHDL C:\Users\Beau Whiteside\Documents\My Music 2016-01-08 06:54 - 2016-01-08 06:58 - 00000000 ____D C:\Program Files (x86)\Realtek 2016-01-08 06:54 - 2016-01-08 06:54 - 00000102 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc 2016-01-08 06:54 - 2016-01-08 06:54 - 00000000 ____D C:\ProgramData\Dolby 2016-01-08 06:54 - 2016-01-08 06:54 - 00000000 ____D C:\Program Files\Dolby 2016-01-08 06:53 - 2016-01-26 22:07 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2016-01-08 06:53 - 2016-01-08 06:58 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-01-08 06:53 - 2016-01-08 06:58 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-01-08 06:53 - 2016-01-08 06:54 - 00000000 ____D C:\WINDOWS\system32\DAX2 2016-01-08 06:53 - 2016-01-08 06:53 - 01148427 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip 2016-01-08 06:53 - 2016-01-08 06:53 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2016-01-08 06:53 - 2016-01-08 06:53 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2016-01-08 06:53 - 2016-01-08 06:53 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2016-01-08 06:53 - 2016-01-08 06:53 - 00000000 ____D C:\WINDOWS\system32\IntelSSTAPO 2016-01-08 06:53 - 2016-01-08 06:53 - 00000000 ____D C:\ProgramData\rtkSSTSetting 2016-01-08 06:53 - 2016-01-08 06:53 - 00000000 ____D C:\ProgramData\NVIDIA 2016-01-08 06:53 - 2016-01-08 06:53 - 00000000 ____D C:\Program Files\Realtek 2016-01-08 06:53 - 2015-09-23 14:03 - 03196455 _____ C:\WINDOWS\system32\Drivers\rtkSSTSetting.zip 2016-01-08 06:53 - 2015-09-05 10:16 - 00086528 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2016-01-08 06:53 - 2015-09-05 10:16 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2016-01-08 06:53 - 2015-07-22 20:10 - 06873928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-01-08 06:53 - 2015-07-22 20:10 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-01-08 06:53 - 2015-07-22 20:10 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-01-08 06:53 - 2015-07-22 20:10 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-01-08 06:53 - 2015-07-22 20:10 - 00937800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-01-08 06:53 - 2015-07-22 20:10 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-01-08 06:53 - 2015-07-22 20:10 - 00074896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-01-08 06:53 - 2015-07-22 20:10 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-01-08 06:53 - 2015-07-21 23:29 - 05121613 _____ C:\WINDOWS\system32\nvcoproc.bin 2016-01-08 06:52 - 2016-01-08 06:58 - 00000000 ____D C:\Program Files\Intel 2016-01-08 06:52 - 2015-10-30 02:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2016-01-08 06:48 - 2016-01-10 03:32 - 00189240 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-01-08 06:48 - 2016-01-08 17:14 - 00000000 ___DC C:\WINDOWS\Panther 2016-01-08 06:45 - 2016-01-08 06:46 - 00000000 ____D C:\Windows.old 2016-01-08 06:45 - 2016-01-08 06:45 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2016-01-08 06:43 - 2016-01-08 06:43 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-01-08 06:43 - 2016-01-08 06:43 - 00000000 ____D C:\Program Files\MSBuild 2016-01-08 06:43 - 2016-01-08 06:43 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-01-08 06:43 - 2016-01-08 06:43 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-01-08 06:42 - 2015-10-23 20:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2016-01-08 06:42 - 2015-10-23 20:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-01-08 06:42 - 2015-10-23 20:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2016-01-08 06:42 - 2015-10-23 20:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2016-01-08 06:42 - 2015-10-23 20:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2016-01-08 06:42 - 2015-10-23 20:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2016-01-06 17:25 - 2016-01-08 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 2016-01-06 17:25 - 2016-01-06 17:26 - 00000000 ____D C:\Users\Beau Whiteside\Desktop\Guild Wars 2 2016-01-06 17:25 - 2016-01-06 17:25 - 00000714 _____ C:\Users\Public\Desktop\Guild Wars 2.lnk 2016-01-06 17:22 - 2016-01-06 17:23 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Guild Wars 2 2016-01-06 17:21 - 2016-01-26 22:15 - 26068984 _____ C:\Users\Beau Whiteside\Downloads\Gw2Setup.exe 2016-01-05 21:21 - 2016-01-05 21:21 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Acer Incorporated 2016-01-01 20:19 - 2016-01-08 07:09 - 00002668 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task 2016-01-01 20:18 - 2016-01-27 00:36 - 00000000 ____D C:\ProgramData\Overwolf 2016-01-01 20:18 - 2016-01-26 22:14 - 00000000 ____D C:\Program Files (x86)\Overwolf 2016-01-01 20:18 - 2016-01-08 06:58 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2016-01-01 20:18 - 2016-01-01 20:18 - 00002044 _____ C:\Users\Public\Desktop\Overwolf.lnk 2016-01-01 20:17 - 2016-01-26 22:09 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Overwolf 2016-01-01 20:17 - 2016-01-01 20:20 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\TS3Client 2016-01-01 20:16 - 2016-01-08 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2016-01-01 20:16 - 2016-01-01 20:16 - 00001235 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2016-01-01 20:16 - 2016-01-01 20:16 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client 2015-12-31 20:48 - 2015-12-31 20:48 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Blizzard 2015-12-31 15:47 - 2016-01-08 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone 2015-12-31 15:47 - 2015-12-31 15:47 - 00001254 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2015-12-31 15:41 - 2015-12-31 20:49 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2015-12-31 15:41 - 2015-12-31 15:41 - 00000000 ____D C:\Data 2015-12-31 15:36 - 2016-01-27 00:36 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Battle.net 2015-12-31 15:36 - 2016-01-26 00:01 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Battle.net 2015-12-31 15:36 - 2016-01-22 18:12 - 00000000 ____D C:\Program Files (x86)\Battle.net 2015-12-31 15:36 - 2016-01-08 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2015-12-31 15:36 - 2015-12-31 15:36 - 00001217 _____ C:\Users\Public\Desktop\Battle.net.lnk 2015-12-31 15:36 - 2015-12-31 15:36 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Blizzard Entertainment 2015-12-31 15:36 - 2015-12-31 15:36 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2015-12-31 15:33 - 2015-12-31 16:34 - 00000000 ____D C:\ProgramData\Battle.net 2015-12-31 15:32 - 2015-12-31 15:33 - 03142712 _____ (Blizzard Entertainment) C:\Users\Beau Whiteside\Downloads\Hearthstone-Setup.exe 2015-12-31 01:35 - 2015-12-31 01:35 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\RotMG.Production 2015-12-30 20:33 - 2015-12-30 20:33 - 00000000 ____D C:\Users\Beau Whiteside\Documents\My Games 2015-12-30 20:33 - 2015-12-30 20:33 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\My Games 2015-12-30 13:25 - 2016-01-04 14:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-30 00:34 - 2016-01-27 14:54 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Skype 2015-12-30 00:28 - 2016-01-03 11:40 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\CrashDumps 2015-12-29 22:08 - 2016-01-26 22:45 - 00000000 ____D C:\Program Files (x86)\Dashlane 2015-12-29 22:08 - 2015-12-29 22:08 - 00000000 ___HD C:\ProgramData\{6C65EBE1-72AC-48E2-A6B6-76C310D3B83A} 2015-12-29 22:08 - 2015-12-29 22:08 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\IIIQF 2015-12-29 22:08 - 2015-12-29 22:08 - 00000000 ____D C:\ProgramData\mia9811.tmp 2015-12-28 13:50 - 2016-01-27 15:19 - 00003394 _____ C:\WINDOWS\System32\Tasks\PC Driver Kit Schedule 2015-12-28 13:50 - 2015-12-28 13:50 - 00000000 ____D C:\Users\Beau Whiteside\Documents\PC Driver Kit 2015-12-28 13:35 - 2016-01-27 15:19 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\PC Driver Kit 2015-12-28 13:35 - 2016-01-08 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Driver Kit 2015-12-28 13:35 - 2015-12-28 13:35 - 00001130 _____ C:\Users\Beau Whiteside\Desktop\PC Driver Kit.lnk 2015-12-28 13:35 - 2015-12-28 13:35 - 00000000 ____D C:\Program Files (x86)\PC Driver Kit 2015-12-28 13:34 - 2016-01-27 14:52 - 00000000 ____D C:\ProgramData\ff1e5f82-6bf7-0 2015-12-28 13:34 - 2016-01-27 14:52 - 00000000 ____D C:\ProgramData\ff1e5f82-6763-1 2015-12-28 13:34 - 2016-01-08 07:09 - 00022570 _____ C:\WINDOWS\System32\Tasks\{080E0B47-0C04-7D0D-0F11-090B0979117E} 2015-12-28 13:34 - 2015-12-28 13:34 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Programs 2015-12-28 13:33 - 2015-12-28 13:33 - 00215168 _____ C:\Users\Beau Whiteside\Downloads\TeamSpeakSetup-2e40015556818064.exe ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-01-27 15:29 - 2015-10-30 02:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-01-27 15:29 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-01-27 14:57 - 2015-08-31 02:31 - 00000000 ____D C:\Program Files (x86)\McAfee 2016-01-27 14:54 - 2015-12-25 09:34 - 00004184 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1A16FE60-878A-4E14-92CE-053E752F1D2D} 2016-01-27 00:36 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-01-27 00:31 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\registration 2016-01-26 22:37 - 2015-12-25 09:29 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Host App Service 2016-01-26 22:14 - 2015-10-30 02:21 - 00000000 ____D C:\WINDOWS\INF 2016-01-26 22:14 - 2015-08-31 02:40 - 00879220 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-01-26 22:08 - 2015-12-25 11:22 - 00000000 ____D C:\Program Files (x86)\Steam 2016-01-26 22:08 - 2015-12-25 09:34 - 00000000 ___RD C:\Users\Beau Whiteside\OneDrive 2016-01-26 22:07 - 2015-12-25 09:29 - 00000000 __SHD C:\Users\Beau Whiteside\IntelGraphicsProfiles 2016-01-26 22:06 - 2015-10-30 01:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-01-26 21:51 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-01-24 18:58 - 2015-10-30 01:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-01-17 15:49 - 2015-12-25 10:15 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Comms 2016-01-16 23:02 - 2015-12-25 09:30 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Local\Packages 2016-01-16 08:58 - 2015-12-25 12:34 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-01-15 18:36 - 2015-12-25 14:19 - 00003122 _____ C:\WINDOWS\System32\Tasks\McAfeeLogon 2016-01-15 18:36 - 2015-12-25 14:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee 2016-01-15 17:44 - 2015-10-30 02:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-01-14 03:30 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-01-13 15:14 - 2015-12-25 12:12 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-01-13 15:09 - 2015-12-25 12:12 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-01-12 17:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\rescache 2016-01-10 13:55 - 2015-08-31 02:28 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-01-10 03:31 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-01-10 03:31 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-01-10 03:31 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-01-10 03:31 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-01-10 03:31 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Provisioning 2016-01-10 03:31 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-01-10 03:31 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-01-10 03:31 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-01-09 09:48 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\appcompat 2016-01-08 17:29 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2016-01-08 17:20 - 2015-12-25 09:34 - 00002394 _____ C:\Users\Beau Whiteside\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-01-08 17:17 - 2015-08-31 02:31 - 00003342 _____ C:\WINDOWS\System32\Tasks\UbtFrameworkService 2016-01-08 17:17 - 2015-08-31 02:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2016-01-08 17:12 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\PrintDialog 2016-01-08 17:12 - 2015-10-30 02:24 - 00000000 ___RD C:\WINDOWS\MiracastView 2016-01-08 07:15 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2016-01-08 07:15 - 2015-10-23 19:45 - 00024768 _____ C:\WINDOWS\diagwrn.xml 2016-01-08 07:15 - 2015-10-23 19:45 - 00024768 _____ C:\WINDOWS\diagerr.xml 2016-01-08 07:09 - 2015-12-25 12:33 - 00002314 _____ C:\WINDOWS\System32\Tasks\{5F9ABACE-8A2A-406F-84C6-B46E8C72DFAA} 2016-01-08 07:09 - 2015-12-25 09:39 - 00002534 _____ C:\WINDOWS\System32\Tasks\AcerCloud 2016-01-08 07:09 - 2015-12-25 09:37 - 00002564 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent 2016-01-08 07:09 - 2015-12-25 09:33 - 00002620 _____ C:\WINDOWS\System32\Tasks\App Explorer 2016-01-08 07:09 - 2015-10-23 19:16 - 00002074 _____ C:\WINDOWS\System32\Tasks\FUBTrackingByPLD 2016-01-08 07:09 - 2015-10-23 19:05 - 00002180 _____ C:\WINDOWS\System32\Tasks\Quick Access 2016-01-08 07:09 - 2015-10-23 19:03 - 00002264 _____ C:\WINDOWS\System32\Tasks\Power Button 2016-01-08 07:09 - 2015-10-23 19:03 - 00002222 _____ C:\WINDOWS\System32\Tasks\Power Management 2016-01-08 07:09 - 2015-08-31 02:29 - 00004302 _____ C:\WINDOWS\System32\Tasks\Software Update Application 2016-01-08 07:09 - 2015-08-31 02:29 - 00003854 _____ C:\WINDOWS\System32\Tasks\ACCAgent 2016-01-08 07:09 - 2015-08-31 02:29 - 00002926 _____ C:\WINDOWS\System32\Tasks\avast! SL Update 2016-01-08 07:09 - 2015-08-31 02:29 - 00002888 _____ C:\WINDOWS\System32\Tasks\ACC 2016-01-08 07:09 - 2015-08-31 02:29 - 00002654 _____ C:\WINDOWS\System32\Tasks\Avast SecureLine 2016-01-08 07:09 - 2015-08-31 02:29 - 00002328 _____ C:\WINDOWS\System32\Tasks\ACCBackgroundApplication 2016-01-08 07:08 - 2015-10-30 02:24 - 00000000 __RHD C:\Users\Public\Libraries 2016-01-08 07:02 - 2015-12-25 19:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2016-01-08 07:02 - 2015-12-25 12:44 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-01-08 07:02 - 2015-12-25 11:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2016-01-08 07:02 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-01-08 07:02 - 2015-10-23 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF 2016-01-08 07:02 - 2015-10-23 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbolt Software 2016-01-08 07:02 - 2015-10-23 18:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-01-08 07:02 - 2015-10-23 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2016-01-08 07:02 - 2015-10-23 18:42 - 00000000 ____D C:\WINDOWS\system32\ihvmanager 2016-01-08 07:00 - 2015-07-10 04:05 - 00000000 ____D C:\Users\Default.migrated 2016-01-08 06:59 - 2015-10-30 02:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-01-08 06:59 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\spool 2016-01-08 06:59 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-01-08 06:58 - 2015-12-25 12:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2016-01-08 06:58 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\USOPrivate 2016-01-08 06:58 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-01-08 06:58 - 2015-08-31 02:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2016-01-08 06:58 - 2015-08-31 02:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2016-01-08 06:53 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Help 2016-01-08 06:49 - 2015-10-30 04:13 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2016-01-08 06:48 - 2015-10-30 02:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2016-01-08 06:30 - 2015-10-30 04:42 - 00000000 ___HD C:\$WINDOWS.~BT 2016-01-04 14:41 - 2015-08-31 02:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-12-30 21:23 - 2015-08-31 02:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak 2015-12-30 20:32 - 2015-12-25 18:17 - 00027750 _____ C:\WINDOWS\DirectX.log 2015-12-30 00:31 - 2015-12-25 12:34 - 00000000 ____D C:\Users\Beau Whiteside\AppData\Roaming\Skype_old ==================== Files in the root of some directories ======= 2016-01-08 06:54 - 2016-01-08 06:54 - 0000102 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-01-22 18:28 ==================== End of FRST.txt ============================ Thanks!