Jump to content

JHayes

Members
  • Posts

    4
  • Joined

  • Last visited

Everything posted by JHayes

  1. Hi Kevin, I think we have success. To answer your question the 'problem' occurred whether computer in use or idling for hours. Following the instructions the pin reset did not work on my Virgin Superhub and I had to reset via the control panel after logging in. I was already using OpenDNS (the second OpenDNS option) and after doing the DNS flush etc there was no change (also uninstalled OpenDNS Updater), so I ran DnsJumper again this time selecting Google DNS and all seems to be okay. The computer has been rebooted a couple of times and I started browsing immediately to make sure all was okay and no problem so far. Obviously as I am no longer using OpenDNS I cannot use their monitor for checking my connection. All seems a mystery to me. Assume I can remove the prorammes I downloaded while attempting a fix if you are happy with everything? Can I ask if anything unwanted was found/removed during the scans? Many thanks for all your help, really appreciated. JHayes
  2. Thank you Kevin, here are my follow up results: Fix result of Farbar Recovery Scan Tool (x64) Version: 13-10-2016 Ran by John (14-10-2016 09:41:01) Run:1 Running from C:\Users\John\Desktop Loaded Profiles: John (Available Profiles: John & DefaultAppPool) Boot Mode: Normal ============================================== fixlist content: ***************** Start CreateRestorePoint: CloseProcesses: GroupPolicy: Restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION S3 dbx; system32\DRIVERS\dbx.sys [X] U3 idsvc; no ImagePath U3 iswSvc; no ImagePath C:\WINDOWS\SysWOW64\%APPDATA% C:\WINDOWS\system32\%APPDATA% 2011-06-09 13:27 - 2011-06-09 13:27 - 0005049 _____ () C:\ProgramData\rugqgaaw.ekm 2003-10-06 09:21 - 2003-10-06 09:21 - 0000000 ____H () C:\ProgramData\sdpsenv.dat 2011-04-15 21:45 - 2011-04-15 21:45 - 0004152 _____ () C:\ProgramData\vjxgiesm.kqf Task: {36AC4F93-2A1C-4FD2-B0D6-68198925F237} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION AlternateDataStreams: C:\ProgramData\sdpsenv.dat:naughtypirates [482] AlternateDataStreams: C:\Users\John\Desktop\rkill.exe:BDU [0] AlternateDataStreams: C:\Users\John\Downloads\bitdefender_windows_13a09d48-fdd5-4e5a-b78a-1493d09fbf74.exe:BDU [0] AlternateDataStreams: C:\Users\John\Downloads\CLEAN.exe:BDU [0] AlternateDataStreams: C:\Users\John\Downloads\zapSetupWeb_150_123_17051_en.exe:BDU [0] HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.exe: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.scr: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.bat: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.com: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.cmd: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.reg: => <===== ATTENTION EmptyTemp: end ***************** Restore point was successfully created. Processes closed successfully. C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully dbx => service removed successfully idsvc => service removed successfully iswSvc => service removed successfully C:\WINDOWS\SysWOW64\%APPDATA% => moved successfully C:\WINDOWS\system32\%APPDATA% => moved successfully C:\ProgramData\rugqgaaw.ekm => moved successfully C:\ProgramData\sdpsenv.dat => moved successfully C:\ProgramData\vjxgiesm.kqf => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{36AC4F93-2A1C-4FD2-B0D6-68198925F237}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{36AC4F93-2A1C-4FD2-B0D6-68198925F237}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => key removed successfully "C:\ProgramData\sdpsenv.dat" => ":naughtypirates" ADS not found. C:\Users\John\Desktop\rkill.exe => ":BDU" ADS removed successfully. C:\Users\John\Downloads\bitdefender_windows_13a09d48-fdd5-4e5a-b78a-1493d09fbf74.exe => ":BDU" ADS removed successfully. C:\Users\John\Downloads\CLEAN.exe => ":BDU" ADS removed successfully. C:\Users\John\Downloads\zapSetupWeb_150_123_17051_en.exe => ":BDU" ADS removed successfully. "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.exe" => key removed successfully "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.scr" => key removed successfully "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.bat" => key removed successfully "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.com" => key removed successfully "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.cmd" => key removed successfully "HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.reg" => key removed successfully =========== EmptyTemp: ========== BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 40539269 B Java, Flash, Steam htmlcache => 749 B Windows/system/drivers => 45260610 B Edge => 2238768 B Chrome => 18840941 B Firefox => 372378476 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 22834 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 19254646 B NetworkService => 4678488 B John => 56695675 B DefaultAppPool => 16674 B RecycleBin => 0 B EmptyTemp: => 534 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 09:43:30 ==== # AdwCleaner v6.021 - Logfile created 14/10/2016 at 10:00:18 # Updated on 06/10/2016 by ToolsLib # Database : 2016-10-07.1 [Local] # Operating System : Windows 10 Home (X64) # Username : John - JOHN-PC # Running from : C:\Users\John\Desktop\AdwCleaner.exe # Mode: Clean # Support : https://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** [-] Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}] [-] Key deleted: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\StartSearch [#] Key deleted on reboot: HKCU\Software\StartSearch [#] Key deleted on reboot: [x64] HKCU\Software\StartSearch [-] Data restored: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Microsoft\Internet Explorer\Search [Search Page] [-] Data restored: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Microsoft\Internet Explorer\SearchUrl [(Default)] [-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Search [Search Page] [-] Data restored: HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)] [-] Data restored: HKCU\Software\Microsoft\Internet Explorer\SearchURI [(Default)] [-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Search [Search Page] [-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)] [-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchURI [(Default)] [-] Value deleted: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain] [#] Value deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain] [#] Value deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain] [-] Key deleted: HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi ***** [ Web browsers ] ***** ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [2229 Bytes] - [14/10/2016 10:00:18] C:\AdwCleaner\AdwCleaner[S0].txt - [2914 Bytes] - [14/10/2016 09:58:40] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2375 Bytes] ########## No threats were found with the Sophos scan. At the moment I still have the original connectivity problem every hour.
  3. Hello Kevin thank you for getting back to me. Here are the results of my scans: Rkill 2.8.4 by Lawrence Abrams (Grinler) http://www.bleepingcomputer.com/ Copyright 2008-2016 BleepingComputer.com More Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 10/13/2016 10:36:28 PM in x64 mode. Windows Version: Windows 10 Home Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * C:\Windows\SysWOW64\HsMgr.exe (PID: 6592) [WD-HEUR] * C:\Windows\System\HsMgr64.exe (PID: 8000) [WD-HEUR] 2 proccesses terminated! Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Defender Disabled [HKLM\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware" = dword:00000001 * Windows Firewall Disabled [HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = dword:00000000 Checking Windows Service Integrity: * gagp30kx [Missing Service] * IEEtwCollectorService [Missing Service] * IoQos [Missing Service] * nv_agp [Missing Service] * TimeBroker [Missing Service] * uagp35 [Missing Service] * uliagpkx [Missing Service] * WcsPlugInService [Missing Service] * wpcfltr [Missing Service] * WSService [Missing Service] * agp440 [Missing ImagePath] * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath] * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath] * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL] * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL] Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * Cannot edit the HOSTS file. * Permissions Fixed. Administrators can now edit the HOSTS file. * HOSTS file entries found: 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 20 out of 15032 HOSTS entries shown. Please review HOSTS file for further entries. Program finished at: 10/13/2016 10:37:42 PM Execution time: 0 hours(s), 1 minute(s), and 13 seconds(s) Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 13-Oct-16 Scan Time: 22:42 Logfile: Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.10.13.10 Rootkit Database: v2016.09.26.02 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 10 CPU: x64 File System: NTFS User: John Scan Type: Threat Scan Result: Completed Objects Scanned: 471172 Time Elapsed: 14 min, 5 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-10-2016 Ran by John (administrator) on JOHN-PC (13-10-2016 22:59:13) Running from C:\Users\John\Desktop Loaded Profiles: John (Available Profiles: John & DefaultAppPool) Platform: Windows 10 Home Version 1607 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Ariolic Software, Ltd. (hxxp://www.ariolic.com)) C:\Program Files (x86)\ActiveSMART 2.94\ASmartService.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.09\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.12\atkexComSvc.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.10\AsSysCtrlService.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Raxco Software, Inc.) C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Raxco Software, Inc.) C:\Program Files\Raxco\PerfectDisk\PDAgent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Ariolic Software, Ltd. (hxxp://www.ariolic.com)) C:\Program Files (x86)\ActiveSMART 2.94\ActiveSMART.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (Raxco Software, Inc.) C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportInjService_x64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (CMedia) C:\Program Files\UNi Xonar Audio\Customapp\AsusAudioCenter.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe (GP Software) C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe (SlySoft, Inc.) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe () C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe () C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe (Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.82_none_5be7b69702339d1d\TiWorker.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [570152 2014-08-14] (Acronis) HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\Syswow64\cmicnfgp.dll [8048640 2014-03-11] (C-Media Corporation) HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2008-07-11] () HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2008-07-11] () HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1654160 2016-06-29] (Bitdefender) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25366584 2016-10-10] (Dropbox, Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5343664 2015-07-20] (Acronis) HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [691056 2015-07-20] (Acronis International GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation) HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [144184 2016-09-07] (Check Point Software Technologies Ltd.) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\Run: [Directory Opus Desktop Dblclk] => C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe [279008 2010-10-12] (GP Software) HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe [93816 2010-12-17] (SlySoft, Inc.) HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\Run: [Google Update] => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-07-08] (Google Inc.) HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\Run: [OpenDNS Updater] => C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe [839680 2010-06-16] () HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd) ShellExecuteHooks: Directory Opus Shell Execute Hook - {3CF9ECE0-1A9F-11D2-8C73-00C06C2005DE} - C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll [742360 2010-10-12] (GP Software) ShellExecuteHooks-x32: Directory Opus Shell Execute Hook - {EE761688-C137-4b04-8FAB-3C9CDF0886F0} - C:\Program Files\GPSoftware\Directory Opus\dopuslib32.dll [324032 2010-10-12] (GP Software) ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis) ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis) ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.) GroupPolicy: Restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100 Tcpip\..\Interfaces\{6298274a-4b76-4bad-8dba-868615e434b4}: [NameServer] 208.67.222.222,208.62.220.222 Tcpip\..\Interfaces\{6298274a-4b76-4bad-8dba-868615e434b4}: [DhcpNameServer] 194.168.4.100 194.168.8.100 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.co.uk/ HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nmd.msn.com SearchScopes: HKLM -> DefaultScope {D77C58FC-AFF3-4589-BE48-B5AB7F835B7F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM -> {D77C58FC-AFF3-4589-BE48-B5AB7F835B7F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {3BC5B167-ED33-483F-934E-069F9F30A8A0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {3BC5B167-ED33-483F-934E-069F9F30A8A0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2306412219-259799194-2763688043-1000 -> DefaultScope {D77C58FC-AFF3-4589-BE48-B5AB7F835B7F} URL = SearchScopes: HKU\S-1-5-21-2306412219-259799194-2763688043-1000 -> {D77C58FC-AFF3-4589-BE48-B5AB7F835B7F} URL = BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-29] (Bitdefender) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-29] (Bitdefender) BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-26] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-26] (Oracle Corporation) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-29] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-29] (Bitdefender) Toolbar: HKU\S-1-5-21-2306412219-259799194-2763688043-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKU\S-1-5-21-2306412219-259799194-2763688043-1000 -> No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2015-08-05] (Belarc, Inc.) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\7po4uj1g.default-1475166081055 [2016-10-13] FF Homepage: Mozilla\Firefox\Profiles\7po4uj1g.default-1475166081055 -> file:///I:/ufoinfo2/index.html hxxps://www.google.co.uk/webhp?hl=en&gws_rd=ssl FF Extension: (Adblock Plus) - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\7po4uj1g.default-1475166081055\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-04] FF HKLM\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff => not found FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\\antispam32\bdwteff FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2016\\antispam32\bdwteff [2015-12-20] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-10-12] [not signed] FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker => not found FF HKLM-x32\...\Firefox\Extensions: [donottrackplus@abine.com] - C:\Program Files (x86)\CheckPoint\Install\dntme-firefox.xpi => not found FF HKLM-x32\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff => not found FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-19] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-19] () FF Plugin-x32: @checkpoint.com/FFApi -> C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll [No File] FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-26] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-26] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-11] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-11] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-31] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-31] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2306412219-259799194-2763688043-1000: @tools.google.com/Google Update;version=3 -> C:\Users\John\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-31] (Google Inc.) FF Plugin HKU\S-1-5-21-2306412219-259799194-2763688043-1000: @tools.google.com/Google Update;version=9 -> C:\Users\John\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-31] (Google Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Plugin: (Shockwave Flash) - C:\Users\John\AppData\Local\Google\Chrome\Application\53.0.2785.143\gcswf32.dll => No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll => No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll => No File CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll => No File CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll => No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll => No File CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll => No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Native Client) - C:\Users\John\AppData\Local\Google\Chrome\Application\53.0.2785.143\ppGoogleNaClPluginChrome.dll => No File CHR Plugin: (Chrome PDF Viewer) - C:\Users\John\AppData\Local\Google\Chrome\Application\53.0.2785.143\pdf.dll => No File CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll => No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll => No File CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll => No File CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll => No File CHR Profile: C:\Users\John\AppData\Local\Google\Chrome\User Data\Default [2016-10-09] CHR Extension: (Rapport) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjllphbppobebmjpjcijfbakobcheof [2016-03-27] CHR Extension: (YouTube) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-27] CHR Extension: (Google Search) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-03-27] CHR Extension: (ZoneAlarm Anti-Phishing) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\flljooaijgdgaaogmfhakpojmddcjjmj [2016-09-29] CHR Extension: (Chrome Web Store Payments) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-21] CHR Extension: (Gmail) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-11] CHR Extension: (Chrome Media Router) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-29] CHR HKU\S-1-5-21-2306412219-259799194-2763688043-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flljooaijgdgaaogmfhakpojmddcjjmj] - hxxps://clients2.google.com/service/update2/crx StartMenuInternet: Google Chrome - C:\Users\John\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ActiveSMART Service; C:\Program Files (x86)\ActiveSMART 2.94\ASmartService.exe [2016600 2012-07-12] (Ariolic Software, Ltd. (hxxp://www.ariolic.com)) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.12\atkexComSvc.exe [917120 2010-10-28] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.09\aaHMSvc.exe [909440 2010-11-03] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.10\AsSysCtrlService.exe [586880 2010-10-21] () S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-13] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-07-13] (Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [38000 2016-10-10] (Dropbox, Inc.) R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2008-01-24] (Hewlett-Packard Company) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1088944 2016-09-13] (Bitdefender) R2 RapportMgmtService; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2387952 2016-09-12] (IBM Corp.) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2009-10-20] (CACE Technologies, Inc.) S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-06-29] (Bitdefender) R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4087568 2016-09-07] (Check Point Software Technologies Ltd.) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1693104 2016-06-29] (Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2016-08-09] (Check Point Software Technologies, Ltd.) S2 ZoneAlarm ICM Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe [794424 2016-09-07] (Check Point Software Technologies Ltd.) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1603264 2016-08-26] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [850464 2016-08-26] (BitDefender) S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [23568 2015-11-03] (Bitdefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-29] (BitDefender LLC) S4 BDVEDISK; C:\Windows\system32\DRIVERS\bdvedisk.sys [87912 2015-12-20] (BitDefender) R3 cmudaxp; C:\Windows\system32\drivers\cmudaxp.sys [2735616 2013-12-11] (C-Media Inc) R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2015-08-08] (Acronis International GmbH) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2016-06-01] (BitDefender LLC) R0 megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [64352 2016-10-05] (Avago Technologies) S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R2 NPF; C:\Windows\System32\drivers\npf.sys [47632 2009-10-20] (CACE Technologies, Inc.) R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_desktop_ref4i.inf_amd64_76fdd9d99c776baa\nvlddmkm.sys [14199352 2016-08-16] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) S3 PSSDKLBF; C:\Windows\system32\Drivers\pssdklbf.sys [65600 2015-08-08] (microOLAP Technologies LTD) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] () R1 RapportCerberus_1609053; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_1609053.sys [1181672 2016-09-28] (IBM Corp.) R1 RapportEI64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [567336 2016-09-12] (IBM Corp.) S3 RapportHades64; C:\Windows\System32\Drivers\RapportHades64.sys [236264 2016-09-12] (IBM Corp.) S3 RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [394584 2015-08-04] (IBM Corp.) S3 RapportPG64; C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [548968 2016-09-12] (IBM Corp.) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) R2 tib; C:\Windows\system32\DRIVERS\tib.sys [1058632 2015-08-08] (Acronis International GmbH) S2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [248648 2015-08-08] (Acronis International GmbH) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [520032 2016-06-29] (BitDefender S.R.L.) R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [462272 2016-09-07] (Check Point Software Technologies Ltd.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S3 dbx; system32\DRIVERS\dbx.sys [X] U3 idsvc; no ImagePath U3 iswSvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-10-13 22:59 - 2016-10-13 22:59 - 00033364 _____ C:\Users\John\Desktop\FRST.txt 2016-10-13 22:57 - 2016-10-13 22:57 - 00000000 ____D C:\Users\John\Desktop\FRST-OlderVersion 2016-10-13 22:36 - 2016-10-13 22:37 - 00005614 _____ C:\Users\John\Desktop\Rkill.txt 2016-10-13 22:35 - 2016-10-13 22:36 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\John\Desktop\rkill.exe 2016-10-13 22:34 - 2016-10-13 22:34 - 00000000 ____D C:\Users\John\Desktop\New folder 2016-10-13 14:32 - 2016-10-13 22:59 - 00000000 ____D C:\FRST 2016-10-13 14:23 - 2016-10-13 22:57 - 02406912 _____ (Farbar) C:\Users\John\Desktop\FRST64.exe 2016-10-13 13:39 - 2016-10-05 10:50 - 02256592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-10-13 13:39 - 2016-10-05 10:31 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll 2016-10-13 13:39 - 2016-10-05 10:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2016-10-13 13:39 - 2016-10-05 10:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll 2016-10-13 13:39 - 2016-10-05 10:27 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2016-10-13 13:39 - 2016-10-05 10:26 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll 2016-10-13 13:39 - 2016-10-05 10:25 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll 2016-10-13 13:39 - 2016-10-05 10:23 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll 2016-10-13 13:39 - 2016-10-05 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll 2016-10-13 13:39 - 2016-10-05 10:14 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-10-13 13:39 - 2016-10-05 10:14 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2016-10-13 13:39 - 2016-10-05 10:13 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2016-10-13 13:39 - 2016-10-05 10:09 - 07467520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-10-13 13:39 - 2016-10-05 10:09 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-10-13 13:39 - 2016-10-05 10:09 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2016-10-13 13:39 - 2016-10-05 10:08 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2016-10-13 13:39 - 2016-10-05 10:08 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2016-10-13 13:39 - 2016-10-05 10:07 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll 2016-10-13 13:39 - 2016-10-05 10:07 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2016-10-13 13:39 - 2016-10-05 10:06 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2016-10-13 13:39 - 2016-10-05 10:06 - 02254336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-10-13 13:39 - 2016-10-05 10:06 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-10-13 13:39 - 2016-10-05 10:06 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-10-13 13:39 - 2016-10-05 10:06 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2016-10-13 13:39 - 2016-10-05 10:06 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2016-10-13 13:38 - 2016-10-05 11:03 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-10-13 13:38 - 2016-10-05 10:51 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2016-10-13 13:38 - 2016-10-05 10:50 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2016-10-13 13:38 - 2016-10-05 10:49 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-10-13 13:38 - 2016-10-05 10:48 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2016-10-13 13:38 - 2016-10-05 10:46 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-10-13 13:38 - 2016-10-05 10:46 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-10-13 13:38 - 2016-10-05 10:46 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-10-13 13:38 - 2016-10-05 10:45 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-10-13 13:38 - 2016-10-05 10:41 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-10-13 13:38 - 2016-10-05 10:28 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll 2016-10-13 13:38 - 2016-10-05 10:27 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll 2016-10-13 13:38 - 2016-10-05 10:26 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2016-10-13 13:38 - 2016-10-05 10:26 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-10-13 13:38 - 2016-10-05 10:26 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll 2016-10-13 13:38 - 2016-10-05 10:26 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll 2016-10-13 13:38 - 2016-10-05 10:25 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2016-10-13 13:38 - 2016-10-05 10:25 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll 2016-10-13 13:38 - 2016-10-05 10:25 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll 2016-10-13 13:38 - 2016-10-05 10:24 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll 2016-10-13 13:38 - 2016-10-05 10:23 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2016-10-13 13:38 - 2016-10-05 10:23 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2016-10-13 13:38 - 2016-10-05 10:23 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2016-10-13 13:38 - 2016-10-05 10:21 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2016-10-13 13:38 - 2016-10-05 10:21 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll 2016-10-13 13:38 - 2016-10-05 10:21 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2016-10-13 13:38 - 2016-10-05 10:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2016-10-13 13:38 - 2016-10-05 10:18 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-10-13 13:38 - 2016-10-05 10:18 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll 2016-10-13 13:38 - 2016-10-05 10:16 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-10-13 13:38 - 2016-10-05 10:16 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-10-13 13:38 - 2016-10-05 10:15 - 07625728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-10-13 13:38 - 2016-10-05 10:15 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll 2016-10-13 13:38 - 2016-10-05 10:14 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-10-13 13:38 - 2016-10-05 10:13 - 12345856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-10-13 13:38 - 2016-10-05 10:11 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-10-13 13:38 - 2016-10-05 10:11 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-10-13 13:38 - 2016-10-05 10:11 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-10-13 13:38 - 2016-10-05 10:11 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2016-10-13 13:38 - 2016-10-05 10:10 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2016-10-13 13:38 - 2016-10-05 10:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll 2016-10-13 13:38 - 2016-10-05 10:09 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-10-13 13:38 - 2016-10-05 10:09 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2016-10-13 13:38 - 2016-10-05 10:08 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2016-10-13 13:38 - 2016-10-05 10:07 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-10-13 13:38 - 2016-10-05 10:07 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2016-10-13 13:38 - 2016-10-05 10:07 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2016-10-13 13:38 - 2016-10-05 10:07 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2016-10-13 13:38 - 2016-10-05 10:06 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2016-10-13 13:38 - 2016-10-05 10:06 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll 2016-10-13 13:38 - 2016-10-05 10:05 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2016-10-13 13:38 - 2016-10-05 10:05 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2016-10-13 13:31 - 2016-10-05 10:38 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2016-10-13 13:31 - 2016-10-05 10:38 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2016-10-13 13:31 - 2016-10-05 10:36 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2016-10-13 13:31 - 2016-10-05 10:35 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2016-10-13 13:31 - 2016-10-05 10:35 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-10-13 13:31 - 2016-10-05 10:35 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll 2016-10-13 13:31 - 2016-10-05 10:31 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2016-10-13 13:31 - 2016-10-05 10:31 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll 2016-10-13 13:31 - 2016-10-05 10:31 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll 2016-10-13 13:31 - 2016-10-05 10:28 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2016-10-13 13:31 - 2016-10-05 10:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-10-13 13:31 - 2016-10-05 10:18 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-10-13 13:31 - 2016-10-05 10:17 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-10-13 13:31 - 2016-10-05 10:17 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2016-10-13 13:31 - 2016-10-05 10:15 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-10-13 13:31 - 2016-10-05 10:15 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-10-13 13:31 - 2016-10-05 10:15 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2016-10-13 13:31 - 2016-10-05 10:13 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2016-10-13 13:31 - 2016-10-05 10:11 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2016-10-13 13:31 - 2016-10-05 01:01 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml 2016-10-13 13:30 - 2016-10-05 11:33 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2016-10-13 13:30 - 2016-10-05 11:31 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-10-13 13:30 - 2016-10-05 11:30 - 07812448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-10-13 13:30 - 2016-10-05 11:22 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2016-10-13 13:30 - 2016-10-05 11:17 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2016-10-13 13:30 - 2016-10-05 11:13 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-10-13 13:30 - 2016-10-05 11:13 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2016-10-13 13:30 - 2016-10-05 11:12 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-10-13 13:30 - 2016-10-05 11:12 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-10-13 13:30 - 2016-10-05 11:09 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-10-13 13:30 - 2016-10-05 11:09 - 04129928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-10-13 13:30 - 2016-10-05 11:09 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-10-13 13:30 - 2016-10-05 11:09 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-10-13 13:30 - 2016-10-05 11:08 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2016-10-13 13:30 - 2016-10-05 11:04 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2016-10-13 13:30 - 2016-10-05 11:04 - 00628032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-10-13 13:30 - 2016-10-05 10:44 - 22568960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-10-13 13:30 - 2016-10-05 10:36 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll 2016-10-13 13:30 - 2016-10-05 10:35 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2016-10-13 13:30 - 2016-10-05 10:34 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2016-10-13 13:30 - 2016-10-05 10:33 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2016-10-13 13:30 - 2016-10-05 10:32 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2016-10-13 13:30 - 2016-10-05 10:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll 2016-10-13 13:30 - 2016-10-05 10:32 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll 2016-10-13 13:30 - 2016-10-05 10:31 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll 2016-10-13 13:30 - 2016-10-05 10:30 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2016-10-13 13:30 - 2016-10-05 10:29 - 09129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-10-13 13:30 - 2016-10-05 10:29 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-10-13 13:30 - 2016-10-05 10:29 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll 2016-10-13 13:30 - 2016-10-05 10:29 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2016-10-13 13:30 - 2016-10-05 10:28 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2016-10-13 13:30 - 2016-10-05 10:27 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2016-10-13 13:30 - 2016-10-05 10:26 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-10-13 13:30 - 2016-10-05 10:26 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-10-13 13:30 - 2016-10-05 10:25 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2016-10-13 13:30 - 2016-10-05 10:24 - 13434368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-10-13 13:30 - 2016-10-05 10:23 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2016-10-13 13:30 - 2016-10-05 10:23 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll 2016-10-13 13:30 - 2016-10-05 10:22 - 13081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-10-13 13:30 - 2016-10-05 10:22 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-10-13 13:30 - 2016-10-05 10:22 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-10-13 13:30 - 2016-10-05 10:22 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2016-10-13 13:30 - 2016-10-05 10:21 - 08075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-10-13 13:30 - 2016-10-05 10:21 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2016-10-13 13:30 - 2016-10-05 10:20 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2016-10-13 13:30 - 2016-10-05 10:20 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2016-10-13 13:30 - 2016-10-05 10:19 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2016-10-13 13:30 - 2016-10-05 10:19 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2016-10-13 13:30 - 2016-10-05 10:18 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-10-13 13:30 - 2016-10-05 10:18 - 00911872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2016-10-13 13:30 - 2016-10-05 10:18 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-10-13 13:30 - 2016-10-05 10:17 - 08126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-10-13 13:30 - 2016-10-05 10:17 - 01493504 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-10-13 13:30 - 2016-10-05 10:16 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2016-10-13 13:30 - 2016-10-05 10:16 - 04747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-10-13 13:30 - 2016-10-05 10:16 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll 2016-10-13 13:30 - 2016-10-05 10:16 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2016-10-13 13:30 - 2016-10-05 10:15 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll 2016-10-13 13:30 - 2016-10-05 10:15 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2016-10-13 13:30 - 2016-10-05 10:15 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2016-10-13 13:30 - 2016-10-05 10:15 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 02667520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 01778176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2016-10-13 13:30 - 2016-10-05 10:14 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2016-10-13 13:30 - 2016-10-05 10:12 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2016-10-13 13:30 - 2016-10-05 10:12 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2016-10-13 13:30 - 2016-10-05 10:12 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2016-10-13 13:30 - 2016-09-07 06:34 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2016-10-13 13:29 - 2016-10-05 11:34 - 01051104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-10-13 13:29 - 2016-10-05 11:34 - 00894088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-10-13 13:29 - 2016-10-05 11:31 - 01353768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-10-13 13:29 - 2016-10-05 11:31 - 01172472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-10-13 13:29 - 2016-10-05 11:13 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2016-10-13 13:29 - 2016-10-05 11:12 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2016-10-13 13:29 - 2016-10-05 11:09 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys 2016-10-13 13:29 - 2016-10-05 10:35 - 00327680 _____ C:\WINDOWS\system32\wc_storage.dll 2016-10-13 13:29 - 2016-10-05 10:34 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2016-10-13 13:29 - 2016-10-05 10:33 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll 2016-10-13 13:29 - 2016-10-05 10:33 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-10-13 13:29 - 2016-10-05 10:33 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2016-10-13 13:29 - 2016-10-05 10:32 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2016-10-13 13:29 - 2016-10-05 10:31 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2016-10-13 13:29 - 2016-10-05 10:31 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2016-10-13 13:29 - 2016-10-05 10:29 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2016-10-13 13:29 - 2016-10-05 10:28 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2016-10-13 13:29 - 2016-10-05 10:24 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2016-10-13 13:29 - 2016-10-05 10:21 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll 2016-10-13 13:29 - 2016-10-05 10:19 - 02265088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-10-13 13:29 - 2016-10-05 10:19 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2016-10-13 13:29 - 2016-10-05 10:15 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2016-10-13 13:28 - 2016-10-05 11:35 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2016-10-13 13:28 - 2016-10-05 11:16 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2016-10-13 12:44 - 2016-10-13 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-10-10 19:30 - 2016-10-10 19:30 - 00074352 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2016-10-10 19:30 - 2016-10-10 19:30 - 00074352 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2016-10-10 19:30 - 2016-10-10 19:30 - 00074352 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2016-10-10 19:30 - 2016-10-10 19:30 - 00038000 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2016-10-09 14:35 - 2016-10-09 14:35 - 00001181 _____ C:\Users\John\Desktop\scan.txt 2016-10-09 13:30 - 2016-10-09 13:30 - 00000512 _____ C:\Users\John\Desktop\MBR.dat 2016-10-09 12:47 - 2016-10-09 12:47 - 01439728 _____ C:\Users\John\Documents\zapref.xml 2016-10-05 17:46 - 2016-10-05 17:46 - 00000000 ____D C:\Users\John\Downloads\P8P67-LE-ASUS-3801 2016-10-05 17:44 - 2016-10-05 17:44 - 00000000 ____D C:\Users\John\Downloads\Bupdater_V130 2016-10-05 17:41 - 2016-10-05 17:41 - 00039145 _____ C:\Users\John\Downloads\Bupdater_V130.zip 2016-10-05 17:36 - 2016-10-05 17:36 - 03224096 _____ C:\Users\John\Downloads\P8P67-LE-ASUS-3801.zip 2016-10-05 16:14 - 2016-10-05 17:31 - 00000000 _____ C:\WINDOWS\Path.idx 2016-10-05 16:11 - 2016-10-05 16:12 - 01107904 _____ C:\WINDOWS\PE_Rom.dll 2016-10-04 20:02 - 2016-10-04 20:02 - 00001033 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Free.lnk 2016-10-04 20:02 - 2016-10-04 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.1 2016-10-04 20:02 - 2015-08-11 12:22 - 03067392 _____ C:\WINDOWS\system32\pwNative.exe 2016-10-04 20:02 - 2013-09-30 15:26 - 00019152 ____N C:\WINDOWS\system32\pwdrvio.sys 2016-10-04 20:02 - 2013-09-30 15:26 - 00012504 ____N C:\WINDOWS\system32\pwdspio.sys 2016-10-04 20:01 - 2016-10-04 20:02 - 00000000 ____D C:\Program Files\MiniTool Partition Wizard Free 9.1 2016-10-03 22:12 - 2016-10-03 22:12 - 00001112 _____ C:\Users\John\Desktop\ISO2Disc.lnk 2016-10-03 22:12 - 2016-10-03 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO2Disc 2016-10-03 22:12 - 2016-10-03 22:12 - 00000000 ____D C:\Program Files (x86)\Top Password 2016-10-03 17:12 - 2016-10-13 21:01 - 00275760 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-10-03 15:59 - 2016-10-03 16:09 - 00000000 ____D C:\Users\John\Downloads\temp 2016-10-03 15:43 - 2016-10-03 15:44 - 00001084 _____ C:\Users\John\Desktop\New Text Document (2).txt 2016-10-03 15:10 - 2016-10-03 15:10 - 00000871 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-09-30 20:20 - 2016-09-30 20:20 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini 2016-09-30 20:19 - 2016-09-30 20:19 - 00433574 _____ C:\WINDOWS\system32\Drivers\vsconfig.xml 2016-09-30 20:19 - 2016-09-30 20:19 - 00000000 _____ C:\WINDOWS\system32\Drivers\SETDD46.tmp 2016-09-30 20:19 - 2016-09-07 04:47 - 00462272 _____ (Check Point Software Technologies Ltd.) C:\WINDOWS\system32\Drivers\vsdatant.sys 2016-09-30 20:18 - 2016-09-30 20:18 - 00000778 _____ C:\Users\Public\Desktop\ZoneAlarm Security.lnk 2016-09-30 20:18 - 2016-09-30 20:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point 2016-09-30 20:16 - 2016-09-30 20:18 - 00000000 ____D C:\Program Files (x86)\CheckPoint 2016-09-30 20:16 - 2016-09-30 20:16 - 00000000 ____D C:\ProgramData\CheckPoint 2016-09-30 20:01 - 2016-09-30 20:01 - 00010964 _____ C:\Users\John\Documents\cc_20160930_200115.reg 2016-09-30 19:41 - 2016-09-30 19:49 - 03692256 _____ (Check Point Software Technologies Ltd.) C:\Users\John\Downloads\CLEAN.exe 2016-09-30 13:24 - 2016-09-15 18:27 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2016-09-30 13:24 - 2016-09-15 18:22 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-09-30 13:24 - 2016-09-15 18:21 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2016-09-30 13:24 - 2016-09-15 18:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2016-09-30 13:24 - 2016-09-15 18:15 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2016-09-30 13:24 - 2016-09-15 18:03 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll 2016-09-30 13:24 - 2016-09-15 17:56 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll 2016-09-30 13:24 - 2016-09-15 17:55 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2016-09-30 13:24 - 2016-09-15 17:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2016-09-30 13:24 - 2016-09-15 17:42 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-09-30 13:24 - 2016-09-15 17:40 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-09-30 13:24 - 2016-09-15 17:37 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2016-09-30 13:24 - 2016-09-15 17:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2016-09-30 13:24 - 2016-09-15 17:35 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2016-09-30 13:24 - 2016-09-15 17:32 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2016-09-30 13:24 - 2016-09-15 17:27 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2016-09-30 13:24 - 2016-09-15 17:23 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2016-09-30 13:24 - 2016-09-15 17:21 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2016-09-30 13:24 - 2016-09-15 17:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2016-09-30 13:24 - 2016-09-15 17:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2016-09-30 13:24 - 2016-09-15 17:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2016-09-30 13:24 - 2016-09-15 17:19 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2016-09-30 13:23 - 2016-09-15 19:14 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2016-09-30 13:23 - 2016-09-15 18:40 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2016-09-30 13:23 - 2016-09-15 18:35 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-09-30 13:23 - 2016-09-15 18:35 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2016-09-30 13:23 - 2016-09-15 18:33 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2016-09-30 13:23 - 2016-09-15 18:32 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-09-30 13:23 - 2016-09-15 18:30 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2016-09-30 13:23 - 2016-09-15 18:30 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2016-09-30 13:23 - 2016-09-15 18:29 - 01377016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2016-09-30 13:23 - 2016-09-15 18:29 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2016-09-30 13:23 - 2016-09-15 18:29 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2016-09-30 13:23 - 2016-09-15 18:29 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2016-09-30 13:23 - 2016-09-15 18:29 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2016-09-30 13:23 - 2016-09-15 18:29 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2016-09-30 13:23 - 2016-09-15 18:29 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys 2016-09-30 13:23 - 2016-09-15 18:28 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2016-09-30 13:23 - 2016-09-15 18:27 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2016-09-30 13:23 - 2016-09-15 18:27 - 00553312 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-09-30 13:23 - 2016-09-15 18:26 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2016-09-30 13:23 - 2016-09-15 18:25 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-09-30 13:23 - 2016-09-15 18:25 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2016-09-30 13:23 - 2016-09-15 18:24 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2016-09-30 13:23 - 2016-09-15 18:23 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2016-09-30 13:23 - 2016-09-15 18:23 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-09-30 13:23 - 2016-09-15 18:22 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2016-09-30 13:23 - 2016-09-15 18:21 - 01218912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-09-30 13:23 - 2016-09-15 18:20 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2016-09-30 13:23 - 2016-09-15 18:19 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2016-09-30 13:23 - 2016-09-15 18:18 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2016-09-30 13:23 - 2016-09-15 18:18 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2016-09-30 13:23 - 2016-09-15 18:18 - 00955528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-09-30 13:23 - 2016-09-15 18:18 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2016-09-30 13:23 - 2016-09-15 18:18 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-09-30 13:23 - 2016-09-15 18:18 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2016-09-30 13:23 - 2016-09-15 18:16 - 02190176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-09-30 13:23 - 2016-09-15 18:16 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2016-09-30 13:23 - 2016-09-15 18:16 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-09-30 13:23 - 2016-09-15 18:16 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2016-09-30 13:23 - 2016-09-15 18:16 - 00657760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-09-30 13:23 - 2016-09-15 18:16 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2016-09-30 13:23 - 2016-09-15 18:16 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-09-30 13:23 - 2016-09-15 18:16 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-09-30 13:23 - 2016-09-15 18:15 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys 2016-09-30 13:23 - 2016-09-15 18:15 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2016-09-30 13:23 - 2016-09-15 18:15 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2016-09-30 13:23 - 2016-09-15 18:14 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-09-30 13:23 - 2016-09-15 18:14 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2016-09-30 13:23 - 2016-09-15 18:13 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-09-30 13:23 - 2016-09-15 18:13 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll 2016-09-30 13:23 - 2016-09-15 18:12 - 08158672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-09-30 13:23 - 2016-09-15 18:12 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2016-09-30 13:23 - 2016-09-15 18:11 - 04673296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-09-30 13:23 - 2016-09-15 18:11 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-09-30 13:23 - 2016-09-15 18:10 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-09-30 13:23 - 2016-09-15 18:10 - 00918848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2016-09-30 13:23 - 2016-09-15 18:06 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-09-30 13:23 - 2016-09-15 18:06 - 01046880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-09-30 13:23 - 2016-09-15 18:06 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-09-30 13:23 - 2016-09-15 18:06 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2016-09-30 13:23 - 2016-09-15 18:06 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2016-09-30 13:23 - 2016-09-15 18:06 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-09-30 13:23 - 2016-09-15 18:03 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2016-09-30 13:23 - 2016-09-15 18:03 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2016-09-30 13:23 - 2016-09-15 18:03 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll 2016-09-30 13:23 - 2016-09-15 18:02 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll 2016-09-30 13:23 - 2016-09-15 18:01 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll 2016-09-30 13:23 - 2016-09-15 18:00 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll 2016-09-30 13:23 - 2016-09-15 18:00 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll 2016-09-30 13:23 - 2016-09-15 17:59 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll 2016-09-30 13:23 - 2016-09-15 17:58 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2016-09-30 13:23 - 2016-09-15 17:58 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll 2016-09-30 13:23 - 2016-09-15 17:58 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2016-09-30 13:23 - 2016-09-15 17:57 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll 2016-09-30 13:23 - 2016-09-15 17:57 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2016-09-30 13:23 - 2016-09-15 17:57 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2016-09-30 13:23 - 2016-09-15 17:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-09-30 13:23 - 2016-09-15 17:56 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2016-09-30 13:23 - 2016-09-15 17:56 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-09-30 13:23 - 2016-09-15 17:56 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2016-09-30 13:23 - 2016-09-15 17:56 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll 2016-09-30 13:23 - 2016-09-15 17:56 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2016-09-30 13:23 - 2016-09-15 17:56 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2016-09-30 13:23 - 2016-09-15 17:55 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll 2016-09-30 13:23 - 2016-09-15 17:55 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll 2016-09-30 13:23 - 2016-09-15 17:54 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll 2016-09-30 13:23 - 2016-09-15 17:54 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll 2016-09-30 13:23 - 2016-09-15 17:54 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2016-09-30 13:23 - 2016-09-15 17:53 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2016-09-30 13:23 - 2016-09-15 17:53 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2016-09-30 13:23 - 2016-09-15 17:53 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2016-09-30 13:23 - 2016-09-15 17:52 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-09-30 13:23 - 2016-09-15 17:52 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll 2016-09-30 13:23 - 2016-09-15 17:52 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2016-09-30 13:23 - 2016-09-15 17:52 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2016-09-30 13:23 - 2016-09-15 17:51 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2016-09-30 13:23 - 2016-09-15 17:51 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll 2016-09-30 13:23 - 2016-09-15 17:50 - 07219200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-09-30 13:23 - 2016-09-15 17:50 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll 2016-09-30 13:23 - 2016-09-15 17:49 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2016-09-30 13:23 - 2016-09-15 17:49 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2016-09-30 13:23 - 2016-09-15 17:49 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-09-30 13:23 - 2016-09-15 17:47 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll 2016-09-30 13:23 - 2016-09-15 17:47 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-09-30 13:23 - 2016-09-15 17:47 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll 2016-09-30 13:23 - 2016-09-15 17:46 - 03305984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-09-30 13:23 - 2016-09-15 17:46 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2016-09-30 13:23 - 2016-09-15 17:46 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2016-09-30 13:23 - 2016-09-15 17:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll 2016-09-30 13:23 - 2016-09-15 17:45 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll 2016-09-30 13:23 - 2016-09-15 17:44 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL 2016-09-30 13:23 - 2016-09-15 17:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll 2016-09-30 13:23 - 2016-09-15 17:43 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll 2016-09-30 13:23 - 2016-09-15 17:43 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll 2016-09-30 13:23 - 2016-09-15 17:43 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2016-09-30 13:23 - 2016-09-15 17:43 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2016-09-30 13:23 - 2016-09-15 17:43 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2016-09-30 13:23 - 2016-09-15 17:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2016-09-30 13:23 - 2016-09-15 17:42 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-09-30 13:23 - 2016-09-15 17:42 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2016-09-30 13:23 - 2016-09-15 17:42 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2016-09-30 13:23 - 2016-09-15 17:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys 2016-09-30 13:23 - 2016-09-15 17:41 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2016-09-30 13:23 - 2016-09-15 17:41 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll 2016-09-30 13:23 - 2016-09-15 17:41 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-09-30 13:23 - 2016-09-15 17:41 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll 2016-09-30 13:23 - 2016-09-15 17:41 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2016-09-30 13:23 - 2016-09-15 17:40 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2016-09-30 13:23 - 2016-09-15 17:39 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-09-30 13:23 - 2016-09-15 17:39 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-09-30 13:23 - 2016-09-15 17:38 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2016-09-30 13:23 - 2016-09-15 17:38 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll 2016-09-30 13:23 - 2016-09-15 17:38 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll 2016-09-30 13:23 - 2016-09-15 17:37 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe 2016-09-30 13:23 - 2016-09-15 17:36 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2016-09-30 13:23 - 2016-09-15 17:36 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll 2016-09-30 13:23 - 2016-09-15 17:36 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe 2016-09-30 13:23 - 2016-09-15 17:35 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll 2016-09-30 13:23 - 2016-09-15 17:35 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2016-09-30 13:23 - 2016-09-15 17:34 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll 2016-09-30 13:23 - 2016-09-15 17:34 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll 2016-09-30 13:23 - 2016-09-15 17:34 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll 2016-09-30 13:23 - 2016-09-15 17:34 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2016-09-30 13:23 - 2016-09-15 17:34 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2016-09-30 13:23 - 2016-09-15 17:34 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2016-09-30 13:23 - 2016-09-15 17:33 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll 2016-09-30 13:23 - 2016-09-15 17:33 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-09-30 13:23 - 2016-09-15 17:33 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2016-09-30 13:23 - 2016-09-15 17:33 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2016-09-30 13:23 - 2016-09-15 17:33 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll 2016-09-30 13:23 - 2016-09-15 17:32 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2016-09-30 13:23 - 2016-09-15 17:32 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2016-09-30 13:23 - 2016-09-15 17:31 - 01912320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2016-09-30 13:23 - 2016-09-15 17:31 - 01553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2016-09-30 13:23 - 2016-09-15 17:31 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2016-09-30 13:23 - 2016-09-15 17:31 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2016-09-30 13:23 - 2016-09-15 17:30 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll 2016-09-30 13:23 - 2016-09-15 17:30 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll 2016-09-30 13:23 - 2016-09-15 17:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2016-09-30 13:23 - 2016-09-15 17:30 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll 2016-09-30 13:23 - 2016-09-15 17:29 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll 2016-09-30 13:23 - 2016-09-15 17:29 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-09-30 13:23 - 2016-09-15 17:29 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll 2016-09-30 13:23 - 2016-09-15 17:29 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2016-09-30 13:23 - 2016-09-15 17:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe 2016-09-30 13:23 - 2016-09-15 17:28 - 03288064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2016-09-30 13:23 - 2016-09-15 17:28 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2016-09-30 13:23 - 2016-09-15 17:28 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll 2016-09-30 13:23 - 2016-09-15 17:28 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll 2016-09-30 13:23 - 2016-09-15 17:27 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe 2016-09-30 13:23 - 2016-09-15 17:27 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe 2016-09-30 13:23 - 2016-09-15 17:27 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll 2016-09-30 13:23 - 2016-09-15 17:26 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2016-09-30 13:23 - 2016-09-15 17:26 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll 2016-09-30 13:23 - 2016-09-15 17:26 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2016-09-30 13:23 - 2016-09-15 17:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll 2016-09-30 13:23 - 2016-09-15 17:25 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll 2016-09-30 13:23 - 2016-09-15 17:25 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-09-30 13:23 - 2016-09-15 17:25 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2016-09-30 13:23 - 2016-09-15 17:25 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe 2016-09-30 13:23 - 2016-09-15 17:25 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll 2016-09-30 13:23 - 2016-09-15 17:24 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll 2016-09-30 13:23 - 2016-09-15 17:23 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-09-30 13:23 - 2016-09-15 17:23 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-09-30 13:23 - 2016-09-15 17:23 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-09-30 13:23 - 2016-09-15 17:23 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2016-09-30 13:23 - 2016-09-15 17:23 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2016-09-30 13:23 - 2016-09-15 17:23 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2016-09-30 13:23 - 2016-09-15 17:22 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2016-09-30 13:23 - 2016-09-15 17:22 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2016-09-30 13:23 - 2016-09-15 17:22 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2016-09-30 13:23 - 2016-09-15 17:22 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-09-30 13:23 - 2016-09-15 17:22 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll 2016-09-30 13:23 - 2016-09-15 17:21 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll 2016-09-30 13:23 - 2016-09-15 17:21 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-09-30 13:23 - 2016-09-15 17:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-09-30 13:23 - 2016-09-15 17:21 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-09-30 13:23 - 2016-09-15 17:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll 2016-09-30 13:23 - 2016-09-15 17:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2016-09-30 13:23 - 2016-09-15 17:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll 2016-09-30 13:23 - 2016-09-15 17:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll 2016-09-30 13:23 - 2016-09-15 17:19 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2016-09-30 13:23 - 2016-09-15 17:19 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2016-09-30 13:23 - 2016-09-15 17:19 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2016-09-30 13:23 - 2016-09-15 17:19 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2016-09-30 13:23 - 2016-09-15 17:19 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-09-30 13:23 - 2016-09-15 17:18 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-09-30 13:23 - 2016-09-15 17:16 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2016-09-30 13:23 - 2016-09-15 17:16 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2016-09-30 13:23 - 2016-09-15 17:16 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2016-09-30 13:23 - 2016-09-15 17:16 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe 2016-09-30 13:23 - 2016-08-05 09:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll 2016-09-30 13:22 - 2016-09-15 18:37 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-09-30 13:22 - 2016-09-15 18:37 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2016-09-30 13:22 - 2016-09-15 18:37 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll 2016-09-30 13:22 - 2016-09-15 18:29 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll 2016-09-30 13:22 - 2016-09-15 18:29 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2016-09-30 13:22 - 2016-09-15 18:29 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys 2016-09-30 13:22 - 2016-09-15 18:27 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-09-30 13:22 - 2016-09-15 18:27 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2016-09-30 13:22 - 2016-09-15 18:25 - 00340320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-09-30 13:22 - 2016-09-15 18:25 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe 2016-09-30 13:22 - 2016-09-15 18:22 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-09-30 13:22 - 2016-09-15 18:22 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2016-09-30 13:22 - 2016-09-15 18:21 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2016-09-30 13:22 - 2016-09-15 18:18 - 06654616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-09-30 13:22 - 2016-09-15 18:17 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-09-30 13:22 - 2016-09-15 18:16 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-09-30 13:22 - 2016-09-15 18:15 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2016-09-30 13:22 - 2016-09-15 18:15 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-09-30 13:22 - 2016-09-15 18:15 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2016-09-30 13:22 - 2016-09-15 18:14 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2016-09-30 13:22 - 2016-09-15 18:14 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2016-09-30 13:22 - 2016-09-15 18:14 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2016-09-30 13:22 - 2016-09-15 18:14 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi 2016-09-30 13:22 - 2016-09-15 18:14 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2016-09-30 13:22 - 2016-09-15 18:14 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2016-09-30 13:22 - 2016-09-15 18:12 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2016-09-30 13:22 - 2016-09-15 18:11 - 01990640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-09-30 13:22 - 2016-09-15 18:11 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2016-09-30 13:22 - 2016-09-15 18:11 - 01066104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-09-30 13:22 - 2016-09-15 18:11 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2016-09-30 13:22 - 2016-09-15 18:11 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2016-09-30 13:22 - 2016-09-15 18:11 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll 2016-09-30 13:22 - 2016-09-15 18:08 - 05683712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-09-30 13:22 - 2016-09-15 18:07 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2016-09-30 13:22 - 2016-09-15 18:07 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-09-30 13:22 - 2016-09-15 18:07 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll 2016-09-30 13:22 - 2016-09-15 18:06 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2016-09-30 13:22 - 2016-09-15 18:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll 2016-09-30 13:22 - 2016-09-15 18:00 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2016-09-30 13:22 - 2016-09-15 18:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-09-30 13:22 - 2016-09-15 17:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2016-09-30 13:22 - 2016-09-15 17:59 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll 2016-09-30 13:22 - 2016-09-15 17:58 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2016-09-30 13:22 - 2016-09-15 17:58 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2016-09-30 13:22 - 2016-09-15 17:58 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll 2016-09-30 13:22 - 2016-09-15 17:58 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll 2016-09-30 13:22 - 2016-09-15 17:58 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll 2016-09-30 13:22 - 2016-09-15 17:57 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2016-09-30 13:22 - 2016-09-15 17:57 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll 2016-09-30 13:22 - 2016-09-15 17:57 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll 2016-09-30 13:22 - 2016-09-15 17:56 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2016-09-30 13:22 - 2016-09-15 17:56 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2016-09-30 13:22 - 2016-09-15 17:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2016-09-30 13:22 - 2016-09-15 17:56 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2016-09-30 13:22 - 2016-09-15 17:55 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe 2016-09-30 13:22 - 2016-09-15 17:54 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll 2016-09-30 13:22 - 2016-09-15 17:54 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-09-30 13:22 - 2016-09-15 17:54 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2016-09-30 13:22 - 2016-09-15 17:53 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2016-09-30 13:22 - 2016-09-15 17:53 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-09-30 13:22 - 2016-09-15 17:52 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2016-09-30 13:22 - 2016-09-15 17:52 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2016-09-30 13:22 - 2016-09-15 17:52 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll 2016-09-30 13:22 - 2016-09-15 17:52 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2016-09-30 13:22 - 2016-09-15 17:51 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2016-09-30 13:22 - 2016-09-15 17:50 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll 2016-09-30 13:22 - 2016-09-15 17:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll 2016-09-30 13:22 - 2016-09-15 17:48 - 01321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2016-09-30 13:22 - 2016-09-15 17:48 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2016-09-30 13:22 - 2016-09-15 17:48 - 01112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2016-09-30 13:22 - 2016-09-15 17:47 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll 2016-09-30 13:22 - 2016-09-15 17:46 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll 2016-09-30 13:22 - 2016-09-15 17:46 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll 2016-09-30 13:22 - 2016-09-15 17:46 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2016-09-30 13:22 - 2016-09-15 17:45 - 02749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2016-09-30 13:22 - 2016-09-15 17:45 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2016-09-30 13:22 - 2016-09-15 17:45 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll 2016-09-30 13:22 - 2016-09-15 17:44 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll 2016-09-30 13:22 - 2016-09-15 17:44 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll 2016-09-30 13:22 - 2016-09-15 17:44 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2016-09-30 13:22 - 2016-09-15 17:43 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2016-09-30 13:22 - 2016-09-15 17:43 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2016-09-30 13:22 - 2016-09-15 17:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll 2016-09-30 13:22 - 2016-09-15 17:43 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2016-09-30 13:22 - 2016-09-15 17:43 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2016-09-30 13:22 - 2016-09-15 17:42 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll 2016-09-30 13:22 - 2016-09-15 17:42 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll 2016-09-30 13:22 - 2016-09-15 17:41 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2016-09-30 13:22 - 2016-09-15 17:41 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll 2016-09-30 13:22 - 2016-09-15 17:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2016-09-30 13:22 - 2016-09-15 17:41 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll 2016-09-30 13:22 - 2016-09-15 17:41 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-09-30 13:22 - 2016-09-15 17:40 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2016-09-30 13:22 - 2016-09-15 17:40 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll 2016-09-30 13:22 - 2016-09-15 17:39 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll 2016-09-30 13:22 - 2016-09-15 17:39 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll 2016-09-30 13:22 - 2016-09-15 17:39 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2016-09-30 13:22 - 2016-09-15 17:39 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2016-09-30 13:22 - 2016-09-15 17:39 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2016-09-30 13:22 - 2016-09-15 17:38 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll 2016-09-30 13:22 - 2016-09-15 17:38 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2016-09-30 13:22 - 2016-09-15 17:37 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll 2016-09-30 13:22 - 2016-09-15 17:37 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll 2016-09-30 13:22 - 2016-09-15 17:37 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll 2016-09-30 13:22 - 2016-09-15 17:37 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll 2016-09-30 13:22 - 2016-09-15 17:37 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-09-30 13:22 - 2016-09-15 17:36 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2016-09-30 13:22 - 2016-09-15 17:36 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2016-09-30 13:22 - 2016-09-15 17:36 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-09-30 13:22 - 2016-09-15 17:36 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2016-09-30 13:22 - 2016-09-15 17:36 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2016-09-30 13:22 - 2016-09-15 17:36 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2016-09-30 13:22 - 2016-09-15 17:35 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-09-30 13:22 - 2016-09-15 17:35 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll 2016-09-30 13:22 - 2016-09-15 17:35 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2016-09-30 13:22 - 2016-09-15 17:35 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2016-09-30 13:22 - 2016-09-15 17:35 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll 2016-09-30 13:22 - 2016-09-15 17:34 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll 2016-09-30 13:22 - 2016-09-15 17:33 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll 2016-09-30 13:22 - 2016-09-15 17:33 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2016-09-30 13:22 - 2016-09-15 17:32 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2016-09-30 13:22 - 2016-09-15 17:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll 2016-09-30 13:22 - 2016-09-15 17:30 - 03776512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-09-30 13:22 - 2016-09-15 17:30 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2016-09-30 13:22 - 2016-09-15 17:30 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll 2016-09-30 13:22 - 2016-09-15 17:30 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2016-09-30 13:22 - 2016-09-15 17:30 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll 2016-09-30 13:22 - 2016-09-15 17:29 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2016-09-30 13:22 - 2016-09-15 17:28 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2016-09-30 13:22 - 2016-09-15 17:27 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-09-30 13:22 - 2016-09-15 17:27 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2016-09-30 13:22 - 2016-09-15 17:27 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL 2016-09-30 13:22 - 2016-09-15 17:26 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll 2016-09-30 13:22 - 2016-09-15 17:25 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2016-09-30 13:22 - 2016-09-15 17:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-09-30 13:22 - 2016-09-15 17:24 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2016-09-30 13:22 - 2016-09-15 17:24 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2016-09-30 13:22 - 2016-09-15 17:24 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2016-09-30 13:22 - 2016-09-15 17:24 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll 2016-09-30 13:22 - 2016-09-15 17:24 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2016-09-30 13:22 - 2016-09-15 17:23 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2016-09-30 13:22 - 2016-09-15 17:23 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2016-09-30 13:22 - 2016-09-15 17:23 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll 2016-09-30 13:22 - 2016-09-15 17:22 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-09-30 13:22 - 2016-09-15 17:22 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2016-09-30 13:22 - 2016-09-15 17:22 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-09-30 13:22 - 2016-09-15 17:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-09-30 13:22 - 2016-09-15 17:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2016-09-30 13:22 - 2016-09-15 17:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2016-09-30 13:22 - 2016-09-15 17:19 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll 2016-09-30 13:22 - 2016-09-15 17:18 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll 2016-09-30 13:22 - 2016-09-15 17:17 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-09-30 13:22 - 2016-09-15 17:17 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll 2016-09-30 13:22 - 2016-09-15 17:16 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2016-09-30 13:22 - 2016-09-15 17:16 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2016-09-30 13:22 - 2016-08-06 04:34 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll 2016-09-30 13:22 - 2016-08-06 04:33 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll 2016-09-30 13:22 - 2016-08-05 09:29 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2016-09-29 16:10 - 2016-09-29 16:16 - 00000000 ____D C:\Users\John\AppData\Local\Mozilla 2016-09-29 16:10 - 2016-09-29 16:10 - 00001236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-09-29 16:10 - 2016-09-29 16:10 - 00000000 ____D C:\Users\John\AppData\Roaming\Mozilla 2016-09-29 16:09 - 2016-09-29 16:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-09-29 15:42 - 2016-09-29 15:42 - 00075464 _____ C:\Users\John\Documents\cc_20160929_154200.reg 2016-09-29 15:35 - 2016-09-29 15:35 - 00019194 _____ C:\Users\John\Documents\cc_20160929_153506.reg 2016-09-29 15:32 - 2016-09-29 15:32 - 00126042 _____ C:\Users\John\Documents\cc_20160929_153205.reg 2016-09-29 15:24 - 2016-09-29 15:24 - 00003312 _____ C:\Users\John\Documents\cc_20160929_152446.reg 2016-09-29 14:48 - 2016-09-29 14:48 - 00106557 _____ C:\Users\John\Desktop\bookmarks-2016-09-29.json 2016-09-29 12:25 - 2016-09-29 12:26 - 86526255 _____ C:\Users\John\Downloads\wetransfer-19b77c.zip 2016-09-29 12:23 - 2016-09-29 12:24 - 264632007 _____ C:\Users\John\Downloads\wetransfer-8f8425.zip 2016-09-28 22:59 - 2016-09-28 16:10 - 00000000 ___DC C:\WINDOWS\Panther 2016-09-28 22:57 - 2016-10-03 22:56 - 00000000 ____D C:\Windows.old 2016-09-28 22:56 - 2016-09-28 22:56 - 17187840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 03435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02947072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2016-09-28 22:56 - 2016-09-28 22:56 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2016-09-28 22:56 - 2016-09-28 22:56 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02481768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02360832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02256224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02183792 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02107392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01966288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01853232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00959104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00773200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00601200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00409944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2016-09-28 22:56 - 2016-09-28 22:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00303968 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS 2016-09-28 22:56 - 2016-09-28 22:56 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys 2016-09-28 22:56 - 2016-09-28 22:56 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL 2016-09-28 22:56 - 2016-09-28 22:56 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2016-09-28 22:56 - 2016-09-28 22:56 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx 2016-09-28 22:56 - 2016-09-28 22:56 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx 2016-09-28 22:56 - 2016-09-28 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2016-09-28 22:51 - 2016-09-28 22:51 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2016-09-28 22:50 - 2016-10-04 17:57 - 00000000 ____D C:\WINDOWS\system32\msmq 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\Program Files\MSBuild 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-09-28 22:50 - 2016-09-28 22:50 - 00000000 ____D C:\inetpub 2016-09-28 22:49 - 2016-09-28 22:49 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys 2016-09-28 22:49 - 2016-05-25 23:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2016-09-28 22:49 - 2016-05-25 23:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2016-09-28 22:49 - 2016-05-25 23:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2016-09-28 22:49 - 2016-05-25 20:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2016-09-28 22:49 - 2016-05-25 20:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2016-09-28 22:49 - 2016-05-25 20:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2016-09-28 17:15 - 2016-09-28 17:15 - 00000000 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts 2016-09-28 17:14 - 2016-09-28 17:14 - 00000000 _____ C:\WINDOWS\system32\Drivers\SETA4B8.tmp 2016-09-28 17:06 - 2016-09-28 17:06 - 03537864 _____ (Check Point Software Technologies Ltd.) C:\Users\John\Downloads\zapSetupWeb_150_123_17051_en.exe 2016-09-28 16:37 - 2016-09-28 16:37 - 00523676 _____ C:\WINDOWS\Minidump\092816-29015-01.dmp 2016-09-28 16:22 - 2016-09-28 16:37 - 00000000 ____D C:\WINDOWS\Minidump 2016-09-28 16:22 - 2016-09-28 16:22 - 00578932 _____ C:\WINDOWS\Minidump\092816-35375-01.dmp 2016-09-28 16:13 - 2016-09-28 16:13 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2016-09-28 16:10 - 2016-09-28 16:56 - 00000000 ____D C:\Users\John\AppData\Local\ConnectedDevicesPlatform 2016-09-28 16:10 - 2016-09-28 16:10 - 00000020 ___SH C:\Users\John\ntuser.ini 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default\My Documents 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default\Documents\My Videos 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default\Documents\My Music 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures 2016-09-28 16:09 - 2016-09-28 16:09 - 00000000 _SHDL C:\Users\Default User\Documents\My Music 2016-09-28 16:07 - 2016-10-13 21:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-09-28 16:07 - 2016-10-13 11:46 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-09-28 16:07 - 2016-09-28 16:09 - 00011433 _____ C:\WINDOWS\diagwrn.xml 2016-09-28 16:07 - 2016-09-28 16:09 - 00011433 _____ C:\WINDOWS\diagerr.xml 2016-09-28 16:07 - 2016-09-28 16:07 - 00003594 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000UA 2016-09-28 16:07 - 2016-09-28 16:07 - 00003440 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2016-09-28 16:07 - 2016-09-28 16:07 - 00003434 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-09-28 16:07 - 2016-09-28 16:07 - 00003326 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000Core 2016-09-28 16:07 - 2016-09-28 16:07 - 00003290 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E890958D-90C0-4678-8121-510F0EE58B4A} 2016-09-28 16:07 - 2016-09-28 16:07 - 00003212 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2016-09-28 16:07 - 2016-09-28 16:07 - 00003210 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-09-28 16:07 - 2016-09-28 16:07 - 00003044 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-09-28 16:07 - 2016-09-28 16:07 - 00002668 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2016-09-28 16:07 - 2016-09-28 16:07 - 00002588 _____ C:\WINDOWS\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 2016-09-28 16:07 - 2016-09-28 16:07 - 00002376 _____ C:\WINDOWS\System32\Tasks\{1492063A-EE1E-40EB-9274-3A8246FC9A33} 2016-09-28 16:07 - 2016-09-28 16:07 - 00002340 _____ C:\WINDOWS\System32\Tasks\{FB416530-548B-44C6-B25D-6B50173AE2D8} 2016-09-28 16:07 - 2016-09-28 16:07 - 00002340 _____ C:\WINDOWS\System32\Tasks\{108B0377-3A66-480D-AFE2-C5412EA2D284} 2016-09-28 16:07 - 2016-09-28 16:07 - 00002314 _____ C:\WINDOWS\System32\Tasks\{98FB440B-0A63-43DC-B1CB-BB803E272EF0} 2016-09-28 16:07 - 2016-09-28 16:07 - 00002308 _____ C:\WINDOWS\System32\Tasks\{99B79590-55FB-485B-A0BA-B4449A595177} 2016-09-28 16:07 - 2016-09-28 16:07 - 00002244 _____ C:\WINDOWS\System32\Tasks\{297D8F4F-A92E-4F76-A775-FA31711B21C7} 2016-09-28 16:07 - 2016-09-28 16:07 - 00002234 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2016-09-28 16:07 - 2016-09-28 16:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD 2016-09-28 16:07 - 2016-09-28 16:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2016-09-28 16:07 - 2016-09-28 16:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS 2016-09-28 15:58 - 2016-09-28 15:58 - 00000000 ____D C:\ProgramData\USOShared 2016-09-28 14:11 - 2016-09-28 14:11 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-09-28 14:11 - 2016-09-28 14:11 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs 2016-09-28 14:11 - 2016-09-28 14:11 - 00000000 ____D C:\Users\Default\AppData\Local\Trusteer 2016-09-28 14:11 - 2016-09-28 14:11 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2016-09-28 14:11 - 2016-09-28 14:11 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs 2016-09-28 14:11 - 2016-09-28 14:11 - 00000000 ____D C:\Users\Default User\AppData\Local\Trusteer 2016-09-28 14:11 - 2016-09-28 14:11 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2016-09-28 14:08 - 2016-09-28 14:12 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2016-09-28 14:08 - 2016-09-28 14:08 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines 2016-09-28 14:06 - 2016-10-13 21:07 - 01133818 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-09-28 14:06 - 2016-10-04 20:11 - 00000000 ____D C:\Users\John 2016-09-28 14:06 - 2016-09-30 20:20 - 00000000 ____D C:\Users\DefaultAppPool 2016-09-28 14:06 - 2016-09-28 14:06 - 00968848 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\John\My Documents 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\John\Documents\My Videos 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\John\Documents\My Pictures 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\John\Documents\My Music 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\DefaultAppPool\My Documents 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Videos 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Pictures 2016-09-28 14:06 - 2016-09-28 14:06 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Music 2016-09-28 14:03 - 2016-10-13 21:01 - 00000000 ____D C:\ProgramData\NVIDIA 2016-09-28 14:03 - 2016-10-05 17:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-09-28 14:03 - 2016-10-05 17:51 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-09-28 14:03 - 2016-10-05 17:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-09-28 14:03 - 2016-09-28 14:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2016-09-28 14:03 - 2016-09-28 14:03 - 00000000 ____H C:\ProgramData\DP45977C.lfl 2016-09-28 14:03 - 2016-09-28 14:03 - 00000000 ____D C:\WINDOWS\system32\DAX2 2016-09-28 14:03 - 2016-08-11 13:27 - 06386048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-09-28 14:03 - 2016-08-11 13:27 - 02468288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-09-28 14:03 - 2016-08-11 13:27 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-09-28 14:03 - 2016-08-11 13:27 - 01365048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-09-28 14:03 - 2016-08-11 13:27 - 00548920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-09-28 14:03 - 2016-08-11 13:27 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-09-28 14:03 - 2016-08-11 13:27 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-09-28 14:03 - 2016-08-11 13:27 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-09-28 14:03 - 2016-08-09 17:06 - 07255045 _____ C:\WINDOWS\system32\nvcoproc.bin 2016-09-28 14:03 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2016-09-28 14:02 - 2016-09-28 14:02 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2016-09-28 14:02 - 2016-09-28 14:02 - 00000000 ____D C:\Program Files\Realtek 2016-09-28 14:01 - 2016-10-13 21:23 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-09-28 14:01 - 2016-09-28 14:01 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2016-09-24 11:40 - 2016-09-24 11:40 - 00000000 ____D C:\WINDOWS\twain_64 2016-09-24 11:29 - 2016-09-24 11:40 - 00000000 ____D C:\VueScan 2016-09-24 10:53 - 2016-09-24 10:59 - 00000256 _____ C:\ProgramData\GNET.INI 2016-09-24 10:29 - 2016-09-24 10:29 - 00026906 _____ C:\ProgramData\agent.1474709282.bdinstall.bin ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-10-13 22:42 - 2016-08-19 17:10 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-10-13 21:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-10-13 21:24 - 2015-10-14 12:35 - 00000000 ____D C:\Program Files\Bitdefender Agent 2016-10-13 21:24 - 2015-07-13 21:42 - 00000000 ___RD C:\Users\John\Dropbox 2016-10-13 21:23 - 2015-08-08 09:35 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-10-13 21:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2016-10-13 21:05 - 2016-07-16 07:04 - 00065536 _____ C:\WINDOWS\system32\config\ELAM 2016-10-13 21:01 - 2011-12-20 20:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-10-13 21:01 - 2011-12-20 20:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-10-13 18:02 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI 2016-10-13 18:02 - 2015-08-01 19:45 - 00180754 _____ C:\bdlog.txt 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-10-13 18:00 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2016-10-13 18:00 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2016-10-13 15:38 - 2011-04-13 14:14 - 00000000 ____D C:\Users\John\AppData\Local\PasswordSafe 2016-10-13 15:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-10-13 14:03 - 2015-07-09 00:56 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-10-13 13:58 - 2011-04-15 11:19 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-10-13 13:57 - 2011-12-20 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-10-13 13:56 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-10-13 12:44 - 2015-07-13 21:40 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-10-13 12:02 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2016-10-13 11:53 - 2016-07-16 12:42 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll 2016-10-13 11:52 - 2016-07-16 12:43 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2016-10-13 11:45 - 2015-07-14 21:13 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-10-09 14:35 - 2016-08-19 17:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-10-08 11:55 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2016-10-08 11:48 - 2015-07-30 20:12 - 00000000 ____D C:\Users\John\AppData\Local\NVIDIA 2016-10-05 17:51 - 2015-07-30 20:13 - 00000000 ____D C:\Users\John\AppData\Local\NVIDIA Corporation 2016-10-05 17:51 - 2015-07-30 20:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-10-05 17:45 - 2015-07-09 18:38 - 00000000 ____D C:\Users\John\AppData\Local\ElevatedDiagnostics 2016-10-05 15:32 - 2011-02-25 02:09 - 00389418 __RSH C:\bootmgr 2016-10-04 17:37 - 2015-08-08 09:38 - 00002485 _____ C:\Users\John\Desktop\Google Chrome.lnk 2016-10-03 21:09 - 2016-07-16 12:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-10-03 21:09 - 2016-07-16 12:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-10-03 17:09 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2016-10-03 17:09 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12 2016-10-03 17:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2016-10-03 17:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\setup 2016-10-03 17:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-10-03 17:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-10-03 17:09 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-10-03 17:09 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-10-03 17:09 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-10-03 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2016-10-03 17:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-09-30 20:16 - 2015-07-10 18:59 - 00000085 _____ C:\Users\John\Desktop\New Text Document.txt 2016-09-29 16:10 - 2015-07-09 10:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-09-28 22:59 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\et-EE 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-MX 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-GB 2016-09-28 22:57 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2016-09-28 22:52 - 2016-07-16 15:15 - 00000000 ____D C:\WINDOWS\OCR 2016-09-28 22:50 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2016-09-28 22:50 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2016-09-28 22:50 - 2016-07-16 12:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll 2016-09-28 22:50 - 2016-07-16 12:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll 2016-09-28 22:50 - 2016-07-16 12:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb 2016-09-28 22:50 - 2016-07-16 12:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb 2016-09-28 22:50 - 2016-07-16 12:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb 2016-09-28 22:50 - 2016-07-16 12:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll 2016-09-28 22:50 - 2016-07-16 12:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb 2016-09-28 22:50 - 2016-07-16 12:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll 2016-09-28 22:50 - 2016-07-16 12:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe 2016-09-28 22:50 - 2016-07-16 12:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll 2016-09-28 22:50 - 2016-07-16 12:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll 2016-09-28 22:50 - 2016-07-16 12:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll 2016-09-28 22:50 - 2016-07-16 12:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys 2016-09-28 22:50 - 2016-07-16 12:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll 2016-09-28 22:50 - 2016-07-16 12:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll 2016-09-28 22:50 - 2016-07-16 12:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe 2016-09-28 22:50 - 2016-07-16 12:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll 2016-09-28 22:50 - 2016-07-16 12:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll 2016-09-28 22:49 - 2016-07-16 12:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll 2016-09-28 22:49 - 2016-07-16 12:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll 2016-09-28 22:49 - 2016-07-16 12:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll 2016-09-28 22:49 - 2016-07-16 12:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll 2016-09-28 22:49 - 2016-07-16 12:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof 2016-09-28 22:49 - 2016-07-16 12:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb 2016-09-28 22:49 - 2016-07-16 12:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb 2016-09-28 22:49 - 2016-07-16 12:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb 2016-09-28 22:49 - 2016-07-16 12:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe 2016-09-28 22:49 - 2016-07-16 12:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb 2016-09-28 22:49 - 2016-07-16 12:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe 2016-09-28 22:49 - 2016-07-16 12:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll 2016-09-28 22:49 - 2016-07-16 12:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof 2016-09-28 17:14 - 2016-02-22 12:44 - 00000000 ____D C:\ProgramData\Package Cache 2016-09-28 16:37 - 2015-07-08 18:02 - 577055670 _____ C:\WINDOWS\MEMORY.DMP 2016-09-28 16:28 - 2015-08-08 09:35 - 00000000 ____D C:\Users\John\AppData\Local\Packages 2016-09-28 16:14 - 2016-06-28 18:29 - 00002405 _____ C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-09-28 16:14 - 2015-08-08 09:38 - 00000000 ___RD C:\Users\John\OneDrive 2016-09-28 16:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2016-09-28 16:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration 2016-09-28 16:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2016-09-28 16:04 - 2015-08-08 09:29 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat 2016-09-28 16:03 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media 2016-09-28 16:02 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries 2016-09-28 15:58 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate 2016-09-28 15:57 - 2015-08-07 11:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Endpoint Protection 2016-09-28 14:13 - 2016-07-16 15:14 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2016-09-28 14:12 - 2016-08-19 17:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-09-28 14:12 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2016-09-28 14:12 - 2016-01-22 13:50 - 00000000 ____D C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ActiveSMART 2.94 2016-09-28 14:12 - 2015-10-30 10:07 - 00000000 ____D C:\WINDOWS\ShellNew 2016-09-28 14:12 - 2015-10-14 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016 2016-09-28 14:12 - 2015-08-24 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UNi Xonar Audio 2016-09-28 14:12 - 2015-08-20 18:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Organizing Monitor for SP 200 Series 2016-09-28 14:12 - 2015-07-09 18:22 - 00000000 ____D C:\WINDOWS\system32\inf32 2016-09-28 14:12 - 2015-07-09 10:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-09-28 14:12 - 2011-09-16 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopStyle Lite 3 2016-09-28 14:12 - 2011-06-29 14:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap 2016-09-28 14:12 - 2011-04-19 19:30 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling 2016-09-28 14:12 - 2011-04-16 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xenu's Link Sleuth 2016-09-28 14:12 - 2011-04-16 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TagScanner 2016-09-28 14:12 - 2011-04-16 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player Classic - Home Cinema x64 2016-09-28 14:12 - 2011-04-16 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2016-09-28 14:12 - 2011-04-15 22:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FTP Voyager 2016-09-28 14:12 - 2011-04-15 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CSE HTML Validator v10.0 2016-09-28 14:12 - 2011-04-15 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopStyle 3 2016-09-28 14:12 - 2011-04-15 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia HomeSite 5 2016-09-28 14:12 - 2011-04-15 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTK2 Runtime 2016-09-28 14:12 - 2011-04-13 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-09-28 14:12 - 2011-04-12 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy 2016-09-28 14:12 - 2011-04-12 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-09-28 14:12 - 2011-03-25 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Xonar DX Audio 2016-09-28 14:12 - 2011-03-25 21:13 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2016-09-28 14:12 - 2011-03-25 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2016-09-28 14:11 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-09-28 14:11 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\spool 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\IME 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\schemas 2016-09-28 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-09-28 14:09 - 2011-08-11 12:22 - 00000000 __SHD C:\WINDOWS\SysWOW64\%APPDATA% 2016-09-28 14:09 - 2011-08-10 22:53 - 00000000 __SHD C:\WINDOWS\system32\%APPDATA% 2016-09-28 14:08 - 2016-07-16 12:47 - 00000000 __SHD C:\Program Files\Windows Sidebar 2016-09-28 14:08 - 2016-07-16 12:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2016-09-28 14:08 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-09-28 14:08 - 2016-03-21 17:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan 1.0.3.0 2016-09-28 14:08 - 2015-11-03 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2016-09-28 14:08 - 2015-08-08 11:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis 2016-09-28 14:08 - 2011-06-16 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation 2016-09-28 14:08 - 2011-05-11 09:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft 2016-09-28 14:08 - 2011-04-26 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bullzip 2016-09-28 14:08 - 2011-04-12 21:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Collectorz.com 2016-09-28 14:08 - 2011-04-12 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GPSoftware 2016-09-28 14:08 - 2011-04-12 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes 2016-09-28 14:08 - 2011-03-25 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2016-09-28 14:08 - 2011-03-25 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asmedia Technology 2016-09-28 14:08 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games 2016-09-28 14:08 - 2009-07-14 04:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-09-28 14:04 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\PrintDialog 2016-09-28 14:04 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView 2016-09-28 14:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help 2016-09-27 11:52 - 2011-02-25 02:09 - 00008192 __RSH C:\BOOTSECT.BAK 2016-09-27 11:51 - 2015-07-13 21:40 - 00000904 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-09-27 11:11 - 2015-12-29 14:34 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-09-27 10:56 - 2011-10-28 20:26 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000UA.job 2016-09-27 10:56 - 2011-06-06 18:01 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-09-27 10:27 - 2015-07-13 21:40 - 00000900 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-09-27 10:27 - 2011-06-06 18:01 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-09-24 11:47 - 2015-08-20 18:24 - 00013835 _____ C:\Users\Public\WIA20_LOG.txt 2016-09-24 11:40 - 2015-08-21 14:00 - 00001052 _____ C:\ProgramData\Microsoft\Windows\Start Menu\VueScan x64.lnk 2016-09-24 11:40 - 2015-08-21 14:00 - 00001046 _____ C:\Users\Public\Desktop\VueScan x64.lnk 2016-09-24 11:40 - 2015-08-21 14:00 - 00000000 ____D C:\Program Files\VueScan ==================== Files in the root of some directories ======= 2015-08-18 23:51 - 2015-09-06 10:53 - 0000184 _____ () C:\Users\John\AppData\Roaming\COPA_Last_Connected_Device.ini 2015-08-18 22:46 - 2015-08-20 18:00 - 0000098 _____ () C:\Users\John\AppData\Roaming\SDC_Path.ini 2011-07-24 12:26 - 2011-08-10 09:14 - 0002419 _____ () C:\Users\John\AppData\Roaming\WebThread.log 2011-07-24 13:22 - 2011-07-24 13:22 - 0000036 _____ () C:\Users\John\AppData\Local\housecall.guid.cache 2015-08-24 11:11 - 2015-08-24 11:11 - 0001465 _____ () C:\Users\John\AppData\Local\recently-used.xbel 2011-04-12 22:02 - 2016-08-21 13:02 - 0007585 _____ () C:\Users\John\AppData\Local\Resmon.ResmonCfg 2011-11-27 22:01 - 2011-11-27 22:01 - 0017408 _____ () C:\Users\John\AppData\Local\WebpageIcons.db 2011-08-21 13:02 - 2011-08-21 13:02 - 0000000 _____ () C:\Users\John\AppData\Local\{0A55FD95-1E35-415B-87D5-FFC7D5C46DBD} 2011-10-17 08:26 - 2011-10-17 08:26 - 0000000 _____ () C:\Users\John\AppData\Local\{10BF1E05-D3DB-4F91-97F2-9F75EDF48B68} 2011-11-24 17:49 - 2011-11-24 17:49 - 0000000 _____ () C:\Users\John\AppData\Local\{27FBA066-8D4A-498C-928E-2C55CA1A5C3B} 2011-11-26 11:37 - 2011-11-26 11:37 - 0000000 _____ () C:\Users\John\AppData\Local\{281E5990-3ADD-4D76-8A30-0C317357B4C9} 2011-12-22 10:04 - 2011-12-22 10:04 - 0000000 _____ () C:\Users\John\AppData\Local\{2C36B40C-A9EA-4CBB-981C-195AC518FB45} 2011-11-30 11:31 - 2011-11-30 11:31 - 0000000 _____ () C:\Users\John\AppData\Local\{37B42CD2-3028-45EC-8E0F-9F0AC2E8CC4C} 2011-09-28 15:30 - 2011-09-28 15:30 - 0000000 _____ () C:\Users\John\AppData\Local\{4FCFC4C1-1A43-40F1-9D4C-5C836782BD30} 2011-10-02 10:10 - 2011-10-02 10:10 - 0000000 _____ () C:\Users\John\AppData\Local\{5D0C256A-96A1-46C9-BA48-EC9886DBF71C} 2011-11-25 12:10 - 2011-11-25 12:10 - 0000000 _____ () C:\Users\John\AppData\Local\{60CC79A8-B312-436B-AB04-C143064FCE05} 2011-11-25 12:07 - 2011-11-25 12:07 - 0000000 _____ () C:\Users\John\AppData\Local\{67E24A19-083E-49F2-A28F-B4EC00996BBC} 2011-12-14 10:41 - 2011-12-14 10:41 - 0000000 _____ () C:\Users\John\AppData\Local\{69044D41-FF3C-4CFD-8E40-FA5DE1443816} 2011-12-15 11:19 - 2011-12-15 11:19 - 0000000 _____ () C:\Users\John\AppData\Local\{77913729-7591-4D46-8BD3-C27E29F3AA0F} 2011-08-21 13:04 - 2011-08-21 13:04 - 0000000 _____ () C:\Users\John\AppData\Local\{7F2AD356-5682-4B9D-94F8-5BD54B4EA475} 2011-11-17 08:58 - 2011-11-17 08:58 - 0000000 _____ () C:\Users\John\AppData\Local\{865E9E7C-69DE-4DC9-92FC-2FBE053AB1FC} 2011-12-15 11:21 - 2011-12-15 11:21 - 0000000 _____ () C:\Users\John\AppData\Local\{8D657D29-867C-4E7A-972B-052427C0C0E0} 2011-11-10 21:03 - 2011-11-10 21:03 - 0000000 _____ () C:\Users\John\AppData\Local\{91CD2EED-A381-46D1-96DC-04ABB8F189BF} 2011-11-10 18:56 - 2011-11-10 18:56 - 0000000 _____ () C:\Users\John\AppData\Local\{98CC1F97-EEC1-4AC7-8A68-94E76C99F833} 2011-11-20 18:20 - 2011-11-20 18:20 - 0000000 _____ () C:\Users\John\AppData\Local\{A2EEF356-F963-4D91-89E3-4E68CE48A435} 2011-11-10 18:53 - 2011-11-10 18:53 - 0000000 _____ () C:\Users\John\AppData\Local\{B0DDB9C5-54E9-48ED-B05E-746211D5367C} 2011-11-09 11:28 - 2011-11-09 11:28 - 0000000 _____ () C:\Users\John\AppData\Local\{BE330A0B-0EE3-4022-90F5-144FED8D98E7} 2011-11-15 00:31 - 2011-11-15 00:31 - 0000000 _____ () C:\Users\John\AppData\Local\{C06A34E2-66EE-44C6-BF49-71E1FC09FA31} 2011-10-25 10:43 - 2011-10-25 10:43 - 0000000 _____ () C:\Users\John\AppData\Local\{CA12221E-F3CB-49EE-88A5-9117E66E0922} 2011-11-13 17:50 - 2011-11-13 17:50 - 0000000 _____ () C:\Users\John\AppData\Local\{D2E54963-0697-4916-B79A-13E6053949B2} 2016-02-28 21:00 - 2016-02-28 21:01 - 0000000 _____ () C:\Users\John\AppData\Local\{D7258586-9DA6-4D8C-983A-9F17441629F5} 2011-12-02 12:19 - 2011-12-02 12:19 - 0000000 _____ () C:\Users\John\AppData\Local\{DB5FE29E-E265-44BA-92C4-E212C27D2653} 2011-11-20 18:25 - 2011-11-20 18:25 - 0000000 _____ () C:\Users\John\AppData\Local\{EB2BBB46-EAA9-4315-B2F5-D8F54AC609B2} 2011-10-26 09:12 - 2011-10-26 09:12 - 0000000 _____ () C:\Users\John\AppData\Local\{FE879E7D-EEE7-479F-9687-F87D872EA30D} 2011-12-10 12:28 - 2011-12-10 12:28 - 0000000 _____ () C:\Users\John\AppData\Local\{FED7D976-EF2D-4941-8B6B-8AB3663C2ED7} 2011-04-12 20:58 - 2015-07-22 12:35 - 0000083 ___SH () C:\ProgramData\.zreglib 2015-10-14 12:46 - 2015-10-14 12:46 - 0396119 _____ () C:\ProgramData\1444822991.bdinstall.bin 2015-12-12 12:42 - 2015-12-12 12:42 - 0025187 _____ () C:\ProgramData\1449920507.bdinstall.bin 2016-02-17 13:50 - 2016-02-17 13:50 - 0025115 _____ () C:\ProgramData\1455713397.bdinstall.bin 2016-03-22 14:47 - 2016-03-22 14:47 - 0025897 _____ () C:\ProgramData\1458654425.bdinstall.bin 2016-04-02 15:20 - 2016-04-02 15:20 - 0025970 _____ () C:\ProgramData\1459606830.bdinstall.bin 2016-06-15 15:07 - 2016-06-15 15:07 - 0026774 _____ () C:\ProgramData\1465999664.bdinstall.bin 2016-09-24 10:29 - 2016-09-24 10:29 - 0026906 _____ () C:\ProgramData\agent.1474709282.bdinstall.bin 2016-09-28 14:03 - 2016-09-28 14:03 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2016-09-24 10:53 - 2016-09-24 10:59 - 0000256 _____ () C:\ProgramData\GNET.INI 2011-06-09 13:27 - 2011-06-09 13:27 - 0005049 _____ () C:\ProgramData\rugqgaaw.ekm 2003-10-06 09:21 - 2003-10-06 09:21 - 0000000 ____H () C:\ProgramData\sdpsenv.dat 2011-04-15 21:45 - 2011-04-15 21:45 - 0004152 _____ () C:\ProgramData\vjxgiesm.kqf Files to move or delete: ==================== C:\ProgramData\sdpsenv.dat ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-10-10 18:24 ==================== End of FRST.txt ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-10-2016 Ran by John (13-10-2016 23:00:18) Running from C:\Users\John\Desktop Windows 10 Home Version 1607 (X64) (2016-09-28 15:10:10) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2306412219-259799194-2763688043-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2306412219-259799194-2763688043-503 - Limited - Disabled) Guest (S-1-5-21-2306412219-259799194-2763688043-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2306412219-259799194-2763688043-1002 - Limited - Enabled) John (S-1-5-21-2306412219-259799194-2763688043-1000 - Administrator - Enabled) => C:\Users\John ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371} AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: ZoneAlarm Pro Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acronis True Image 2015 (HKLM-x32\...\{35CFA5F4-EE2D-4B13-AAED-BC643B6874B5}Visible) (Version: 18.0.6613 - Acronis) Acronis True Image 2015 (x32 Version: 18.0.6613 - Acronis) Hidden ActiveSMART (HKLM-x32\...\ActiveSMART) (Version: 2.94 - Ariolic Software, Ltd.) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.020.20039 - Adobe Systems Incorporated) Adobe Flash Player 13 ActiveX (HKLM-x32\...\{D59F17C5-EADC-4216-8206-B6E4F61DE5FA}) (Version: 13.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated) AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.01.09 - ASUSTeK) Ansel (Version: 372.54 - NVIDIA Corporation) Hidden AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.6.0 - SlySoft) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.2.9.0 - Asmedia Technology) Belarc Advisor 8.5a (HKLM-x32\...\Belarc Advisor) (Version: 8.5.1.0 - Belarc Inc.) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.19.1099 - Bitdefender) Bitdefender Antivirus Plus 2016 (HKLM\...\Bitdefender) (Version: 20.0.19.1099 - Bitdefender) Bullzip PDF Printer 10.17.0.2428 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.17.0.2428 - Bullzip) CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5767 - CDBurnerXP) CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.2.8 - Elaborate Bytes) Collectorz.com Music Collector (HKLM-x32\...\Collectorz.com Music Collector) (Version: - ) CSE HTML Validator Standard v10.02 (HKLM-x32\...\CSEHTMLVALIDATOR100_is1) (Version: - AI Internet Solutions) Data Lifeguard Diagnostic for Windows 1.22 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation) Dropbox (HKLM-x32\...\Dropbox) (Version: 12.4.22 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.27.33 - Dropbox, Inc.) Hidden Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff) FTP Voyager 15.2 (HKLM-x32\...\FTP Voyager_is1) (Version: - RhinoSoft.com) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Google Chrome (HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.) Google Update Helper (x32 Version: 1.3.21.99 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden GPSoftware Directory Opus (HKLM-x32\...\{5D4F167D-CCC8-413E-A6EE-F2FABBBBF50D}) (Version: 9.5.6.0 - GPSoftware) GTK2-Runtime (HKLM-x32\...\GTK2-Runtime) (Version: 2.24.10-2012-10-10-ash - Alexander Shaduri) HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan) ISO2Disc 1.09 (HKLM-x32\...\ISO2Disc_is1) (Version: - Top Password Software, Inc.) Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden LightScribe System Software 1.12.29.2 (HKLM-x32\...\{CF8C077A-B467-4C43-8DB5-3A9B94FF9681}) (Version: 1.12.29.2 - hxxp://www.lightscribe.com) Logitech Unifying Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech) Macromedia HomeSite 5 (HKLM-x32\...\{74307C3F-EBD4-11D4-A4D9-0010A4C3AFF0}) (Version: - ) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation) Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.) Mozilla Firefox 49.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 49.0.1 (x86 en-GB)) (Version: 49.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.1 - Mozilla) MPC-HC 1.7.0 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.0.7858 - MPC-HC Team) Music Collector (HKLM-x32\...\{8CDFF5D2-89BF-4391-9D20-7D95C88DC98C}_is1) (Version: - Collectorz.com) NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - ) NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA 3D Vision Driver 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.54 - NVIDIA Corporation) NVIDIA Graphics Driver 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation) NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenDNS Updater 2.2.1 (HKLM-x32\...\OpenDNS Updater) (Version: 2.2.1 - ) Password Safe (HKLM-x32\...\Password Safe) (Version: - ) PerfectDisk Professional (HKLM\...\{C4E01CDC-0063-493C-B383-9C4FCF7A89F7}) (Version: 14.0.865 - Raxco Software Inc.) Photo Pos Pro (HKLM-x32\...\Photo Pos Pro) (Version: 1.90.5 - PowerOfSoftware Ltd.) PicPick (HKLM-x32\...\PicPick) (Version: 4.1.5 - NGWIN) Playlist Creator 3.6.2 (HKLM-x32\...\Playlist Creator 3.6.2) (Version: 3.6.2.0 - oddgravity) Rapport (x32 Version: 3.5.1609.100 - Trusteer) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.31.1025.2010 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) RICOH SP 200 Series TWAIN/WIA (HKLM-x32\...\{4B057D32-D732-40DC-A6A4-4ABED861C711}) (Version: 1.00.0000 - RICOH) Secunia PSI (2.0.0.3003) (HKLM-x32\...\Secunia PSI) (Version: - ) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Smart Organizing Monitor (HKLM-x32\...\{77534F47-08D5-4A50-8249-403C9ECE9840}) (Version: 1.00.0000 - RICOH) System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version: - ) TagScanner 6.0.4 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov) TopStyle Lite (Version 3) (HKLM-x32\...\TopStyle Lite (Version 3.0)) (Version: 3.1.0 - Bradbury Software, LLC) TopStyle Lite (Version 3) (HKLM-x32\...\TSLite3_is1) (Version: - ) Trusteer Endpoint Protection (HKLM-x32\...\Rapport_msi) (Version: 3.5.1609.100 - Trusteer) UNi Xonar Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version: - ) VC 9.0 Runtime (x32 Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden VueScan x64 (HKLM\...\VueScan x64) (Version: - ) Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation) Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies) Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr) ZoneAlarm Firewall (x32 Version: 15.0.123.17051 - Check Point Software Technologies Ltd.) Hidden ZoneAlarm Pro (HKLM-x32\...\ZoneAlarm Pro) (Version: 15.0.123.17051 - Check Point) ZoneAlarm Security (x32 Version: 15.0.123.17051 - Check Point Software Technologies Ltd.) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{031EA992-0D9B-4689-B8E8-738D801CDFD9}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{07F1B05B-D244-44CB-A6BB-A236E4141121}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{0FABF951-F8CD-4601-B979-25FD2535AAAF}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{0FC871BB-CA5B-4562-919A-15F13145E7F4}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{158AE632-AA57-4851-8797-E677AD70F054}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{18FE4183-F9D6-4C3E-960F-70AE26E6EFFB}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{22053EFA-BDD6-469E-8B0B-D15DD7C7C55F}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{29E68125-9F62-42A4-AEA0-0864560FD319}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{2CAB1E43-2A95-4E95-8070-79D438E28745}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{2FAA2A26-2F7C-4826-93BF-79EE245A002D}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{315DB6CB-B250-487D-B75C-1ECEBAF359AF}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{31688552-CC86-4A25-9308-6E4B7B3297EE}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{3648A487-544E-4D1D-A92C-BA6603BA48F1}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{38DA5104-13D7-4746-A6F3-D7D67999BF60}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{3982F600-61DC-4D05-B223-5E0C448F528B}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{3B08AC2D-A8CE-46EF-B216-4C50B7DD2830}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{40FE105D-FF61-4C34-B52A-2A234EDAF378}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{44280136-9369-45CE-B543-473A34695E77}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{47508E6F-5627-4599-88BC-606446524402}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{4AD2A607-15A5-4819-AC97-CC9A4090ACA4}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{4C6CFE32-CD24-4901-811C-1F3B3785D066}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{4D7F70E4-7180-4915-ADB6-3DB0C422ECB2}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{4FC8B12B-078B-4A5E-8974-AE9CA685F38C}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{508FF776-AFE8-40EA-B4FD-6A65A9449BDB}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{53A11195-CF0E-4AA9-90B8-65B8233DB444}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{54E3CFF6-79D6-4EBA-A390-5EA5B4FDA51A}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{56166C27-FBDF-4FC7-9DD1-1CEE33E7A9DC}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\John\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{60AB93D5-63AA-46C7-B1D0-D0126E1A4EBA}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{6924FEA2-970B-4223-8AF6-3FEF7B43FFC4}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{6A199720-FEAF-46FF-AF69-A840BBF5F07F}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{72AA87B5-5D2C-428A-B28E-1E9A669C93BA}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{739B0657-C04C-4A7E-A99C-D2C7F8B94852}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{73CD447F-6BAA-488C-8363-C3B3DE2520DF}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{747F790F-6241-4DF2-944A-F8F1611155BB}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{74F574C4-E57A-4B05-935C-AE01FF8B0F0F}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{755B77E2-D794-4254-B20E-16A50A2EE2B5}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{7624490A-E5CD-423E-8956-83B634C33454}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{76350B2E-FF7C-42FC-8E3C-A78BB9F3E6C6}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{7781B26D-003F-4DBE-A9D9-4683238C8D23}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{7CA49A2B-4481-4217-BBDC-EA8C57684AF7}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{7E48E52C-47BF-41AF-B59C-5F737049F6DA}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{88EF238A-4FDB-4AB8-9FF1-405E1D494A4D}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{8D50EF1B-DFEA-4A2A-9E89-29E8BB8540F6}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{91EEBE93-8B9E-4FAF-AED1-AD2E7948954D}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{9487AE13-DF95-4546-94A1-DE456CF8DFD9}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{A7E074E7-A34D-4EE5-997B-BFD03A9F0F8E}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{AD8A44F6-7680-44BB-BFDF-7DF5E522FB20}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B00D85A4-B515-4A55-AEFC-14EBCD32A12F}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B0168A28-BD2C-4AC4-96A0-B544B42B33BA}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B01BC001-0B3F-4F28-8EAB-67B9DDCE164E}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B09B8C62-8B93-40B0-B58E-C266A781799C}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B0ECE494-3665-4DCB-B1FD-936A12D9EB37}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B2E082A9-5CB2-4C2E-81A8-DDE1B63AA36B}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{B3D6F2F2-BDAC-4FD0-8DDA-32A3EC98CEDC}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{C3CF3C41-0F3A-465C-B8CB-266DF9EDF867}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{C7C419C0-85FA-4875-9FF4-BF338137C168}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{CBC96F6A-6571-4144-9DEA-D5DB5D08279E}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{CC99F3A4-58E8-4D0C-ABD7-858DD27CCB5A}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{D2D98DBF-2249-4C7C-8760-B9C35E490E32}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{D35A47D8-8127-4709-BA64-C7C645C3DBB2}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{DC3BAB48-89EC-4B60-879D-5664020A33E0}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{E081AB37-84D0-40AA-ACB3-42A24FDABDB0}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{E1DD5B5E-5FAC-428D-8E2A-A437A57F38CB}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{E2D1DB8C-6A67-427C-8D30-F6A100C18164}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{E73F7BC3-7DC2-4074-A963-99AD4854DF30}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\John\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{EF3EBF70-467A-40E3-8499-617658EC578A}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{F2164099-7835-4531-B392-147631312909}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{F392CFFD-188C-486D-BB57-DF8A2AB6B259}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{F711626C-B3BD-4191-A320-13CD55D9EBFF}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{FAE7A96A-56C3-4ABF-A6C2-D5D78089A7D8}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{FB04C74F-2574-4AE1-AE27-579133F3F2F7}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) CustomCLSID: HKU\S-1-5-21-2306412219-259799194-2763688043-1000_Classes\CLSID\{FEF379FC-7AC3-4AAD-B434-7D0DA762367F}\InprocServer32 -> C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll (GP Software) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {02DBDFAD-4C1C-4E7B-BCF7-7A3D1A0DAAA9} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {079CC2EC-6F24-42F0-9FE8-C6E0C2A07891} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe Task: {0B6928E0-3285-4BD9-8ECD-EADA19120A72} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {0E4C89A5-6562-466E-930D-05E1900D226A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd) Task: {0FF3AD23-FA85-4D64-B8F7-76ADF303F3F2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {16B21452-4240-47C2-8CAE-440815C07C0F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-08] (Google Inc.) Task: {36AC4F93-2A1C-4FD2-B0D6-68198925F237} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION Task: {3756B5F9-0232-4609-86E1-5E190987BC45} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-08] (Google Inc.) Task: {3F5A5FE5-6B12-4CAD-85A1-9B7775230C47} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {40695C5D-6B6E-4827-91DB-5ABC47D56FA1} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION Task: {420AA115-B1E7-43AA-B5E3-EB4734EAE219} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {4576632D-ADAF-4AB1-B579-E259ABFEBB0C} - System32\Tasks\{99B79590-55FB-485B-A0BA-B4449A595177} => pcalua.exe -a "C:\Program Files (x86)\VAP11G\VAP11G_Setup.exe" -d "C:\Program Files (x86)\VAP11G" Task: {48661B47-E37A-412A-9377-924611733AA8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {52258CB8-A09B-4662-B0B5-BD46CAB94ADD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000UA => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-08] (Google Inc.) Task: {538C615A-DF00-4950-9CCF-5EB4214CED6B} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {53E96F3D-30B7-4696-BEC7-4756CE544AF2} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {5CF7F9C8-C246-4A55-A3FA-64E81CA2EAC3} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-07-13] (Dropbox, Inc.) Task: {5E8E6BF5-89DA-496A-B1C0-9D87A9E6C800} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {5F9F6E5A-5F50-43BD-9EAB-7F30CEB0ECFA} - System32\Tasks\{297D8F4F-A92E-4F76-A775-FA31711B21C7} => pcalua.exe -a C:\Windows\System32\cmeauoxy.exe -c /rm /ppcioxygen Task: {60D64273-3691-4DC8-823F-C1903C0A60A5} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {6308CD86-4E88-4AEB-9F38-F0B1A08BE903} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {6AC11BBC-E408-4764-85CC-2FDC7C622612} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-10-28] (ASUSTeK Computer Inc.) Task: {6E3F7D7E-CF4B-42F9-AD15-D32EDBDC06E7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {6EEE2BA2-9A87-44CE-868D-D22BEC78E522} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {6F75E28E-248B-47D1-8741-32260EB4F074} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {705670D8-7F17-4A63-A9DD-264A3E833062} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000Core => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-08] (Google Inc.) Task: {71E18E8F-B4BC-453F-A5A5-48226FDDC378} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {768B1475-D4E5-4647-ABEA-AEF1D5567E32} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {7DC70C8C-303D-4325-A43F-D2F9B90CE001} - System32\Tasks\{FB416530-548B-44C6-B25D-6B50173AE2D8} => pcalua.exe -a C:\Users\John\Desktop\irfanview_plugins_432_setup.exe -d "C:\Program Files\CheckPoint\ZAForceField" Task: {81E09BCD-1340-4B1C-AFEE-E4A784840964} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {8694EE07-1260-4A97-8D9B-855DB4DFF37C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {8ABDD230-51A6-446F-AA3D-5FB062223C70} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe Task: {90871FCB-9818-4F84-A007-966C6F8A9B6A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {9CCD0110-3ED9-4E6C-82F8-4344E958B47F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {ACB56A9A-F6E1-4269-B8D9-1FBA03C67C03} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-10-13] (Microsoft Corporation) Task: {B5DC30F2-0039-4278-8F0F-8F1365A24BDB} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {C2439108-AB9A-4921-A41E-2C3A81BA8DE5} - System32\Tasks\{98FB440B-0A63-43DC-B1CB-BB803E272EF0} => pcalua.exe -a C:\Users\John\Downloads\iview430_setup.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {C2D88EF0-C52F-4252-B4AD-7197B876C24C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated) Task: {C3FE49F3-59C2-4C68-8ED5-23B85431A61C} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe Task: {C8F2407D-33F7-4919-8317-F86B5C2DB965} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {CAD653FB-4279-4510-99D4-EF2B6BD22285} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-09-13] (Bitdefender) Task: {CFD1C052-8224-4A5D-8551-3EC175ECD679} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-07-13] (Dropbox, Inc.) Task: {CFE55312-502C-4D98-ADF1-52040D94808B} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {D3CCA3B5-1642-402D-B081-AA8CADC1DF78} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {D556955A-0E3F-477F-B7BA-0E9E04BE134B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {DA896C81-C4CD-4489-8076-33198E7BD170} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {DBB73ACF-9F5A-41A3-956E-495460A24462} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {E16C31E7-3663-48CE-A939-B0F3DA0370D5} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {E71A3862-6042-4990-8CAF-824E6D10E2CB} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-19] (Adobe Systems Incorporated) Task: {F05F7936-4315-4CBB-9CDF-E0A79CA49F00} - System32\Tasks\{108B0377-3A66-480D-AFE2-C5412EA2D284} => pcalua.exe -a C:\Users\John\Downloads\irfanview_plugins_430_setup.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {F6A1E350-4FDF-4AC4-BE46-5810003F6EC2} - System32\Tasks\{1492063A-EE1E-40EB-9274-3A8246FC9A33} => pcalua.exe -a C:\Users\John\Downloads\aimp_3.00.901_beta_3\aimp_3.00.901_beta_3.exe -d C:\Users\John\Downloads\aimp_3.00.901_beta_3 Task: {F957A2DB-5536-41A5-8432-28988011B786} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {F969A0DB-3507-4CEF-A47C-63559C5E307A} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000Core.job => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2306412219-259799194-2763688043-1000UA.job => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-09-30 13:23 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-10-14 12:45 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll 2016-06-01 13:56 - 2016-06-01 13:56 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_009\ashttpbr.mdl 2016-06-01 13:56 - 2016-06-01 13:56 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_009\ashttpdsp.mdl 2016-06-01 13:56 - 2016-06-01 13:56 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_009\ashttpph.mdl 2016-06-01 13:56 - 2016-06-01 13:56 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_009\ashttprbl.mdl 2016-09-28 14:03 - 2016-08-11 13:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2011-03-25 21:14 - 2010-11-03 11:42 - 00909440 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.09\aaHMSvc.exe 2011-03-25 21:14 - 2010-10-28 04:40 - 00917120 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.12\atkexComSvc.exe 2011-03-25 21:14 - 2010-10-21 10:52 - 00586880 _____ () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.10\AsSysCtrlService.exe 2016-03-21 17:05 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2016-02-22 12:44 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-08-19 17:46 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll 2016-03-21 17:05 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2016-08-19 17:46 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll 2016-08-19 17:46 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll 2016-08-19 17:46 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll 2016-02-22 12:44 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll 2016-09-30 13:23 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-09-28 16:14 - 2016-09-28 16:14 - 00959168 _____ () C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll 2016-07-16 12:42 - 2016-07-16 12:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll 2016-08-19 17:46 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll 2016-08-19 17:46 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll 2016-09-28 22:56 - 2016-09-28 22:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-10-13 13:30 - 2016-10-05 10:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2016-10-13 13:29 - 2016-10-05 10:21 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-10-13 13:29 - 2016-10-05 10:13 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-10-13 13:29 - 2016-10-05 10:13 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2016-10-13 13:29 - 2016-10-05 10:13 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2016-10-13 13:29 - 2016-10-05 10:13 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-10-13 13:29 - 2016-10-05 10:14 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2010-06-16 22:42 - 2010-06-16 22:42 - 00839680 _____ () C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe 2010-02-03 14:36 - 2010-02-03 14:36 - 00087488 _____ () C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe 2016-09-28 17:43 - 2016-09-28 17:43 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2016-09-28 17:43 - 2016-09-28 17:43 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2016-09-28 17:43 - 2016-09-28 17:43 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2011-03-25 21:14 - 2016-10-13 21:02 - 00019456 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.12\PEbiosinterface32.dll 2011-03-25 21:14 - 2010-06-29 03:58 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.12\ATKEX.dll 2015-07-20 09:08 - 2015-07-20 09:08 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll 2015-07-20 09:15 - 2015-07-20 09:15 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll 2015-07-20 09:10 - 2015-07-20 09:10 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll 2011-03-25 21:14 - 2009-05-21 03:14 - 00053248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll 2011-03-25 21:14 - 2009-05-21 11:14 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll 2015-06-02 15:51 - 2015-06-02 15:51 - 00545792 _____ () C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll 2011-03-25 21:14 - 2010-10-20 14:45 - 00143360 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll 2011-03-25 21:14 - 2010-06-21 16:21 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll 2011-03-25 21:14 - 2009-08-12 21:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll 2011-03-25 21:14 - 2010-10-15 18:40 - 01031680 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll 2011-03-25 21:14 - 2010-08-06 19:10 - 00964608 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll 2011-03-25 21:14 - 2010-11-04 19:30 - 01245184 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll 2011-03-25 21:14 - 2010-09-27 18:34 - 01030144 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll 2011-03-25 21:14 - 2010-09-27 21:51 - 00881664 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll 2011-03-25 21:14 - 2010-09-27 21:51 - 01607168 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll 2011-03-25 21:14 - 2010-10-06 21:56 - 01246720 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll 2011-03-25 21:14 - 2010-08-06 19:11 - 00850944 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll 2011-03-25 21:14 - 2010-08-06 19:13 - 00886272 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll 2011-03-25 21:14 - 2010-08-23 03:17 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.09\aaHMLib.dll 2011-03-25 21:14 - 2010-06-21 16:21 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\ImageHelper.dll 2015-07-30 20:11 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-08-24 12:39 - 2012-06-06 09:56 - 00143360 ____N () C:\Program Files\UNi Xonar Audio\Customapp\VmixP8.dll 2016-10-13 12:44 - 2016-09-22 02:44 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd 2016-10-13 12:44 - 2016-09-22 02:44 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd 2016-10-13 12:44 - 2016-09-22 02:45 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd 2016-10-13 12:44 - 2016-09-22 02:44 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll 2016-10-13 12:44 - 2016-09-22 02:44 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd 2016-10-13 12:44 - 2016-09-22 02:44 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd 2016-10-13 12:44 - 2016-09-22 02:44 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd 2016-10-13 12:44 - 2016-09-22 02:45 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd 2016-10-13 12:44 - 2016-09-22 02:44 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll 2016-10-13 12:44 - 2016-09-22 02:46 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd 2016-10-13 12:44 - 2016-09-22 02:45 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd 2016-10-13 12:44 - 2016-09-22 02:46 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd 2016-10-13 12:44 - 2016-09-22 02:42 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll 2016-10-13 12:44 - 2016-10-10 19:35 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd 2016-10-13 12:44 - 2016-10-10 19:30 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll 2016-10-13 12:44 - 2016-10-10 19:35 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL 2016-10-13 12:44 - 2016-10-10 19:35 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd 2016-10-13 12:44 - 2016-09-22 02:45 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd 2016-10-13 12:44 - 2016-09-22 02:49 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll 2016-10-13 12:44 - 2016-09-22 02:49 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll 2016-10-13 12:44 - 2016-09-22 02:46 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd 2016-10-13 12:44 - 2016-10-10 19:35 - 00168760 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd 2015-07-20 09:08 - 2015-07-20 09:08 - 00037696 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll 2016-09-28 16:14 - 2016-09-28 16:14 - 00679624 _____ () C:\Users\John\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\ClientTelemetry.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\sdpsenv.dat:naughtypirates [482] AlternateDataStreams: C:\Users\John\Desktop\rkill.exe:BDU [0] AlternateDataStreams: C:\Users\John\Downloads\bitdefender_windows_13a09d48-fdd5-4e5a-b78a-1493d09fbf74.exe:BDU [0] AlternateDataStreams: C:\Users\John\Downloads\CLEAN.exe:BDU [0] AlternateDataStreams: C:\Users\John\Downloads\zapSetupWeb_150_123_17051_en.exe:BDU [0] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.exe: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.scr: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.bat: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.com: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.cmd: => <===== ATTENTION HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Software\Classes\.reg: => <===== ATTENTION ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\123simsen.com -> www.123simsen.com There are 7624 more sites. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2011-07-28 11:59 - 00436151 ___RA C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com 127.0.0.1 www.123moviedownload.com There are 15001 more lines. ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2306412219-259799194-2763688043-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\John\AppData\Local\Microsoft\Windows\Themes\GB-wp1.jpg DNS Servers: 208.67.222.222 - 208.62.220.222 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^Users^John^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2010 Screen Clipper and Launcher.lnk.Startup MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden MSCONFIG\startupreg: RemoteControl => "C:\Program Files (x86)\ (x86)\CyberLink\PowerDVD\PDVDServ.exe" MSCONFIG\startupreg: SAOB Monitor => C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\StartupApproved\Run: => "Google Update" HKU\S-1-5-21-2306412219-259799194-2763688043-1000\...\StartupApproved\Run: => "OneDrive" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{4CF23F24-DA84-4BF7-927D-3EDCF45EAEA6}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe ==================== Restore Points ========================= 04-10-2016 20:24:28 Scheduled Checkpoint 13-10-2016 13:49:49 Windows Update 13-10-2016 13:50:51 Windows Update ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/13/2016 01:50:53 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. . Error: (10/13/2016 01:49:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. . Error: (10/13/2016 12:44:28 PM) (Source: DbxSvc) (EventID: 270) (User: ) Description: Filter Unload failed with: (-2145452013) The system could not find the filter specified. Error: (10/13/2016 11:37:50 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Error: (10/10/2016 04:38:15 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Error: (10/09/2016 01:38:15 PM) (Source: DbxSvc) (EventID: 270) (User: ) Description: Filter Unload failed with: (-2145452013) The system could not find the filter specified. Error: (10/09/2016 01:19:42 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.14393.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: 117c Start Time: 01d222271acefd27 Termination Time: 4 Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Report Id: a5d136b7-8e1a-11e6-9cdc-bcaec542a931 Faulting package full name: Faulting package-relative application ID: Error: (10/09/2016 01:17:24 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.14393.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: 2650 Start Time: 01d22226b393193a Termination Time: 10 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id: 51f62635-8e1a-11e6-9cdc-bcaec542a931 Faulting package full name: Faulting package-relative application ID: Error: (10/09/2016 01:15:38 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.14393.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel. Process ID: 1a98 Start Time: 01d22226b5330ce4 Termination Time: 5 Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Report Id: 13fd0a29-8e1a-11e6-9cdc-bcaec542a931 Faulting package full name: Faulting package-relative application ID: Error: (10/09/2016 01:06:29 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: microsoftedgecp.exe, version: 11.0.14393.82, time stamp: 0x57a55786 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000604 Fault offset: 0x0000000000000000 Faulting process id: 0x2b08 Faulting application start time: 0x01d222258ce2507a Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe Faulting module path: unknown Report Id: 4e770506-3810-40c5-8da5-54fb24e7b614 Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe Faulting package-relative application ID: MicrosoftEdge System errors: ============= Error: (10/13/2016 09:23:41 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (10/13/2016 09:02:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The ZoneAlarm ICM Service service terminated unexpectedly. It has done this 1 time(s). Error: (10/13/2016 09:02:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The WinDefend service failed to start due to the following error: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Error: (10/13/2016 09:02:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. Error: (10/13/2016 09:02:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The tib_mounter service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. Error: (10/13/2016 12:44:29 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Interactive Services Detection service terminated with the following error: Incorrect function. Error: (10/13/2016 12:44:29 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The Interactive Services Detection service terminated with the following error: Incorrect function. Error: (10/13/2016 11:37:59 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (10/13/2016 11:37:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The WinDefend service failed to start due to the following error: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Error: (10/13/2016 11:37:37 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. CodeIntegrity: =================================== Date: 2016-10-13 21:02:04.775 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-10-13 11:37:38.586 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-10-11 09:47:44.945 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-10-10 16:37:56.985 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz Percentage of memory in use: 39% Total physical RAM: 8173.4 MB Available physical RAM: 4974.91 MB Total Virtual: 16365.4 MB Available Virtual: 12724.04 MB ==================== Drives ================================ Drive c: (Windows7) (Fixed) (Total:1850.86 GB) (Free:1784.85 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive i: (Data) (Fixed) (Total:933.03 GB) (Free:763.02 GB) NTFS Drive j: (Music) (Fixed) (Total:789.83 GB) (Free:744.7 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1863 GB) (Disk ID: 9D959FDF) Partition 1: (Not Active) - (Size=11.7 GB) - (Type=27) Partition 2: (Active) - (Size=1850.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 23E4D391) Partition 1: (Not Active) - (Size=933 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=789.8 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=140.1 GB) - (Type=05) ==================== End of Addition.txt ============================
  4. Whenever I turn my desktop pc on I am at first unable to access the Internet for a brief period and then all is ok, this then repeats hourly. My laptop has no problems whether wired or wifi connection. I have a Ubuntu Mint partition on the desktop pc and when booted into this have no problems. Also attached is an example of my ThinkBroadband monitor - the red spikes show when I lose internet connection and start when the desktop is turned on and repeat hourly. Windows Network Diagnostics reports no problems at the time. Unfortunately I think the infection (if there is one) could have been there some time (pre Win 10 update) as the desktop has not been used much in over a year due to the serious ilness of my late wife. MalwareBytes Antiwalware did find a registry entry for Hijack.Trojan.Siredef.C on 9th October. FRST.txt Addition.txt
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.