sirhenn Posted September 28, 2014 ID:884135 Share Posted September 28, 2014 here are both logs Addition.txtFRST.txt Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884136 Share Posted September 28, 2014 hi, i recently bought a new lenovo laptop (3 weeks old). about 5 days ago i started getting a notification about a detected item, "Malware:Win32/Caphaw" on my computer. so i bought the premium malwarebytes to find and get rid of it. so i run several scans and they find a couple things and remove them. however the security alert still appears... i dont know what i should do? Link to post Share on other sites More sharing options...
kevinf80 Posted September 28, 2014 ID:884138 Share Posted September 28, 2014 Hello and P2P/Piracy Warning: If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy. Open Malwarebytes Anti-Malware, from the Dashboard please Check for Updates by clicking the Update Now... linkWhen the update completes select > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware. Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button. When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected. In most cases, a restart will be required. Wait for the prompt to restart the computer to appear, then click on Yes. Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply. Next, Download AdwCleaner by Xplode onto your Desktop. Double click on Adwcleaner.exe to run the tool. Click on Scan Once the scan is done, click on the Clean button. You will get a prompt asking to close all programs. Click OK. Click OK again to reboot your computer. A text file will open after the restart. Please post the content of that logfile in your reply. You can also find the logfile at C:\AdwCleaner[sn].txt. Where n in the scan reference number Next, Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts. (re-enable when done)Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message. Next, Download Microsoft's " Malicious Software Removal Tool" and save direct to the desktopEnsure to get the correct version for your system.... 32 Bit version:https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en64 Bit version:https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en'>https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en Right click on the Tool, select “Run as Administrator” the tool will expand to the options WindowIn the "Scan Type" window, select Quick ScanPerform a scan and Click Finish when the scan is done.Retrieve the MSRT log as follows, and post it in your next reply: 1) Select the Windows key and R key together to open the "Run" function2) Type or Copy/Paste the following command to the "Run Line" and Press Enternotepad c:\windows\debug\mrt.log let me see those logs... Kevin Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884158 Share Posted September 28, 2014 ok here is the scan Malwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 9/28/2014Scan Time: 11:19:50 AMLogfile: Administrator: No Version: 2.00.2.1012Malware Database: v2014.09.28.06Rootkit Database: v2014.09.19.01License: PremiumMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 8.1CPU: x64File System: NTFSUser: matthenn Scan Type: Threat ScanResult: CompletedObjects Scanned: 347558Time Elapsed: 10 min, 42 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 0(No malicious items detected) Registry Values: 0(No malicious items detected) Registry Data: 0(No malicious items detected) Folders: 0(No malicious items detected) Files: 0(No malicious items detected) Physical Sectors: 0(No malicious items detected) (end) Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884161 Share Posted September 28, 2014 # AdwCleaner v3.310 - Report created 28/09/2014 at 11:33:18# Updated 12/09/2014 by Xplode# Operating System : Windows 8.1 (64 bits)# Username : matthenn - SIRHENN# Running from : C:\Users\matthenn\Downloads\AdwCleaner.exe# Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Users\matthenn\AppData\Local\Pokki ***** [ Scheduled Tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\Classes\pokkiValue Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]Key Deleted : HKCU\Software\IMKey Deleted : HKCU\Software\PokkiKey Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PokkiData Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\LenovoBrowserGuard\LenovoBrowserGuard\bin\SPVC32Loader.dllData Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\LenovoBrowserGuard\LenovoBrowserGuard\bin\SPVC64Loader.dll ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17278 -\\ Google Chrome v37.0.2062.124 [ File : C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [1494 octets] - [28/09/2014 11:32:20]AdwCleaner[s0].txt - [1352 octets] - [28/09/2014 11:33:18] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [1412 octets] ########## Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884164 Share Posted September 28, 2014 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.2.3 (09.27.2014:1)OS: Windows 8.1 x64Ran by matthenn on Sun 09/28/2014 at 11:45:20.52~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Sun 09/28/2014 at 11:46:53.76End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884165 Share Posted September 28, 2014 ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Mon Sep 22 11:56:57 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0 Results Summary:----------------No infection found.Microsoft Windows Malicious Software Removal Tool Finished On Mon Sep 22 12:00:21 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Wed Sep 24 21:39:38 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Wed Sep 24 21:39:50 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Thu Sep 25 18:42:00 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Thu Sep 25 18:43:01 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 20:02:18 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 20:02:52 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 20:07:00 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 20:07:06 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 21:42:04 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 21:42:06 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 22:03:05 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 22:03:07 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:05:21 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 23:05:23 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:10:29 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 23:10:30 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:16:33 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 23:16:34 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:22:58 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 23:22:59 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:28:00 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 23:28:01 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:35:11 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sat Sep 27 23:35:12 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sat Sep 27 23:48:41 2014 ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sun Sep 28 11:05:11 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sun Sep 28 11:06:04 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sun Sep 28 11:12:08 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sun Sep 28 11:12:10 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sun Sep 28 11:49:19 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sun Sep 28 11:49:50 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sun Sep 28 11:50:05 2014 Engine: 1.1.10904.0Signatures: 1.183.882.0Microsoft Windows Malicious Software Removal Tool Finished On Sun Sep 28 11:50:09 2014 Return code: 0 (0x0) ---------------------------------------------------------------------------------------Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)Started On Sun Sep 28 11:50:23 2014 here is the last log Engine: 1.1.10904.0Signatures: 1.183.882.0 Results Summary:----------------No infection found.Microsoft Windows Malicious Software Removal Tool Finished On Sun Sep 28 11:53:12 2014 Return code: 0 (0x0) Link to post Share on other sites More sharing options...
kevinf80 Posted September 28, 2014 ID:884167 Share Posted September 28, 2014 Do you stil receive the security alert you mentioned: security alert Malware: win32/caphaw next, Please download RogueKiller and save it to your desktop from the following link: http://www.bleepingcomputer.com/download/roguekiller/ Quit all running programs.For Windows XP, double-click to start.For Vista,Windows 7/8, Right-click on the program and select Run as Administrator to start and when prompted allow it to run.Read and accept the EULA (End User Licene Agreement)Click Scan to scan the system.When the scan completes select "Report" save to desktop. Close the program > Don't Fix anything!Post back the report which should be located on your desktop. Thanks, Kevin.. Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884182 Share Posted September 28, 2014 i still see it, i am downloading rougekiller now Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884185 Share Posted September 28, 2014 RogueKiller V9.2.13.0 [sep 25 2014] by Adlice Softwaremail : http://www.adlice.com/contact/Feedback : http://forum.adlice.comWebsite : http://www.adlice.com/softwares/roguekiller/Blog : http://www.adlice.com Operating System : Windows 8.1 (6.3.9200 ) 64 bits versionStarted in : Normal modeUser : matthenn [Admin rights]Mode : Scan -- Date : 09/28/2014 12:30:10 ¤¤¤ Bad processes : 2 ¤¤¤[suspicious.Path] RTFTrack.exe -- C:\Windows\RTFTrack.exe[7] -> KILLED [TermProc][suspicious.Path] SFPC Auto Updater.exe -- C:\Users\matthenn\AppData\Roaming\Developerts LLC USA\SFPC Auto Updater.exe[-] -> KILLED [TermProc] ¤¤¤ Registry Entries : 17 ¤¤¤[suspicious.Path] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | RtsFT : RTFTrack.exe -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 65.32.5.111 65.32.5.112 -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 65.32.5.111 65.32.5.112 -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7353E002-D965-48D9-A271-AD09AA38DF58} | DhcpNameServer : 65.32.5.111 65.32.5.112 -> FOUND[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{7353E002-D965-48D9-A271-AD09AA38DF58} | DhcpNameServer : 65.32.5.111 65.32.5.112 -> FOUND[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-458999206-887510418-135140731-1002\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-458999206-887510418-135140731-1002\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-458999206-887510418-135140731-1002\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-458999206-887510418-135140731-1002\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> FOUND[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> FOUND[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-458999206-887510418-135140731-1002\Software\Microsoft\Internet Explorer\Main | Start Page : www.google.com -> FOUND[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-458999206-887510418-135140731-1002\Software\Microsoft\Internet Explorer\Main | Start Page : www.google.com -> FOUND ¤¤¤ Scheduled tasks : 2 ¤¤¤[suspicious.Path] \\OFFICE2013ACT -- C:\ProgramData\Office2013\OFFICEICON.vbs -> FOUND[suspicious.Path] \\Secure Fast PC Auto Updater -- C:\Users\matthenn\AppData\Roaming\Developerts LLC USA\SFPC Auto Updater.exe (AUTOCHECK) -> FOUND ¤¤¤ Files : 0 ¤¤¤ ¤¤¤ HOSTS File : 0 ¤¤¤ ¤¤¤ Antirootkit : 0 (Driver: NOT LOADED [0xc000036b]) ¤¤¤ ¤¤¤ Web browsers : 0 ¤¤¤ ¤¤¤ MBR Check : ¤¤¤+++++ PhysicalDrive0: RTFMB016JGV2BWX +++++--- User ---[MBR] cb89ca7e5c69e6dcde9cd2d1c077de22[bSP] 0a9420da5d388cf72c9f5653515471d4 : Empty MBR CodePartition table:0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 2048 | Size: 15271 MBUser = LL1 ... OKUser = LL2 ... OK +++++ PhysicalDrive1: WDC WD10SPCX-24HWST0 +++++--- User ---[MBR] aab3e43f95a13a49025e350562140e51[bSP] 19ca968d62006e519e3e2d78698546b6 : Empty MBR CodePartition table:0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097151 MBUser = LL1 ... OKUser = LL2 ... OK Link to post Share on other sites More sharing options...
kevinf80 Posted September 28, 2014 ID:884198 Share Posted September 28, 2014 Re-Boot your system, run another scan with FRST, ensure all boxes are checkmarked (ticked) under "WhiteList" and "Addition.txt" is checkmarked (ticked) under "Optional scans" Run scan and post the fresh logs.... Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884200 Share Posted September 28, 2014 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-09-2014 01Ran by matthenn at 2014-09-28 13:28:43Running from C:\Users\matthenn\DownloadsBoot Mode: Normal========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AV: ThreatTrack Security VIPRE (Enabled - Up to date) {FFE93D16-FD09-0282-C7D3-8B1731B6A051}AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}AS: ThreatTrack Security VIPRE (Enabled - Up to date) {4488DCF2-DB33-0D0C-FD63-B0654A31EAEC}FW: ThreatTrack Security VIPRE (Enabled) {C7D2BC33-B766-03DA-EC8C-2222CF65E72A} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.810 - Curse)CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4107 - CyberLink Corp.)CyberLink PhotoDirector 3 (x32 Version: 3.0.1.4107 - CyberLink Corp.) HiddenCyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)CyberLink PowerDirector 10 (Version: 10.0.0.2810 - CyberLink Corp.) HiddenDolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)Dragon Assistant Application en-US version 1.5.8 (HKLM-x32\...\{1CCBE73F-4948-4711-8D12-22E2FD65D706}_is1) (Version: 1.5.8 - Nuance Communications, Inc.)Dragon Assistant Core Recognition Service version 1.1.10 (HKLM-x32\...\{E97BA7A6-46FC-4EBF-B24A-B8362948C696}_is1) (Version: 1.1.10 - Nuance Communications, Inc.)Dragon Assistant Installer version 1.5.8 (HKLM-x32\...\{D57A8269-3BE5-4D10-B882-64D0F2D448BF}_is1) (Version: 1.5.8 - Nuance Communications, Inc.)Dragon Assistant Language Data en-US version 1.1.3 (HKLM-x32\...\{4C0C1E4E-D3B1-4496-98EC-DA14D45EC855}_is1) (Version: 1.1.3 - Nuance Communications, Inc.)Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.32 - Lenovo)Energy Manager (x32 Version: 1.0.0.32 - Lenovo) HiddenExpressCache (HKLM\...\{6E55C9F8-138E-4128-8A9F-6464725BE98A}) (Version: 1.0.102.0 - Condusiv Technologies)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) HiddenIntel Experience Center - Configuration (x32 Version: 1.7.0.179 - Intel) HiddenIntel® Experience Center Desktop Software (HKLM-x32\...\{3608ec0a-56b4-4d9d-b038-9b3e51d72582}) (Version: 1.7.0.179 - Intel)Intel® Experience Center Driver (Version: 1.7.0.179 - Intel Corporation) HiddenIntel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)Intel® PRO/Wireless Driver (Version: 17.00.1000.1423 - Intel Corporation) HiddenIntel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)Intel® Rapid Storage Technology (Version: 12.8.1.1000 - Intel Corporation) HiddenIntel® Smart Connect Technology (HKLM\...\{D6FBF816-ACB8-46CC-ACC6-C8BBA85F497D}) (Version: 4.2.40.2418 - Intel Corporation)Intel® Update Manager (x32 Version: 1.6.2.69 - Intel Corporation) HiddenIntel® PROSet/Wireless Software (HKLM-x32\...\{b9007812-6a61-4dfc-8a0c-4c726c7dc43f}) (Version: 17.0.1 - Intel Corporation)Intel® PROSet/Wireless WiFi Software (Version: 17.0.0.0332 - Intel Corporation) HiddenIntel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) HiddenLeague of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)League of Legends (x32 Version: 3.0.1 - Riot Games) HiddenLenovo Browser Guard (HKLM-x32\...\LenovoBrowserGuard) (Version: 2.12.1.2 - ClientConnect LTD)Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10249 - Realtek Semiconductor Corp.)Lenovo Experience Improvement (HKLM\...\LenovoExperienceImprovement) (Version: 1.0.4.0 - Lenovo)Lenovo Motion Control (HKLM-x32\...\InstallShield_{A7B68D5F-A468-493F-AD3D-625001293E19}) (Version: 2.0.0.0807 - PointGrab)Lenovo Motion Control (x32 Version: 2.0.0.0807 - PointGrab) HiddenLenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.)Lenovo OneKey Recovery (Version: 8.0.0.2105 - CyberLink Corp.) HiddenLenovo Photos (HKLM-x32\...\Lenovo Photos) (Version: 4.8.5 - CEWE COLOR AG u Co. OHG)Lenovo pointing device (HKLM\...\Elantech) (Version: 11.4.27.3 - ELAN Microelectronic Corp.)Lenovo Reach (HKLM-x32\...\{3245D8C8-7FE0-4FD4-B04B-2720A333D592}) (Version: 1.1.3.5 - Stoneware, Inc.)Lenovo VeriFace (HKLM\...\Lenovo VeriFace) (Version: 5.0.13.5261 - Lenovo)Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.1.3.5000 - Maxthon International Limited)McAfee SafeKey(uninstall only) (HKLM-x32\...\SafeKey) (Version: 2.1.6 - McAfee, Inc.)Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) HiddenNitro Pro 9 (HKLM\...\{70B831B7-A8EE-4C5F-8F34-F383D24B3A04}) (Version: 9.0.5.9 - Nitro)NVIDIA Control Panel 327.62 (Version: 327.62 - NVIDIA Corporation) HiddenNVIDIA Graphics Driver 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) HiddenNVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) HiddenNVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) HiddenNVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) HiddenRealtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.18.621.2013 - Realtek)Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7032 - Realtek Semiconductor Corp.)SafeConnect (HKLM-x32\...\SafeConnect) (Version: - )Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)StageLight (HKLM\...\StageLight) (Version: 1.3.0.4350 - Open Labs, LLC.)Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)TrojanHunter 5.6 (HKLM-x32\...\TrojanHunter_is1) (Version: 5.6 - Bytelayer AB)Update for Microsoft en-us Dictionary (Version: 16.1.1111.1 - Microsoft Corporation) HiddenUser Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 3.0.0.3 - Lenovo)User Manuals (x32 Version: 3.0.0.3 - Lenovo) HiddenVIPRE Internet Security (HKLM-x32\...\{C1D1FC57-3EB9-4B21-BCA3-F1C927508200}) (Version: 7.0.6.2 - ThreatTrack Security, Inc.)VIPRE Internet Security (x32 Version: 7.0.6.2 - ThreatTrack Security, Inc.) HiddenWajam (HKLM-x32\...\Wajam Web Enhancer) (Version: 1.0.6.37 (i1.0) - Wajam) <==== ATTENTIONWindows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-458999206-887510418-135140731-1002_Classes\CLSID\{913f3ade-80e2-47b6-8af3-1f0a7a792b71}\InprocServer32 -> C:\windows\system32\dfshim.dll (Microsoft Corporation) ==================== Restore Points ========================= 21-09-2014 21:37:43 Installed Microsoft Visual C++ 2005 Redistributable (x64)26-09-2014 22:00:23 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 09:25 - 2013-08-22 09:25 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTaskTask: {08651380-BC5A-41FC-9040-2F1035785AA5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exeTask: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsListTask: {0D2A0A95-0A66-4F22-83E6-403A19663A2E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.)Task: {1C293BE9-F823-41F7-A158-0D048456428F} - System32\Tasks\OFFICE2013ACT => C:\ProgramData\Office2013\OFFICEICON.vbs [2013-06-03] ()Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTaskTask: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulateTask: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)Task: {3F664DDC-78F1-431C-A7F2-5D33DF3D6101} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exeTask: {46D48DEC-5BE9-463C-9179-AA594BFA2AC6} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [2013-06-03] (Lenovo)Task: {483E18F4-FD64-4BCD-B57A-F01D9FAE6067} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exeTask: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalanceTask: {51987D48-7A55-4922-8B2D-25798316FD09} - System32\Tasks\Microsoft\Windows\DiskFootprint\DiagnosticsTask: {54780DC8-A27E-4271-9EFC-3B5486DCB299} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2014-08-29] (Microsoft Corporation)Task: {5A9E2817-B420-491A-8983-CFBFCEE3ADB0} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauservTask: {5DC7F33E-9CBF-4631-AC99-0C7719A3E990} - System32\Tasks\Secure Fast PC Autorun => C:\Program Files (x86)\Developerts LLC\Secure Fast PC\Secure Fast PC.exeTask: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play CleanupTask: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance TaskTask: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTaskTask: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryStateTask: {7DFDC1B4-6054-45E9-821E-31B8170A181A} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUploadTask: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance TaskTask: {8C6C7B9F-1137-4607-A1D7-64578DFC1ED2} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-ValidationTask: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTaskTask: {9989C528-1A56-4496-91D8-D9A37A6E3951} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-ManagementTask: {9E142660-4283-49FB-BF12-C8E50E5982D1} - System32\Tasks\Secure Fast PC Auto Updater => C:\Users\matthenn\AppData\Roaming\Developerts LLC USA\SFPC Auto Updater.exe [2014-09-03] ()Task: {9E647F77-6B2E-42F0-891F-1A6C6A5FAA52} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.)Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance WorkTask: {AA52673D-F495-4090-B318-58BFE11551C5} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\Bootstrap.exe [2013-07-03] (Intel Corporation)Task: {B9DFB2DE-9118-4AEC-8033-307F8B78D7E9} - System32\Tasks\ISM-UpdateService-e57b59e7-5862-4250-9ce0-76fb411dc0d2-Logon => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\Bootstrap.exe [2013-07-03] (Intel Corporation)Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTaskTask: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensingTask: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon SynchronizationTask: {E2DA15CF-1584-45A6-B2D4-53893E365A4E} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRETask: {F43A1B99-5E22-449F-ACD0-3843D60CEF4C} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\mxup.exe [2013-10-14] (Maxthon International ltd.)Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-06-04 13:59 - 2013-10-31 19:13 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll2013-08-01 20:31 - 2013-08-01 20:31 - 00198120 _____ () C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe2013-08-01 20:31 - 2013-08-01 20:31 - 00054760 _____ () C:\Program Files\Intel\Intel® Smart Connect Technology Agent\NetworkHeuristic.dll2013-08-01 20:31 - 2013-08-01 20:31 - 00034792 _____ () C:\Program Files\Intel\Intel® Smart Connect Technology Agent\ISCTNetMon.dll2014-06-04 14:48 - 2012-04-24 22:43 - 00390632 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe2014-06-04 14:52 - 2014-06-04 14:52 - 00068368 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe2014-06-04 14:52 - 2014-06-04 14:52 - 00669288 _____ () C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfDataStorageInterface.dll2014-06-04 14:52 - 2013-05-02 14:26 - 00387984 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\fl_core.dll2014-06-04 14:52 - 2013-05-02 14:26 - 01165712 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_asr.dll2014-06-04 14:52 - 2013-05-02 14:26 - 00199056 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_base.dll2014-06-04 14:52 - 2013-05-02 14:26 - 01132944 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_pron.dll2014-06-04 14:52 - 2013-05-02 14:26 - 00035216 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\vocon3200_platform.dll2014-06-04 14:52 - 2013-05-02 14:26 - 00229264 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\sdxg.dll2014-06-04 14:52 - 2013-05-02 14:25 - 00027648 _____ () C:\Program Files (x86)\Nuance\Dragon Assistant\Core\WASAPIResamplingStreamCOMServer.dll2012-11-23 09:53 - 2012-11-23 09:53 - 00329592 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\apistrings.dll2012-11-23 09:56 - 2012-11-23 09:56 - 00159608 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\modlop.dll2012-11-23 09:54 - 2012-11-23 09:54 - 00100728 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\httpserverattplugin.dll2012-11-23 09:46 - 2012-11-23 09:46 - 02029600 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\crmimodule.dll2012-11-23 09:58 - 2012-11-23 09:58 - 00208760 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\patchautodownload.dll2014-07-17 10:30 - 2014-07-17 10:30 - 00449136 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\remediationattplugin.dll2012-12-07 10:02 - 2012-12-07 10:02 - 00183160 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\scanmngsys.dll2012-11-23 09:58 - 2012-11-23 09:58 - 00049528 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\schedcompactdb.dll2012-11-23 09:58 - 2012-11-23 09:58 - 00054648 _____ () C:\Program Files (x86)\GFI\LanGuard 11 Agent\schedupdates.dll2012-02-20 22:26 - 2012-02-20 22:26 - 00160768 _____ () C:\Program Files (x86)\VIPRE\unrar.dll2014-09-27 17:33 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl2014-09-27 17:33 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl2014-09-27 17:33 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl2014-09-27 17:33 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll2014-09-27 17:33 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll2014-09-25 19:30 - 2014-06-20 06:08 - 00192376 _____ () C:\Program Files (x86)\VIPRE\Definitions\libBase64.dll2014-09-25 19:30 - 2014-06-20 06:08 - 00180088 _____ () C:\Program Files (x86)\VIPRE\Definitions\libMachoUniv.dll2013-08-07 19:12 - 2013-08-07 19:12 - 02428416 _____ () C:\Program Files (x86)\Lenovo\Motion Control\WebcamSplitterFilter.ax2014-09-24 21:54 - 2014-09-23 00:06 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libglesv2.dll2014-09-24 21:54 - 2014-09-23 00:06 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libegl.dll2014-09-24 21:54 - 2014-09-23 00:07 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll2014-09-24 21:54 - 2014-09-23 00:07 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll2014-09-24 21:54 - 2014-09-23 00:06 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll2014-09-24 21:54 - 2014-09-23 00:07 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll2014-06-04 14:00 - 2013-09-04 11:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\matthenn\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBPIMSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBPIMSvc => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-458999206-887510418-135140731-500 - Administrator - Disabled)Guest (S-1-5-21-458999206-887510418-135140731-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-458999206-887510418-135140731-1004 - Limited - Enabled)matthenn (S-1-5-21-458999206-887510418-135140731-1002 - Administrator - Enabled) => C:\Users\matthennUpdatusUser (S-1-5-21-458999206-887510418-135140731-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors:==================Error: (09/28/2014 01:11:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Activation of app Microsoft.SkypeApp_kzf8qxf38zg5c!App failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (09/28/2014 00:56:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Activation of app Microsoft.SkypeApp_kzf8qxf38zg5c!App failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (09/28/2014 00:41:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Activation of app Microsoft.SkypeApp_kzf8qxf38zg5c!App failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (09/28/2014 00:26:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Activation of app Microsoft.SkypeApp_kzf8qxf38zg5c!App failed with error: -2144927151 See the Microsoft-Windows-TWinUI/Operational log for additional information. System errors:=============Error: (09/28/2014 01:24:25 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Error: (09/28/2014 01:23:29 PM) (Source: DCOM) (EventID: 10010) (User: SIRHENN)Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (09/28/2014 01:23:29 PM) (Source: DCOM) (EventID: 10010) (User: SIRHENN)Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (09/28/2014 01:21:35 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Error: (09/28/2014 01:16:25 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Error: (09/28/2014 01:11:15 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Error: (09/28/2014 01:06:04 PM) (Source: BROWSER) (EventID: 8020) (User: )Description: The browser was unable to promote itself to master browser. The computer that currentlybelieves it is the master browser is unknown. Error: (09/28/2014 01:06:00 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Error: (09/28/2014 01:00:50 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Error: (09/28/2014 00:55:39 PM) (Source: NetBT) (EventID: 4321) (User: )Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 192.168.0.11.The computer with the IP address 192.168.0.8 did not allow the name to be claimed bythis computer. Microsoft Office Sessions:=========================Error: (09/28/2014 01:11:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927151 Error: (09/28/2014 00:56:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927151 Error: (09/28/2014 00:41:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927151 Error: (09/28/2014 00:26:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SIRHENN)Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927151 CodeIntegrity Errors:=================================== Date: 2014-09-23 15:46:10.096 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-09-23 15:42:00.939 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-09-23 15:41:53.357 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-09-23 15:41:52.203 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-09-23 15:41:21.185 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. Date: 2014-09-23 15:41:19.943 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume6\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel® Core i7-4510U CPU @ 2.00GHzPercentage of memory in use: 43%Total physical RAM: 8115.27 MBAvailable physical RAM: 4592.07 MBTotal Pagefile: 9395.27 MBAvailable Pagefile: 5532.03 MBTotal Virtual: 131072 MBAvailable Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (Windows8_OS) (Fixed) (Total:889.29 GB) (Free:810.74 GB) NTFS ==>[system with boot components (obtained from reading drive)]Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.52 GB) NTFS ==================== MBR & Partition Table ================== ========================================================Disk: 0 (Size: 14.9 GB) (Disk ID: 74F02DEA)Partition 1: (Not Active) - (Size=14.9 GB) - (Type=73) ========================================================Disk: 1 (Size: 931.5 GB) (Disk ID: FA8ACAE1) Partition: GPT Partition Type. ==================== End Of Log ============================ Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884201 Share Posted September 28, 2014 the FRST is to long to post, how can i make it an attachment Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884204 Share Posted September 28, 2014 Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-09-2014 01Ran by matthenn (administrator) on SIRHENN on 28-09-2014 13:27:39Running from C:\Users\matthenn\DownloadsLoaded Profiles: UpdatusUser & matthenn (Available profiles: UpdatusUser & matthenn)Platform: Windows 8.1 (X64) OS Language: English (United States)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe(GFI Software Development Ltd.) C:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe() C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe(Maxthon) C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe() C:\Program Files\CyberLink\Shared files\RichVideo64.exe(ThreatTrack Security, Inc.) C:\Program Files (x86)\VIPRE\SBPIMSvc.exe(Impulse Point, LLC) C:\Program Files (x86)\SafeConnect\scManager.sys(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe(Wajam Internet Technologies Inc.) C:\Program Files\Wajam Web Enhancer\wajam_64.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe(Wajam Internet Technologies Inc.) C:\Program Files\Wajam Web Enhancer\wajam.exe(Wajam Internet Technologies Inc.) C:\Program Files\Wajam Web Enhancer\wajam_64.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(Intel Corporation) C:\Windows\System32\igfxtray.exe(Intel Corporation) C:\Windows\System32\igfxsrvc.exe(Intel Corporation) C:\Windows\System32\hkcmd.exe(Intel Corporation) C:\Windows\System32\igfxpers.exe(Microsoft Corporation) C:\Windows\System32\rundll32.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe(Realtek semiconductor) C:\Windows\RTFTrack.exe(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe(Impulse Point, LLC) C:\Program Files (x86)\SafeConnect\SCClient.exe(ThreatTrack Security, Inc.) C:\Program Files (x86)\VIPRE\SBAMTray.exe(ThreatTrack Security, Inc.) C:\Program Files (x86)\VIPRE\SBAMSvc.exe(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.6\THGuard.exe(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe(Microsoft Corporation) C:\Windows\System32\WWAHost.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe(Farbar) C:\Users\matthenn\Downloads\FRST64 (2).exe(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayAppHKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894664 2013-09-04] (ELAN Microelectronics Corp.)HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2013-10-18] (Realtek semiconductor)HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-06-04] (Lenovo(beijing) Limited)HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-06-04] (Lenovo(beijing) Limited)HKLM\...\Run: [sBRegRebootCleaner] => C:\Program Files (x86)\VIPRE\SBRC.exe [202128 2013-09-05] (ThreatTrack Security, Inc.)HKLM-x32\...\Run: [sBAMTray] => C:\Program Files (x86)\VIPRE\SBAMTray.exe [3216272 2013-09-05] (ThreatTrack Security, Inc.)HKLM-x32\...\Run: [THGuard] => C:\Program Files (x86)\TrojanHunter 5.6\THGuard.exe [1082832 2014-08-20] (Mischel Internet Security)HKLM-x32\...\Run: [sDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation)AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SafeConnect.lnkShortcutTarget: SafeConnect.lnk -> C:\Program Files (x86)\SafeConnect\SCClient.exe (Impulse Point, LLC)Startup: C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJBHKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://home.lenovo.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://home.lenovo.comSearchScopes: HKLM - {C2E173CF-26A2-4B39-BD28-B4EF0D458152} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJBSearchScopes: HKLM-x32 - {C2E173CF-26A2-4B39-BD28-B4EF0D458152} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJBSearchScopes: HKCU - {C2E173CF-26A2-4B39-BD28-B4EF0D458152} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJBBHO: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll (McAfee)BHO-x32: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files (x86)\VIPRE\VSGN.dll ()BHO-x32: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar.dll (McAfee)Toolbar: HKLM - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll (McAfee)Toolbar: HKLM-x32 - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar.dll (McAfee)Toolbar: HKLM-x32 - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files (x86)\VIPRE\VSGN.dll ()Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - No FileHandler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)Handler-x32: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\VSGN.dll ()Tcpip\Parameters: [DhcpNameServer] 65.32.5.111 65.32.5.112 FireFox:========FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) Chrome: =======CHR Profile: C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Slides) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-20]CHR Extension: (McAfee SafeKey) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\agbnjankikoaabjkmfbaceggjliabkbn [2014-09-21]CHR Extension: (Google Docs) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-20]CHR Extension: (Google Drive) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-20]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-25]CHR Extension: (YouTube) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-20]CHR Extension: (Google Search) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-20]CHR Extension: (Google Sheets) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-20]CHR Extension: (Google Wallet) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-20]CHR Extension: (Gmail) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-20]CHR HKLM-x32\...\Chrome\Extension: [agbnjankikoaabjkmfbaceggjliabkbn] - C:\Program Files (x86)\SafeKey\lpchrome.crx [2014-09-21]CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 DACoreService; C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe [432528 2013-05-02] (Nuance Communications, Inc.)R2 ETDService; C:\Program Files\Elantech\ETDService.exe [92160 2013-07-29] (ELAN Microelectronics Corp.)R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107792 2013-07-03] (Condusiv Technologies)R2 gfi_lanss11_attservice; C:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exe [133496 2012-11-23] (GFI Software Development Ltd.)R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-22] (Intel Corporation)R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel® Corporation) [File not signed]S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel® Corporation)R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-04] (Intel Corporation)R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-19] (Intel Corporation)R2 ISCTAgent; C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation)S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)R2 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1844024 2013-12-18] (Maxthon)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-17] ()S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-12] (Nitro PDF Software)R2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [161072 2013-08-07] (PointGrab LTD)S4 PG_Service_Launcher; C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe [345408 2013-08-07] (PointGrab LTD)R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()R2 SBAMSvc; C:\Program Files (x86)\VIPRE\SBAMSvc.exe [3937472 2013-09-05] (ThreatTrack Security, Inc.)R2 SBPIMSvc; C:\Program Files (x86)\VIPRE\SBPIMSvc.exe [176016 2013-09-05] (ThreatTrack Security, Inc.)R2 SCManager; C:\Program Files (x86)\SafeConnect\scManager.sys [176520 2012-11-19] (Impulse Point, LLC)R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation)S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation)R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-06-04] () <==== ATTENTIONS3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation)S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation)R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-17] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.)R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [22280 2013-08-05] (ELAN Microelectronic Corp.)R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25872 2013-07-03] (Condusiv Technologies)R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112912 2013-07-03] (Condusiv Technologies)S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [118728 2013-09-19] (Intel Corporation)R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-01] ()R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-01] ()R3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-01] ()R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-28] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3434464 2014-03-13] (Intel Corporation)S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8876248 2013-10-18] (Realtek Semiconductor Corp.)R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [88928 2013-06-18] (ThreatTrack Security, Inc.)U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [34808 2014-09-28] ()S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation)S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-28 13:26 - 2014-09-28 13:26 - 02108928 _____ (Farbar) C:\Users\matthenn\Downloads\FRST64 (2).exe2014-09-28 12:26 - 2014-09-28 12:26 - 04893784 _____ () C:\Users\matthenn\Downloads\RogueKiller.exe2014-09-28 12:26 - 2014-09-28 12:26 - 00034808 _____ () C:\windows\system32\Drivers\TrueSight.sys2014-09-28 12:26 - 2014-09-28 12:26 - 00000000 ____D () C:\ProgramData\RogueKiller2014-09-28 11:48 - 2014-09-28 11:49 - 31766208 _____ (Microsoft Corporation) C:\Users\matthenn\Downloads\Windows-KB890830-x64-V5.16.exe2014-09-28 11:47 - 2014-09-28 11:47 - 01699276 _____ (Thisisu) C:\Users\matthenn\Downloads\JRT (1).exe2014-09-28 11:46 - 2014-09-28 11:46 - 00000625 _____ () C:\Users\matthenn\Desktop\JRT.txt2014-09-28 11:45 - 2014-09-28 11:45 - 00000000 ____D () C:\windows\ERUNT2014-09-28 11:44 - 2014-09-28 11:44 - 01699276 _____ (Thisisu) C:\Users\matthenn\Downloads\JRT.exe2014-09-28 11:35 - 2014-09-28 11:35 - 01373475 _____ () C:\Users\matthenn\Downloads\AdwCleaner (1).exe2014-09-28 11:32 - 2014-09-28 11:33 - 00000000 ____D () C:\AdwCleaner2014-09-28 11:32 - 2014-09-28 11:32 - 01373475 _____ () C:\Users\matthenn\Downloads\AdwCleaner.exe2014-09-28 11:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll2014-09-28 09:57 - 2014-09-28 09:57 - 00108435 _____ () C:\Users\matthenn\Documents\FRST.txt2014-09-28 09:57 - 2014-09-28 09:57 - 00033245 _____ () C:\Users\matthenn\Documents\Addition.txt2014-09-28 09:28 - 2014-09-28 09:42 - 00033245 _____ () C:\Users\matthenn\Downloads\Addition.txt2014-09-28 09:27 - 2014-09-28 13:28 - 00020290 _____ () C:\Users\matthenn\Downloads\FRST.txt2014-09-28 09:27 - 2014-09-28 13:27 - 00000000 ____D () C:\FRST2014-09-28 09:26 - 2014-09-28 09:26 - 02108928 _____ (Farbar) C:\Users\matthenn\Downloads\FRST64 (1).exe2014-09-28 09:26 - 2014-09-28 09:26 - 01100288 _____ (Farbar) C:\Users\matthenn\Downloads\FRST.exe2014-09-28 09:25 - 2014-09-28 09:25 - 02108928 _____ (Farbar) C:\Users\matthenn\Downloads\FRST64.exe2014-09-27 21:29 - 2014-09-27 21:29 - 00001738 _____ () C:\windows\SysWOW64\EmailAVConfig.xml2014-09-27 18:07 - 2014-09-27 18:07 - 00000629 _____ () C:\windows\wininit.ini2014-09-27 17:46 - 2014-09-27 17:46 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Curse Advertising2014-09-27 17:34 - 2014-09-27 17:34 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking2014-09-27 17:33 - 2014-09-27 18:07 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy2014-09-27 17:33 - 2014-09-27 17:37 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 22014-09-27 17:33 - 2014-09-27 17:33 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\matthenn\Downloads\spybot-2.4.exe2014-09-27 17:33 - 2014-09-27 17:33 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk2014-09-27 17:33 - 2014-09-27 17:33 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk2014-09-27 17:33 - 2014-09-27 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 22014-09-27 17:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe2014-09-27 17:29 - 2014-09-27 17:29 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\deb27c1a-00e6-4263-94b2-8b78ea4d32ae2014-09-27 17:24 - 2014-09-27 17:24 - 00000000 ____D () C:\Users\matthenn\Documents\matt henn.photolibrary2014-09-27 17:24 - 2014-09-27 17:24 - 00000000 ____D () C:\Users\matthenn\Documents\iMovie Projects.localized2014-09-27 17:23 - 2014-09-27 17:23 - 00020480 ___SH () C:\Users\matthenn\Documents\Thumbs.db2014-09-27 17:22 - 2014-09-27 17:23 - 00000000 ____D () C:\Users\matthenn\Documents\digital art2014-09-27 17:22 - 2014-09-27 17:22 - 00000000 ____D () C:\Users\matthenn\Documents\School2014-09-27 17:22 - 2014-09-27 17:22 - 00000000 ____D () C:\Users\matthenn\Documents\2014-04-09 new photos2014-09-27 17:21 - 2014-09-27 17:23 - 00000000 ____D () C:\Users\matthenn\Documents\Project 32014-09-27 17:21 - 2014-09-27 17:21 - 00000000 ____D () C:\Users\matthenn\Documents\other2014-09-27 17:21 - 2014-09-27 17:21 - 00000000 ____D () C:\Users\matthenn\Documents\New folder2014-09-27 16:52 - 2014-09-27 16:52 - 00002259 _____ () C:\windows\epplauncher.mif2014-09-27 16:51 - 2014-09-27 16:52 - 14087848 _____ (Microsoft Corporation) C:\Users\matthenn\Downloads\mseinstall.exe2014-09-26 20:36 - 2014-09-26 20:36 - 00001188 _____ () C:\windows\SysWOW64\ServiceConfig.xml2014-09-26 19:42 - 2014-09-26 19:42 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\TrojanHunter2014-09-26 19:31 - 2014-09-26 19:33 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.62014-09-26 19:31 - 2014-09-26 19:31 - 00059392 ____R () C:\windows\SysWOW64\streamhlp.dll2014-09-26 19:31 - 2014-09-26 19:31 - 00001104 _____ () C:\Users\matthenn\Desktop\TrojanHunter.lnk2014-09-26 19:31 - 2014-09-26 19:31 - 00000000 ____D () C:\ProgramData\TrojanHunter2014-09-26 19:31 - 2014-09-26 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrojanHunter2014-09-26 19:30 - 2014-09-26 19:30 - 04334200 _____ (Bytelayer AB ) C:\Users\matthenn\Downloads\TrojanHunterSetup.exe2014-09-26 19:05 - 2014-09-26 19:05 - 07822880 _____ (TeamViewer GmbH) C:\Users\matthenn\Downloads\TeamViewer_Setup.exe2014-09-26 19:05 - 2014-09-26 19:05 - 06588560 _____ (TeamViewer GmbH) C:\Users\matthenn\Downloads\TeamViewer_Setup_en (1).exe2014-09-26 19:05 - 2014-09-26 19:05 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\TeamViewer2014-09-26 19:04 - 2014-09-26 19:04 - 06588560 _____ (TeamViewer GmbH) C:\Users\matthenn\Downloads\TeamViewer_Setup_en.exe2014-09-26 10:04 - 2014-09-26 10:35 - 00000000 ____D () C:\Program Files (x86)\Steam2014-09-26 10:04 - 2014-09-26 10:04 - 00000982 _____ () C:\Users\Public\Desktop\Steam.lnk2014-09-26 10:04 - 2014-09-26 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam2014-09-26 10:03 - 2014-09-26 10:03 - 01142392 _____ () C:\Users\matthenn\Downloads\SteamSetup.exe2014-09-25 21:25 - 2014-09-27 18:38 - 00000000 ____D () C:\Users\matthenn\AppData\Local\CrashDumps2014-09-25 20:15 - 2014-09-28 13:24 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys2014-09-25 20:15 - 2014-09-25 20:15 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-09-25 20:15 - 2014-09-25 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-09-25 20:15 - 2014-09-25 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes2014-09-25 20:15 - 2014-09-25 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-09-25 20:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys2014-09-25 20:15 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys2014-09-25 20:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys2014-09-25 20:14 - 2014-09-25 20:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\matthenn\Downloads\mbam-setup-2.0.2.1012.exe2014-09-25 19:30 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiutil.sys2014-09-25 19:30 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiark.sys2014-09-25 19:28 - 2014-09-25 19:28 - 00001921 _____ () C:\Users\Public\Desktop\VIPRE.lnk2014-09-25 19:28 - 2014-09-25 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIPRE2014-09-25 19:28 - 2013-09-05 21:33 - 00048016 _____ (ThreatTrack Security, Inc.) C:\windows\system32\sbbd.exe2014-09-25 19:28 - 2013-07-04 21:02 - 00260816 _____ (GFI Software) C:\windows\system32\Drivers\SbFw.sys2014-09-25 19:28 - 2013-07-04 21:02 - 00063184 _____ (GFI Software) C:\windows\system32\Drivers\sbhips.sys2014-09-25 19:28 - 2012-09-24 20:26 - 00120608 _____ (GFI Software) C:\windows\system32\Drivers\SbFwIm.sys2014-09-25 19:27 - 2014-09-26 18:19 - 00000000 ____D () C:\ProgramData\VIPRE2014-09-25 19:27 - 2014-09-25 19:27 - 00000000 ____D () C:\ProgramData\GFI2014-09-25 19:27 - 2014-09-25 19:27 - 00000000 ____D () C:\Program Files (x86)\GFI2014-09-25 19:25 - 2014-09-26 09:26 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\VIPRE2014-09-25 19:25 - 2014-09-25 19:30 - 00000000 ____D () C:\Program Files (x86)\VIPRE2014-09-25 19:25 - 2014-09-25 19:25 - 06588304 _____ (ThreatTrack Security, Inc) C:\Users\matthenn\Downloads\setup-vipre-internet-security-en-us.exe2014-09-25 19:25 - 2014-09-25 19:25 - 00000000 ____D () C:\Users\matthenn\AppData\Local\VIPRE2014-09-25 11:36 - 2014-09-25 11:36 - 01464136 _____ (Impulse Point, LLC) C:\Users\matthenn\Downloads\ServiceInstaller (1).exe2014-09-24 13:48 - 2014-09-24 13:48 - 00000000 ____D () C:\Users\matthenn\AppData\Local\SFPC_Auto_Updater2014-09-24 13:33 - 2014-09-24 13:33 - 00004014 _____ () C:\windows\System32\Tasks\Secure Fast PC Auto Updater2014-09-23 21:37 - 2014-09-23 21:37 - 00895120 _____ (Google Inc.) C:\Users\matthenn\Downloads\ChromeSetup (1).exe2014-09-23 21:36 - 2014-09-23 21:36 - 00895120 _____ (Google Inc.) C:\Users\matthenn\Downloads\ChromeSetup.exe2014-09-23 21:36 - 2014-09-23 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2014-09-23 15:40 - 2014-09-23 15:40 - 00002531 _____ () C:\Users\Public\Desktop\Skype.lnk2014-09-23 15:40 - 2014-09-23 15:40 - 00000000 ___RD () C:\Program Files (x86)\Skype2014-09-23 15:40 - 2014-09-23 15:40 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Skype2014-09-23 15:40 - 2014-09-23 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2014-09-23 15:40 - 2014-07-24 11:28 - 00468288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS2014-09-23 15:40 - 2014-07-24 11:28 - 00419648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys2014-09-23 15:40 - 2014-07-24 11:28 - 00412992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys2014-09-23 15:40 - 2014-07-24 11:28 - 00280384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys2014-09-23 15:40 - 2014-07-24 11:28 - 00143680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys2014-09-23 15:40 - 2014-07-24 11:25 - 00054752 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe2014-09-23 15:40 - 2014-07-24 11:23 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll2014-09-23 15:40 - 2014-07-24 11:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll2014-09-23 15:40 - 2014-07-24 11:20 - 21266336 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll2014-09-23 15:40 - 2014-07-24 11:20 - 00645592 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll2014-09-23 15:40 - 2014-07-24 11:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe2014-09-23 15:40 - 2014-07-24 11:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL2014-09-23 15:40 - 2014-07-24 11:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe2014-09-23 15:40 - 2014-07-24 11:07 - 07424320 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe2014-09-23 15:40 - 2014-07-24 11:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys2014-09-23 15:40 - 2014-07-24 11:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi2014-09-23 15:40 - 2014-07-24 11:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe2014-09-23 15:40 - 2014-07-24 11:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi2014-09-23 15:40 - 2014-07-24 11:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe2014-09-23 15:40 - 2014-07-24 11:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00818624 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll2014-09-23 15:40 - 2014-07-24 10:57 - 02515264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys2014-09-23 15:40 - 2014-07-24 10:57 - 00475968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys2014-09-23 15:40 - 2014-07-24 09:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll2014-09-23 15:40 - 2014-07-24 09:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL2014-09-23 15:40 - 2014-07-24 09:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe2014-09-23 15:40 - 2014-07-24 09:46 - 18760328 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll2014-09-23 15:40 - 2014-07-24 09:46 - 00477200 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll2014-09-23 15:40 - 2014-07-24 09:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00674512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll2014-09-23 15:40 - 2014-07-24 07:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL2014-09-23 15:40 - 2014-07-24 07:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys2014-09-23 15:40 - 2014-07-24 07:45 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys2014-09-23 15:40 - 2014-07-24 07:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys2014-09-23 15:40 - 2014-07-24 07:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys2014-09-23 15:40 - 2014-07-24 07:42 - 01200640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys2014-09-23 15:40 - 2014-07-24 07:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys2014-09-23 15:40 - 2014-07-24 07:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys2014-09-23 15:40 - 2014-07-24 07:41 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys2014-09-23 15:40 - 2014-07-24 07:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys2014-09-23 15:40 - 2014-07-24 07:33 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\wups.dll2014-09-23 15:40 - 2014-07-24 07:33 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll2014-09-23 15:40 - 2014-07-24 07:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll2014-09-23 15:40 - 2014-07-24 07:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll2014-09-23 15:40 - 2014-07-24 07:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll2014-09-23 15:40 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL2014-09-23 15:40 - 2014-07-24 06:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll2014-09-23 15:40 - 2014-07-24 06:33 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll2014-09-23 15:40 - 2014-07-24 06:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl2014-09-23 15:40 - 2014-07-24 06:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll2014-09-23 15:40 - 2014-07-24 06:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll2014-09-23 15:40 - 2014-07-24 06:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll2014-09-23 15:40 - 2014-07-24 06:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll2014-09-23 15:40 - 2014-07-24 06:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe2014-09-23 15:40 - 2014-07-24 06:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll2014-09-23 15:40 - 2014-07-24 06:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll2014-09-23 15:40 - 2014-07-24 06:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll2014-09-23 15:40 - 2014-07-24 06:06 - 00438272 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll2014-09-23 15:40 - 2014-07-24 06:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll2014-09-23 15:40 - 2014-07-24 05:53 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll2014-09-23 15:40 - 2014-07-24 05:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll2014-09-23 15:40 - 2014-07-24 05:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll2014-09-23 15:40 - 2014-07-24 05:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl2014-09-23 15:40 - 2014-07-24 05:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll2014-09-23 15:40 - 2014-07-24 05:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll2014-09-23 15:40 - 2014-07-24 05:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll2014-09-23 15:40 - 2014-07-24 05:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll2014-09-23 15:40 - 2014-07-24 05:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe2014-09-23 15:40 - 2014-07-24 05:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll2014-09-23 15:40 - 2014-07-24 05:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll2014-09-23 15:40 - 2014-07-24 05:23 - 00328704 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll2014-09-23 15:40 - 2014-07-24 05:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll2014-09-23 15:40 - 2014-07-24 05:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll2014-09-23 15:40 - 2014-07-24 05:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll2014-09-23 15:40 - 2014-07-24 05:13 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll2014-09-23 15:40 - 2014-07-24 05:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll2014-09-23 15:40 - 2014-07-24 05:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe2014-09-23 15:40 - 2014-07-24 05:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll2014-09-23 15:40 - 2014-07-24 05:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll2014-09-23 15:40 - 2014-07-24 05:09 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll2014-09-23 15:40 - 2014-07-24 05:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll2014-09-23 15:40 - 2014-07-24 05:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe2014-09-23 15:40 - 2014-07-24 05:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll2014-09-23 15:40 - 2014-07-24 05:02 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll2014-09-23 15:40 - 2014-07-24 04:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll2014-09-23 15:40 - 2014-07-24 04:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll2014-09-23 15:40 - 2014-07-24 04:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll2014-09-23 15:40 - 2014-07-24 04:49 - 01361408 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll2014-09-23 15:40 - 2014-07-24 04:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll2014-09-23 15:40 - 2014-07-24 04:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll2014-09-23 15:40 - 2014-07-24 04:49 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll2014-09-23 15:40 - 2014-07-24 04:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll2014-09-23 15:40 - 2014-07-24 04:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll2014-09-23 15:40 - 2014-07-24 04:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll2014-09-23 15:40 - 2014-07-24 04:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll2014-09-23 15:40 - 2014-07-24 04:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll2014-09-23 15:40 - 2014-07-24 04:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll2014-09-23 15:40 - 2014-07-24 04:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll2014-09-23 15:40 - 2014-07-24 04:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll2014-09-23 15:40 - 2014-07-24 04:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll2014-09-23 15:40 - 2014-07-24 04:27 - 00907776 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll2014-09-23 15:40 - 2014-07-24 04:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll2014-09-23 15:40 - 2014-07-24 04:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv2014-09-23 15:40 - 2014-07-24 04:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll2014-09-23 15:40 - 2014-07-24 04:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll2014-09-23 15:40 - 2014-07-24 04:20 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll2014-09-23 15:40 - 2014-07-24 04:19 - 00388608 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll2014-09-23 15:40 - 2014-07-24 04:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll2014-09-23 15:40 - 2014-07-24 04:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe2014-09-23 15:40 - 2014-07-24 04:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll2014-09-23 15:40 - 2014-07-24 04:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll2014-09-23 15:40 - 2014-07-24 04:15 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll2014-09-23 15:40 - 2014-07-24 04:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll2014-09-23 15:40 - 2014-07-24 04:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll2014-09-23 15:40 - 2014-07-24 04:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll2014-09-23 15:40 - 2014-07-24 04:10 - 01029632 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll2014-09-23 15:40 - 2014-07-24 04:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll2014-09-23 15:40 - 2014-07-24 04:10 - 00806400 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll2014-09-23 15:40 - 2014-07-24 04:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv2014-09-23 15:40 - 2014-07-24 04:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll2014-09-23 15:40 - 2014-07-24 04:08 - 00162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll2014-09-23 15:40 - 2014-07-24 04:07 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll2014-09-23 15:40 - 2014-07-24 04:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll2014-09-23 15:40 - 2014-07-24 04:04 - 00667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll2014-09-23 15:40 - 2014-07-24 04:02 - 03465216 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll2014-09-23 15:40 - 2014-07-24 04:01 - 05833216 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll2014-09-23 15:40 - 2014-07-24 04:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll2014-09-23 15:40 - 2014-07-24 04:01 - 01126912 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll2014-09-23 15:40 - 2014-07-24 03:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll2014-09-23 15:40 - 2014-07-24 03:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll2014-09-23 15:40 - 2014-07-24 03:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll2014-09-23 15:40 - 2014-07-24 03:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll2014-09-23 15:40 - 2014-07-24 03:50 - 00923136 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll2014-09-23 15:40 - 2014-07-24 03:49 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll2014-09-23 15:40 - 2014-07-24 03:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll2014-09-23 15:40 - 2014-07-24 03:46 - 08652800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll2014-09-23 15:40 - 2014-07-24 03:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll2014-09-23 15:40 - 2014-07-24 03:43 - 02696704 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll2014-09-23 15:40 - 2014-07-24 03:43 - 00756224 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll2014-09-23 15:40 - 2014-07-24 03:43 - 00200192 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll2014-09-23 15:40 - 2014-07-24 03:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll2014-09-23 15:40 - 2014-07-24 03:39 - 02642944 _____ (Microsoft Corporation) C:\windows\system32\authui.dll2014-09-23 15:40 - 2014-07-24 03:38 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll2014-09-23 15:40 - 2014-07-24 03:38 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll2014-09-23 15:40 - 2014-07-24 03:33 - 03360768 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll2014-09-23 15:40 - 2014-07-24 03:30 - 02318336 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll2014-09-23 15:40 - 2014-07-24 03:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll2014-09-23 15:40 - 2014-07-24 00:11 - 00513544 _____ () C:\windows\SysWOW64\locale.nls2014-09-23 15:40 - 2014-07-24 00:11 - 00513544 _____ () C:\windows\system32\locale.nls2014-09-23 15:40 - 2014-07-12 01:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll2014-09-23 15:40 - 2014-07-12 01:23 - 00436224 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll2014-09-23 15:40 - 2014-07-12 00:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll2014-09-23 15:40 - 2014-07-12 00:33 - 00318976 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll2014-09-23 15:40 - 2014-07-12 00:13 - 01417216 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll2014-09-23 15:40 - 2014-07-04 08:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys2014-09-23 15:40 - 2014-07-04 06:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll2014-09-23 15:40 - 2014-07-04 06:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll2014-09-23 15:40 - 2014-07-04 06:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll2014-09-23 15:40 - 2014-07-04 06:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll2014-09-23 15:40 - 2014-07-04 05:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll2014-09-23 15:40 - 2014-07-04 05:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll2014-09-23 15:40 - 2014-06-27 02:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys2014-09-23 15:40 - 2014-06-25 20:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll2014-09-23 15:40 - 2014-06-25 20:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll2014-09-23 15:40 - 2014-06-19 19:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys2014-09-23 15:40 - 2014-06-18 22:13 - 00310080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys2014-09-23 15:40 - 2014-06-14 02:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll2014-09-23 15:40 - 2014-06-14 01:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll2014-09-23 15:40 - 2014-06-07 08:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll2014-09-23 15:40 - 2014-06-07 06:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll2014-09-23 15:40 - 2014-06-05 10:00 - 01118040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys2014-09-23 15:40 - 2014-06-05 06:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll2014-09-23 15:40 - 2014-06-05 05:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll2014-09-23 15:40 - 2014-05-31 01:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll2014-09-23 15:40 - 2014-05-31 00:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll2014-09-23 15:40 - 2014-05-29 02:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll2014-09-23 15:40 - 2014-05-29 01:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll2014-09-23 15:40 - 2014-05-29 01:20 - 00427520 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll2014-09-23 15:40 - 2014-05-29 00:36 - 00344576 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll2014-09-23 15:40 - 2014-05-26 03:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll2014-09-23 15:40 - 2014-05-10 06:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll2014-09-23 15:40 - 2014-05-10 04:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll2014-09-23 15:40 - 2014-05-06 00:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll2014-09-23 15:40 - 2014-05-05 20:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll2014-09-23 15:40 - 2014-03-24 22:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll2014-09-23 15:40 - 2014-03-24 22:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll2014-09-23 15:40 - 2014-03-24 21:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll2014-09-23 15:40 - 2014-03-24 21:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll2014-09-23 15:39 - 2014-09-23 15:40 - 00000000 ____D () C:\ProgramData\Skype2014-09-23 15:39 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL2014-09-23 15:39 - 2014-07-24 07:47 - 00132608 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll2014-09-23 15:39 - 2014-07-24 07:22 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll2014-09-23 15:39 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL2014-09-23 15:39 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL2014-09-23 15:39 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll2014-09-23 15:39 - 2014-07-24 05:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll2014-09-23 15:39 - 2014-07-24 04:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll2014-09-23 15:39 - 2014-07-24 04:24 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-23 15:39 - 2014-07-24 04:18 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll2014-09-23 15:39 - 2014-07-24 04:12 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-23 15:39 - 2014-07-24 04:06 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll2014-09-23 15:39 - 2014-07-24 04:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll2014-09-23 15:39 - 2014-07-09 19:19 - 00387391 _____ () C:\windows\system32\ApnDatabase.xml2014-09-23 15:37 - 2014-09-25 19:18 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Developerts LLC USA2014-09-23 15:37 - 2014-09-23 15:37 - 00003566 _____ () C:\windows\System32\Tasks\Secure Fast PC Autorun2014-09-23 15:37 - 2014-09-23 15:37 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Developerts_LLC2014-09-23 15:36 - 2014-09-26 20:45 - 00000000 ____D () C:\Program Files\Wajam Web Enhancer2014-09-23 15:36 - 2014-09-23 15:37 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam Web Enhancer2014-09-23 15:36 - 2014-09-23 15:36 - 00000000 ____D () C:\Users\matthenn\Downloads\Skype_TSV522ML02014-09-23 15:36 - 2014-09-23 15:36 - 00000000 ____D () C:\Program Files (x86)\sweetpacks bundle uninstaller_Skype_Target_19912352014-09-23 15:27 - 2014-09-25 19:34 - 00000000 ____D () C:\Program Files (x86)\SafeConnect Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884205 Share Posted September 28, 2014 part two of the FRST 2014-09-23 15:27 - 2014-09-23 15:27 - 01464136 _____ (Impulse Point, LLC) C:\Users\matthenn\Downloads\ServiceInstaller.exe2014-09-22 22:17 - 2014-09-02 16:06 - 00706016 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe2014-09-22 22:17 - 2014-09-02 16:06 - 00105440 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl2014-09-22 20:08 - 2014-09-22 20:09 - 00014848 ___SH () C:\Users\matthenn\Downloads\Thumbs.db2014-09-22 12:02 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll2014-09-22 12:00 - 2014-08-15 22:40 - 23591424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll2014-09-22 12:00 - 2014-08-15 22:04 - 17455104 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll2014-09-22 12:00 - 2014-08-15 22:00 - 05833728 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll2014-09-22 12:00 - 2014-08-15 22:00 - 02793984 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll2014-09-22 12:00 - 2014-08-15 21:56 - 00547328 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll2014-09-22 12:00 - 2014-08-15 21:54 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll2014-09-22 12:00 - 2014-08-15 21:45 - 04232704 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll2014-09-22 12:00 - 2014-08-15 21:43 - 00758272 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll2014-09-22 12:00 - 2014-08-15 21:32 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll2014-09-22 12:00 - 2014-08-15 21:25 - 00072704 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll2014-09-22 12:00 - 2014-08-15 21:22 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll2014-09-22 12:00 - 2014-08-15 21:20 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll2014-09-22 12:00 - 2014-08-15 21:19 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll2014-09-22 12:00 - 2014-08-15 21:18 - 02185728 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll2014-09-22 12:00 - 2014-08-15 21:18 - 00289280 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll2014-09-22 12:00 - 2014-08-15 21:11 - 00597504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll2014-09-22 12:00 - 2014-08-15 21:06 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll2014-09-22 12:00 - 2014-08-15 21:05 - 00727040 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll2014-09-22 12:00 - 2014-08-15 21:05 - 00707072 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe2014-09-22 12:00 - 2014-08-15 21:03 - 02104832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl2014-09-22 12:00 - 2014-08-15 21:03 - 00365056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll2014-09-22 12:00 - 2014-08-15 20:58 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll2014-09-22 12:00 - 2014-08-15 20:56 - 02310656 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll2014-09-22 12:00 - 2014-08-15 20:53 - 13588480 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll2014-09-22 12:00 - 2014-08-15 20:53 - 00243200 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll2014-09-22 12:00 - 2014-08-15 20:53 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll2014-09-22 12:00 - 2014-08-15 20:51 - 11769856 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll2014-09-22 12:00 - 2014-08-15 20:45 - 00603136 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll2014-09-22 12:00 - 2014-08-15 20:44 - 02014208 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl2014-09-22 12:00 - 2014-08-15 20:44 - 00312320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll2014-09-22 12:00 - 2014-08-15 20:34 - 01447424 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll2014-09-22 12:00 - 2014-08-15 20:20 - 01812992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll2014-09-22 12:00 - 2014-08-15 20:18 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll2014-09-22 12:00 - 2014-08-15 20:14 - 01190400 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll2014-09-22 12:00 - 2014-08-15 20:12 - 00678400 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll2014-09-22 12:00 - 2014-05-30 05:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll2014-09-22 12:00 - 2014-05-30 04:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll2014-09-22 12:00 - 2014-02-06 07:30 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb2014-09-22 12:00 - 2014-02-06 07:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll2014-09-22 12:00 - 2014-02-06 07:07 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll2014-09-22 12:00 - 2014-02-06 07:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll2014-09-22 12:00 - 2014-02-06 06:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll2014-09-22 12:00 - 2014-02-06 06:49 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe2014-09-22 12:00 - 2014-02-06 06:48 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe2014-09-22 12:00 - 2014-02-06 06:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb2014-09-22 12:00 - 2014-02-06 06:17 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll2014-09-22 12:00 - 2014-02-06 06:00 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll2014-09-22 12:00 - 2014-02-06 05:52 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll2014-09-22 12:00 - 2014-02-06 05:52 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll2014-09-22 12:00 - 2014-02-06 05:47 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe2014-09-22 12:00 - 2014-02-06 05:25 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll2014-09-22 11:56 - 2014-09-22 12:00 - 00000000 ____D () C:\windows\system32\MRT2014-09-22 11:56 - 2014-08-29 13:01 - 101694776 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe2014-09-22 11:09 - 2014-03-08 01:41 - 01306624 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll2014-09-22 11:09 - 2014-03-06 10:34 - 02331000 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll2014-09-22 11:09 - 2014-03-06 02:51 - 02900992 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll2014-09-22 11:08 - 2014-03-20 00:19 - 01291200 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll2014-09-22 11:08 - 2014-03-19 23:41 - 00376152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys2014-09-22 11:08 - 2014-03-19 23:40 - 01112536 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll2014-09-22 11:08 - 2014-03-19 20:53 - 00950784 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll2014-09-22 11:08 - 2014-03-19 20:48 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\ReInfo.dll2014-09-22 11:08 - 2014-03-19 19:55 - 01036288 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll2014-09-22 11:08 - 2014-03-19 19:39 - 00800256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll2014-09-22 11:08 - 2014-03-19 19:36 - 00172544 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReInfo.dll2014-09-22 11:08 - 2014-03-19 03:13 - 00836096 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll2014-09-22 11:08 - 2014-03-19 01:50 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\w32tm.exe2014-09-22 11:08 - 2014-03-19 01:20 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\w32tm.exe2014-09-22 11:08 - 2014-03-13 08:35 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wof.sys2014-09-22 11:08 - 2014-03-11 11:45 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\BdeHdCfgLib.dll2014-09-22 11:08 - 2014-03-11 11:02 - 00794112 _____ (Microsoft Corporation) C:\windows\system32\fvewiz.dll2014-09-22 11:08 - 2014-03-08 16:38 - 01542768 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll2014-09-22 11:08 - 2014-03-08 11:29 - 00356848 _____ (Microsoft Corporation) C:\windows\system32\dcomp.dll2014-09-22 11:08 - 2014-03-08 07:34 - 01095488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll2014-09-22 11:08 - 2014-03-08 05:02 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\sxproxy.dll2014-09-22 11:08 - 2014-03-08 04:33 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\spp.dll2014-09-22 11:08 - 2014-03-08 04:25 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\SetNetworkLocation.dll2014-09-22 11:08 - 2014-03-08 04:12 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\sxproxy.dll2014-09-22 11:08 - 2014-03-08 03:47 - 00222720 _____ (Microsoft Corporation) C:\windows\SysWOW64\spp.dll2014-09-22 11:08 - 2014-03-08 03:04 - 00160768 _____ (Microsoft Corporation) C:\windows\system32\AppxAllUserStore.dll2014-09-22 11:08 - 2014-03-08 03:03 - 00939520 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll2014-09-22 11:08 - 2014-03-08 02:48 - 00252928 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentClient.dll2014-09-22 11:08 - 2014-03-08 02:40 - 00139776 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxAllUserStore.dll2014-09-22 11:08 - 2014-03-08 02:37 - 00755712 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll2014-09-22 11:08 - 2014-03-08 02:31 - 00222720 _____ (Microsoft Corporation) C:\windows\SysWOW64\dcomp.dll2014-09-22 11:08 - 2014-03-08 02:30 - 00197632 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppXDeploymentClient.dll2014-09-22 11:08 - 2014-03-08 01:11 - 00924160 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.dll2014-09-22 11:08 - 2014-03-06 10:34 - 00113648 _____ (Microsoft Corporation) C:\windows\system32\userenv.dll2014-09-22 11:08 - 2014-03-06 07:19 - 00094016 _____ (Microsoft Corporation) C:\windows\SysWOW64\userenv.dll2014-09-22 11:08 - 2014-03-06 06:46 - 01679128 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll2014-09-22 11:08 - 2014-03-06 05:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys2014-09-22 11:08 - 2014-03-06 05:24 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys2014-09-22 11:08 - 2014-03-06 05:22 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys2014-09-22 11:08 - 2014-03-06 05:22 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys2014-09-22 11:08 - 2014-03-06 05:19 - 00283648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys2014-09-22 11:08 - 2014-03-06 05:19 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys2014-09-22 11:08 - 2014-03-06 05:08 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\l2gpstore.dll2014-09-22 11:08 - 2014-03-06 04:41 - 00115200 _____ (Microsoft Corporation) C:\windows\system32\DevPropMgr.dll2014-09-22 11:08 - 2014-03-06 04:38 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll2014-09-22 11:08 - 2014-03-06 04:10 - 00058368 _____ (Microsoft Corporation) C:\windows\SysWOW64\l2gpstore.dll2014-09-22 11:08 - 2014-03-06 04:00 - 00247296 _____ (Microsoft Corporation) C:\windows\system32\SensorsApi.dll2014-09-22 11:08 - 2014-03-06 03:46 - 00085504 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll2014-09-22 11:08 - 2014-03-06 03:16 - 00171008 _____ (Microsoft Corporation) C:\windows\SysWOW64\SensorsApi.dll2014-09-22 11:08 - 2014-03-06 03:02 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\netlogon.dll2014-09-22 11:08 - 2014-03-06 02:31 - 02479616 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll2014-09-22 11:08 - 2014-03-06 02:29 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\netlogon.dll2014-09-22 11:08 - 2014-03-06 02:27 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll2014-09-22 11:08 - 2014-03-06 02:24 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\wlangpui.dll2014-09-22 11:08 - 2014-03-06 02:23 - 02270208 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll2014-09-22 11:08 - 2014-03-06 02:23 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\dafWfdProvider.dll2014-09-22 11:08 - 2014-03-06 02:21 - 00291840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Sensors.dll2014-09-22 11:08 - 2014-03-06 02:11 - 02030080 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll2014-09-22 11:08 - 2014-03-06 02:06 - 00386560 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlangpui.dll2014-09-22 11:08 - 2014-03-06 02:04 - 00226304 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Sensors.dll2014-09-22 11:08 - 2014-03-06 02:01 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Scanners.dll2014-09-22 11:08 - 2014-03-06 01:51 - 00151040 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Scanners.dll2014-09-22 11:08 - 2014-03-06 01:47 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\SessEnv.dll2014-09-22 11:08 - 2014-03-06 01:42 - 00280576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SessEnv.dll2014-09-22 11:08 - 2014-03-04 03:16 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll2014-09-22 11:08 - 2014-03-04 03:13 - 00254464 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll2014-09-22 11:08 - 2014-03-04 03:08 - 00299008 _____ (Microsoft Corporation) C:\windows\system32\pdh.dll2014-09-22 11:08 - 2014-03-04 03:00 - 00512000 _____ (Microsoft Corporation) C:\windows\system32\wlidprov.dll2014-09-22 11:08 - 2014-03-04 02:56 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RMapi.dll2014-09-22 11:08 - 2014-03-04 02:42 - 00494592 _____ (Microsoft Corporation) C:\windows\SysWOW64\dnsapi.dll2014-09-22 11:08 - 2014-03-04 02:39 - 00254976 _____ (Microsoft Corporation) C:\windows\SysWOW64\pdh.dll2014-09-22 11:08 - 2014-03-04 02:32 - 00356864 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlidprov.dll2014-09-22 11:08 - 2014-03-04 02:15 - 00542208 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.dll2014-09-22 11:08 - 2014-03-04 02:05 - 00402432 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.dll2014-09-22 11:08 - 2014-03-04 02:03 - 00669696 _____ (Microsoft Corporation) C:\windows\system32\rasapi32.dll2014-09-22 11:08 - 2014-03-04 02:03 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\CredentialMigrationHandler.dll2014-09-22 11:08 - 2014-03-04 01:54 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\CredentialMigrationHandler.dll2014-09-22 11:08 - 2014-03-04 01:52 - 00605184 _____ (Microsoft Corporation) C:\windows\SysWOW64\rasapi32.dll2014-09-22 11:08 - 2013-12-23 19:28 - 00262656 _____ (Microsoft Corporation) C:\windows\SysWOW64\LocationApi.dll2014-09-22 11:08 - 2013-12-23 19:26 - 00325632 _____ (Microsoft Corporation) C:\windows\system32\LocationApi.dll2014-09-22 11:06 - 2014-08-23 03:48 - 02374784 _____ (Microsoft Corporation) C:\windows\explorer.exe2014-09-22 11:06 - 2014-08-23 03:13 - 02084520 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe2014-09-22 11:06 - 2014-08-23 02:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll2014-09-22 11:06 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll2014-09-22 11:06 - 2014-08-23 00:44 - 02860032 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll2014-09-22 11:06 - 2014-08-23 00:34 - 13423104 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll2014-09-22 11:06 - 2014-08-23 00:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll2014-09-22 11:06 - 2014-08-23 00:31 - 01038336 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll2014-09-22 11:06 - 2014-08-23 00:20 - 11818496 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll2014-09-22 11:06 - 2014-08-14 20:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys2014-09-22 11:06 - 2014-07-29 21:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll2014-09-22 11:06 - 2014-07-29 01:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll2014-09-22 11:06 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys2014-09-22 11:05 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe2014-09-22 11:05 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe2014-09-22 11:03 - 2014-06-19 21:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll2014-09-22 11:03 - 2014-06-19 19:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll2014-09-22 10:58 - 2014-06-12 21:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll2014-09-22 10:58 - 2014-06-12 21:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys2014-09-22 10:58 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll2014-09-22 10:58 - 2014-06-06 07:34 - 02133504 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll2014-09-22 10:58 - 2014-05-09 23:46 - 02151424 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll2014-09-22 10:58 - 2014-05-09 23:22 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll2014-09-22 10:58 - 2014-03-06 08:53 - 02141912 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll2014-09-22 10:58 - 2014-03-06 08:51 - 00379224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys2014-09-22 10:58 - 2014-03-06 08:39 - 00212992 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll2014-09-22 10:58 - 2014-03-06 07:13 - 01779800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll2014-09-22 10:58 - 2014-03-06 02:09 - 01764864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll2014-09-22 10:57 - 2014-08-22 20:42 - 04148224 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys2014-09-22 10:57 - 2014-08-06 22:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll2014-09-22 10:57 - 2014-08-01 23:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll2014-09-22 10:57 - 2014-08-01 20:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll2014-09-22 10:57 - 2014-05-29 08:02 - 00565576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys2014-09-22 10:57 - 2014-05-29 03:55 - 00735232 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll2014-09-22 10:57 - 2014-05-29 02:40 - 00735232 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll2014-09-22 10:56 - 2014-07-15 14:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe2014-09-22 10:56 - 2014-07-15 04:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll2014-09-22 10:56 - 2014-07-15 04:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll2014-09-22 10:56 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll2014-09-22 10:56 - 2014-05-01 09:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys2014-09-22 10:56 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll2014-09-22 10:56 - 2014-04-11 01:53 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe2014-09-22 10:56 - 2014-04-10 23:54 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll2014-09-22 10:56 - 2014-04-10 23:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe2014-09-22 10:56 - 2014-04-10 23:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll2014-09-22 10:56 - 2014-04-10 23:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe2014-09-22 10:56 - 2014-04-10 23:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll2014-09-22 10:56 - 2014-04-10 22:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll2014-09-22 10:56 - 2014-03-23 22:30 - 00257880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys2014-09-22 10:56 - 2014-03-23 22:30 - 00123224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys2014-09-22 10:56 - 2014-03-23 22:27 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys2014-09-22 10:56 - 2014-03-13 03:42 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe2014-09-22 10:56 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe2014-09-22 10:55 - 2014-07-10 00:03 - 04756992 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll2014-09-22 10:55 - 2014-05-19 02:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe2014-09-22 10:55 - 2014-05-19 02:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe2014-09-22 10:55 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe2014-09-22 10:55 - 2014-05-13 03:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe2014-09-22 10:55 - 2014-05-13 00:41 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll2014-09-22 10:55 - 2014-05-13 00:26 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll2014-09-22 10:55 - 2014-05-12 23:31 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll2014-09-22 10:55 - 2014-05-03 07:29 - 01726224 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll2014-09-22 10:55 - 2014-05-03 05:20 - 01473080 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll2014-09-22 10:55 - 2014-05-03 01:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll2014-09-22 10:55 - 2014-05-03 01:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll2014-09-22 10:55 - 2014-05-03 01:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll2014-09-22 10:55 - 2014-05-03 01:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll2014-09-22 10:55 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll2014-09-22 10:55 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll2014-09-22 10:55 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll2014-09-22 10:55 - 2014-05-02 19:26 - 00050745 _____ () C:\windows\system32\srms.dat2014-09-22 10:55 - 2014-04-30 02:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys2014-09-22 10:55 - 2014-04-30 02:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys2014-09-22 10:55 - 2014-04-30 02:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys2014-09-22 10:55 - 2014-04-30 02:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys2014-09-22 10:55 - 2014-04-30 01:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe2014-09-22 10:55 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe2014-09-22 10:55 - 2014-04-30 00:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll2014-09-22 10:55 - 2014-04-30 00:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll2014-09-22 10:55 - 2014-04-30 00:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll2014-09-22 10:55 - 2014-04-30 00:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll2014-09-22 10:55 - 2014-04-30 00:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll2014-09-22 10:55 - 2014-04-30 00:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll2014-09-22 10:55 - 2014-04-30 00:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL2014-09-22 10:55 - 2014-04-29 23:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL2014-09-22 10:55 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll2014-09-22 10:55 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll2014-09-22 10:55 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll2014-09-22 10:55 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll2014-09-22 10:55 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll2014-09-22 10:55 - 2014-04-29 23:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll2014-09-22 10:55 - 2014-04-28 18:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll2014-09-22 10:55 - 2014-04-26 12:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll2014-09-22 10:55 - 2014-04-18 10:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll2014-09-22 10:55 - 2014-04-18 10:44 - 01466856 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll2014-09-22 10:55 - 2014-04-18 09:29 - 01200288 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll2014-09-22 10:55 - 2014-04-18 05:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll2014-09-22 10:55 - 2014-04-18 03:51 - 00836608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll2014-09-22 10:55 - 2014-04-14 05:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll2014-09-22 10:55 - 2014-04-14 05:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll2014-09-22 10:55 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll2014-09-22 10:55 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll2014-09-22 10:55 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll2014-09-22 10:55 - 2014-04-11 00:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll2014-09-22 10:55 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll2014-09-22 10:55 - 2014-04-09 07:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys2014-09-22 10:55 - 2014-04-09 02:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll2014-09-22 10:55 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll2014-09-22 10:55 - 2014-04-08 23:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll2014-09-22 10:55 - 2014-04-08 18:46 - 00086688 _____ (Microsoft Corporation) C:\windows\system32\mrt_map.dll2014-09-22 10:55 - 2014-04-08 18:46 - 00028320 _____ (Microsoft Corporation) C:\windows\system32\mrt100.dll2014-09-22 10:55 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt_map.dll2014-09-22 10:55 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt100.dll2014-09-22 10:55 - 2014-04-07 22:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys2014-09-22 10:55 - 2014-04-06 12:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys2014-09-22 10:55 - 2014-04-06 12:34 - 00275800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys2014-09-22 10:55 - 2014-04-06 12:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll2014-09-22 10:55 - 2014-04-06 12:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys2014-09-22 10:55 - 2014-04-06 12:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll2014-09-22 10:55 - 2014-04-06 12:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00467496 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00463256 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00364640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00244880 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe2014-09-22 10:55 - 2014-04-06 12:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe2014-09-22 10:55 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll2014-09-22 10:55 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00406504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00326024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00305768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll2014-09-22 10:55 - 2014-04-06 08:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll2014-09-22 10:55 - 2014-04-06 08:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll2014-09-22 10:55 - 2014-04-06 08:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe2014-09-22 10:55 - 2014-04-06 08:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe2014-09-22 10:55 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll2014-09-22 10:55 - 2014-04-06 07:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll2014-09-22 10:55 - 2014-04-06 07:20 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll2014-09-22 10:55 - 2014-04-06 07:01 - 00834048 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll2014-09-22 10:55 - 2014-04-06 06:52 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll2014-09-22 10:55 - 2014-04-06 06:37 - 00800768 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll2014-09-22 10:55 - 2014-04-06 06:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll2014-09-22 10:55 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll2014-09-22 10:55 - 2014-04-03 04:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll2014-09-22 10:55 - 2014-04-03 04:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll2014-09-22 10:55 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll2014-09-22 10:55 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll2014-09-22 10:55 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll2014-09-22 10:55 - 2014-04-02 22:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll2014-09-22 10:55 - 2014-03-28 11:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe2014-09-22 10:55 - 2014-03-27 01:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll2014-09-22 10:55 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll2014-09-22 10:55 - 2014-03-26 23:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll2014-09-22 10:55 - 2014-03-26 23:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe2014-09-22 10:55 - 2014-03-19 04:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll2014-09-22 10:55 - 2014-03-19 03:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll2014-09-22 10:55 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll2014-09-22 10:55 - 2014-03-18 01:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll2014-09-22 10:55 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll2014-09-22 10:55 - 2014-03-17 01:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll2014-09-22 10:55 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll2014-09-22 10:55 - 2014-03-14 02:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll2014-09-22 10:55 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll2014-09-22 10:55 - 2014-03-11 10:25 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\BitLockerDeviceEncryption.exe2014-09-22 10:55 - 2014-03-11 10:05 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\fveapibase.dll2014-09-22 10:55 - 2014-03-11 09:02 - 00629760 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll2014-09-22 10:55 - 2014-03-08 16:47 - 00180056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys2014-09-22 10:55 - 2014-03-08 16:40 - 00136024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys2014-09-22 10:55 - 2014-03-08 02:41 - 00412672 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL2014-09-22 10:55 - 2014-03-08 02:25 - 00264192 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL2014-09-22 10:55 - 2014-03-08 02:04 - 00717312 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll2014-09-22 10:55 - 2014-03-08 01:58 - 00567296 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll2014-09-22 10:55 - 2014-03-06 05:19 - 00115200 _____ (Microsoft Corporation) C:\windows\system32\umpnpmgr.dll2014-09-22 10:55 - 2014-03-06 05:19 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\Windows.Shell.Search.UriHandler.dll2014-09-22 10:55 - 2014-03-06 04:20 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Shell.Search.UriHandler.dll2014-09-22 10:55 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll2014-09-22 10:54 - 2014-07-10 00:16 - 00716800 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll2014-09-22 10:54 - 2014-07-09 23:33 - 01120256 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe2014-09-22 10:49 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll2014-09-22 10:49 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll2014-09-22 10:46 - 2014-06-01 22:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll2014-09-22 10:46 - 2014-05-31 06:07 - 00440664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys2014-09-22 10:46 - 2014-05-31 06:07 - 00089944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys2014-09-22 10:46 - 2014-05-31 06:07 - 00027480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys2014-09-22 10:46 - 2014-05-31 02:30 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys2014-09-22 10:46 - 2014-05-31 02:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys2014-09-22 10:46 - 2014-05-31 02:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys2014-09-22 10:46 - 2014-05-31 00:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe2014-09-22 10:46 - 2014-05-31 00:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll2014-09-22 10:46 - 2014-05-31 00:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll2014-09-22 10:46 - 2014-05-27 05:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll2014-09-22 10:46 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll2014-09-22 10:46 - 2014-03-31 01:35 - 00428888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS2014-09-22 10:45 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll2014-09-22 10:45 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll2014-09-22 10:45 - 2014-06-04 05:27 - 00114520 _____ (Microsoft Corporation) C:\windows\system32\consent.exe2014-09-22 10:45 - 2014-06-04 01:31 - 00356352 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll2014-09-22 10:45 - 2014-06-04 01:22 - 02790912 _____ (Microsoft Corporation) C:\windows\system32\msi.dll2014-09-22 10:45 - 2014-06-04 00:43 - 00281088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll2014-09-22 10:45 - 2014-06-04 00:38 - 03304448 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll2014-09-22 10:45 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll2014-09-22 10:45 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll2014-09-22 10:45 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll2014-09-22 10:45 - 2014-05-01 01:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll2014-09-22 10:44 - 2014-08-01 23:11 - 00918528 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll2014-09-22 10:44 - 2014-07-12 00:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe2014-09-21 17:39 - 2014-09-21 17:39 - 00000000 ____D () C:\ProgramData\Riot Games2014-09-21 17:38 - 2014-09-21 17:38 - 00001625 _____ () C:\Users\Public\Desktop\League of Legends.lnk2014-09-21 17:38 - 2014-09-21 17:38 - 00000000 ____D () C:\Riot Games2014-09-21 17:38 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_1.dll2014-09-21 17:38 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_2.dll2014-09-21 17:38 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll2014-09-21 17:38 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll2014-09-21 17:38 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll2014-09-21 17:36 - 2014-09-21 17:39 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Riot Games2014-09-21 17:36 - 2014-09-21 17:36 - 27864920 _____ (Riot Games) C:\Users\matthenn\Downloads\LeagueofLegends_NA_Installer_9_15_2014.exe2014-09-21 16:35 - 2014-09-21 16:35 - 00003236 _____ () C:\windows\System32\Tasks\{4EABDF7A-AF36-4730-A3E9-E7163EBA2FD7}2014-09-21 08:50 - 2014-09-21 08:50 - 00000318 _____ () C:\Users\matthenn\Desktop\Curse Client.appref-ms2014-09-21 08:50 - 2014-09-21 08:50 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse2014-09-21 08:49 - 2014-09-21 08:49 - 00402696 _____ () C:\Users\matthenn\Downloads\setup.exe2014-09-21 08:36 - 2014-09-21 08:37 - 00000000 ____D () C:\Program Files (x86)\SafeKey2014-09-21 08:35 - 2014-09-21 08:36 - 21623800 _____ (McAfee, Inc.) C:\Users\matthenn\Downloads\mcafee_safekey.exe2014-09-20 12:06 - 2014-09-20 12:06 - 00001255 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk2014-09-20 12:05 - 2014-09-21 08:54 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft2014-09-20 11:57 - 2014-09-28 13:25 - 00000000 ___DO () C:\Users\matthenn\OneDrive2014-09-20 11:54 - 2014-09-20 11:54 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Blizzard Entertainment2014-09-20 11:53 - 2014-09-28 11:24 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Battle.net2014-09-20 11:53 - 2014-09-20 12:06 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Battle.net2014-09-20 11:53 - 2014-09-20 11:53 - 00001163 _____ () C:\Users\Public\Desktop\Battle.net.lnk2014-09-20 11:53 - 2014-09-20 11:53 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment2014-09-20 11:53 - 2014-09-20 11:53 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-09-20 11:52 - 2014-09-20 11:52 - 02942368 _____ (Blizzard Entertainment) C:\Users\matthenn\Downloads\World-of-Warcraft-Setup-enUS.exe2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\ProgramData\Battle.net2014-09-20 11:48 - 2014-09-28 13:26 - 00002246 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-09-20 11:47 - 2014-09-28 13:25 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job2014-09-20 11:47 - 2014-09-28 12:52 - 00000918 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job2014-09-20 11:47 - 2014-09-27 23:32 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Deployment2014-09-20 11:47 - 2014-09-20 11:48 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Google2014-09-20 11:47 - 2014-09-20 11:47 - 00003890 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA2014-09-20 11:47 - 2014-09-20 11:47 - 00003654 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore2014-09-20 11:47 - 2014-09-20 11:47 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Apps\2.02014-09-20 11:47 - 2014-09-20 11:47 - 00000000 ____D () C:\Program Files (x86)\Google2014-09-20 11:38 - 2014-09-28 12:42 - 00003594 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-458999206-887510418-135140731-10022014-09-20 11:37 - 2014-09-28 09:27 - 00003934 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{F97933CF-DB74-4645-A82B-D80DB262F017}2014-09-20 11:37 - 2014-09-20 11:37 - 00000000 __SHD () C:\Users\matthenn\AppData\Local\EmieUserList2014-09-20 11:37 - 2014-09-20 11:37 - 00000000 __SHD () C:\Users\matthenn\AppData\Local\EmieSiteList2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ___HD () C:\ProgramData\CanonBJ2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Macromedia2014-09-20 11:34 - 2012-04-16 05:00 - 00389120 _____ (CANON INC.) C:\windows\system32\CNMLMBB.DLL2014-09-20 11:33 - 2014-09-26 19:33 - 00000000 ____D () C:\Users\matthenn\AppData\Local\VirtualStore2014-09-20 11:33 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\matthenn\AppData\Local\LenovoBrowserGuard2014-09-20 11:33 - 2014-09-20 11:33 - 00001449 _____ () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2014-09-20 11:33 - 2014-09-20 11:33 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Adobe2014-09-20 11:32 - 2014-09-28 13:23 - 00000000 ____D () C:\Users\matthenn2014-09-20 11:32 - 2014-09-25 19:35 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Packages2014-09-20 11:32 - 2014-09-20 11:32 - 00000020 ___SH () C:\Users\matthenn\ntuser.ini2014-09-20 11:32 - 2014-09-20 11:32 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Intel2014-09-20 11:32 - 2014-06-04 13:49 - 00000000 ___RD () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-20 11:32 - 2014-06-04 13:49 - 00000000 ___RD () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-20 11:32 - 2014-02-22 00:37 - 00000369 _____ () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk2014-09-20 11:32 - 2014-02-22 00:37 - 00000369 _____ () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk2014-09-20 11:32 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2014-09-20 11:32 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-28 13:26 - 2014-06-04 13:27 - 01183974 _____ () C:\windows\WindowsUpdate.log2014-09-28 13:24 - 2013-08-22 10:46 - 00018835 _____ () C:\windows\setupact.log2014-09-28 13:24 - 2013-08-22 10:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT2014-09-28 13:23 - 2014-06-04 14:52 - 00002560 _____ () C:\windows\system32\VfService.trf2014-09-28 13:00 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sru2014-09-28 12:27 - 2013-10-07 14:27 - 00865408 _____ () C:\windows\system32\PerfStringBackup.INI2014-09-28 11:34 - 2013-10-07 14:23 - 00010300 _____ () C:\windows\PFRO.log2014-09-28 11:34 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\BBI2014-09-27 20:02 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\ELAM2014-09-27 17:42 - 2013-08-22 10:44 - 00346744 _____ () C:\windows\system32\FNTCACHE.DAT2014-09-26 20:35 - 2013-08-22 15:12 - 00000000 ____D () C:\Program Files\Windows Journal2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ToastData2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\WinStore2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\setup2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\setup2014-09-26 20:35 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\oobe2014-09-26 18:13 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\AppReadiness2014-09-26 18:12 - 2013-08-22 11:20 - 00000000 ____D () C:\windows\CbsTemp2014-09-25 21:20 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\security2014-09-25 19:33 - 2014-06-04 14:45 - 00000000 ____D () C:\ProgramData\McAfee2014-09-25 19:28 - 2013-08-22 11:36 - 00000000 ___HD () C:\windows\ELAMBKUP2014-09-25 19:27 - 2014-06-04 14:55 - 00000000 ____D () C:\ProgramData\Downloaded Installations2014-09-24 15:48 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\rescache2014-09-24 13:31 - 2014-06-04 14:00 - 00000000 ____D () C:\windows\SysWOW64\NV2014-09-24 13:31 - 2014-06-04 14:00 - 00000000 ____D () C:\windows\system32\NV2014-09-24 13:31 - 2014-06-04 14:00 - 00000000 ____D () C:\ProgramData\NVIDIA2014-09-23 15:37 - 2014-06-04 14:48 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 102014-09-23 15:37 - 2014-06-04 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo2014-09-23 15:37 - 2014-06-04 14:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 32014-09-23 15:37 - 2014-06-04 14:02 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless2014-09-23 15:37 - 2014-06-04 13:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel2014-09-23 15:37 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-23 15:37 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories2014-09-23 15:37 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\PolicyDefinitions2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\MediaViewer2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\FileManager2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\Camera2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender2014-09-22 12:01 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared2014-09-21 17:02 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\NDF2014-09-20 11:38 - 2014-06-04 13:56 - 00000000 ____D () C:\ProgramData\Intel2014-09-20 11:37 - 2014-06-04 14:56 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo2014-09-20 11:34 - 2014-06-04 14:42 - 00000000 ____D () C:\Program Files (x86)\LenovoBrowserGuard2014-09-20 11:34 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\FxsTmp2014-09-20 11:32 - 2014-06-04 14:16 - 00122986 ____H () C:\windows\modules.log Some content of TEMP:====================C:\Users\matthenn\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-10-07 14:23 ==================== End Of Log ============================ Link to post Share on other sites More sharing options...
kevinf80 Posted September 28, 2014 ID:884213 Share Posted September 28, 2014 select start, type or copy paste uninstall a program select that entry....From the uninstall a program list uninstall the following:C:\Program Files\Wajam Web Enhancernext,Download attached fixlist.txt file and save it to the Desktop, or the folder you saved FRST into.NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.Run FRST and press the Fix button just once and wait.The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Let me know if the alerts cease...Fixlist.txt Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884244 Share Posted September 28, 2014 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.2.3 (09.27.2014:1)OS: Windows 8.1 x64Ran by matthenn on Sun 09/28/2014 at 11:45:20.52~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Sun 09/28/2014 at 11:46:53.76End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884245 Share Posted September 28, 2014 no alert on restart. =D but im still a bit skeptical. it sometimes wont appear for half an hour. i will let you know in an hour! Link to post Share on other sites More sharing options...
kevinf80 Posted September 28, 2014 ID:884251 Share Posted September 28, 2014 Where is the log I asked for "Fixlog.txt" after running FRST fix Link to post Share on other sites More sharing options...
sirhenn Posted September 28, 2014 Author ID:884289 Share Posted September 28, 2014 problem is gone =D i posted it above i thought? Link to post Share on other sites More sharing options...
kevinf80 Posted September 28, 2014 ID:884293 Share Posted September 28, 2014 You`ve post a log from JRT, I need to see the log from FRST as per the instructions in reply #16 If the log is gone check in this folder C:\FRST\Logs Link to post Share on other sites More sharing options...
sirhenn Posted September 29, 2014 Author ID:884359 Share Posted September 29, 2014 Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-09-2014Ran by matthenn (administrator) on SIRHENN on 28-09-2014 22:16:26Running from C:\Users\matthenn\DownloadsLoaded Profiles: UpdatusUser & matthenn & (Available profiles: UpdatusUser & matthenn)Platform: Windows 8.1 (X64) OS Language: English (United States)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe(GFI Software Development Ltd.) C:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe() C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe(Maxthon) C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE(PointGrab LTD) C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe() C:\Program Files\CyberLink\Shared files\RichVideo64.exe(ThreatTrack Security, Inc.) C:\Program Files (x86)\VIPRE\SBPIMSvc.exe(Impulse Point, LLC) C:\Program Files (x86)\SafeConnect\scManager.sys(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe(ThreatTrack Security, Inc.) C:\Program Files (x86)\VIPRE\SBAMSvc.exe(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Intel Corporation) C:\Windows\System32\igfxtray.exe(Intel Corporation) C:\Windows\System32\hkcmd.exe(Intel Corporation) C:\Windows\System32\igfxsrvc.exe(Intel Corporation) C:\Windows\System32\igfxpers.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Microsoft Corporation) C:\Windows\System32\rundll32.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe(Realtek semiconductor) C:\Windows\RTFTrack.exe(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe(Impulse Point, LLC) C:\Program Files (x86)\SafeConnect\SCClient.exe(ThreatTrack Security, Inc.) C:\Program Files (x86)\VIPRE\SBAMTray.exe(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.6\THGuard.exe(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe(Microsoft Corporation) C:\Windows\System32\WWAHost.exe(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Farbar) C:\Users\matthenn\Downloads\FRST64 (1).exe(Farbar) C:\Users\matthenn\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayAppHKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor)HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894664 2013-09-04] (ELAN Microelectronics Corp.)HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2013-10-18] (Realtek semiconductor)HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-06-04] (Lenovo(beijing) Limited)HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-06-04] (Lenovo(beijing) Limited)HKLM\...\Run: [sBRegRebootCleaner] => C:\Program Files (x86)\VIPRE\SBRC.exe [202128 2013-09-05] (ThreatTrack Security, Inc.)HKLM-x32\...\Run: [sBAMTray] => C:\Program Files (x86)\VIPRE\SBAMTray.exe [3216272 2013-09-05] (ThreatTrack Security, Inc.)HKLM-x32\...\Run: [THGuard] => C:\Program Files (x86)\TrojanHunter 5.6\THGuard.exe [1082832 2014-08-20] (Mischel Internet Security)HKLM-x32\...\Run: [sDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [184048 2013-10-31] (NVIDIA Corporation)AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [156256 2013-10-31] (NVIDIA Corporation)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SafeConnect.lnkShortcutTarget: SafeConnect.lnk -> C:\Program Files (x86)\SafeConnect\SCClient.exe (Impulse Point, LLC)Startup: C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJBHKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://home.lenovo.comHKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://home.lenovo.comSearchScopes: HKLM - {C2E173CF-26A2-4B39-BD28-B4EF0D458152} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJBSearchScopes: HKLM-x32 - {C2E173CF-26A2-4B39-BD28-B4EF0D458152} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJBSearchScopes: HKCU - {C2E173CF-26A2-4B39-BD28-B4EF0D458152} URL = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJBBHO: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll (McAfee)BHO-x32: VIPRE Search Guard Helper -> {963C8283-AE7F-4AA6-9B3B-847A8FC62C5E} -> C:\Program Files (x86)\VIPRE\VSGN.dll ()BHO-x32: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files (x86)\SafeKey\LPToolbar.dll (McAfee)Toolbar: HKLM - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar_x64.dll (McAfee)Toolbar: HKLM-x32 - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files (x86)\SafeKey\LPToolbar.dll (McAfee)Toolbar: HKLM-x32 - VIPRE Search Guard Toolbar - {A924C17A-5E94-4E02-BED5-49720BA6F7FA} - C:\Program Files (x86)\VIPRE\VSGN.dll ()Handler: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - No FileHandler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)Handler-x32: vipresg - {47BE2E5B-703B-444F-ABD3-05717D2191C6} - C:\Program Files (x86)\VIPRE\VSGN.dll ()Tcpip\Parameters: [DhcpNameServer] 65.32.5.111 65.32.5.112 FireFox:========FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) Chrome: =======CHR Profile: C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Slides) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-20]CHR Extension: (McAfee SafeKey) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\agbnjankikoaabjkmfbaceggjliabkbn [2014-09-21]CHR Extension: (Google Docs) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-20]CHR Extension: (Google Drive) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-20]CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-25]CHR Extension: (YouTube) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-20]CHR Extension: (Google Search) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-20]CHR Extension: (Google Sheets) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-20]CHR Extension: (Google Wallet) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-20]CHR Extension: (Gmail) - C:\Users\matthenn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-20]CHR HKLM-x32\...\Chrome\Extension: [agbnjankikoaabjkmfbaceggjliabkbn] - C:\Program Files (x86)\SafeKey\lpchrome.crx [2014-09-21]CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 DACoreService; C:\Program Files (x86)\Nuance\Dragon Assistant\Core\DACore.exe [432528 2013-05-02] (Nuance Communications, Inc.)R2 ETDService; C:\Program Files\Elantech\ETDService.exe [92160 2013-07-29] (ELAN Microelectronics Corp.)R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107792 2013-07-03] (Condusiv Technologies)R2 gfi_lanss11_attservice; C:\Program Files (x86)\GFI\LanGuard 11 Agent\lnssatt.exe [133496 2012-11-23] (GFI Software Development Ltd.)R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-22] (Intel Corporation)R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel® Corporation) [File not signed]S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel® Corporation)R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-04] (Intel Corporation)R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-19] (Intel Corporation)R2 ISCTAgent; C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation)S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)R2 MaxthonUpdateSvc; C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1844024 2013-12-18] (Maxthon)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-17] ()S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)R2 NitroDriverReadSpool9; C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920 2013-12-12] (Nitro PDF Software)R2 PGService; C:\Program Files (x86)\Lenovo\Motion Control\PGService.exe [161072 2013-08-07] (PointGrab LTD)S4 PG_Service_Launcher; C:\Program Files (x86)\Lenovo\Motion Control\PG_Service_Launcher.exe [345408 2013-08-07] (PointGrab LTD)R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()R2 SBAMSvc; C:\Program Files (x86)\VIPRE\SBAMSvc.exe [3937472 2013-09-05] (ThreatTrack Security, Inc.)R2 SBPIMSvc; C:\Program Files (x86)\VIPRE\SBPIMSvc.exe [176016 2013-09-05] (ThreatTrack Security, Inc.)R2 SCManager; C:\Program Files (x86)\SafeConnect\scManager.sys [176520 2012-11-19] (Impulse Point, LLC)R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation)S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation)R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-06-04] ()S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation)S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation)R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-17] (Intel® Corporation)S2 Wajam Web Enhancer; "C:\Program Files\Wajam Web Enhancer\wajam_64.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.)R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [22280 2013-08-05] (ELAN Microelectronic Corp.)R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25872 2013-07-03] (Condusiv Technologies)R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112912 2013-07-03] (Condusiv Technologies)S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [118728 2013-09-19] (Intel Corporation)R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-01] ()R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-01] ()R3 INETMON; C:\windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-01] ()R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-28] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3434464 2014-03-13] (Intel Corporation)S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8876248 2013-10-18] (Realtek Semiconductor Corp.)R2 sbapifs; C:\Windows\System32\DRIVERS\sbapifs.sys [88928 2013-06-18] (ThreatTrack Security, Inc.)U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [34808 2014-09-28] ()S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation)S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-28 15:45 - 2014-09-28 22:16 - 00000000 ____D () C:\Users\matthenn\Downloads\frst2014-09-28 13:30 - 2014-09-28 13:30 - 00107756 _____ () C:\Users\matthenn\Downloads\FRST 1.txt2014-09-28 13:30 - 2014-09-28 13:30 - 00031423 _____ () C:\Users\matthenn\Downloads\Addition 1.txt2014-09-28 12:26 - 2014-09-28 12:26 - 04893784 _____ () C:\Users\matthenn\Downloads\RogueKiller.exe2014-09-28 12:26 - 2014-09-28 12:26 - 00034808 _____ () C:\windows\system32\Drivers\TrueSight.sys2014-09-28 12:26 - 2014-09-28 12:26 - 00000000 ____D () C:\ProgramData\RogueKiller2014-09-28 11:48 - 2014-09-28 11:49 - 31766208 _____ (Microsoft Corporation) C:\Users\matthenn\Downloads\Windows-KB890830-x64-V5.16.exe2014-09-28 11:47 - 2014-09-28 11:47 - 01699276 _____ (Thisisu) C:\Users\matthenn\Downloads\JRT (1).exe2014-09-28 11:46 - 2014-09-28 11:46 - 00000625 _____ () C:\Users\matthenn\Desktop\JRT.txt2014-09-28 11:45 - 2014-09-28 11:45 - 00000000 ____D () C:\windows\ERUNT2014-09-28 11:44 - 2014-09-28 11:44 - 01699276 _____ (Thisisu) C:\Users\matthenn\Downloads\JRT.exe2014-09-28 11:35 - 2014-09-28 11:35 - 01373475 _____ () C:\Users\matthenn\Downloads\AdwCleaner (1).exe2014-09-28 11:32 - 2014-09-28 11:33 - 00000000 ____D () C:\AdwCleaner2014-09-28 11:32 - 2014-09-28 11:32 - 01373475 _____ () C:\Users\matthenn\Downloads\AdwCleaner.exe2014-09-28 11:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll2014-09-28 09:57 - 2014-09-28 09:57 - 00108435 _____ () C:\Users\matthenn\Documents\FRST.txt2014-09-28 09:57 - 2014-09-28 09:57 - 00033245 _____ () C:\Users\matthenn\Documents\Addition.txt2014-09-28 09:28 - 2014-09-28 13:29 - 00031423 _____ () C:\Users\matthenn\Downloads\Addition.txt2014-09-28 09:27 - 2014-09-28 22:16 - 00020133 _____ () C:\Users\matthenn\Downloads\FRST.txt2014-09-28 09:27 - 2014-09-28 22:16 - 00000000 ____D () C:\FRST2014-09-28 09:26 - 2014-09-28 09:26 - 02108928 _____ (Farbar) C:\Users\matthenn\Downloads\FRST64 (1).exe2014-09-28 09:26 - 2014-09-28 09:26 - 01100288 _____ (Farbar) C:\Users\matthenn\Downloads\FRST.exe2014-09-28 09:25 - 2014-09-28 09:25 - 02108928 _____ (Farbar) C:\Users\matthenn\Downloads\FRST64.exe2014-09-27 21:29 - 2014-09-27 21:29 - 00001738 _____ () C:\windows\SysWOW64\EmailAVConfig.xml2014-09-27 18:07 - 2014-09-27 18:07 - 00000629 _____ () C:\windows\wininit.ini2014-09-27 17:46 - 2014-09-27 17:46 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Curse Advertising2014-09-27 17:34 - 2014-09-27 17:34 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking2014-09-27 17:33 - 2014-09-27 18:07 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy2014-09-27 17:33 - 2014-09-27 17:37 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 22014-09-27 17:33 - 2014-09-27 17:33 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\matthenn\Downloads\spybot-2.4.exe2014-09-27 17:33 - 2014-09-27 17:33 - 00001410 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk2014-09-27 17:33 - 2014-09-27 17:33 - 00001398 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk2014-09-27 17:33 - 2014-09-27 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 22014-09-27 17:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe2014-09-27 17:29 - 2014-09-27 17:29 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\deb27c1a-00e6-4263-94b2-8b78ea4d32ae2014-09-27 17:24 - 2014-09-27 17:24 - 00000000 ____D () C:\Users\matthenn\Documents\matt henn.photolibrary2014-09-27 17:24 - 2014-09-27 17:24 - 00000000 ____D () C:\Users\matthenn\Documents\iMovie Projects.localized2014-09-27 17:23 - 2014-09-27 17:23 - 00020480 ___SH () C:\Users\matthenn\Documents\Thumbs.db2014-09-27 17:22 - 2014-09-27 17:23 - 00000000 ____D () C:\Users\matthenn\Documents\digital art2014-09-27 17:22 - 2014-09-27 17:22 - 00000000 ____D () C:\Users\matthenn\Documents\School2014-09-27 17:22 - 2014-09-27 17:22 - 00000000 ____D () C:\Users\matthenn\Documents\2014-04-09 new photos2014-09-27 17:21 - 2014-09-27 17:23 - 00000000 ____D () C:\Users\matthenn\Documents\Project 32014-09-27 17:21 - 2014-09-27 17:21 - 00000000 ____D () C:\Users\matthenn\Documents\other2014-09-27 17:21 - 2014-09-27 17:21 - 00000000 ____D () C:\Users\matthenn\Documents\New folder2014-09-27 16:52 - 2014-09-27 16:52 - 00002259 _____ () C:\windows\epplauncher.mif2014-09-27 16:51 - 2014-09-27 16:52 - 14087848 _____ (Microsoft Corporation) C:\Users\matthenn\Downloads\mseinstall.exe2014-09-26 20:36 - 2014-09-26 20:36 - 00001188 _____ () C:\windows\SysWOW64\ServiceConfig.xml2014-09-26 19:42 - 2014-09-26 19:42 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\TrojanHunter2014-09-26 19:31 - 2014-09-26 19:33 - 00000000 ____D () C:\Program Files (x86)\TrojanHunter 5.62014-09-26 19:31 - 2014-09-26 19:31 - 00059392 ____R () C:\windows\SysWOW64\streamhlp.dll2014-09-26 19:31 - 2014-09-26 19:31 - 00001104 _____ () C:\Users\matthenn\Desktop\TrojanHunter.lnk2014-09-26 19:31 - 2014-09-26 19:31 - 00000000 ____D () C:\ProgramData\TrojanHunter2014-09-26 19:31 - 2014-09-26 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrojanHunter2014-09-26 19:30 - 2014-09-26 19:30 - 04334200 _____ (Bytelayer AB ) C:\Users\matthenn\Downloads\TrojanHunterSetup.exe2014-09-26 19:05 - 2014-09-26 19:05 - 07822880 _____ (TeamViewer GmbH) C:\Users\matthenn\Downloads\TeamViewer_Setup.exe2014-09-26 19:05 - 2014-09-26 19:05 - 06588560 _____ (TeamViewer GmbH) C:\Users\matthenn\Downloads\TeamViewer_Setup_en (1).exe2014-09-26 19:05 - 2014-09-26 19:05 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\TeamViewer2014-09-26 19:04 - 2014-09-26 19:04 - 06588560 _____ (TeamViewer GmbH) C:\Users\matthenn\Downloads\TeamViewer_Setup_en.exe2014-09-26 10:04 - 2014-09-26 10:35 - 00000000 ____D () C:\Program Files (x86)\Steam2014-09-26 10:04 - 2014-09-26 10:04 - 00000982 _____ () C:\Users\Public\Desktop\Steam.lnk2014-09-26 10:04 - 2014-09-26 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam2014-09-26 10:03 - 2014-09-26 10:03 - 01142392 _____ () C:\Users\matthenn\Downloads\SteamSetup.exe2014-09-25 21:25 - 2014-09-27 18:38 - 00000000 ____D () C:\Users\matthenn\AppData\Local\CrashDumps2014-09-25 20:15 - 2014-09-28 22:14 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys2014-09-25 20:15 - 2014-09-25 20:15 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-09-25 20:15 - 2014-09-25 20:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-09-25 20:15 - 2014-09-25 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes2014-09-25 20:15 - 2014-09-25 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-09-25 20:15 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys2014-09-25 20:15 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys2014-09-25 20:15 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys2014-09-25 20:14 - 2014-09-25 20:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\matthenn\Downloads\mbam-setup-2.0.2.1012.exe2014-09-25 19:30 - 2013-09-04 14:57 - 00031264 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiutil.sys2014-09-25 19:30 - 2013-05-23 08:39 - 00041032 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiark.sys2014-09-25 19:28 - 2014-09-25 19:28 - 00001921 _____ () C:\Users\Public\Desktop\VIPRE.lnk2014-09-25 19:28 - 2014-09-25 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIPRE2014-09-25 19:28 - 2013-09-05 21:33 - 00048016 _____ (ThreatTrack Security, Inc.) C:\windows\system32\sbbd.exe2014-09-25 19:28 - 2013-07-04 21:02 - 00260816 _____ (GFI Software) C:\windows\system32\Drivers\SbFw.sys2014-09-25 19:28 - 2013-07-04 21:02 - 00063184 _____ (GFI Software) C:\windows\system32\Drivers\sbhips.sys2014-09-25 19:28 - 2012-09-24 20:26 - 00120608 _____ (GFI Software) C:\windows\system32\Drivers\SbFwIm.sys2014-09-25 19:27 - 2014-09-26 18:19 - 00000000 ____D () C:\ProgramData\VIPRE2014-09-25 19:27 - 2014-09-25 19:27 - 00000000 ____D () C:\ProgramData\GFI2014-09-25 19:27 - 2014-09-25 19:27 - 00000000 ____D () C:\Program Files (x86)\GFI2014-09-25 19:25 - 2014-09-26 09:26 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\VIPRE2014-09-25 19:25 - 2014-09-25 19:30 - 00000000 ____D () C:\Program Files (x86)\VIPRE2014-09-25 19:25 - 2014-09-25 19:25 - 06588304 _____ (ThreatTrack Security, Inc) C:\Users\matthenn\Downloads\setup-vipre-internet-security-en-us.exe2014-09-25 19:25 - 2014-09-25 19:25 - 00000000 ____D () C:\Users\matthenn\AppData\Local\VIPRE2014-09-25 11:36 - 2014-09-25 11:36 - 01464136 _____ (Impulse Point, LLC) C:\Users\matthenn\Downloads\ServiceInstaller (1).exe2014-09-24 13:48 - 2014-09-24 13:48 - 00000000 ____D () C:\Users\matthenn\AppData\Local\SFPC_Auto_Updater2014-09-23 21:37 - 2014-09-23 21:37 - 00895120 _____ (Google Inc.) C:\Users\matthenn\Downloads\ChromeSetup (1).exe2014-09-23 21:36 - 2014-09-23 21:36 - 00895120 _____ (Google Inc.) C:\Users\matthenn\Downloads\ChromeSetup.exe2014-09-23 21:36 - 2014-09-23 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2014-09-23 15:40 - 2014-09-23 15:40 - 00002531 _____ () C:\Users\Public\Desktop\Skype.lnk2014-09-23 15:40 - 2014-09-23 15:40 - 00000000 ___RD () C:\Program Files (x86)\Skype2014-09-23 15:40 - 2014-09-23 15:40 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Skype2014-09-23 15:40 - 2014-09-23 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype2014-09-23 15:40 - 2014-07-24 11:28 - 00468288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS2014-09-23 15:40 - 2014-07-24 11:28 - 00419648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys2014-09-23 15:40 - 2014-07-24 11:28 - 00412992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys2014-09-23 15:40 - 2014-07-24 11:28 - 00280384 _____ (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys2014-09-23 15:40 - 2014-07-24 11:28 - 00143680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys2014-09-23 15:40 - 2014-07-24 11:25 - 00054752 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe2014-09-23 15:40 - 2014-07-24 11:23 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll2014-09-23 15:40 - 2014-07-24 11:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll2014-09-23 15:40 - 2014-07-24 11:20 - 21266336 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll2014-09-23 15:40 - 2014-07-24 11:20 - 00645592 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll2014-09-23 15:40 - 2014-07-24 11:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe2014-09-23 15:40 - 2014-07-24 11:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL2014-09-23 15:40 - 2014-07-24 11:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe2014-09-23 15:40 - 2014-07-24 11:07 - 07424320 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe2014-09-23 15:40 - 2014-07-24 11:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys2014-09-23 15:40 - 2014-07-24 11:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi2014-09-23 15:40 - 2014-07-24 11:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe2014-09-23 15:40 - 2014-07-24 11:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi2014-09-23 15:40 - 2014-07-24 11:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe2014-09-23 15:40 - 2014-07-24 11:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00818624 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll2014-09-23 15:40 - 2014-07-24 11:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll2014-09-23 15:40 - 2014-07-24 10:57 - 02515264 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys2014-09-23 15:40 - 2014-07-24 10:57 - 00475968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys2014-09-23 15:40 - 2014-07-24 09:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll2014-09-23 15:40 - 2014-07-24 09:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL2014-09-23 15:40 - 2014-07-24 09:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe2014-09-23 15:40 - 2014-07-24 09:46 - 18760328 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll2014-09-23 15:40 - 2014-07-24 09:46 - 00477200 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll2014-09-23 15:40 - 2014-07-24 09:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00674512 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll2014-09-23 15:40 - 2014-07-24 09:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll2014-09-23 15:40 - 2014-07-24 07:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL2014-09-23 15:40 - 2014-07-24 07:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL2014-09-23 15:40 - 2014-07-24 07:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys2014-09-23 15:40 - 2014-07-24 07:45 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys2014-09-23 15:40 - 2014-07-24 07:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys2014-09-23 15:40 - 2014-07-24 07:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys2014-09-23 15:40 - 2014-07-24 07:42 - 01200640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys2014-09-23 15:40 - 2014-07-24 07:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys2014-09-23 15:40 - 2014-07-24 07:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys2014-09-23 15:40 - 2014-07-24 07:41 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys2014-09-23 15:40 - 2014-07-24 07:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys2014-09-23 15:40 - 2014-07-24 07:33 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\wups.dll2014-09-23 15:40 - 2014-07-24 07:33 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll2014-09-23 15:40 - 2014-07-24 07:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll2014-09-23 15:40 - 2014-07-24 07:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll2014-09-23 15:40 - 2014-07-24 07:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll2014-09-23 15:40 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL2014-09-23 15:40 - 2014-07-24 06:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL2014-09-23 15:40 - 2014-07-24 06:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll2014-09-23 15:40 - 2014-07-24 06:33 - 00026112 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll2014-09-23 15:40 - 2014-07-24 06:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl2014-09-23 15:40 - 2014-07-24 06:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll2014-09-23 15:40 - 2014-07-24 06:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll2014-09-23 15:40 - 2014-07-24 06:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll2014-09-23 15:40 - 2014-07-24 06:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll2014-09-23 15:40 - 2014-07-24 06:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe2014-09-23 15:40 - 2014-07-24 06:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll2014-09-23 15:40 - 2014-07-24 06:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll2014-09-23 15:40 - 2014-07-24 06:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll2014-09-23 15:40 - 2014-07-24 06:06 - 00438272 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll2014-09-23 15:40 - 2014-07-24 06:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll2014-09-23 15:40 - 2014-07-24 05:53 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll2014-09-23 15:40 - 2014-07-24 05:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll2014-09-23 15:40 - 2014-07-24 05:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll2014-09-23 15:40 - 2014-07-24 05:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl2014-09-23 15:40 - 2014-07-24 05:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll2014-09-23 15:40 - 2014-07-24 05:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll2014-09-23 15:40 - 2014-07-24 05:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll2014-09-23 15:40 - 2014-07-24 05:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll2014-09-23 15:40 - 2014-07-24 05:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe2014-09-23 15:40 - 2014-07-24 05:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll2014-09-23 15:40 - 2014-07-24 05:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll2014-09-23 15:40 - 2014-07-24 05:23 - 00328704 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll2014-09-23 15:40 - 2014-07-24 05:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll2014-09-23 15:40 - 2014-07-24 05:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll2014-09-23 15:40 - 2014-07-24 05:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll2014-09-23 15:40 - 2014-07-24 05:13 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll2014-09-23 15:40 - 2014-07-24 05:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll2014-09-23 15:40 - 2014-07-24 05:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe2014-09-23 15:40 - 2014-07-24 05:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll2014-09-23 15:40 - 2014-07-24 05:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll2014-09-23 15:40 - 2014-07-24 05:09 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll2014-09-23 15:40 - 2014-07-24 05:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll2014-09-23 15:40 - 2014-07-24 05:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe2014-09-23 15:40 - 2014-07-24 05:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll2014-09-23 15:40 - 2014-07-24 05:02 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll2014-09-23 15:40 - 2014-07-24 04:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll2014-09-23 15:40 - 2014-07-24 04:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll2014-09-23 15:40 - 2014-07-24 04:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll2014-09-23 15:40 - 2014-07-24 04:49 - 01361408 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll2014-09-23 15:40 - 2014-07-24 04:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll2014-09-23 15:40 - 2014-07-24 04:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll2014-09-23 15:40 - 2014-07-24 04:49 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll2014-09-23 15:40 - 2014-07-24 04:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll2014-09-23 15:40 - 2014-07-24 04:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll2014-09-23 15:40 - 2014-07-24 04:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll2014-09-23 15:40 - 2014-07-24 04:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll2014-09-23 15:40 - 2014-07-24 04:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll2014-09-23 15:40 - 2014-07-24 04:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll2014-09-23 15:40 - 2014-07-24 04:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll2014-09-23 15:40 - 2014-07-24 04:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll2014-09-23 15:40 - 2014-07-24 04:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll2014-09-23 15:40 - 2014-07-24 04:27 - 00907776 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll2014-09-23 15:40 - 2014-07-24 04:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll2014-09-23 15:40 - 2014-07-24 04:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv2014-09-23 15:40 - 2014-07-24 04:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll2014-09-23 15:40 - 2014-07-24 04:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll2014-09-23 15:40 - 2014-07-24 04:20 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll2014-09-23 15:40 - 2014-07-24 04:19 - 00388608 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll2014-09-23 15:40 - 2014-07-24 04:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll2014-09-23 15:40 - 2014-07-24 04:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe2014-09-23 15:40 - 2014-07-24 04:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll2014-09-23 15:40 - 2014-07-24 04:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll2014-09-23 15:40 - 2014-07-24 04:15 - 00828416 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll2014-09-23 15:40 - 2014-07-24 04:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll2014-09-23 15:40 - 2014-07-24 04:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll2014-09-23 15:40 - 2014-07-24 04:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll2014-09-23 15:40 - 2014-07-24 04:10 - 01029632 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll2014-09-23 15:40 - 2014-07-24 04:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll2014-09-23 15:40 - 2014-07-24 04:10 - 00806400 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll2014-09-23 15:40 - 2014-07-24 04:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv2014-09-23 15:40 - 2014-07-24 04:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll2014-09-23 15:40 - 2014-07-24 04:08 - 00162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll2014-09-23 15:40 - 2014-07-24 04:07 - 01705472 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll2014-09-23 15:40 - 2014-07-24 04:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll2014-09-23 15:40 - 2014-07-24 04:04 - 00667136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll2014-09-23 15:40 - 2014-07-24 04:02 - 03465216 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll2014-09-23 15:40 - 2014-07-24 04:01 - 05833216 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll2014-09-23 15:40 - 2014-07-24 04:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll2014-09-23 15:40 - 2014-07-24 04:01 - 01126912 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll2014-09-23 15:40 - 2014-07-24 03:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll2014-09-23 15:40 - 2014-07-24 03:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll2014-09-23 15:40 - 2014-07-24 03:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll2014-09-23 15:40 - 2014-07-24 03:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll2014-09-23 15:40 - 2014-07-24 03:50 - 00923136 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll2014-09-23 15:40 - 2014-07-24 03:49 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll2014-09-23 15:40 - 2014-07-24 03:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll2014-09-23 15:40 - 2014-07-24 03:46 - 08652800 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll2014-09-23 15:40 - 2014-07-24 03:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll2014-09-23 15:40 - 2014-07-24 03:43 - 02696704 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll2014-09-23 15:40 - 2014-07-24 03:43 - 00756224 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll2014-09-23 15:40 - 2014-07-24 03:43 - 00200192 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll2014-09-23 15:40 - 2014-07-24 03:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll2014-09-23 15:40 - 2014-07-24 03:39 - 02642944 _____ (Microsoft Corporation) C:\windows\system32\authui.dll2014-09-23 15:40 - 2014-07-24 03:38 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll2014-09-23 15:40 - 2014-07-24 03:38 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll2014-09-23 15:40 - 2014-07-24 03:33 - 03360768 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll2014-09-23 15:40 - 2014-07-24 03:30 - 02318336 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll2014-09-23 15:40 - 2014-07-24 03:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll2014-09-23 15:40 - 2014-07-24 00:11 - 00513544 _____ () C:\windows\SysWOW64\locale.nls2014-09-23 15:40 - 2014-07-24 00:11 - 00513544 _____ () C:\windows\system32\locale.nls2014-09-23 15:40 - 2014-07-12 01:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll2014-09-23 15:40 - 2014-07-12 01:23 - 00436224 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll2014-09-23 15:40 - 2014-07-12 00:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll2014-09-23 15:40 - 2014-07-12 00:33 - 00318976 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll2014-09-23 15:40 - 2014-07-12 00:13 - 01417216 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll2014-09-23 15:40 - 2014-07-04 08:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys2014-09-23 15:40 - 2014-07-04 06:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll2014-09-23 15:40 - 2014-07-04 06:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll2014-09-23 15:40 - 2014-07-04 06:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll2014-09-23 15:40 - 2014-07-04 06:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll2014-09-23 15:40 - 2014-07-04 05:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll2014-09-23 15:40 - 2014-07-04 05:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll2014-09-23 15:40 - 2014-06-27 02:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys2014-09-23 15:40 - 2014-06-25 20:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll2014-09-23 15:40 - 2014-06-25 20:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll2014-09-23 15:40 - 2014-06-19 19:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys2014-09-23 15:40 - 2014-06-18 22:13 - 00310080 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys2014-09-23 15:40 - 2014-06-14 02:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll2014-09-23 15:40 - 2014-06-14 01:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll2014-09-23 15:40 - 2014-06-07 08:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll2014-09-23 15:40 - 2014-06-07 06:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll2014-09-23 15:40 - 2014-06-05 10:00 - 01118040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys2014-09-23 15:40 - 2014-06-05 06:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll2014-09-23 15:40 - 2014-06-05 05:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll2014-09-23 15:40 - 2014-05-31 01:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll2014-09-23 15:40 - 2014-05-31 00:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll2014-09-23 15:40 - 2014-05-29 02:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll2014-09-23 15:40 - 2014-05-29 01:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll2014-09-23 15:40 - 2014-05-29 01:20 - 00427520 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll2014-09-23 15:40 - 2014-05-29 00:36 - 00344576 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll2014-09-23 15:40 - 2014-05-26 03:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll2014-09-23 15:40 - 2014-05-10 06:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll2014-09-23 15:40 - 2014-05-10 04:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll2014-09-23 15:40 - 2014-05-06 00:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll2014-09-23 15:40 - 2014-05-05 20:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll2014-09-23 15:40 - 2014-03-24 22:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll2014-09-23 15:40 - 2014-03-24 22:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll2014-09-23 15:40 - 2014-03-24 21:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll2014-09-23 15:40 - 2014-03-24 21:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll2014-09-23 15:39 - 2014-09-23 15:40 - 00000000 ____D () C:\ProgramData\Skype2014-09-23 15:39 - 2014-07-24 07:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL2014-09-23 15:39 - 2014-07-24 07:47 - 00132608 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll2014-09-23 15:39 - 2014-07-24 07:22 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll2014-09-23 15:39 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL2014-09-23 15:39 - 2014-07-24 06:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL2014-09-23 15:39 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll2014-09-23 15:39 - 2014-07-24 05:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll2014-09-23 15:39 - 2014-07-24 04:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll2014-09-23 15:39 - 2014-07-24 04:24 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-23 15:39 - 2014-07-24 04:18 - 00093696 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll2014-09-23 15:39 - 2014-07-24 04:12 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-09-23 15:39 - 2014-07-24 04:06 - 00080896 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll2014-09-23 15:39 - 2014-07-24 04:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll2014-09-23 15:39 - 2014-07-09 19:19 - 00387391 _____ () C:\windows\system32\ApnDatabase.xml2014-09-23 15:37 - 2014-09-23 15:37 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Developerts_LLC2014-09-23 15:36 - 2014-09-23 15:37 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam Web Enhancer2014-09-23 15:36 - 2014-09-23 15:36 - 00000000 ____D () C:\Users\matthenn\Downloads\Skype_TSV522ML02014-09-23 15:36 - 2014-09-23 15:36 - 00000000 ____D () C:\Program Files (x86)\sweetpacks bundle uninstaller_Skype_Target_19912352014-09-23 15:27 - 2014-09-25 19:34 - 00000000 ____D () C:\Program Files (x86)\SafeConnect2014-09-23 15:27 - 2014-09-23 15:27 - 01464136 _____ (Impulse Point, LLC) C:\Users\matthenn\Downloads\ServiceInstaller.exe2014-09-22 22:17 - 2014-09-02 16:06 - 00706016 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe2014-09-22 22:17 - 2014-09-02 16:06 - 00105440 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl2014-09-22 20:08 - 2014-09-22 20:09 - 00014848 ___SH () C:\Users\matthenn\Downloads\Thumbs.db2014-09-22 12:02 - 2014-04-13 23:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll2014-09-22 12:00 - 2014-08-15 22:40 - 23591424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll2014-09-22 12:00 - 2014-08-15 22:04 - 17455104 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll2014-09-22 12:00 - 2014-08-15 22:00 - 05833728 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll2014-09-22 12:00 - 2014-08-15 22:00 - 02793984 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll2014-09-22 12:00 - 2014-08-15 21:56 - 00547328 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll2014-09-22 12:00 - 2014-08-15 21:54 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll2014-09-22 12:00 - 2014-08-15 21:45 - 04232704 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll2014-09-22 12:00 - 2014-08-15 21:43 - 00758272 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll2014-09-22 12:00 - 2014-08-15 21:32 - 00446464 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll2014-09-22 12:00 - 2014-08-15 21:25 - 00072704 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll2014-09-22 12:00 - 2014-08-15 21:22 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll2014-09-22 12:00 - 2014-08-15 21:20 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll2014-09-22 12:00 - 2014-08-15 21:19 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll2014-09-22 12:00 - 2014-08-15 21:18 - 02185728 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll2014-09-22 12:00 - 2014-08-15 21:18 - 00289280 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll2014-09-22 12:00 - 2014-08-15 21:11 - 00597504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll2014-09-22 12:00 - 2014-08-15 21:06 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll2014-09-22 12:00 - 2014-08-15 21:05 - 00727040 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll2014-09-22 12:00 - 2014-08-15 21:05 - 00707072 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe2014-09-22 12:00 - 2014-08-15 21:03 - 02104832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl2014-09-22 12:00 - 2014-08-15 21:03 - 00365056 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll2014-09-22 12:00 - 2014-08-15 20:58 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll2014-09-22 12:00 - 2014-08-15 20:56 - 02310656 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll2014-09-22 12:00 - 2014-08-15 20:53 - 13588480 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll2014-09-22 12:00 - 2014-08-15 20:53 - 00243200 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll2014-09-22 12:00 - 2014-08-15 20:53 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll2014-09-22 12:00 - 2014-08-15 20:51 - 11769856 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll2014-09-22 12:00 - 2014-08-15 20:45 - 00603136 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll2014-09-22 12:00 - 2014-08-15 20:44 - 02014208 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl2014-09-22 12:00 - 2014-08-15 20:44 - 00312320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll2014-09-22 12:00 - 2014-08-15 20:34 - 01447424 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll2014-09-22 12:00 - 2014-08-15 20:20 - 01812992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll2014-09-22 12:00 - 2014-08-15 20:18 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll2014-09-22 12:00 - 2014-08-15 20:14 - 01190400 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll2014-09-22 12:00 - 2014-08-15 20:12 - 00678400 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll2014-09-22 12:00 - 2014-05-30 05:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll2014-09-22 12:00 - 2014-05-30 04:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll2014-09-22 12:00 - 2014-02-06 07:30 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb2014-09-22 12:00 - 2014-02-06 07:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll2014-09-22 12:00 - 2014-02-06 07:07 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll2014-09-22 12:00 - 2014-02-06 07:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll2014-09-22 12:00 - 2014-02-06 06:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll2014-09-22 12:00 - 2014-02-06 06:49 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe2014-09-22 12:00 - 2014-02-06 06:48 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe2014-09-22 12:00 - 2014-02-06 06:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb2014-09-22 12:00 - 2014-02-06 06:17 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll2014-09-22 12:00 - 2014-02-06 06:00 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll2014-09-22 12:00 - 2014-02-06 05:52 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll2014-09-22 12:00 - 2014-02-06 05:52 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll2014-09-22 12:00 - 2014-02-06 05:47 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe2014-09-22 12:00 - 2014-02-06 05:25 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll2014-09-22 11:56 - 2014-09-22 12:00 - 00000000 ____D () C:\windows\system32\MRT2014-09-22 11:56 - 2014-08-29 13:01 - 101694776 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe2014-09-22 11:09 - 2014-03-08 01:41 - 01306624 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentServer.dll2014-09-22 11:09 - 2014-03-06 10:34 - 02331000 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll2014-09-22 11:09 - 2014-03-06 02:51 - 02900992 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll2014-09-22 11:08 - 2014-03-20 00:19 - 01291200 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll2014-09-22 11:08 - 2014-03-19 23:41 - 00376152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\clfs.sys2014-09-22 11:08 - 2014-03-19 23:40 - 01112536 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll2014-09-22 11:08 - 2014-03-19 20:53 - 00950784 _____ (Microsoft Corporation) C:\windows\system32\ReAgent.dll2014-09-22 11:08 - 2014-03-19 20:48 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\ReInfo.dll2014-09-22 11:08 - 2014-03-19 19:55 - 01036288 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll2014-09-22 11:08 - 2014-03-19 19:39 - 00800256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReAgent.dll2014-09-22 11:08 - 2014-03-19 19:36 - 00172544 _____ (Microsoft Corporation) C:\windows\SysWOW64\ReInfo.dll2014-09-22 11:08 - 2014-03-19 03:13 - 00836096 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll2014-09-22 11:08 - 2014-03-19 01:50 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\w32tm.exe2014-09-22 11:08 - 2014-03-19 01:20 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\w32tm.exe2014-09-22 11:08 - 2014-03-13 08:35 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wof.sys2014-09-22 11:08 - 2014-03-11 11:45 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\BdeHdCfgLib.dll2014-09-22 11:08 - 2014-03-11 11:02 - 00794112 _____ (Microsoft Corporation) C:\windows\system32\fvewiz.dll2014-09-22 11:08 - 2014-03-08 16:38 - 01542768 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll2014-09-22 11:08 - 2014-03-08 11:29 - 00356848 _____ (Microsoft Corporation) C:\windows\system32\dcomp.dll2014-09-22 11:08 - 2014-03-08 07:34 - 01095488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll2014-09-22 11:08 - 2014-03-08 05:02 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\sxproxy.dll2014-09-22 11:08 - 2014-03-08 04:33 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\spp.dll2014-09-22 11:08 - 2014-03-08 04:25 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\SetNetworkLocation.dll2014-09-22 11:08 - 2014-03-08 04:12 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\sxproxy.dll2014-09-22 11:08 - 2014-03-08 03:47 - 00222720 _____ (Microsoft Corporation) C:\windows\SysWOW64\spp.dll2014-09-22 11:08 - 2014-03-08 03:04 - 00160768 _____ (Microsoft Corporation) C:\windows\system32\AppxAllUserStore.dll2014-09-22 11:08 - 2014-03-08 03:03 - 00939520 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll2014-09-22 11:08 - 2014-03-08 02:48 - 00252928 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentClient.dll2014-09-22 11:08 - 2014-03-08 02:40 - 00139776 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxAllUserStore.dll2014-09-22 11:08 - 2014-03-08 02:37 - 00755712 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll2014-09-22 11:08 - 2014-03-08 02:31 - 00222720 _____ (Microsoft Corporation) C:\windows\SysWOW64\dcomp.dll2014-09-22 11:08 - 2014-03-08 02:30 - 00197632 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppXDeploymentClient.dll2014-09-22 11:08 - 2014-03-08 01:11 - 00924160 _____ (Microsoft Corporation) C:\windows\system32\AppXDeploymentExtensions.dll2014-09-22 11:08 - 2014-03-06 10:34 - 00113648 _____ (Microsoft Corporation) C:\windows\system32\userenv.dll2014-09-22 11:08 - 2014-03-06 07:19 - 00094016 _____ (Microsoft Corporation) C:\windows\SysWOW64\userenv.dll2014-09-22 11:08 - 2014-03-06 06:46 - 01679128 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll Link to post Share on other sites More sharing options...
sirhenn Posted September 29, 2014 Author ID:884360 Share Posted September 29, 2014 2014-09-22 11:08 - 2014-03-06 05:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys2014-09-22 11:08 - 2014-03-06 05:24 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidusb.sys2014-09-22 11:08 - 2014-03-06 05:22 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys2014-09-22 11:08 - 2014-03-06 05:22 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dfsc.sys2014-09-22 11:08 - 2014-03-06 05:19 - 00283648 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys2014-09-22 11:08 - 2014-03-06 05:19 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpipreg.sys2014-09-22 11:08 - 2014-03-06 05:08 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\l2gpstore.dll2014-09-22 11:08 - 2014-03-06 04:41 - 00115200 _____ (Microsoft Corporation) C:\windows\system32\DevPropMgr.dll2014-09-22 11:08 - 2014-03-06 04:38 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll2014-09-22 11:08 - 2014-03-06 04:10 - 00058368 _____ (Microsoft Corporation) C:\windows\SysWOW64\l2gpstore.dll2014-09-22 11:08 - 2014-03-06 04:00 - 00247296 _____ (Microsoft Corporation) C:\windows\system32\SensorsApi.dll2014-09-22 11:08 - 2014-03-06 03:46 - 00085504 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll2014-09-22 11:08 - 2014-03-06 03:16 - 00171008 _____ (Microsoft Corporation) C:\windows\SysWOW64\SensorsApi.dll2014-09-22 11:08 - 2014-03-06 03:02 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\netlogon.dll2014-09-22 11:08 - 2014-03-06 02:31 - 02479616 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll2014-09-22 11:08 - 2014-03-06 02:29 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\netlogon.dll2014-09-22 11:08 - 2014-03-06 02:27 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll2014-09-22 11:08 - 2014-03-06 02:24 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\wlangpui.dll2014-09-22 11:08 - 2014-03-06 02:23 - 02270208 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll2014-09-22 11:08 - 2014-03-06 02:23 - 00186368 _____ (Microsoft Corporation) C:\windows\system32\dafWfdProvider.dll2014-09-22 11:08 - 2014-03-06 02:21 - 00291840 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Sensors.dll2014-09-22 11:08 - 2014-03-06 02:11 - 02030080 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll2014-09-22 11:08 - 2014-03-06 02:06 - 00386560 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlangpui.dll2014-09-22 11:08 - 2014-03-06 02:04 - 00226304 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Sensors.dll2014-09-22 11:08 - 2014-03-06 02:01 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Scanners.dll2014-09-22 11:08 - 2014-03-06 01:51 - 00151040 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Scanners.dll2014-09-22 11:08 - 2014-03-06 01:47 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\SessEnv.dll2014-09-22 11:08 - 2014-03-06 01:42 - 00280576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SessEnv.dll2014-09-22 11:08 - 2014-03-04 03:16 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\dnsapi.dll2014-09-22 11:08 - 2014-03-04 03:13 - 00254464 _____ (Microsoft Corporation) C:\windows\system32\dnsrslvr.dll2014-09-22 11:08 - 2014-03-04 03:08 - 00299008 _____ (Microsoft Corporation) C:\windows\system32\pdh.dll2014-09-22 11:08 - 2014-03-04 03:00 - 00512000 _____ (Microsoft Corporation) C:\windows\system32\wlidprov.dll2014-09-22 11:08 - 2014-03-04 02:56 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RMapi.dll2014-09-22 11:08 - 2014-03-04 02:42 - 00494592 _____ (Microsoft Corporation) C:\windows\SysWOW64\dnsapi.dll2014-09-22 11:08 - 2014-03-04 02:39 - 00254976 _____ (Microsoft Corporation) C:\windows\SysWOW64\pdh.dll2014-09-22 11:08 - 2014-03-04 02:32 - 00356864 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlidprov.dll2014-09-22 11:08 - 2014-03-04 02:15 - 00542208 _____ (Microsoft Corporation) C:\windows\system32\Windows.Graphics.Printing.dll2014-09-22 11:08 - 2014-03-04 02:05 - 00402432 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Graphics.Printing.dll2014-09-22 11:08 - 2014-03-04 02:03 - 00669696 _____ (Microsoft Corporation) C:\windows\system32\rasapi32.dll2014-09-22 11:08 - 2014-03-04 02:03 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\CredentialMigrationHandler.dll2014-09-22 11:08 - 2014-03-04 01:54 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\CredentialMigrationHandler.dll2014-09-22 11:08 - 2014-03-04 01:52 - 00605184 _____ (Microsoft Corporation) C:\windows\SysWOW64\rasapi32.dll2014-09-22 11:08 - 2013-12-23 19:28 - 00262656 _____ (Microsoft Corporation) C:\windows\SysWOW64\LocationApi.dll2014-09-22 11:08 - 2013-12-23 19:26 - 00325632 _____ (Microsoft Corporation) C:\windows\system32\LocationApi.dll2014-09-22 11:06 - 2014-08-23 03:48 - 02374784 _____ (Microsoft Corporation) C:\windows\explorer.exe2014-09-22 11:06 - 2014-08-23 03:13 - 02084520 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe2014-09-22 11:06 - 2014-08-23 02:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll2014-09-22 11:06 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll2014-09-22 11:06 - 2014-08-23 00:44 - 02860032 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll2014-09-22 11:06 - 2014-08-23 00:34 - 13423104 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll2014-09-22 11:06 - 2014-08-23 00:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll2014-09-22 11:06 - 2014-08-23 00:31 - 01038336 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll2014-09-22 11:06 - 2014-08-23 00:20 - 11818496 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll2014-09-22 11:06 - 2014-08-14 20:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys2014-09-22 11:06 - 2014-07-29 21:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll2014-09-22 11:06 - 2014-07-29 01:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll2014-09-22 11:06 - 2014-05-29 23:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys2014-09-22 11:05 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe2014-09-22 11:05 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe2014-09-22 11:03 - 2014-06-19 21:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll2014-09-22 11:03 - 2014-06-19 19:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll2014-09-22 10:58 - 2014-06-12 21:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll2014-09-22 10:58 - 2014-06-12 21:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys2014-09-22 10:58 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll2014-09-22 10:58 - 2014-06-06 07:34 - 02133504 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll2014-09-22 10:58 - 2014-05-09 23:46 - 02151424 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll2014-09-22 10:58 - 2014-05-09 23:22 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll2014-09-22 10:58 - 2014-03-06 08:53 - 02141912 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll2014-09-22 10:58 - 2014-03-06 08:51 - 00379224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys2014-09-22 10:58 - 2014-03-06 08:39 - 00212992 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll2014-09-22 10:58 - 2014-03-06 07:13 - 01779800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll2014-09-22 10:58 - 2014-03-06 02:09 - 01764864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll2014-09-22 10:57 - 2014-08-22 20:42 - 04148224 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys2014-09-22 10:57 - 2014-08-06 22:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll2014-09-22 10:57 - 2014-08-01 23:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll2014-09-22 10:57 - 2014-08-01 20:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll2014-09-22 10:57 - 2014-05-29 08:02 - 00565576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys2014-09-22 10:57 - 2014-05-29 03:55 - 00735232 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll2014-09-22 10:57 - 2014-05-29 02:40 - 00735232 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll2014-09-22 10:56 - 2014-07-15 14:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe2014-09-22 10:56 - 2014-07-15 04:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll2014-09-22 10:56 - 2014-07-15 04:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll2014-09-22 10:56 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll2014-09-22 10:56 - 2014-05-01 09:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys2014-09-22 10:56 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinapi.appcore.dll2014-09-22 10:56 - 2014-04-11 01:53 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\WSReset.exe2014-09-22 10:56 - 2014-04-10 23:54 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll2014-09-22 10:56 - 2014-04-10 23:06 - 00031232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe2014-09-22 10:56 - 2014-04-10 23:05 - 00123904 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll2014-09-22 10:56 - 2014-04-10 23:02 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe2014-09-22 10:56 - 2014-04-10 23:01 - 00137728 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll2014-09-22 10:56 - 2014-04-10 22:57 - 00190976 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll2014-09-22 10:56 - 2014-03-23 22:30 - 00257880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys2014-09-22 10:56 - 2014-03-23 22:30 - 00123224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys2014-09-22 10:56 - 2014-03-23 22:27 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys2014-09-22 10:56 - 2014-03-13 03:42 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\wusa.exe2014-09-22 10:56 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\windows\SysWOW64\wusa.exe2014-09-22 10:55 - 2014-07-10 00:03 - 04756992 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll2014-09-22 10:55 - 2014-05-19 02:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe2014-09-22 10:55 - 2014-05-19 02:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe2014-09-22 10:55 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe2014-09-22 10:55 - 2014-05-13 03:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe2014-09-22 10:55 - 2014-05-13 00:41 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll2014-09-22 10:55 - 2014-05-13 00:26 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll2014-09-22 10:55 - 2014-05-12 23:31 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll2014-09-22 10:55 - 2014-05-03 07:29 - 01726224 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll2014-09-22 10:55 - 2014-05-03 05:20 - 01473080 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll2014-09-22 10:55 - 2014-05-03 01:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll2014-09-22 10:55 - 2014-05-03 01:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll2014-09-22 10:55 - 2014-05-03 01:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll2014-09-22 10:55 - 2014-05-03 01:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll2014-09-22 10:55 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll2014-09-22 10:55 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll2014-09-22 10:55 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll2014-09-22 10:55 - 2014-05-02 19:26 - 00050745 _____ () C:\windows\system32\srms.dat2014-09-22 10:55 - 2014-04-30 02:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys2014-09-22 10:55 - 2014-04-30 02:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys2014-09-22 10:55 - 2014-04-30 02:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys2014-09-22 10:55 - 2014-04-30 02:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys2014-09-22 10:55 - 2014-04-30 01:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe2014-09-22 10:55 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe2014-09-22 10:55 - 2014-04-30 00:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll2014-09-22 10:55 - 2014-04-30 00:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll2014-09-22 10:55 - 2014-04-30 00:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll2014-09-22 10:55 - 2014-04-30 00:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll2014-09-22 10:55 - 2014-04-30 00:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll2014-09-22 10:55 - 2014-04-30 00:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll2014-09-22 10:55 - 2014-04-30 00:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL2014-09-22 10:55 - 2014-04-29 23:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL2014-09-22 10:55 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll2014-09-22 10:55 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll2014-09-22 10:55 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll2014-09-22 10:55 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll2014-09-22 10:55 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll2014-09-22 10:55 - 2014-04-29 23:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll2014-09-22 10:55 - 2014-04-28 18:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll2014-09-22 10:55 - 2014-04-26 12:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll2014-09-22 10:55 - 2014-04-18 10:57 - 00032600 _____ (Microsoft Corporation) C:\windows\system32\ploptin.dll2014-09-22 10:55 - 2014-04-18 10:44 - 01466856 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll2014-09-22 10:55 - 2014-04-18 09:29 - 01200288 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll2014-09-22 10:55 - 2014-04-18 05:44 - 00055296 _____ (Microsoft Corporation) C:\windows\system32\energyprov.dll2014-09-22 10:55 - 2014-04-18 03:51 - 00836608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll2014-09-22 10:55 - 2014-04-14 05:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll2014-09-22 10:55 - 2014-04-14 05:20 - 00324888 _____ (Microsoft Corporation) C:\windows\system32\MFCaptureEngine.dll2014-09-22 10:55 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll2014-09-22 10:55 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFCaptureEngine.dll2014-09-22 10:55 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll2014-09-22 10:55 - 2014-04-11 00:51 - 00250368 _____ (Microsoft Corporation) C:\windows\system32\rdpencom.dll2014-09-22 10:55 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdpencom.dll2014-09-22 10:55 - 2014-04-09 07:53 - 00337240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys2014-09-22 10:55 - 2014-04-09 02:39 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll2014-09-22 10:55 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpchttp.dll2014-09-22 10:55 - 2014-04-08 23:33 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wscsvc.dll2014-09-22 10:55 - 2014-04-08 18:46 - 00086688 _____ (Microsoft Corporation) C:\windows\system32\mrt_map.dll2014-09-22 10:55 - 2014-04-08 18:46 - 00028320 _____ (Microsoft Corporation) C:\windows\system32\mrt100.dll2014-09-22 10:55 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt_map.dll2014-09-22 10:55 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\windows\SysWOW64\mrt100.dll2014-09-22 10:55 - 2014-04-07 22:01 - 00589656 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fvevol.sys2014-09-22 10:55 - 2014-04-06 12:34 - 00372568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys2014-09-22 10:55 - 2014-04-06 12:34 - 00275800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys2014-09-22 10:55 - 2014-04-06 12:30 - 00201920 _____ (Microsoft Corporation) C:\windows\system32\MSVideoDSP.dll2014-09-22 10:55 - 2014-04-06 12:24 - 00360792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\fltMgr.sys2014-09-22 10:55 - 2014-04-06 12:20 - 01403856 _____ (Microsoft Corporation) C:\windows\system32\winmde.dll2014-09-22 10:55 - 2014-04-06 12:20 - 01379064 _____ (Microsoft Corporation) C:\windows\system32\wmpmde.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00765408 _____ (Microsoft Corporation) C:\windows\system32\mfmpeg2srcsnk.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00609448 _____ (Microsoft Corporation) C:\windows\system32\mf.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00491744 _____ (Microsoft Corporation) C:\windows\system32\mfsvr.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00467496 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00463256 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00364640 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll2014-09-22 10:55 - 2014-04-06 12:20 - 00244880 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe2014-09-22 10:55 - 2014-04-06 12:20 - 00028408 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe2014-09-22 10:55 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\windows\SysWOW64\MSVideoDSP.dll2014-09-22 10:55 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmde.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmpeg2srcsnk.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00406504 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfsvr.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00326024 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll2014-09-22 10:55 - 2014-04-06 11:16 - 00305768 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll2014-09-22 10:55 - 2014-04-06 08:58 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll2014-09-22 10:55 - 2014-04-06 08:51 - 00467968 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll2014-09-22 10:55 - 2014-04-06 08:33 - 00335872 _____ (Microsoft Corporation) C:\windows\system32\MDEServer.exe2014-09-22 10:55 - 2014-04-06 08:24 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe2014-09-22 10:55 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll2014-09-22 10:55 - 2014-04-06 07:26 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\BootMenuUX.dll2014-09-22 10:55 - 2014-04-06 07:20 - 00201216 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll2014-09-22 10:55 - 2014-04-06 07:01 - 00834048 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll2014-09-22 10:55 - 2014-04-06 06:52 - 00955904 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll2014-09-22 10:55 - 2014-04-06 06:37 - 00800768 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll2014-09-22 10:55 - 2014-04-06 06:05 - 01222656 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.Streaming.dll2014-09-22 10:55 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.Streaming.dll2014-09-22 10:55 - 2014-04-03 04:12 - 00307304 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll2014-09-22 10:55 - 2014-04-03 04:12 - 00130144 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll2014-09-22 10:55 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll2014-09-22 10:55 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll2014-09-22 10:55 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\windows\SysWOW64\tlscsp.dll2014-09-22 10:55 - 2014-04-02 22:22 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\tlscsp.dll2014-09-22 10:55 - 2014-03-28 11:58 - 00407016 _____ (Microsoft Corporation) C:\windows\system32\services.exe2014-09-22 10:55 - 2014-03-27 01:36 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\resutils.dll2014-09-22 10:55 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\windows\SysWOW64\resutils.dll2014-09-22 10:55 - 2014-03-26 23:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\swprv.dll2014-09-22 10:55 - 2014-03-26 23:10 - 01436160 _____ (Microsoft Corporation) C:\windows\system32\VSSVC.exe2014-09-22 10:55 - 2014-03-19 04:15 - 00011264 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll2014-09-22 10:55 - 2014-03-19 03:24 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll2014-09-22 10:55 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanhlp.dll2014-09-22 10:55 - 2014-03-18 01:00 - 07173120 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll2014-09-22 10:55 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll2014-09-22 10:55 - 2014-03-17 01:09 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll2014-09-22 10:55 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsGdiConverter.dll2014-09-22 10:55 - 2014-03-14 02:26 - 00491520 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll2014-09-22 10:55 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll2014-09-22 10:55 - 2014-03-11 10:25 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\BitLockerDeviceEncryption.exe2014-09-22 10:55 - 2014-03-11 10:05 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\fveapibase.dll2014-09-22 10:55 - 2014-03-11 09:02 - 00629760 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll2014-09-22 10:55 - 2014-03-08 16:47 - 00180056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys2014-09-22 10:55 - 2014-03-08 16:40 - 00136024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys2014-09-22 10:55 - 2014-03-08 02:41 - 00412672 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL2014-09-22 10:55 - 2014-03-08 02:25 - 00264192 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL2014-09-22 10:55 - 2014-03-08 02:04 - 00717312 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll2014-09-22 10:55 - 2014-03-08 01:58 - 00567296 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll2014-09-22 10:55 - 2014-03-06 05:19 - 00115200 _____ (Microsoft Corporation) C:\windows\system32\umpnpmgr.dll2014-09-22 10:55 - 2014-03-06 05:19 - 00040960 _____ (Microsoft Corporation) C:\windows\system32\Windows.Shell.Search.UriHandler.dll2014-09-22 10:55 - 2014-03-06 04:20 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Shell.Search.UriHandler.dll2014-09-22 10:55 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll2014-09-22 10:54 - 2014-07-10 00:16 - 00716800 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll2014-09-22 10:54 - 2014-07-09 23:33 - 01120256 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe2014-09-22 10:49 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll2014-09-22 10:49 - 2014-07-23 23:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll2014-09-22 10:46 - 2014-06-01 22:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll2014-09-22 10:46 - 2014-05-31 06:07 - 00440664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys2014-09-22 10:46 - 2014-05-31 06:07 - 00089944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys2014-09-22 10:46 - 2014-05-31 06:07 - 00027480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys2014-09-22 10:46 - 2014-05-31 02:30 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys2014-09-22 10:46 - 2014-05-31 02:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys2014-09-22 10:46 - 2014-05-31 02:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys2014-09-22 10:46 - 2014-05-31 00:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe2014-09-22 10:46 - 2014-05-31 00:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll2014-09-22 10:46 - 2014-05-31 00:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll2014-09-22 10:46 - 2014-05-27 05:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll2014-09-22 10:46 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll2014-09-22 10:46 - 2014-03-31 01:35 - 00428888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS2014-09-22 10:45 - 2014-06-06 09:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll2014-09-22 10:45 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll2014-09-22 10:45 - 2014-06-04 05:27 - 00114520 _____ (Microsoft Corporation) C:\windows\system32\consent.exe2014-09-22 10:45 - 2014-06-04 01:31 - 00356352 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll2014-09-22 10:45 - 2014-06-04 01:22 - 02790912 _____ (Microsoft Corporation) C:\windows\system32\msi.dll2014-09-22 10:45 - 2014-06-04 00:43 - 00281088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll2014-09-22 10:45 - 2014-06-04 00:38 - 03304448 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll2014-09-22 10:45 - 2014-05-31 06:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll2014-09-22 10:45 - 2014-05-30 22:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll2014-09-22 10:45 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll2014-09-22 10:45 - 2014-05-01 01:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll2014-09-22 10:44 - 2014-08-01 23:11 - 00918528 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll2014-09-22 10:44 - 2014-07-12 00:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe2014-09-21 17:39 - 2014-09-21 17:39 - 00000000 ____D () C:\ProgramData\Riot Games2014-09-21 17:38 - 2014-09-21 17:38 - 00001625 _____ () C:\Users\Public\Desktop\League of Legends.lnk2014-09-21 17:38 - 2014-09-21 17:38 - 00000000 ____D () C:\Riot Games2014-09-21 17:38 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_1.dll2014-09-21 17:38 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_2.dll2014-09-21 17:38 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DX9_39.dll2014-09-21 17:38 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\windows\SysWOW64\D3DCompiler_39.dll2014-09-21 17:38 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_39.dll2014-09-21 17:36 - 2014-09-21 17:39 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Riot Games2014-09-21 17:36 - 2014-09-21 17:36 - 27864920 _____ (Riot Games) C:\Users\matthenn\Downloads\LeagueofLegends_NA_Installer_9_15_2014.exe2014-09-21 16:35 - 2014-09-21 16:35 - 00003236 _____ () C:\windows\System32\Tasks\{4EABDF7A-AF36-4730-A3E9-E7163EBA2FD7}2014-09-21 08:50 - 2014-09-21 08:50 - 00000318 _____ () C:\Users\matthenn\Desktop\Curse Client.appref-ms2014-09-21 08:50 - 2014-09-21 08:50 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse2014-09-21 08:49 - 2014-09-21 08:49 - 00402696 _____ () C:\Users\matthenn\Downloads\setup.exe2014-09-21 08:36 - 2014-09-21 08:37 - 00000000 ____D () C:\Program Files (x86)\SafeKey2014-09-21 08:35 - 2014-09-21 08:36 - 21623800 _____ (McAfee, Inc.) C:\Users\matthenn\Downloads\mcafee_safekey.exe2014-09-20 12:06 - 2014-09-20 12:06 - 00001255 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk2014-09-20 12:05 - 2014-09-21 08:54 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft2014-09-20 11:57 - 2014-09-28 22:14 - 00000000 ___DO () C:\Users\matthenn\OneDrive2014-09-20 11:54 - 2014-09-20 11:54 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Blizzard Entertainment2014-09-20 11:53 - 2014-09-28 17:23 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Battle.net2014-09-20 11:53 - 2014-09-20 12:06 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Battle.net2014-09-20 11:53 - 2014-09-20 11:53 - 00001163 _____ () C:\Users\Public\Desktop\Battle.net.lnk2014-09-20 11:53 - 2014-09-20 11:53 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment2014-09-20 11:53 - 2014-09-20 11:53 - 00000000 ____D () C:\Program Files (x86)\Battle.net2014-09-20 11:52 - 2014-09-20 11:52 - 02942368 _____ (Blizzard Entertainment) C:\Users\matthenn\Downloads\World-of-Warcraft-Setup-enUS.exe2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\ProgramData\Battle.net2014-09-20 11:48 - 2014-09-28 22:14 - 00002246 _____ () C:\Users\Public\Desktop\Google Chrome.lnk2014-09-20 11:47 - 2014-09-28 22:14 - 00000914 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job2014-09-20 11:47 - 2014-09-28 16:52 - 00000918 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job2014-09-20 11:47 - 2014-09-27 23:32 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Deployment2014-09-20 11:47 - 2014-09-20 11:48 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Google2014-09-20 11:47 - 2014-09-20 11:47 - 00003890 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA2014-09-20 11:47 - 2014-09-20 11:47 - 00003654 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore2014-09-20 11:47 - 2014-09-20 11:47 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Apps\2.02014-09-20 11:47 - 2014-09-20 11:47 - 00000000 ____D () C:\Program Files (x86)\Google2014-09-20 11:38 - 2014-09-28 16:06 - 00003594 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-458999206-887510418-135140731-10022014-09-20 11:37 - 2014-09-28 22:07 - 00003934 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{F97933CF-DB74-4645-A82B-D80DB262F017}2014-09-20 11:37 - 2014-09-20 11:37 - 00000000 __SHD () C:\Users\matthenn\AppData\Local\EmieUserList2014-09-20 11:37 - 2014-09-20 11:37 - 00000000 __SHD () C:\Users\matthenn\AppData\Local\EmieSiteList2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ___HD () C:\ProgramData\CanonBJ2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf2014-09-20 11:34 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Macromedia2014-09-20 11:34 - 2012-04-16 05:00 - 00389120 _____ (CANON INC.) C:\windows\system32\CNMLMBB.DLL2014-09-20 11:33 - 2014-09-26 19:33 - 00000000 ____D () C:\Users\matthenn\AppData\Local\VirtualStore2014-09-20 11:33 - 2014-09-20 11:34 - 00000000 ____D () C:\Users\matthenn\AppData\Local\LenovoBrowserGuard2014-09-20 11:33 - 2014-09-20 11:33 - 00001449 _____ () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk2014-09-20 11:33 - 2014-09-20 11:33 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Adobe2014-09-20 11:32 - 2014-09-28 13:23 - 00000000 ____D () C:\Users\matthenn2014-09-20 11:32 - 2014-09-25 19:35 - 00000000 ____D () C:\Users\matthenn\AppData\Local\Packages2014-09-20 11:32 - 2014-09-20 11:32 - 00000020 ___SH () C:\Users\matthenn\ntuser.ini2014-09-20 11:32 - 2014-09-20 11:32 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Intel2014-09-20 11:32 - 2014-06-04 13:49 - 00000000 ___RD () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-20 11:32 - 2014-06-04 13:49 - 00000000 ___RD () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-20 11:32 - 2014-02-22 00:37 - 00000369 _____ () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk2014-09-20 11:32 - 2014-02-22 00:37 - 00000369 _____ () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk2014-09-20 11:32 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories2014-09-20 11:32 - 2013-08-22 11:36 - 00000000 ____D () C:\Users\matthenn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-28 18:28 - 2013-10-07 14:27 - 00865408 _____ () C:\windows\system32\PerfStringBackup.INI2014-09-28 18:26 - 2014-06-04 13:27 - 01204017 _____ () C:\windows\WindowsUpdate.log2014-09-28 18:26 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\sru2014-09-28 15:46 - 2014-06-04 14:55 - 00000000 ____D () C:\ProgramData\Office20132014-09-28 15:46 - 2014-06-04 14:52 - 00002560 _____ () C:\windows\system32\VfService.trf2014-09-28 15:46 - 2013-10-07 14:23 - 00013402 _____ () C:\windows\PFRO.log2014-09-28 15:46 - 2013-08-22 10:46 - 00018976 _____ () C:\windows\setupact.log2014-09-28 15:46 - 2013-08-22 10:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT2014-09-28 15:46 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\BBI2014-09-27 20:02 - 2013-08-22 09:25 - 00262144 ___SH () C:\windows\system32\config\ELAM2014-09-27 17:42 - 2013-08-22 10:44 - 00346744 _____ () C:\windows\system32\FNTCACHE.DAT2014-09-26 20:35 - 2013-08-22 15:12 - 00000000 ____D () C:\Program Files\Windows Journal2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ToastData2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\WinStore2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\setup2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod2014-09-26 20:35 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\setup2014-09-26 20:35 - 2013-08-22 09:36 - 00000000 ____D () C:\windows\system32\oobe2014-09-26 18:13 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\AppReadiness2014-09-26 18:12 - 2013-08-22 11:20 - 00000000 ____D () C:\windows\CbsTemp2014-09-25 21:20 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\security2014-09-25 19:33 - 2014-06-04 14:45 - 00000000 ____D () C:\ProgramData\McAfee2014-09-25 19:28 - 2013-08-22 11:36 - 00000000 ___HD () C:\windows\ELAMBKUP2014-09-25 19:27 - 2014-06-04 14:55 - 00000000 ____D () C:\ProgramData\Downloaded Installations2014-09-24 15:48 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\rescache2014-09-24 13:31 - 2014-06-04 14:00 - 00000000 ____D () C:\windows\SysWOW64\NV2014-09-24 13:31 - 2014-06-04 14:00 - 00000000 ____D () C:\windows\system32\NV2014-09-24 13:31 - 2014-06-04 14:00 - 00000000 ____D () C:\ProgramData\NVIDIA2014-09-23 15:37 - 2014-06-04 14:48 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 102014-09-23 15:37 - 2014-06-04 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo2014-09-23 15:37 - 2014-06-04 14:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 32014-09-23 15:37 - 2014-06-04 14:02 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless2014-09-23 15:37 - 2014-06-04 13:58 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel2014-09-23 15:37 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-23 15:37 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories2014-09-23 15:37 - 2013-08-22 11:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\SecureBootUpdates2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\PolicyDefinitions2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\MediaViewer2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\FileManager2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\Camera2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Windows Defender2014-09-22 22:14 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender2014-09-22 12:01 - 2013-08-22 11:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared2014-09-21 17:02 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\NDF2014-09-20 11:38 - 2014-06-04 13:56 - 00000000 ____D () C:\ProgramData\Intel2014-09-20 11:37 - 2014-06-04 14:56 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo2014-09-20 11:34 - 2014-06-04 14:42 - 00000000 ____D () C:\Program Files (x86)\LenovoBrowserGuard2014-09-20 11:34 - 2013-08-22 11:36 - 00000000 ____D () C:\windows\system32\FxsTmp2014-09-20 11:32 - 2014-06-04 14:16 - 00122986 ____H () C:\windows\modules.log ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2013-10-07 14:23 ==================== End Of Log ============================ Link to post Share on other sites More sharing options...
kevinf80 Posted September 29, 2014 ID:884460 Share Posted September 29, 2014 That is the log from a scan FRST.txt, I need to see the log named Fixlog.txt that was the product of the fix scan as per the instructions in reply #16 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 5, 2014 Root Admin ID:886587 Share Posted October 5, 2014 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts