Jump to content

Infected


Recommended Posts

Hello and :welcome:
If you've not already done so please start here and post back the 2 log files FRST.txt and Addition.txt

P2P/Piracy Warning:
 

 

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 



Before we proceed further, please read all of the following instructions carefully.
If there is anything that you do not understand kindly ask before proceeding.
If needed please print out these instructions.

  • Please do not post logs using CODE, QUOTE, or FONT tags. Just paste them as direct text.
  • If the log is too large then you can use attachments by clicking on the More Reply Options button.
  • Please enable your system to show hidden files: How to see hidden files in Windows
  • Make sure you're subscribed to this topic:
    • Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly
  • Removing malware can be unpredictable...It is unlikely but things can go very wrong! Please make sure you Backup all files that cannot be replaced if something were to happen. You can copy them to a CD/DVD, external drive or a pen drive
  • Please don't run any other scans, download, install or uninstall any programs unless requested by me while I'm working with you.
  • The removal of malware is not instantaneous, please be patient. Often we are also on a different Time Zone.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while following my instructions, Stop there and tell me the exact nature of the issue.
  • When we are done, I'll give you instructions on how to cleanup all the tools and logs
  • Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that.
  • Your topic will be closed if you haven't replied within 3 days
  • (If I have not responded within 24 hours, please send me a Private Message as a reminder)

 

Along with the FRST.txt and Addition.txt log files, can you attach the MBAM Scan log file showing the Dregol infection?  Thanks.

 

PS - Please go to the top of this topic and click on Follow This Topic.  It helps keep you and me notified when replies are made to this thread.

Link to post
Share on other sites

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-12-2015
Ran by Dan (administrator) on FLIGHT (29-12-2015 01:37:47)
Running from C:\Users\Dan\Downloads
Loaded Profiles: Dan (Available Profiles: Dan & DefaultAppPool)
Platform: Windows 7 Ultimate (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IOBit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCAvSvc.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
() C:\Program Files (x86)\Backblaze\bzserv.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
() C:\Program Files (x86)\Backblaze\x64\bztransmit64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8522496 2015-12-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407232 2015-12-17] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595848 2015-07-08] (ESET)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-08] (NVIDIA Corporation)
HKLM\...\Run: [shadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2013-04-16] (Saitek)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1553528 2015-11-13] (Logitech, Inc.)
HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\Run: [bingSvc] => C:\Users\Dan\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-17] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe [2596640 2015-05-22] (IObit)
HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\Run: [backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [581800 2015-12-18] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  No File
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  No File
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
Tcpip\..\Interfaces\{925e4141-39ea-4c25-ae6e-dcfb13172218}: [DhcpNameServer] 209.18.47.61 209.18.47.62

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.dregol.com/?f=1&a=drg_bimmed_15_28&cd=2XzuyEtN2Y1L1Qzu0Ezz0D0EtByB0CzyyDtC0AtB0E0E0AyDtN0D0Tzu0StCtBzzyDtN1L2XzutAtFtCtCtFtAtFtBtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyC0FyDzy0C0BtC0BtGtCzzyEyEtGtCyE0A0AtGyBzztDzztG0B0B0BtByDtBzytDtAzzzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyD0EyBzzyEyEyDtGtCyBzyyBtGyEzz0A0DtG0B0F0C0EtGzy0BtC0EtCyB0EtDtByEtB0D2QtN0A0LzutBtN1B2Z1V1T1S1NzuzzyCtB&cr=1608524372&ir=
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-10-29] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-29] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default
FF DefaultSearchEngine: Google
FF DefaultSearchEngine.US: Google
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.ighome.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2009-07-05] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-10-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-10-29] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2162540174-3299572588-2991909538-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Dan\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-06-23] (Citrix Online)
FF SearchPlugin: C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\searchplugins\bing-.xml [2015-11-17]
FF Extension: InvisibleHand - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\canitbecheaper@trafficbroker.co.uk.xpi [2015-05-29]
FF Extension: Google Bottom Search Bar - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\googlebottomsearchbar@matthewdanku.com.xpi [2015-05-29]
FF Extension: Saved Password Editor - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\savedpasswordeditor@daniel.dawson.xpi [2015-10-26]
FF Extension: Turn Off the Lights - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\stefanvandamme@stefanvd.net.xpi [2015-06-20]
FF Extension: Zoom Page - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\zoompage@DW-dev.xpi [2015-10-16]
FF Extension: Back to Top - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\{3C9A65A6-9563-4485-BA4A-4BCD698BCFB4}.xpi [2015-05-29]
FF Extension: Show my Password - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\extensions\{cd617372-6743-4ee4-bac4-fbf60f35719e}.xpi [2015-05-29]
FF Extension: Add to Search Bar - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\add-to-searchbox@maltekraus.de.xpi [2015-05-29]
FF Extension: Bing Search - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\bingsearch.full@microsoft.com.xpi [2015-11-17]
FF Extension: United States English Spellchecker - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\en-US@dictionaries.addons.mozilla.org [2015-02-19] [not signed]
FF Extension: Xmarks - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\foxmarks@kei.com [2015-06-07]
FF Extension: Google search link fix - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\jid0-XWJxt5VvCXkKzQK99PhZqAn7Xbg@jetpack.xpi [2015-12-22]
FF Extension: Google™ Translator - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2015-12-18]
FF Extension: NASA Night Launch - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\nasanightlaunch@example.com.xpi [2015-08-14]
FF Extension: Spell Checker Improved - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\spellcheckerimproved@mozilla.firefox.xpi [2015-05-30]
FF Extension: LastPass - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\support@lastpass.com [2015-12-18]
FF Extension: FT DeepDark - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2015-12-05]
FF Extension: Adblock Plus - C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\wlpf4izd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]

Chrome:
=======
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05]
CHR Extension: (Google Docs) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-02]
CHR Extension: (YouTube) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-02]
CHR Extension: (Google Search) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-02]
CHR Extension: (Google Sheets) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05]
CHR Extension: (Full Screen Weather) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg [2015-12-02]
CHR Extension: (Google Docs Offline) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-02]
CHR Extension: (My Chrome Theme) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2015-12-02]
CHR Extension: (Gmail) - C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-02]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - <no Path/update_url>
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - <no Path/update_url>
CHR HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - <no Path/update_url>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCService.exe [911648 2014-11-22] (IObit)
R2 ASCAntivirusSrv; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ascavsvc.exe [660768 2015-06-11] (IOBit)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-27] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [File not signed]
R2 bzserv; C:\Program Files (x86)\Backblaze\bzserv.exe [341672 2015-12-18] ()
S3 Common Toolkit 2; C:\Program Files (x86)\Common Files\Common Toolkit Suite\Tools\x64\CommonToolkit2.exe [337920 2013-08-08] (SPAMfighter ApS) [File not signed]
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249320 2015-12-17] (DTS, Inc)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1353720 2015-07-08] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-08] (NVIDIA Corporation)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [107912 2008-10-09] ()
S4 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [878880 2015-05-12] (IObit)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-31] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-08] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-08] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-08] (NVIDIA Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [3476432 2015-10-12] (Paramount Software UK Ltd)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S2 FSLabs Service; no ImagePath

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-27] ()
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4322440 2015-11-19] (Qualcomm Atheros Communications, Inc.)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [531424 2015-11-19] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [255240 2015-07-13] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [251632 2015-07-13] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [178520 2015-07-13] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [168208 2015-07-13] (ESET)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-07-12] ()
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2015-03-25] (IObit)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-02-05] (REALiX)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-29] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185088 2015-12-02] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-08] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-10] (NVIDIA Corporation)
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2015-03-25] (IObit.com)
S3 SaiH0255; C:\Windows\System32\DRIVERS\SaiH0255.sys [178304 2008-02-15] (Saitek)
R3 SaiH0763; C:\Windows\system32\DRIVERS\SaiH0763.sys [178304 2008-02-15] (Saitek)
R3 SaiK0255; C:\Windows\System32\drivers\SaiK0255.sys [181024 2013-04-30] (Saitek)
R3 SaiMini; C:\Windows\System32\drivers\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [12400 2015-12-28] (Macrovision Europe Ltd) [File not signed]
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2015-03-25] (IObit.com)
R3 vhidmini; C:\Windows\System32\drivers\vjoy.sys [15104 2012-10-15] (Headsoft)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; no ImagePath
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-29 01:37 - 2015-12-29 01:38 - 00021732 _____ C:\Users\Dan\Downloads\FRST.txt
2015-12-29 01:34 - 2015-12-29 01:35 - 02370560 _____ (Farbar) C:\Users\Dan\Downloads\FRST64.exe
2015-12-29 00:11 - 2015-12-29 00:11 - 00002260 _____ C:\Users\Dan\Desktop\JRT.txt
2015-12-29 00:05 - 2015-12-29 00:09 - 01599336 _____ (Malwarebytes) C:\Users\Dan\Downloads\JRT.exe
2015-12-28 19:17 - 2015-12-28 19:31 - 00000000 ____D C:\AdwCleaner
2015-12-28 19:13 - 2015-12-28 19:14 - 01743360 _____ C:\Users\Dan\Downloads\AdwCleaner.exe
2015-12-28 18:30 - 2015-12-28 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2015-12-28 15:24 - 2015-12-28 15:24 - 00002990 _____ C:\WINDOWS\System32\Tasks\ASCU8_SkipUac_Dan
2015-12-28 15:24 - 2015-12-28 15:24 - 00001491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2015-12-28 15:24 - 2015-12-28 15:24 - 00001479 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-12-28 15:24 - 2015-12-28 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2015-12-28 15:23 - 2015-12-28 15:24 - 00002377 _____ C:\Users\Public\Desktop\Advanced SystemCare Ultimate 8.lnk
2015-12-28 15:21 - 2015-12-28 15:23 - 91067232 _____ (IObit ) C:\Users\Dan\Desktop\asc-ultimate-setup.exe
2015-12-28 11:53 - 2015-12-28 18:40 - 00012400 _____ (Macrovision Europe Ltd) C:\WINDOWS\SysWOW64\Drivers\SECDRV.SYS
2015-12-28 08:01 - 2015-12-28 08:02 - 00000000 ___HD C:\$SysReset
2015-12-26 18:29 - 2015-12-26 18:29 - 00001156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-12-21 12:19 - 2015-12-21 12:19 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-12-21 12:15 - 2015-12-28 19:32 - 00000000 ____D C:\Users\Dan\AppData\Local\CrashDumps
2015-12-21 10:35 - 2015-12-08 20:51 - 01846016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-12-21 10:35 - 2015-12-08 20:51 - 01530240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-12-19 10:43 - 2015-12-19 10:46 - 00000000 ____D C:\Program Files (x86)\NCH Software
2015-12-19 10:43 - 2015-12-19 10:43 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2015-12-19 10:43 - 2015-12-19 10:43 - 00000000 ____D C:\ProgramData\NCH Software
2015-12-18 06:48 - 2015-12-18 06:49 - 00000000 ____D C:\Program Files (x86)\Backblaze
2015-12-18 06:48 - 2015-12-18 06:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backblaze
2015-12-18 06:48 - 2015-12-18 06:48 - 00000000 ____D C:\ProgramData\Backblaze
2015-12-17 15:25 - 2015-12-06 23:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-17 15:25 - 2015-12-06 23:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-17 15:25 - 2015-12-06 23:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-17 15:25 - 2015-12-06 23:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-17 15:25 - 2015-12-06 23:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-17 15:25 - 2015-12-06 23:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-17 15:25 - 2015-12-06 23:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-17 15:25 - 2015-12-06 23:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-17 15:25 - 2015-12-06 23:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-17 15:25 - 2015-12-06 23:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-17 15:25 - 2015-12-06 23:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-17 15:25 - 2015-12-06 23:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-17 15:25 - 2015-12-06 23:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-17 15:25 - 2015-12-06 23:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-17 15:25 - 2015-12-06 23:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-17 15:25 - 2015-12-06 23:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-17 15:25 - 2015-12-06 23:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-17 15:25 - 2015-12-06 23:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-17 15:25 - 2015-12-06 23:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-17 15:25 - 2015-12-06 23:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-17 15:25 - 2015-12-06 23:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-17 15:25 - 2015-12-06 23:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-17 15:25 - 2015-12-06 23:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-17 15:25 - 2015-12-06 23:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-17 15:25 - 2015-12-06 23:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-17 15:25 - 2015-12-06 23:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-17 15:25 - 2015-12-06 23:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-17 15:25 - 2015-12-06 23:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-17 15:25 - 2015-12-06 23:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-17 15:25 - 2015-12-06 23:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-17 15:25 - 2015-12-06 23:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-17 15:25 - 2015-12-06 23:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-17 15:25 - 2015-12-06 23:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-17 15:25 - 2015-12-06 23:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-17 15:25 - 2015-12-06 23:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-17 15:25 - 2015-12-06 23:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-17 15:25 - 2015-12-06 22:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-17 15:25 - 2015-12-06 22:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-17 15:25 - 2015-12-06 22:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-17 15:25 - 2015-12-06 22:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-17 15:25 - 2015-12-06 22:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-17 15:25 - 2015-12-06 22:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-17 15:25 - 2015-12-06 22:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-17 15:25 - 2015-12-06 22:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-17 15:25 - 2015-12-06 22:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-17 15:25 - 2015-12-06 22:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-17 15:25 - 2015-12-06 22:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-17 15:25 - 2015-12-06 22:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-17 15:25 - 2015-12-06 22:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-17 15:25 - 2015-12-06 22:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-17 15:25 - 2015-12-06 22:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-17 15:25 - 2015-12-06 22:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-17 15:25 - 2015-12-06 22:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-17 15:25 - 2015-12-06 22:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-17 15:25 - 2015-12-06 22:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-17 15:25 - 2015-12-06 22:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-17 15:25 - 2015-12-06 22:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-17 15:25 - 2015-12-06 22:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-17 15:25 - 2015-12-06 22:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-17 15:25 - 2015-12-06 22:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-17 15:25 - 2015-12-06 22:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-17 15:25 - 2015-12-06 22:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-17 15:25 - 2015-12-06 22:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-17 15:25 - 2015-12-06 22:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-17 15:25 - 2015-12-06 22:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-17 15:25 - 2015-12-06 22:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-17 15:25 - 2015-12-06 22:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-17 15:25 - 2015-12-06 22:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-17 15:25 - 2015-12-06 22:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-17 15:25 - 2015-12-06 22:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-17 15:25 - 2015-12-06 22:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-17 15:25 - 2015-12-06 22:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-17 15:25 - 2015-12-06 22:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 72121872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-12-17 08:48 - 2015-12-17 08:48 - 42913912 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 37882672 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 22345336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 18487360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 18389624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 16561320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 15933400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 15839392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 14844304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 13533416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 12986520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 12870384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 12040952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 11228488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-17 08:48 - 2015-12-17 08:48 - 07172912 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 05775144 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 05412880 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 05289952 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 04592384 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-12-17 08:48 - 2015-12-17 08:48 - 03741396 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-12-17 08:48 - 2015-12-17 08:48 - 03540360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 03299824 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 03278408 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 03271912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 03196455 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2015-12-17 08:48 - 2015-12-17 08:48 - 03126800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02997504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02954224 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02876536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02711296 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-12-17 08:48 - 2015-12-17 08:48 - 02600408 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02531696 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02496816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02437136 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02110600 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 02050176 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435906.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01839360 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01601952 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435906.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01435144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01395760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01350456 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01211832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01194352 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01121864 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01016360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00965032 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00961848 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00952984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00923744 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00888480 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00877872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00874728 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00873472 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00861816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00823232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00749000 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00708312 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00699064 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00689784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00678184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00677672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00673912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00645456 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00618192 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00596120 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00569440 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2015-12-17 08:48 - 2015-12-17 08:48 - 00539464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00503416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00501056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00467160 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00448584 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00447728 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00446768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00445408 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00445400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00422752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00413816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00381416 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00369272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00362056 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00357520 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00340648 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00310424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00272720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00258504 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00253864 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00224264 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00221968 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00209536 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00195192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00177416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00172584 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00158696 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00155976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00151368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00122320 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00118592 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00088352 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2015-12-17 08:48 - 2015-12-17 08:48 - 00034494 _____ C:\WINDOWS\system32\nvinfo.pb
2015-12-17 08:48 - 2015-12-17 08:48 - 00023696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-12-17 08:47 - 2015-12-17 08:47 - 01462720 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys
2015-12-14 07:53 - 2015-12-15 08:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\First Class Simulations
2015-12-12 14:58 - 2015-12-12 14:59 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2015-12-10 05:53 - 2015-12-18 00:30 - 00000000 ___RD C:\Users\Dan\3D Objects
2015-12-09 05:55 - 2015-12-09 05:55 - 00002401 _____ C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-09 05:50 - 2015-12-01 02:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-09 05:50 - 2015-11-30 19:33 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-09 05:50 - 2015-11-30 19:33 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-09 05:50 - 2015-11-24 07:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 05:50 - 2015-11-24 06:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 05:50 - 2015-11-24 05:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 05:50 - 2015-11-24 05:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-09 05:50 - 2015-11-24 04:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-09 05:50 - 2015-11-24 04:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-09 05:50 - 2015-11-24 04:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-09 05:50 - 2015-11-24 04:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 05:50 - 2015-11-24 04:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 05:50 - 2015-11-24 04:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-09 05:50 - 2015-11-24 04:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 05:50 - 2015-11-24 03:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 05:50 - 2015-11-24 03:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-09 05:50 - 2015-11-24 03:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-09 05:50 - 2015-11-24 03:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 05:50 - 2015-11-24 03:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 05:50 - 2015-11-24 03:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 05:50 - 2015-11-24 03:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 05:50 - 2015-11-24 02:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 05:50 - 2015-11-24 02:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 05:50 - 2015-11-24 02:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-09 05:50 - 2015-11-24 02:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 05:50 - 2015-11-24 02:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 05:50 - 2015-11-24 02:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-09 05:50 - 2015-11-24 02:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 05:50 - 2015-11-24 02:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-08 21:09 - 2015-12-08 21:09 - 00147405 _____ C:\Users\Dan\Documents\verification of food asst.pdf
2015-12-07 13:08 - 2015-12-07 13:08 - 00004560 _____ C:\Users\Dan\Desktop\menu.js
2015-12-06 21:17 - 2015-12-06 21:17 - 00002273 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-12-04 15:10 - 2015-12-29 01:15 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d044eeffdb77bf.job
2015-12-04 15:10 - 2015-12-28 20:01 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-04 08:18 - 2015-12-28 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare Ultimate 8
2015-12-04 08:18 - 2015-12-04 08:18 - 00000000 ____D C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
2015-12-03 20:04 - 2015-12-18 22:02 - 00000000 ____D C:\WINDOWS\Minidump
2015-12-03 09:14 - 2015-11-22 05:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-03 09:14 - 2015-11-22 05:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-03 09:14 - 2015-11-22 05:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-03 09:14 - 2015-11-22 05:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-03 09:14 - 2015-11-22 05:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-03 09:14 - 2015-11-22 05:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-03 09:14 - 2015-11-22 05:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-03 09:14 - 2015-11-22 05:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-03 09:14 - 2015-11-22 05:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-03 09:14 - 2015-11-22 05:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-03 09:14 - 2015-11-22 05:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-03 09:14 - 2015-11-22 05:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-03 09:14 - 2015-11-22 05:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-03 09:14 - 2015-11-22 05:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-03 09:14 - 2015-11-22 05:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-03 09:14 - 2015-11-22 05:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-03 09:14 - 2015-11-22 05:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-03 09:14 - 2015-11-22 05:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-03 09:14 - 2015-11-22 05:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-03 09:14 - 2015-11-22 04:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-03 09:14 - 2015-11-22 04:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-03 09:14 - 2015-11-22 04:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-03 09:14 - 2015-11-22 04:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-03 09:14 - 2015-11-22 04:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-03 09:14 - 2015-11-22 04:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-03 09:14 - 2015-11-22 04:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-03 09:14 - 2015-11-22 04:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-03 09:14 - 2015-11-22 04:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-03 09:14 - 2015-11-22 04:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-03 09:14 - 2015-11-22 04:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-03 09:14 - 2015-11-22 04:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-03 09:14 - 2015-11-22 04:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-03 09:14 - 2015-11-22 04:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-03 09:14 - 2015-11-22 04:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-03 09:14 - 2015-11-22 04:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-03 09:14 - 2015-11-22 04:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-03 09:14 - 2015-11-22 04:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-03 09:14 - 2015-11-22 04:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-03 09:14 - 2015-11-22 04:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-03 09:14 - 2015-11-22 04:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-03 09:14 - 2015-11-22 04:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-03 09:14 - 2015-11-22 04:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-03 09:14 - 2015-11-22 04:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-03 09:14 - 2015-11-22 04:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-03 09:14 - 2015-11-22 04:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-03 09:14 - 2015-11-22 04:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-03 09:14 - 2015-11-22 04:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-03 09:14 - 2015-11-22 04:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-03 09:14 - 2015-11-22 04:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-03 09:14 - 2015-11-22 04:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-03 09:14 - 2015-11-22 04:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-03 09:14 - 2015-11-22 04:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-03 09:14 - 2015-11-22 04:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-03 09:14 - 2015-11-22 04:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-03 09:14 - 2015-11-22 04:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-03 09:14 - 2015-11-22 04:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-03 09:14 - 2015-11-22 04:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-03 09:14 - 2015-11-22 04:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-03 09:14 - 2015-11-22 04:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-03 09:14 - 2015-11-22 04:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-03 09:14 - 2015-11-22 04:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-03 09:14 - 2015-11-22 04:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-03 09:14 - 2015-11-22 04:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-03 09:14 - 2015-11-22 04:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-03 09:14 - 2015-11-22 04:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-03 09:14 - 2015-11-22 04:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-03 09:14 - 2015-11-22 04:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-03 09:14 - 2015-11-22 04:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-03 09:14 - 2015-11-22 04:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-03 09:14 - 2015-11-22 04:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-03 09:14 - 2015-11-22 04:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-03 09:14 - 2015-11-22 04:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-03 09:14 - 2015-11-22 04:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-03 09:14 - 2015-11-22 04:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-03 09:14 - 2015-11-22 04:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-03 09:14 - 2015-11-22 04:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-03 09:14 - 2015-11-22 04:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-03 09:14 - 2015-11-22 04:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-03 09:14 - 2015-11-22 04:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-03 09:14 - 2015-11-22 04:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-03 09:14 - 2015-11-22 04:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-03 09:14 - 2015-11-22 04:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-03 09:14 - 2015-11-22 04:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-03 09:14 - 2015-11-22 04:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-03 09:14 - 2015-11-22 04:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-03 09:14 - 2015-11-22 04:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-03 09:14 - 2015-11-22 04:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-03 09:14 - 2015-11-22 04:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-03 09:14 - 2015-11-22 04:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-03 09:14 - 2015-11-22 04:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-03 09:14 - 2015-11-22 04:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-03 09:14 - 2015-11-22 04:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-03 09:14 - 2015-11-22 04:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-03 09:14 - 2015-11-22 04:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-03 09:14 - 2015-11-22 04:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-03 09:14 - 2015-11-22 04:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-03 09:14 - 2015-11-22 04:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-03 09:14 - 2015-11-22 04:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-03 09:14 - 2015-11-22 04:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-03 09:14 - 2015-11-22 04:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-03 09:14 - 2015-11-22 04:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-03 09:14 - 2015-11-22 04:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-03 09:14 - 2015-11-22 04:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-03 09:14 - 2015-11-22 04:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-03 09:14 - 2015-11-22 04:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-03 09:14 - 2015-11-22 04:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-03 09:14 - 2015-11-22 04:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-03 09:14 - 2015-11-22 04:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-03 09:14 - 2015-11-22 04:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-03 09:14 - 2015-11-22 04:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-03 09:14 - 2015-11-22 04:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-03 09:14 - 2015-11-22 04:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-03 09:14 - 2015-11-22 04:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-03 09:14 - 2015-11-22 04:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-02 22:46 - 2015-12-02 22:46 - 01905456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435900.dll
2015-12-02 22:46 - 2015-12-02 22:46 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435900.dll
2015-12-02 22:45 - 2015-12-02 22:45 - 00185088 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2015-12-01 21:41 - 2015-12-28 13:14 - 00000000 ____D C:\Users\Dan\AppData\Local\Deployment
2015-12-01 05:25 - 2015-12-16 21:10 - 00002300 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-30 20:26 - 2015-12-04 08:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Borderless Gaming
2015-11-30 20:26 - 2015-11-30 20:26 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Codeusa Software

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-29 01:37 - 2015-06-09 07:09 - 00000000 ____D C:\FRST
2015-12-29 01:09 - 2014-11-24 22:57 - 00000898 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-29 00:57 - 2014-11-23 00:54 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-29 00:23 - 2015-11-25 08:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2015-12-29 00:23 - 2015-10-30 01:28 - 00000000 ____D C:\Windows
2015-12-29 00:20 - 2015-07-09 13:32 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-29 00:10 - 2015-02-02 14:15 - 00000000 ____D C:\Users\Dan\AppData\Roaming\IObit
2015-12-29 00:10 - 2015-02-02 14:15 - 00000000 ____D C:\ProgramData\IObit
2015-12-29 00:10 - 2015-02-02 14:15 - 00000000 ____D C:\Program Files (x86)\IObit
2015-12-29 00:01 - 2015-11-22 07:35 - 00004146 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{CB6CCC89-7EEC-44A5-A63B-2A8C813F8521}
2015-12-28 23:59 - 2015-11-18 12:26 - 01011508 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-28 23:59 - 2015-10-30 02:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-28 20:01 - 2015-11-18 12:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-28 20:01 - 2015-10-30 01:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-12-28 18:54 - 2014-11-23 22:24 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orbx
2015-12-28 15:48 - 2015-11-04 08:34 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SceneryConfigEditor
2015-12-28 15:48 - 2015-09-06 07:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glowingheat FS9 SR-71 Blackbird
2015-12-28 15:48 - 2015-04-04 09:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZCA
2015-12-28 15:48 - 2015-04-03 08:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REX Essential Plus Overdrive
2015-12-28 14:53 - 2015-11-18 12:25 - 00198560 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-28 14:44 - 2015-11-18 12:26 - 00000000 ____D C:\Users\Dan
2015-12-28 14:13 - 2015-04-02 16:12 - 00000000 ____D C:\Users\Dan\AppData\Local\Microsoft Game Studios
2015-12-28 14:12 - 2014-11-22 16:05 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-28 14:02 - 2014-12-03 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REX 4
2015-12-28 14:01 - 2015-04-09 23:29 - 00000000 ____D C:\ProgramData\Virtuali
2015-12-28 13:20 - 2015-11-09 09:40 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldProp Solutions Inc
2015-12-28 13:02 - 2015-06-09 08:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMDG Simulations
2015-12-28 12:56 - 2014-12-05 11:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Just Flight
2015-12-28 12:56 - 2014-11-29 14:36 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Majestic Software
2015-12-28 12:50 - 2015-01-17 10:49 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Navdata
2015-12-28 12:40 - 2015-09-11 07:30 - 00000000 ____D C:\Program Files (x86)\Code Laboratories
2015-12-28 12:39 - 2015-04-10 08:41 - 00000000 ____D C:\Users\Dan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bell 222 B FSX SP2
2015-12-28 12:38 - 2014-11-26 01:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft
2015-12-28 12:26 - 2015-01-11 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiFi
2015-12-28 10:44 - 2014-11-23 00:19 - 00000000 ____D C:\ProgramData\Mozilla
2015-12-28 08:35 - 2015-09-12 07:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VJoy Virtual Joystick Driver
2015-12-28 08:35 - 2015-07-24 08:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlyTampa
2015-12-28 08:35 - 2015-05-02 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plan-G v3.1.2
2015-12-28 08:10 - 2015-11-24 21:07 - 00000000 ____D C:\Users\DefaultAppPool
2015-12-28 08:09 - 2015-10-30 02:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-28 08:09 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\registration
2015-12-27 17:52 - 2014-12-29 19:26 - 00000000 ____D C:\Users\Dan\AppData\Roaming\TeamViewer
2015-12-26 18:29 - 2014-12-27 15:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-12-26 14:44 - 2015-10-01 06:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-12-26 14:44 - 2014-11-23 00:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-24 01:00 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-24 00:49 - 2014-11-22 16:17 - 00000000 ____D C:\Users\Dan\AppData\Local\Google
2015-12-24 00:24 - 2015-06-05 00:01 - 00000000 ____D C:\Users\Dan\Documents\nvidiaInspector
2015-12-23 23:22 - 2015-11-03 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-21 12:19 - 2015-11-18 12:25 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-21 10:35 - 2015-11-18 12:25 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-21 10:35 - 2015-11-12 01:21 - 00001492 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-12-21 10:35 - 2014-11-22 16:04 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-21 10:06 - 2014-12-24 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FSPS
2015-12-18 21:54 - 2014-11-24 17:54 - 00002048 _____ C:\WINDOWS\ezdokcam1.lic
2015-12-18 06:49 - 2015-08-30 13:08 - 00000000 ___HD C:\.bzvol
2015-12-18 00:33 - 2015-11-18 12:32 - 00000000 ____D C:\Users\Dan\AppData\Local\Packages
2015-12-17 21:35 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-17 21:35 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-17 21:35 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-17 15:47 - 2015-10-30 02:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-17 12:11 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-17 08:48 - 2015-11-18 12:25 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-17 08:48 - 2015-11-18 12:25 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-15 08:05 - 2015-07-25 08:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2015-12-15 08:05 - 2015-02-02 14:15 - 00000000 ____D C:\Users\Dan\AppData\LocalLow\IObit
2015-12-15 08:04 - 2014-11-24 22:58 - 00000000 ____D C:\Users\Dan\AppData\LocalLow\Google
2015-12-15 08:04 - 2014-11-23 00:43 - 00000000 ____D C:\Users\Dan\AppData\Local\Mozilla
2015-12-10 06:00 - 2015-02-02 13:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FSFDT
2015-12-10 05:48 - 2014-11-28 01:24 - 00000000 ____D C:\Users\Dan\AppData\Local\GMap.NET
2015-12-09 05:55 - 2015-11-18 12:34 - 00000000 ___RD C:\Users\Dan\OneDrive
2015-12-09 05:54 - 2015-11-17 10:03 - 00000000 ___DC C:\Program Files\Microsoft Silverlight
2015-12-09 05:54 - 2015-11-17 10:03 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 05:54 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-09 05:53 - 2015-11-17 10:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 05:53 - 2014-11-22 16:56 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-09 05:50 - 2014-11-22 16:56 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-09 05:48 - 2014-11-23 00:54 - 00003804 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-08 20:51 - 2015-11-22 00:53 - 00111520 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2015-12-08 20:51 - 2014-11-22 16:25 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-12-08 20:51 - 2014-11-22 16:25 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-12-06 03:21 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-05 09:29 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-04 15:10 - 2015-02-10 00:04 - 00004008 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d044eeffdb77bf
2015-12-04 15:10 - 2014-11-24 22:57 - 00003746 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-03 20:05 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-02 22:47 - 2014-11-22 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-02 22:36 - 2015-11-18 12:25 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-02 22:36 - 2015-11-18 12:25 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-02 22:36 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\security
2015-12-02 22:36 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-12-02 22:36 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-12-02 22:36 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-02 22:36 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Branding
2015-12-02 22:36 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-02 22:36 - 2015-10-30 01:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-02 22:36 - 2015-02-05 11:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-12-02 22:36 - 2014-11-24 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-02 22:35 - 2014-11-22 16:17 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-02 13:34 - 2014-11-26 14:22 - 00000000 ____D C:\ProgramData\CanonIJPLM

==================== Files in the root of some directories =======

2015-05-01 22:26 - 2015-05-10 09:20 - 0000115 _____ () C:\Users\Dan\AppData\Roaming\LogFile.txt
2015-07-09 09:08 - 2015-07-09 09:08 - 0000043 _____ () C:\Users\Dan\AppData\Roaming\WB.CFG
2015-01-03 09:22 - 2015-02-25 08:34 - 0007605 _____ () C:\Users\Dan\AppData\Local\Resmon.ResmonCfg
2015-11-11 07:15 - 2015-11-11 07:15 - 0000000 _____ () C:\Users\Dan\AppData\Local\{E3387439-1D9D-47AC-99CB-DBED3AC9CAEC}
2015-11-18 12:25 - 2015-11-18 12:25 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-28 01:24 - 2015-05-02 09:35 - 0000171 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Files to move or delete:
====================
C:\Users\Dan\swt-win32-4332.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\wininit.exe IS MISSING <==== ATTENTION
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-23 00:55

==================== End of FRST.txt ============================

FRST.txt

Link to post
Share on other sites

Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by Dan (2015-12-29 01:39:50)
Running from C:\Users\Dan\Downloads
Windows 7 Ultimate (X64) (2015-11-18 17:32:35)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2162540174-3299572588-2991909538-500 - Administrator - Disabled)
Dan (S-1-5-21-2162540174-3299572588-2991909538-1000 - Administrator - Enabled) => C:\Users\Dan
DefaultAccount (S-1-5-21-2162540174-3299572588-2991909538-503 - Limited - Disabled)
Guest (S-1-5-21-2162540174-3299572588-2991909538-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2162540174-3299572588-2991909538-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Advanced SystemCare Ultimate (Enabled - Up to date) {91A1210C-78DD-A71C-E865-63DB27C767EE}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

737NG Audio Ground School (HKLM-x32\...\737NG Audio Ground School) (Version:  - )
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.4.0 - IObit)
Advanced SystemCare Ultimate 8 (HKLM-x32\...\Advanced SystemCare Ultimate_is1) (Version: 8.2.0 - IObit)
Aerosoft's - Anchorage X - FSX (HKLM-x32\...\Anchorage X - FSX) (Version:  - )
Aerosoft's - Bari X - FSX (HKLM-x32\...\Bari X - FSX) (Version:  - )
Aerosoft's - Bergamo X - FSX (HKLM-x32\...\Bergamo X - FSX) (Version: 1.02 - Aerosoft)
Aerosoft's - Bronco X - FSX (HKLM-x32\...\Bronco X - FSX) (Version: 1.12 - Aerosoft)
Aerosoft's - Mega Airport Rome - FSX (HKLM-x32\...\Mega Airport Rome - FSX) (Version: 1.00 - Aerosoft)
Aerosoft's - Olbia X - FSX (HKLM-x32\...\Olbia X - FSX) (Version:  - )
Aerosoft's - Twin Otter X Extended - FSX (HKLM-x32\...\Twin Otter X Extended - FSX) (Version: 1.11 - Aerosoft)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Backblaze (HKLM-x32\...\Backblaze) (Version:  - Backblaze, Inc)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderless Gaming (HKLM-x32\...\Borderless Gaming_is1) (Version: 8.4 - Codeusa Software)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MP Navigator EX 2.1 (HKLM-x32\...\MP Navigator EX 2.1) (Version:  - )
Canon MX330 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX330_series) (Version:  - )
Canon MX330 series User Registration (HKLM-x32\...\Canon MX330 series User Registration) (Version:  - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
CL-Eye Driver (HKLM-x32\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.)
CPUID HWMonitor 1.26 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Driver Booster 3.1 (HKLM-x32\...\Driver Booster_is1) (Version: 3.1 - IObit)
ESET NOD32 Antivirus (HKLM\...\{5F2AE448-CD4B-40BD-B245-5F0CD06A09B0}) (Version: 8.0.319.0 - ESET, spol s r. o.)
ESET NOD32 Antivirus 7.0.19.0 (HKLM-x32\...\{AD833C3E-CD08-49DF-A1D2-9CEBDB2F03B5}_is1) (Version: 7.0.19.0 - )
Flight Simulator X (HKLM-x32\...\RTMshadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}) (Version:  - )
Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}) (Version:  - )
FS2Crew: PMDG 737 NGX Edition (HKLM-x32\...\FS2Crew: PMDG 737 NGX Edition) (Version:  - )
FSX Fiber Accelerator (HKLM-x32\...\{1FDAA914-3979-BA80-4941-AF24EAF31EBF}) (Version: 1.3.2.0 - FSPS)
Glowingheat FS9 SR-71 Blackbird (HKLM-x32\...\Glowingheat FS9 SR-71 Blackbird) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Intel® Chipset Device Software (x32 Version: 10.0.17 - Intel® Corporation) Hidden
Intel® IPP Run-Time Installer 5.3 Update 4 for Windows* on IA-32 (HKLM-x32\...\{754854DC-2E0A-49D8-A1A1-426C1F9B1459}) (Version: 5.3.4.087 - Intel Corporation)
IObit Malware Fighter 3 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 3.2 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.1.0.20 - IObit)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)
Logitech Options (HKLM\...\LogiOptions) (Version:  - Logitech)
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 6.1 - Paramount Software (UK) Ltd.)
Macrium Reflect Free Edition (Version: 6.1.936 - Paramount Software (UK) Ltd.) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MegaSceneryEarth Arizona Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Arizona Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 001 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 002 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 003 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 004 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 005 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 006 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 007 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 008 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 009 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 010 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 011 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 012 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 013 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Boston Ultra Res 014 2.0 (HKLM-x32\...\MegaSceneryEarth Boston Ultra Res 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 001 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 002 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 003 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 004 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 005 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 006 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 007 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 008 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 009 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 010 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 011 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 012 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Cincinnati Ultra Res 013 2.0 (HKLM-x32\...\MegaSceneryEarth Cincinnati Ultra Res 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Florida Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Florida Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 001 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 002 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 003 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 004 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 005 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 006 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 007 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 008 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 009 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 010 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 011 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 012 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 013 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 014 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 015 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 015 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 016 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 016 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 017 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 017 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 018 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 018 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 019 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 019 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 020 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 020 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 021 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 021 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 022 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 022 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 023 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 023 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 024 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 024 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 025 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 025 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 026 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 026 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 027 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 027 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 028 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 028 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 029 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 029 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Grand Canyon Ultra Res 030 2.0 (HKLM-x32\...\MegaSceneryEarth Grand Canyon Ultra Res 030 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 001 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 002 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 003 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 004 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 005 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 006 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 008 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 009 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 010 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana 011 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Indiana Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Indiana Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 001 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 002 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 003 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 004 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 005 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 006 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 007 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 008 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 009 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 010 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 011 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 012 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 013 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 014 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 015 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 015 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 016 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 016 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 017 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 017 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 018 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 018 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 019 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 019 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 020 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 020 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 021 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 021 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 022 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 022 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 023 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 023 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 024 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 024 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 025 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 025 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 026 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 026 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 027 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 027 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 028 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 028 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 029 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 029 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 030 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 030 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 031 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 031 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 032 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 032 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 033 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 033 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 035 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 035 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 036 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 036 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 037 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 037 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 038 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 038 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 041 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 041 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 042 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 042 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 043 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 043 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 045 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 045 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 046 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 046 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 047 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 047 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 048 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 048 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 049 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 049 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 050 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 050 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 051 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 051 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Italy 052 2.0 (HKLM-x32\...\MegaSceneryEarth Italy 052 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 001 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 002 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 003 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 004 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 005 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 006 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 007 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 008 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 009 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 010 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 011 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 012 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 013 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 014 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 015 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 015 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky 016 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky 016 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Kentucky Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Kentucky Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Massachusetts Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Massachusetts Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 001 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 002 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 003 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 004 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 005 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 006 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 007 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 008 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 009 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 010 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 011 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 012 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 013 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 013 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio 014 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio 014 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Ohio Charts 2.0 (HKLM-x32\...\MegaSceneryEarth Ohio Charts 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 001 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 001 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 002 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 002 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 003 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 003 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 004 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 004 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 005 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 005 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 006 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 006 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 007 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 007 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 008 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 008 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 009 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 009 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 010 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 010 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 011 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 011 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 012 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 012 2.0) (Version: 2.0 - MegaSceneryEarth)
MegaSceneryEarth Orlando Ultra Res 013 2.0 (HKLM-x32\...\MegaSceneryEarth Orlando Ultra Res 013 2.0) (Version: 2.0 - MegaSceneryEarth)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{eb96e401-0158-4062-b443-aff1b34e69b3}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MK-Studios's - Bologna X - FSX (HKLM-x32\...\Bologna X - FSX) (Version: 1.01 - MK-Studios)
Mozilla Firefox 43.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.2 (x86 en-US)) (Version: 43.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.2.5833 - Mozilla)
Mozilla Thunderbird 38.5.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 38.5.0 (x86 en-US)) (Version: 38.5.0 - Mozilla)
NVIDIA 3D Vision Controller Driver 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7644 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Saitek ProFlight Fsx Plugin 7.0.40.9 (HKLM\...\{9BDAAE79-8254-4CAF-9D1A-A2114CDB5E17}) (Version: 7.0.40.9 - Saitek)
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.3 - IObit)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{BD90BC1C-115D-47E1-B85C-07AE182C3AB8}) (Version: 7.0.27.13 - Mad Catz)
Stellarium 0.14.0 (HKLM\...\Stellarium_is1) (Version: 0.14.0 - Stellarium team)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
VJoy Virtual Joystick Driver 1.2 (HKLM-x32\...\VJoy Virtual Joystick Driver_is1) (Version:  - Headsoft)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B990B45-2645-4024-AC49-A0999431468D} - System32\Tasks\{7BF2FD1F-E42A-4CC5-B386-A27DE7309C24} => C:\Program Files (x86)\Google\Google Earth Pro\googleearth.exe
Task: {0BF97FE7-A093-4337-AB52-DD41897068E0} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {11FC557E-144B-4E3C-B46E-BFA145C0C222} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {16B5BD56-09BE-4D8C-8668-B7A257E61682} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {17D6BD3C-4738-4A92-A827-64AF08573522} - System32\Tasks\{32B21845-E598-4041-9A9C-D052F8A85285} => E:\EZdokCamera.exe
Task: {1A7152CA-A825-451A-ABB3-1746D791F6F3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {1D14C1EC-B701-4EED-867D-EC122A462392} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {250B55DA-45B6-4B4F-88C4-7446FF8C2D76} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {28CBC1C9-F693-4ADA-B74A-DC3242B64C7F} - System32\Tasks\{E1BBAD36-81B1-4348-9CF2-D622E5D336D8} => E:\-Team Speak\teamspeak3-server_win64\ts3server_win64.exe
Task: {2B698A6F-9220-423A-9891-51FF72DCE718} - System32\Tasks\{6EE176E8-180E-40A0-89C2-87BE297ACE2A} => pcalua.exe -a D:\OrbxFTXGlobal100.exe -d D:\
Task: {2E86131D-9AAB-4FBC-BF2A-A89D13C4AA59} - System32\Tasks\NCH Software\DebutSevenDays => C:\Program Files (x86)\NCH Software\Debut\Debut.exe
Task: {36B1B160-E0E4-476F-AEC4-2A303DA7FBA1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3EDF27EA-7A88-4143-9BFB-374376A29B74} - System32\Tasks\{71B2682E-122F-457A-B645-3E31C97E7A07} => C:\Program Files (x86)\Google\Google Earth Pro\googleearth.exe
Task: {4148076C-4DD2-42EB-A931-FD1D3A7E3E90} - System32\Tasks\{3751AD0B-2D15-49B7-8357-2554A42412DD} => E:\UltimateTraffic2.exe
Task: {492C395F-A80F-4DF7-8FE9-CA5DA13E4506} - System32\Tasks\{8D42ED5C-24A7-4DF3-BB4B-09B8B8C0DA08} => E:\EZdokCamera.exe
Task: {4AC771BF-BBD3-4D5E-8D25-9D6AAD7854CB} - System32\Tasks\{BDDCD14B-7541-474A-99B5-DDCB868CC73E} => C:\Program Files (x86)\EZdokCamera.exe
Task: {4B8F1F46-1656-440A-AFF9-972D76E75A85} - System32\Tasks\{10E3BB19-784D-4574-A76E-CCAFE20485DB} => E:\C-17\EZdokCamera(2).exe
Task: {4B927493-1B8C-46CE-B7A0-969C92E0C2A5} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-08-21] (IObit)
Task: {5202B9E3-2FCA-44AD-97B5-D04BB0A54E5B} - System32\Tasks\{E0FA3CA0-48AC-4E67-A7A6-001CD2A5323A} => E:\EZdokCamera.exe
Task: {5752B9BE-27B8-4278-B0A5-BB96B2A91054} - System32\Tasks\{B3F888F6-4279-4A81-8F7C-B2331F33FCED} => E:\-Team Speak\teamspeak3-server_win64\ts3server_win64.exe
Task: {5988DB20-FA13-4F39-AB78-54FB58906818} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {5B8C3375-96C4-4808-8BF0-2027FD3775C0} - System32\Tasks\{BCD85420-D345-4976-8F68-0C020454A1D9} => E:\UltimateTraffic2.exe
Task: {5C4BE9D2-E52F-44F8-83FA-01B615EFCF77} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {5E19CDC5-6E4B-4837-A7B2-328638CCD15E} - System32\Tasks\{B7142B8A-4964-4387-A2C4-C97DBEFFAA9C} => C:\Program Files (x86)\EZdokCamera.exe
Task: {632AF27A-A4C7-4266-BD73-005CB87CF1E4} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {69FDAA28-B473-4FAE-AA1E-28D06A26BF93} - System32\Tasks\{541A89FF-E422-4A69-9958-48028581D856} => pcalua.exe -a E:\OrbxFTXNASAK130.exe -d E:\
Task: {6B0CF583-E339-4C13-8035-6876C5CF735C} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {6B86E2CD-4255-4469-82E1-D95CF8163A41} - System32\Tasks\GoogleUpdateTaskMachineUA1d044eeffdb77bf => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {70638E40-57AC-4ACB-9B49-B2EF77407057} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {73A0B104-255A-484D-9B4C-0D94814B34FB} - System32\Tasks\{8743B077-A33E-4D90-BA7B-C11584970B3C} => E:\C-17\EZdokCamera(2).exe
Task: {73E3D436-4BC1-482E-8142-4D803083C985} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {7507B5FF-C887-4EDB-BA12-125FBC5DF640} - System32\Tasks\{8593B847-4110-4C16-9451-01E71109E0E7} => pcalua.exe -a C:\Users\Dan\AppData\Local\Temp\Temp1_OrbxFTXNABlueNRM140.zip\OrbxFTXNABlueNRM140.exe
Task: {75B8157A-7224-4610-975D-C6FFEFE88EE4} - System32\Tasks\{83D5723C-CE2E-43E4-8CCE-910F1FB4BE6E} => E:\C-17\EZdokCamera(2).exe
Task: {78F3DDEE-B464-4D3A-B2CA-49C0B33459A5} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {7BE60737-FCD4-4ABD-9547-249A76450DB8} - System32\Tasks\{BBBC3C39-366B-4889-BC86-1EF2D8181EE6} => pcalua.exe -a D:\setup.exe -d D:\
Task: {7F1E5BC9-E089-4629-B8B9-C3E3261F6673} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {80825075-DA52-4BF6-B3FC-88CEEC32FF87} - System32\Tasks\{F7894F89-380B-4925-8762-A0087B5A4A33} => \Flight\fsx\fsx.exe
Task: {8895316C-DFE4-426C-BF0C-F91347E9E508} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {89FAA2B6-514A-49B1-8FF5-A9EF6D9DBEA4} - System32\Tasks\{9CB1FDB8-DDC5-421F-B5E7-FF7B366C8B2D} => E:\C-17\EZdokCamera(2).exe
Task: {8A0898A9-131D-4677-B1E4-3DF3583EBCF5} - System32\Tasks\{DE0EF5C9-A121-4F34-A9D6-6E88338C63C3} => E:\EZdokCamera.exe
Task: {8BCF3505-64DC-4EB1-B62F-3CF567274A6D} - System32\Tasks\{9B85E46C-B761-4059-869E-3731983274FE} => C:\Program Files (x86)\EZdokCamera.exe
Task: {8D369873-30A0-4129-A432-4D071F1E704F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {970800D6-7DA2-46E7-B222-F3F3DCBF7BDD} - System32\Tasks\{0805A06B-11AF-4835-BA5B-1582DC14715E} => C:\Program Files (x86)\Google\Google Earth Pro\googleearth.exe
Task: {98FCC739-C1D1-46BA-9308-8F4F583CCC44} - System32\Tasks\{578B1C2D-EAE4-4825-BA98-C008F170983B} => E:\CL-Eye Driver\CL-EyeTest.exe
Task: {9A721982-3068-4A3B-A76B-87FA77035CFE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {9AA482FB-9E94-43A1-BEC4-BDD354F75B79} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)
Task: {9C07E74D-843E-4939-B840-AD63AC1A10CF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9E70FABC-64FD-4A49-982B-A69321FACCFF} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {A07C5194-131C-4BFD-B296-8165E86AF8DA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {A4127DF2-044D-4CD8-94C2-189F4F51D50C} - System32\Tasks\{2AF1CE5B-35B7-42D5-873C-FF5B76A699A0} => E:\EZdokCamera.exe
Task: {A6585325-CC9F-43B7-A041-0E72B2B85733} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {A6761D01-82D4-4E60-8D4B-D88965884233} - System32\Tasks\{DE36FD67-81DA-480D-A73B-DCE37200FBDA} => C:\WINDOWS\system32\msiexec.exe [2015-10-30] (Microsoft Corporation)
Task: {A9C1CF7C-3736-4F31-BF29-CC1D364CB135} - System32\Tasks\ASCU8_SkipUac_Dan => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASC.exe [2015-11-18] (IObit)
Task: {B208C2E1-D2A1-46CF-B8A4-9C54CCB1459F} - System32\Tasks\{90205556-B6B2-4E94-8022-BA7B6281E612} => E:\EZdokCamera.exe
Task: {B281879E-EA56-45B5-8C0B-0CE48E1DCCBB} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {B43D980A-DA6C-4DFD-95DF-29083816F272} - System32\Tasks\{F2BD58E7-F995-4678-ADD2-8CD0D0A7B4D2} => C:\Program Files (x86)\EZdokCamera.exe
Task: {B4ACE66C-FA1F-4467-A1E6-086592AEAFC3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {B8756A30-3D98-4E78-A6C4-EB3060366AFD} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {B876577F-97B0-49AE-92A3-7244A19875E7} - System32\Tasks\{78909151-1BF9-4DE7-B29A-E4E9983D8480} => pcalua.exe -a E:\FSX\CX20X.exe -c Uninstaller.exe
Task: {C0A9B4C1-99B0-492D-9412-C98D817E6FB1} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {C525AAF3-0CFB-49B8-8156-59AFBE169BDF} - System32\Tasks\{91DB6EF1-1F89-49BD-BB0E-DBAA1BBC9C45} => E:\-Team Speak\teamspeak3-server_win64\ts3server_win64.exe
Task: {C71BCFFA-6295-4383-BB29-ECF62B745F17} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {C7A82F59-E5B2-4127-9969-A11B59F9EBFD} - System32\Tasks\{544EB764-EA2F-4335-BC44-470A95AD504D} => E:\EZdokCamera.exe
Task: {C9CDBA3F-6E76-475F-BE84-306E49E8545E} - System32\Tasks\{1BA1A379-4947-43F6-820A-C927C8AB646A} => C:\Program Files (x86)\EZdokCamera.exe
Task: {CCE1E573-D440-4FD1-89F5-6429096E8606} - System32\Tasks\{8A3A238F-1B34-4799-971E-A4DD29C081D9} => C:\Program Files (x86)\Google\Google Earth Pro\googleearth.exe
Task: {CD2DF2AB-3E4C-4867-BA59-1473206EA496} - System32\Tasks\{49483E1B-FC28-40B1-A4FF-F92AD6544B0D} => E:\-Team Speak\teamspeak3-server_win64\ts3server_win64.exe
Task: {CE96A5D4-601B-40C0-8D60-7F8154CC88CA} - System32\Tasks\{99E9D600-5DD7-40FD-B722-1E67FCF9A43E} => C:\WINDOWS\system32\msiexec.exe [2015-10-30] (Microsoft Corporation)
Task: {D0A3472F-8848-4381-BFD1-2EBFB0560442} - System32\Tasks\{5FB0307F-F0BA-4744-BBF6-3C62484724D0} => E:\UltimateTraffic2.exe
Task: {D6A1687D-0DBF-4CCE-B678-3244A7E7B965} - System32\Tasks\{F416453A-11AA-4F37-AA7F-10C3A0EDC499} => C:\Program Files (x86)\EZdokCamera.exe
Task: {D72D1060-744A-4F56-88EF-6F86E9F59CEB} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {D7CEF80C-88CD-493F-BD60-E80200FFC51C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {DE0678AD-9BC0-4926-B9A3-96F548A7339D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {E07190CF-A28B-44D8-8504-A83D43B49F06} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {E33AC552-91F3-4CD9-A287-7E427BA40101} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {E5812EE5-4AB4-46B6-B9BA-BE460B66F57C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {E6C7E59E-F040-4D56-8AC6-8D34CCAB2F24} - System32\Tasks\{DD9F2EFA-95E2-48BF-A6D4-E683FD7389F9} => E:\C-17\EZdokCamera(2).exe
Task: {EBE32561-9E8D-4799-AC04-0B7050E0A3E9} - System32\Tasks\{764170AB-2B93-4D01-98A7-BEFC215AA5E9} => E:\Dolby Cockpit Sounds FSX\Dolby Cockpit Sounds FSX.exe
Task: {ED365A02-6A7D-47AB-8F39-84A863444197} - System32\Tasks\{55B08B4B-3A44-41E5-979F-196E83BB9DDE} => C:\Program Files (x86)\Google\Google Earth Pro\googleearth.exe
Task: {EE168C22-7404-47A6-82F1-6A301E6B1ADB} - System32\Tasks\{A2A1EADD-2015-442A-9377-C9EE4B482F2D} => pcalua.exe -a E:\ORBXNAGOLD\OrbxFTXNAGoldNCA100.exe -d E:\ORBXNAGOLD
Task: {F0DF69E1-6D6E-4792-B802-4642FB76409E} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {F356C1A8-67B6-423D-81D8-FF650648A952} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F7D3D7D2-107B-43BD-96DD-A58EBF2E3EEB} - System32\Tasks\{17D6FAD9-4068-4887-8DD9-5A56F8F2428C} => \Flight\fsx\fsx.exe
Task: {F9314D94-A860-41E6-985F-B9B1288E9F7E} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {FA93DCB1-9742-4EB0-A476-BE8BE0BA9F37} - System32\Tasks\{F8A566FD-7F51-4D4B-B1CB-C523233DF120} => pcalua.exe -a "E:\fsuipc4\Install FSUIPC4.exe" -d E:\fsuipc4
Task: {FC7BC03E-E982-4557-A3A4-064A88A666FB} - System32\Tasks\{88E5E533-3ED1-4D7D-8295-A2B436DA91B4} => E:\UltimateTraffic2.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d044eeffdb77bf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 02:18 - 2015-10-30 02:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-03 09:14 - 2015-11-22 05:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-03 09:14 - 2015-11-22 05:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-17 07:07 - 2015-12-17 07:08 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-11-18 12:25 - 2014-01-27 22:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2015-12-18 06:48 - 2015-12-18 06:48 - 00341672 _____ () C:\Program Files (x86)\Backblaze\bzserv.exe
2014-11-22 16:04 - 2014-04-24 01:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2015-12-21 10:35 - 2015-12-08 20:52 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-12-18 06:49 - 2015-12-18 06:49 - 03507880 _____ () C:\Program Files (x86)\Backblaze\x64\bztransmit64.exe
2015-12-17 15:25 - 2015-12-06 23:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-17 15:25 - 2015-12-06 23:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-17 15:25 - 2015-12-06 22:37 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-17 15:25 - 2015-12-06 22:33 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-17 15:25 - 2015-12-06 22:34 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-17 15:25 - 2015-12-06 22:36 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-12-28 15:23 - 2013-11-14 16:02 - 00218944 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\Antivirus\bdfltlib.dll
2015-12-28 15:23 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\sqlite3.dll
2015-12-17 07:07 - 2015-12-17 07:08 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-12-17 07:07 - 2015-12-17 07:08 - 21845504 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 17:12 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-12-28 20:02 - 2015-12-28 20:02 - 00033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2015-11-18 12:25 - 2014-01-27 22:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2015-02-02 14:15 - 2015-02-05 11:20 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2015-08-16 08:10 - 2015-12-08 20:53 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-28 15:23 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\webres.dll
2015-12-26 14:43 - 2015-12-26 14:43 - 00153768 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-12-26 14:43 - 2015-12-26 14:43 - 00023208 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4790 more sites.


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
DNS Servers: 209.18.47.61 - 209.18.47.62
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AdvancedSystemCareService8 => 2
MSCONFIG\Services: FLEXnet Licensing Service => 3
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: IMFservice => 2
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: MBAMScheduler => 2
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupreg: Advanced SystemCare 8 => "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: iTunesHelper =>
MSCONFIG\startupreg: RtHDVBg_DTS => "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /DTSU2P
MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
MSCONFIG\startupreg: SaiMfd => C:\Program Files\SmartTechnology\Software\SaiMfd.exe
MSCONFIG\startupreg: SunJavaUpdateSched => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{DF8F8426-D90E-4795-A543-FE174567B429}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5D83C9BC-8949-41EC-AF28-44E0442C2B55}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6EE76958-CB31-448E-963B-8D5E7D8FBEBF}] => (Allow) C:\Users\Dan\AppData\Local\Orbx\FTXCentral\FTXCentral.exe
FirewallRules: [{FA7744DE-5A38-427B-98E4-4614DF13B100}] => (Allow) C:\Users\Dan\AppData\Local\Orbx\FTXCentral\FTXCentral.exe
FirewallRules: [{BA33611D-C08A-4653-BDFC-F12BFE332C27}] => (Allow) C:\Users\Dan\AppData\Local\Orbx\FTXCentral\FTXCentral.exe
FirewallRules: [{5D64A977-3923-4545-AB7B-F847EC4CA184}] => (Allow) C:\Users\Dan\AppData\Local\Orbx\FTXCentral\FTXCentral.exe
FirewallRules: [{5828A10C-33AC-4B9A-802F-00027D811E01}] => (Allow) C:\Program Files (x86)\Code Laboratories\CL-Eye Driver\CL-EyeTest.exe
FirewallRules: [{0D5EF613-BD73-4F93-9281-70ECE9CBE572}] => (Allow) C:\Program Files (x86)\Code Laboratories\CL-Eye Driver\CL-EyeTest.exe
FirewallRules: [{34B6A039-9AA3-4297-B427-AB9BEE3D680A}] => (Allow) C:\Program Files (x86)\Code Laboratories\CL-Eye Driver\CL-EyeTest.exe
FirewallRules: [{16F3E712-0A71-494B-B05F-E55A1AED6887}] => (Allow) C:\Program Files (x86)\Code Laboratories\CL-Eye Driver\CL-EyeTest.exe
FirewallRules: [{6BD68138-877E-4722-B161-203D55693168}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{BE915B68-5816-471A-98E6-21EE324626AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{31D1A171-21DC-4CFB-99F9-9AD59CC5887D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{1DBEF96A-F26E-40F7-B13D-D76E95D7D54C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{06D21F25-4466-41C7-8D45-E9DBAEA71A47}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E4DE4771-E9F2-427C-9286-C5A66E2E0D03}] => (Allow) F:\Stellarium\stellarium.exe
FirewallRules: [{24E8E540-B08B-480B-9722-A5B4CAD6B33E}] => (Allow) F:\Stellarium\stellarium.exe
FirewallRules: [{859BDAE1-C37B-40A6-AD44-F66E440B93C9}] => (Allow) F:\Stellarium\stellarium.exe
FirewallRules: [{3DD4CB97-23F2-453B-AA1B-0BD5CDDA3EE6}] => (Allow) F:\Stellarium\stellarium.exe
FirewallRules: [{ACD74DB2-C10B-4485-974C-EC1FE04A0314}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1B9C8F10-4EA6-47A9-B29F-7C3BDA4D918E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9D979E97-DCC2-4EA4-9E97-F5C13F05073E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E3C1FCB9-012D-4EB0-8DAE-C1BA17D2CEDE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6E294507-B093-4C73-AD95-80C4F9F6FB62}] => (Allow) F:\MegaEarth Italy\Italy_Setup_052.exe
FirewallRules: [{D6F1D46C-1705-46E9-B640-54D898FFC688}] => (Allow) F:\MegaEarth Italy\Italy_Setup_052.exe
FirewallRules: [{CF652E7F-318B-4DD8-8740-D833920C1470}] => (Allow) F:\MegaEarth Italy\Italy_Setup_052.exe
FirewallRules: [{4D765333-FB29-4076-B014-34F7C39EE7B6}] => (Allow) F:\MegaEarth Italy\Italy_Setup_052.exe
FirewallRules: [{7CB5FEB7-9AA7-4111-B5CD-75743A343B08}] => (Allow) F:\cenry config\SceneryConfigEditor.exe
FirewallRules: [{06743062-9122-44FD-90FB-88C5B28DAC6B}] => (Allow) F:\cenry config\SceneryConfigEditor.exe
FirewallRules: [{801F6DCD-670E-4363-B3E2-969C5D054B75}] => (Allow) F:\cenry config\SceneryConfigEditor.exe
FirewallRules: [{8C4BBB72-E247-478D-B7FF-E26AC731C264}] => (Allow) F:\cenry config\SceneryConfigEditor.exe
FirewallRules: [{99815055-A4F0-4F33-B6A3-2C05293D2003}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe
FirewallRules: [{4BD3E8B6-663C-4041-8FC4-88D74822B884}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe
FirewallRules: [{BD69BC8B-1822-48DA-B7EA-57E7697EDCA7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe
FirewallRules: [{80DC5309-DAF4-4BF9-A8E8-6964D8C5D12A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe
FirewallRules: [{3CDC702F-1F73-48D7-8A9C-656C25A231F6}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{3F3E3C8B-FDE2-462A-817A-B177DBAF4930}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [uDP Query User{FB2508C0-087F-4E18-BEE4-F71A41766AD4}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{A2241458-24E8-439C-A7D6-6E8F3161C8D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{41AF6D05-C9C4-4BC6-AA7F-0F8E32994007}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54ED49A4-0086-4F99-8629-A8FD2BC2691E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5DAAF2CF-D6EA-4786-9A43-30C5BF67EF90}] => (Allow) E:\peddles\Saitek_Pro_Flight_Rudder_Pedals_SD6_64.exe
FirewallRules: [{61ED8474-6438-4878-8595-B045CB55F21E}] => (Allow) E:\peddles\Saitek_Pro_Flight_Rudder_Pedals_SD6_64.exe
FirewallRules: [{BF359B19-600D-48EB-9D51-E82C2A023CFC}] => (Allow) E:\peddles\Saitek_Pro_Flight_Rudder_Pedals_SD6_64.exe
FirewallRules: [{13300CF3-EB5A-4298-BDE6-CF38782A63CA}] => (Allow) E:\peddles\Saitek_Pro_Flight_Rudder_Pedals_SD6_64.exe
FirewallRules: [{395D61AD-83FE-45DE-8E07-4B1B8D81FBF1}] => (Allow) E:\peddles\Smart Technology 7_0_27_13 64Bit.exe
FirewallRules: [{44AFDB43-3AFF-437D-889B-9DCE4DEBE6B3}] => (Allow) E:\peddles\Smart Technology 7_0_27_13 64Bit.exe
FirewallRules: [{C3321830-5A17-4F67-AD52-7FD31ED4EFD6}] => (Allow) E:\peddles\Smart Technology 7_0_27_13 64Bit.exe
FirewallRules: [{E8A1577A-2205-477C-A017-C89F1B25CEBB}] => (Allow) E:\peddles\Smart Technology 7_0_27_13 64Bit.exe
FirewallRules: [{28755CDE-9F4C-4804-B1D8-19EC17271CF9}] => (Allow) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
FirewallRules: [{17D8BA7B-03DD-499B-9AB3-8F904FBDDB7D}] => (Allow) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
FirewallRules: [{C5A219E3-6C87-4E0E-878B-A37896D45404}] => (Allow) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
FirewallRules: [{7BAC9D8B-059F-48A7-AB66-19CA286403EA}] => (Allow) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
FirewallRules: [{3E6BC71E-22A9-4ABE-B4D6-27CA1B2932B9}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{57304CCF-815D-4A0B-BA7D-F708DAADC127}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{8BD39879-F2E8-4F28-ABD3-C97FAAC9C077}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{DDBEC2A0-37C9-4B2D-A448-FAA7BFFD3430}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{FB1C52C7-3C4C-43D4-AFCC-0A3F1A88A9EB}] => (Allow) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
FirewallRules: [{6B61C25D-E700-482D-A3B8-E931A90E8275}] => (Allow) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
FirewallRules: [{8E8202EB-FFE3-4337-B35E-63EA50573A80}] => (Allow) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
FirewallRules: [{F8ED020A-608C-4F74-81E8-613F0FC43155}] => (Allow) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
FirewallRules: [{6D9494AB-E6FC-4CFE-BFCD-B72189FEA805}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe
FirewallRules: [{F9170DBD-5A6D-4272-989D-7BC7A9228F62}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe
FirewallRules: [{8D876C00-FBFD-4F7F-B6AD-014BBA6F8BBB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe
FirewallRules: [{F1DE1DC8-E7C9-4FDC-96CF-E7D92CDD4EEB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe
FirewallRules: [{66C45916-34D5-4BC4-91E0-4EEF5E33D3A5}] => (Allow) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
FirewallRules: [{FE67A96C-A0D5-44A8-8A7F-EB23D42A450C}] => (Allow) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
FirewallRules: [{8FBCA066-15DA-4B92-B1A3-115D6EB136B2}] => (Allow) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
FirewallRules: [{D18C19F7-CD97-4723-A8F1-45C214F16EBF}] => (Allow) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
FirewallRules: [{18C2ACF9-59D0-45E9-86A5-21BCDBC1743A}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{83A6CDF4-5E0D-4A9D-A652-798007163B91}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{0FC86075-6C25-4245-A6AC-75EA46ABD099}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{6F565F68-2F21-4FA9-A895-1833D644B8E8}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [uDP Query User{48E8845F-5562-45DE-97EF-00C76B05C7B5}C:\program files (x86)\itibiti soft phone\itibiti.exe] => (Allow) C:\program files (x86)\itibiti soft phone\itibiti.exe
FirewallRules: [TCP Query User{B69A16B8-A53B-4004-AF28-00AC3B29E11F}C:\program files (x86)\itibiti soft phone\itibiti.exe] => (Allow) C:\program files (x86)\itibiti soft phone\itibiti.exe
FirewallRules: [{D47637ED-748E-414E-8E5E-C3E615766BD7}] => (Allow) C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
FirewallRules: [{5AA9A03A-19C2-432D-8C25-77715B0EFC42}] => (Allow) C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
FirewallRules: [{195CD69D-26F6-4D11-930E-54A3E0A0BC78}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C621C414-3986-440B-B66A-E81841A03E63}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BBD78F59-E9E9-4511-ADC9-4AC18B9C4AC0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{996497F5-ECFE-48B9-A4C0-CC95CDBC644A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A967BDED-E773-47E2-8847-5111758F3624}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{173390F3-128D-4D76-B3C0-E0FB0F2F41E1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C5133CAB-A1CE-4232-A77E-FBD961AF6265}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{F91DF92E-F69E-41E4-B963-F3F6A370633C}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{49A1189C-733E-41FF-82ED-65AFFAF0DCE3}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{F5B56EC3-41B7-48F4-BB2F-3B2D70AA2155}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{3A8F8E52-D44C-4C02-A78B-AB0AEC40BA7E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{A3553251-A443-429D-AD40-3BDAE492577F}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{097B1E77-3E1B-4B1E-B46D-E0F722AEB755}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{CCE38337-40A1-4872-BE88-34B2F194029B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{59A35D5C-B3AE-47B9-9C33-3304DE974B73}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{89767B5B-7FEB-4452-AE73-9695A635C6C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1D6176CA-CF60-4A39-982B-7EDF5DA297A8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Restore Points =========================

28-12-2015 19:37:00 Scheduled Checkpoint

==================== Faulty Device Manager Devices =============

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (12/28/2015 08:06:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1312

Error: (12/28/2015 08:06:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1312

Error: (12/28/2015 08:06:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/28/2015 07:37:01 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (12/28/2015 07:31:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 43.0.2.5833, time stamp: 0x5678a0b1
Faulting module name: mozglue.dll, version: 43.0.2.5833, time stamp: 0x567893a6
Exception code: 0x80000003
Fault offset: 0x0000ed36
Faulting process id: 0x21c0
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3
Faulting package full name: plugin-container.exe4
Faulting package-relative application ID: plugin-container.exe5

Error: (12/28/2015 04:18:40 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1157

Error: (12/28/2015 04:18:40 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1157

Error: (12/28/2015 04:18:40 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/28/2015 02:49:47 PM) (Source: ESENT) (EventID: 490) (User: )
Description: CCleaner64 (4132) testing: An attempt to open the file "C:\Users\Dan\AppData\Local\Microsoft\Windows\WebCache\V01.log" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

Error: (12/28/2015 02:47:40 PM) (Source: ESENT) (EventID: 455) (User: )
Description: CCleaner64 (9168) testing: Error -1032 (0xfffffbf8) occurred while opening logfile C:\Users\Dan\AppData\Local\Microsoft\Windows\WebCache\V01.log.


System errors:
=============
Error: (12/29/2015 12:10:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The NVIDIA Display Driver Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (12/28/2015 08:02:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SecDrv service failed to start due to the following error:
%%1275

Error: (12/28/2015 08:02:07 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS

Error: (12/28/2015 08:02:07 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
%%1058

Error: (12/28/2015 08:02:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The FSLabs Service service failed to start due to the following error:
%%3

Error: (12/28/2015 08:02:07 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{22279AF5-03AE-4CAF-989D-2530918B2F1C}{0773CCD6-59A2-4D26-B235-19247767E645}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable

Error: (12/28/2015 08:01:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Sync Host_39c23 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (12/28/2015 07:32:28 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:
%%1056

Error: (12/28/2015 07:31:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (12/28/2015 07:31:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.


CodeIntegrity:
===================================
  Date: 2015-12-28 14:49:13.377
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-28 14:07:34.074
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-28 13:29:25.987
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-17 21:37:00.252
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-10 05:10:37.310
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-09 05:55:09.442
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-03 20:06:28.160
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-02 22:39:55.450
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-02 22:27:48.878
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-11-26 06:06:02.500
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel® Core i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 20%
Total physical RAM: 16326.9 MB
Available physical RAM: 12906.34 MB
Total Virtual: 19398.9 MB
Available Virtual: 15160.45 MB

==================== Drives ================================

Drive c: (Data) (Fixed) (Total:223.13 GB) (Free:162.24 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: (Flight) (Fixed) (Total:931.51 GB) (Free:930.52 GB) NTFS
Drive f: (BACKUP) (Fixed) (Total:1397.23 GB) (Free:888 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 121A79AC)
Partition 1: (Active) - (Size=223.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 4A469E65)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397.2 GB) (Disk ID: 16E40039)
Partition 1: (Active) - (Size=1397.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Link to post
Share on other sites

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12/29/2015
Scan Time: 8:04 AM
Logfile: Malwarebytes result.txt
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2015.12.29.03
Rootkit Database: v2015.12.26.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User: Dan

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 393962
Time Elapsed: 3 min, 23 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 1
PUP.Optional.Dregol, HKU\S-1-5-21-2162540174-3299572588-2991909538-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.dregol.com/?f=1&a=drg_bimmed_15_28&cd=2XzuyEtN2Y1L1Qzu0Ezz0D0EtByB0CzyyDtC0AtB0E0E0AyDtN0D0Tzu0StCtBzzyDtN1L2XzutAtFtCtCtFtAtFtBtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyC0FyDzy0C0BtC0BtGtCzzyEyEtGtCyE0A0AtGyBzztDzztG0B0B0BtByDtBzytDtAzzzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyD0EyBzzyEyEyDtGtCyBzyyBtGyEzz0A0DtG0B0F0C0EtGzy0BtC0EtCyB0EtDtByEtB0D2QtN0A0LzutBtN1B2Z1V1T1S1NzuzzyCtB&cr=1608524372&ir=, Good: (www.google.com), Bad: (http://www.dregol.com/?f=1&a=drg_bimmed_15_28&cd=2XzuyEtN2Y1L1Qzu0Ezz0D0EtByB0CzyyDtC0AtB0E0E0AyDtN0D0Tzu0StCtBzzyDtN1L2XzutAtFtCtCtFtAtFtBtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyC0FyDzy0C0BtC0BtGtCzzyEyEtGtCyE0A0AtGyBzztDzztG0B0B0BtByDtBzytDtAzzzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyD0EyBzzyEyEyDtGtCyBzyyBtGyEzz0A0DtG0B0F0C0EtGzy0BtC0EtCyB0EtDtByEtB0D2QtN0A0LzutBtN1B2Z1V1T1S1NzuzzyCtB&cr=1608524372&ir=),,[5b7c4d5d800b6bcb0b64c2d4b74dfd03]

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Link to post
Share on other sites

Thanks for the logs; let's get going >>>>

 

FIRST >>>>

 

Move the FRST64.exe file from the Downloads folder to your desktop (we will remove it later but for now it makes things easier to have it there).

Download the attached fixlist.txt file and save it to the Desktop.  Fixlist.txt

NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64 by right clicking on the FRST64.exe file, selecting "Run as Administrator..".  The User Account Control may open up; if it does, select Yes to continue to let FRST open and load.  

The tool will check for an updated version of itself every time it loads; please allow it to do this and the program will either inform you it is downloading an updated copy (and to wait until it is safe to continue) or show that it is ready to use (meaning there is no update found) and you can continue on.  Press the Fix button just once and wait.  The tool will create a restore point, process the script and ask for a restart of your system.

Press%20the%20FIX%20button_zpsdd5zi3mt.p

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post the log in your next reply.


SECOND >>>>

AdwCleaner by Xplode

Download AdwCleaner from here or from here. Save the file to the desktop.


NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

  • Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
    You will see the following console:

    AdwCleaner_v5016_zpsf8ln0fea.png
  • Click the Scan button and wait for the scan to finish.
  • After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
  • Click the Clean button.
  • Everything checked will be deleted.
  • When the program has finished cleaning a report appears.
  • Once done it may ask to reboot (depending on what it found to remove): please allow this

    adwcleaner_delete_restart.jpg
  • On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C#].txt

Optional:

NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.
 

 

Link to post
Share on other sites

My screen is saying Windows failed to start. Recent hardware or software change might be the cause.
To fix the problem;
Insert your Windows installation disc then restart.
Choose language.
Click repair.
status Oxcoooooof
A required device is not connected or cant be accessed. I have Windows 10 and was trying to rid a viris. PupOpitional Dragol. I ran the tool and I obviosly messed up. Where do I get this disc. Will the above operation get rid of the virus. I can't get anything on the computer not even safe mode.

Link to post
Share on other sites

To get the Windows 10 disc (create one yourself) Microsoft has a article and tools here: http://www.microsoft.com/en-us/software-download/windows10

Just go to the section Using the media creation tool > Perform a clean installation using a USB / DVD and follow steps 1 through 4.

 

The message you posted looks as though it was from Windows 7 (which is what the FRST scan said your system was).  That is a different disk which Microsoft makes available here: http://www.microsoft.com/en-ca/software-download/windows7 .


What OS do you have?

You should be able to go to the Recovery Environment and run a System Restore to the FRST Restore Point.  This was the first step in the Fixlist.txt script so you should be able to recover the system to this point.

Link to post
Share on other sites

I am NOT computer literate. I have tried so many different ways.  I started last night with the Windows 10. Do I get rid of that or what.Today after seeing your message  I went to your Windows 7 link and tried downloading with a disk, then with the USB stick. The bottom line is you are going to have to tell me step by step what to do. Every single step. I'm hoping you can get me out of this mess ASAP. Sincerely Dan

P.S. You really have to believe I don't know what to do don't assume anything.

Link to post
Share on other sites

I tried the Windows 7 route and had no success. So my question is ; Can you supply a link for the Windows 10 download. I don't want Windows 10 on this computer. From what I see so far, there's no option . If I perform this operation correctly , what are the odds of it working? I'm concerned that the drive is permanently damaged. Thanks

Link to post
Share on other sites

The Windows 10 "download" is handled via the Media Creation tool. 

 

Go to this page ==> https://www.microsoft.com/en-us/software-download/windows10

Have a blank DVD-R or DVD-RW in your recorder (CD/DVD player burner on the laptop).

Click on the Download tool now on the Microsoft page.

Save the file to your desktop and then double click the MediaCreationTool.exe file to start it.

  1. Select Create installation media for another PC.
  2. Choose the language, edition, and architecture (64-bit or 32-bit) for Windows 10.
  3. For example - select English, Home edition, and 64-bit.
  4. Follow the steps to create the installation media, and then select Finish when it’s done.

Once the tool has finished burning the disk, remove it from the laptop and load it in the desktop computer.  You may have to power the desktop to get the DVD player tray to open.

 

Once the Windows 10 DVD is loaded in the player and the tray is closed, power off the desktop and then restart the desktop system.  The desktop should see that the DVD is loaded and ask you to press any key to boot from the DVD.

 

The DVD should ask you if you want to repair the installation or just wipe the disk and make a clean installation.  You can try the repair; the other will format your drive and you will lose everything on it.

 

IF THE DVD DOES NOT HAVE THE REPAIR OPTION AVAILABLE, STOP AND LET ME KNOW.  WE WILL TRY A DIFFERENT ROUTE TO GET YOUR SYSTEM BACK WITHOUT LOSING YOUR DATA.

Link to post
Share on other sites

I feel that I burned a good Windows 10 disc. Once installed in the infected computer, it did not ask to push any button, but I was able to choose options by pressing f8. I chose 'repair computer'. Nothing. What's the next step? If I have to do a recovery, then so be it. I just want my computer back. Thank's

Link to post
Share on other sites

No, If you have a Recovery Disk by the OEM (sometimes called a Restore Disk) then you do not have to the Media Creation Tool made disk at all.  The OEM Recovery Disk should make your system the same as when you first turned it on.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.