Malwarebytes failed to resolve my issue

JennaTills · July 31, 2017

Hello,

Firstly, thank you so much for taking a look at my machine! Please find the "Addition.txt" & "FRST.txt" files attached.

Secondly, The Problem:
Every time i open my default browser (Firefox) I am redirected to pages and search engines other than my nominated homepage (Google.com). This sometimes redirects me to the common 'your machine is infected call this number etc' scam pages. This happens upon opening the browser. I am using Chrome to type this request for help. so it might be browser specific as I was not confronted with the malware upon opening chrome. However, the chrome home page seemed to be similar to one of the redirects in Firefox, so who knows *shrugs*. I have tried installing freeware recently which is most likely the origin of the problem. I have not tried to hack/crack/work around software at all.

Third, What I've tried so far:

a) I have tried running threat scan in malware-bytes.

b) I have tried running a malware-bytes custom scan with 'scan for rootkits' selected.

c) I have tried 'refreshing' Firefox from the trouble shooting menu.

Things only seem to be getting worse

Thank you again for your help, i look forward to your reply.

Warm regards,

JennaTills

Addition.txt

FRST.txt

garioch7 · August 1, 2017

@JennaTills

:welcome: to the Malware Removal for Windows Forum. My name is Phil. May I address you by your first name?

I will be assisting you with your computer issues. I will endeavor to respond within a reasonable time, normally 48 hours after your last post.

In future, I would ask that you please copy and paste the contents of all requested log files directly into your replies. Please do not use "code" or "quote" boxes. Thank you for your anticipated cooperation.

I will need some time to review your FRST logs. That could take a day or two.

PLEASE DO NOT RUN ANY ADDITIONAL SCANS OR ANTI-MALWARE REMOVAL TOOLS UNTIL YOU HAVE RECEIVED A RESPONSE FROM ME.
Doing so would complicate the situation and it would cause further delays in resolving your issues. It could also potentially result in harm to your computer because my "fix" will be based on the FRST scan logs you have already submitted.

Thank you and have a great day.

Regards,
-Phil

garioch7 · August 1, 2017

@JennaTills

Thank you for your patience while I analyzed your FRST logs.

Before we start dealing with the problems you are experiencing, I would ask that you to take note of the following points:

I am a Malwarebytes volunteer, so I ask you to be patient. I know it is frustrating when your computer is not working properly, but malware removal takes time.
Please also remember that I can only dedicate a limited number of hours a day to helping people. We may live in different time zones, which may cause delays in responding.
If I have not responded to you within 48 hours, please send me a personal message. Likewise, I expect you to respond within 48 hours, and sooner is better because we can fix your computer faster.
If I have not heard from you in three days, I will "bump" your post. After five days of no response, I will consider that you no longer need my assistance and this thread will be closed.
Logs can take a while to research, so please be patient.
Some issues just cannot be solved so you must be prepared for this.
Please read and follow the instructions in the exact sequence that they are posted to avoid making a bad situation worse.
Please print or copy and save the instructions.
Back up all your data and important files on another (external) drive before starting to run malware removal tools.
You should try to limit your browsing with this computer until you are given the "All Clear." Some malware applications steal passwords.
Please do not install or uninstall any applications, unless directed. Don't run any scripts or tools on your own because unsupervised usage may cause more harm than good.
Please use only the tools you have been instructed to use.
If you are using CD/DVD emulation software, this should be uninstalled or disabled as it can interfere with the removal of some malware. It can be turned off with Defogger and then turned back on when you get the "All Clear."
Please copy and paste the requested log files inside your post(s), unless otherwise instructed. Please do not use code or quote boxes.
There are no silly questions. Ask for clarification, if you have any questions or concerns.
Malwarebytes does not support piracy. Evidence of illegal OS, software, cracks/keygens, etc., will be revealed by scan logs, and if found, further assistance may be suspended. Please uninstall such software before proceeding because it is a major attack vector for malware. Please let me know if you want to keep any "cracked" software, if present, so that I can avoid using automated tools which would delete such applications.
Any P2P software such as uTorrent, BitTorrent, Kazaa, etc. must be uninstalled or completely disabled. P2P software is a major security risk to your computer and may have been the route the malware used to infect your computer.
Failure to follow these guidelines may result in assistance being withdrawn and your thread being closed.
I am volunteering my time to help you, and I will need you to help me. Together, we can, hopefully, disinfect your computer and get if functioning properly again. That is my only aim.

OK, let's get started ...

1. The FRST logs show that you have QuickTime installed. Please see this link for more information about the security vulnerability that it now poses, since Apple has discontinued support for that application. I would recommend that you uninstall that program using the Control Panel, Programs, Uninstall Program, unless it is needed. Please let me know what you decide to do.

2. The "Addition.txt" log shows that Duplicate Cleaner Free is installed on your computer. This program is considered a PUP. Please see this link for more information. I would recommend that you uninstall this program using the Control Panel, Programs, Uninstall a Program. It is your computer, so it is your decision. Please let me know what you decide to do.

3. Please run a FRST fix for me.

NOTICE: This FRST "fixlist" script was written specifically for this user, for use on this individual computer. Running this on another computer may cause damage to your operating system.

Start::
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [FAStartup] => [X]
SearchScopes: HKU\S-1-5-21-2105765451-1135739353-437393356-1001 -> DefaultScope {8B90708A-26E7-4C7A-8A28-AEC2801CEF44} URL = 
SearchScopes: HKU\S-1-5-21-2105765451-1135739353-437393356-1001 -> {8B90708A-26E7-4C7A-8A28-AEC2801CEF44} URL = 
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1429043815&from=sfpsnew1&uid=WDCXWD2500KS-00MJB0_WD-WCANKK73788837888","hxxp://google.com/"
S3 WsDrvInst; "C:\Program Files (x86)\iSkysoft\iSkysoft iMedia Converter Deluxe\Transfer\DriverInstall.exe" [X]
2017-07-24 20:45 - 2017-07-25 21:57 - 000000000 ____D C:\Users\jimmy\AppData\LocalLow\uTorrent
Task: {10AC4530-20E0-4872-8210-0E531C62876F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {1B20943E-D0D0-4DA0-80AE-BE069F9DCFDB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {212E3110-CCE7-4861-8F7F-2EFC8CDF7D6F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {28043CB2-C5CF-418B-B5D8-633C846CBCDB} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {29ADF458-94E7-46A0-B312-EC3FEC984AB8} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {43B51FE9-6E51-42BA-A9D2-8F1CE8389258} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {56D2BE34-16F9-4B26-9AF9-BD5BD457F21E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {7C594CF2-DF49-4626-98B2-C2C76709BDA5} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A43BA57D-3CE3-4E36-A59E-33280A9D4902} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {BE5FC296-8237-4D5B-8930-3BADDFBF773D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D77ABBB4-D877-4A91-95A7-E7D304B25746} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
End::

Please highlight the entire contents of the code box above, from the "Start::" line to the "End::" line, including both of those lines, right click, and select "Copy", which will copy the "fix" script into the Windows clipboard.
Right click FRST64.exe, and select "Run as Administrator".
Press Fix button once and wait.
Please reboot the computer, if requested.
A log file called "fixlog.txt" will be saved in the same folder as the FRST program is located.
Please copy and paste the contents of the "fixlog.txt" file into your next reply.

Thank you and have a great day.

Regards,
-Phil

JennaTills · August 2, 2017

Hi Phil, My name is Reece

I have removed all the PUP's you advised. Second, here is the Fixlog.txt

Fix result of Farbar Recovery Scan Tool (x64) Version: 31-07-2017
Ran by The Professor (02-08-2017 13:41:54) Run:1
Running from C:\Users\jimmy\Downloads
Loaded Profiles: The Professor (Available Profiles: The Professor)
Boot Mode: Normal
==============================================

fixlist content:
*****************

CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [FAStartup] => [X]
SearchScopes: HKU\S-1-5-21-2105765451-1135739353-437393356-1001 -> DefaultScope {8B90708A-26E7-4C7A-8A28-AEC2801CEF44} URL =
SearchScopes: HKU\S-1-5-21-2105765451-1135739353-437393356-1001 -> {8B90708A-26E7-4C7A-8A28-AEC2801CEF44} URL =
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1429043815&from=sfpsnew1&uid=WDCXWD2500KS-00MJB0_WD-WCANKK73788837888","hxxp://google.com/"
S3 WsDrvInst; "C:\Program Files (x86)\iSkysoft\iSkysoft iMedia Converter Deluxe\Transfer\DriverInstall.exe" [X]
2017-07-24 20:45 - 2017-07-25 21:57 - 000000000 ____D C:\Users\jimmy\AppData\LocalLow\uTorrent
Task: {10AC4530-20E0-4872-8210-0E531C62876F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {1B20943E-D0D0-4DA0-80AE-BE069F9DCFDB} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {212E3110-CCE7-4861-8F7F-2EFC8CDF7D6F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {28043CB2-C5CF-418B-B5D8-633C846CBCDB} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {29ADF458-94E7-46A0-B312-EC3FEC984AB8} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {43B51FE9-6E51-42BA-A9D2-8F1CE8389258} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {56D2BE34-16F9-4B26-9AF9-BD5BD457F21E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {7C594CF2-DF49-4626-98B2-C2C76709BDA5} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {A43BA57D-3CE3-4E36-A59E-33280A9D4902} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {BE5FC296-8237-4D5B-8930-3BADDFBF773D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D77ABBB4-D877-4A91-95A7-E7D304B25746} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

*****************

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\FAStartup => value removed successfully
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8B90708A-26E7-4C7A-8A28-AEC2801CEF44} => key removed successfully
HKLM\Software\Classes\CLSID\{8B90708A-26E7-4C7A-8A28-AEC2801CEF44} => key not found.
Chrome StartupUrls => removed successfully
HKLM\System\CurrentControlSet\Services\WsDrvInst => key removed successfully
WsDrvInst => service removed successfully
C:\Users\jimmy\AppData\LocalLow\uTorrent => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10AC4530-20E0-4872-8210-0E531C62876F} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10AC4530-20E0-4872-8210-0E531C62876F} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1B20943E-D0D0-4DA0-80AE-BE069F9DCFDB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B20943E-D0D0-4DA0-80AE-BE069F9DCFDB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{212E3110-CCE7-4861-8F7F-2EFC8CDF7D6F} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{212E3110-CCE7-4861-8F7F-2EFC8CDF7D6F} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{28043CB2-C5CF-418B-B5D8-633C846CBCDB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{28043CB2-C5CF-418B-B5D8-633C846CBCDB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{29ADF458-94E7-46A0-B312-EC3FEC984AB8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29ADF458-94E7-46A0-B312-EC3FEC984AB8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{43B51FE9-6E51-42BA-A9D2-8F1CE8389258} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{43B51FE9-6E51-42BA-A9D2-8F1CE8389258} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{56D2BE34-16F9-4B26-9AF9-BD5BD457F21E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56D2BE34-16F9-4B26-9AF9-BD5BD457F21E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7C594CF2-DF49-4626-98B2-C2C76709BDA5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C594CF2-DF49-4626-98B2-C2C76709BDA5} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A43BA57D-3CE3-4E36-A59E-33280A9D4902} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A43BA57D-3CE3-4E36-A59E-33280A9D4902} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BE5FC296-8237-4D5B-8930-3BADDFBF773D} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE5FC296-8237-4D5B-8930-3BADDFBF773D} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D77ABBB4-D877-4A91-95A7-E7D304B25746} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D77ABBB4-D877-4A91-95A7-E7D304B25746} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key removed successfully

The system needed a reboot.

==== End of Fixlog 13:42:03 ====

garioch7 · August 2, 2017

Reece:

Thank you for permission to address you by your first name. Thank you also for the FRST "fixlog.txt" file.

I would like to run some standard anti-malware scans that identify issues not detected by FRST.

1. ESET Online Scanner using Internet Explorer:

Note 1: These instructions are for Internet Explorer only! If you're using Chrome or Firefox, you will need to download and install the ESET Smart Installer tool before it can scan. See instructions here.
Note 2: You will need to disable your currently installed Anti-Virus, how to do so can be found here.

Download esetsmartinstaller_enu.exe and save it to your Desktop.
Double click the icon.
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Then select: "Enable detection of potentially unwanted applications" - Yes.
Click Advanced settings.
Check the following items.

Enable detection of potentially unwanted applications

Remove found threats

Scan archives

Scan for potentially unsafe applications

Enable Anti-Stealth technology

Click Change next to Current scan targets:
Place a check mark in any additional drive you wish to scan then click OK.
Click Start.
ESET will then download updates and begin scanning your computer.
If no threats are found simply click Uninstall application on close and hit Finish.
If threats are found click List of found threats.
Click Export to text file.
Save the file on your Desktop as ESET.txt.
Click Back.
Check Uninstall application on close and Delete quarantined files.
Click Finish.
Close the ESET Online Scanner window.
Copy and paste the contents of ESET.txt into your reply, if any threats were detected.

Don't forget to re-enable your antivirus when finished!

2. I see that you have Malwarebytes installed on your computer. I know that you have previously run a scan, but I would like to view the log of a new scan.

Please go to "Settings", "Protection", and turn on "Scan for rootkits", if it is not "On."
Ensure that under "Potential Threat Protection", both switches are set to "Always Detect PUPs/PUMs (recommended).
Then scroll to the bottom of that page and ensure that "Automatic Quarantine" is turned "On."
Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
If an update of the definitions is available, it will be downloaded and installed before the scan commences.
When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
Restart your computer when prompted to do so.

The Scan log is available through History ->Application logs. Please copy and paste the contents of the log into your next reply.

Thank you, Reece, and have a great day.

Regards,
-Phil

JennaTills · August 3, 2017

At the end of the ESET online scanner, it said there were no detections, however there was quite a number of things i saw it detecting through the scan. these were not present in the final end scan screen.

Malware Bytes Report below:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 8/3/17
Scan Time: 4:05 PM
Log File:
Administrator: Yes

-Software Information-
Version: 3.1.2.1733
Components Version: 1.0.160
Update Package Version: 1.0.2496
License: Free

-System Information-
OS: Windows 10 (Build 14393.1480)
CPU: x64
File System: NTFS
User: THEPROFESSOR\The Professor

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 410656
Threats Detected: 9
Threats Quarantined: 9
Time Elapsed: 4 min, 8 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.BetternetVPN, C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm\4.4.5_0\_metadata, Quarantined, [8481], [410831],1.0.2496
PUP.Optional.BetternetVPN, C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm\4.4.5_0, Quarantined, [8481], [410831],1.0.2496
PUP.Optional.BetternetVPN, C:\USERS\JIMMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\GJKNJJOMCKKNOFJIDPPIPFFBPOEKIIPM, Quarantined, [8481], [410831],1.0.2496

File: 6
PUP.Optional.BetternetVPN, C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm\4.4.5_0\_metadata\computed_hashes.json, Quarantined, [8481], [410831],1.0.2496
PUP.Optional.BetternetVPN, C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjknjjomckknofjidppipffbpoekiipm\4.4.5_0\_metadata\verified_contents.json, Quarantined, [8481], [410831],1.0.2496
PUP.Optional.MindSpark, C:\USERS\JIMMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_fromdoctopdf.dl.myway.com_0.localstorage, Quarantined, [257], [240305],1.0.2496
PUP.Optional.MindSpark, C:\USERS\JIMMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_fromdoctopdf.dl.myway.com_0.localstorage-journal, Quarantined, [257], [240305],1.0.2496
PUP.Optional.MindSpark, C:\USERS\JIMMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_fromdoctopdf.dl.tb.ask.com_0.localstorage, Quarantined, [257], [240306],1.0.2496
PUP.Optional.MindSpark, C:\USERS\JIMMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_fromdoctopdf.dl.tb.ask.com_0.localstorage-journal, Quarantined, [257], [240306],1.0.2496

Physical Sector: 0
(No malicious items detected)

(end)

JennaTills · August 3, 2017

Also, Chrome now is redirecting from the home page to some porn site.

garioch7 · August 3, 2017

Reece:

Thank you for your logs. Well, that is not good news. Let's try Adware Cleaner and Junk Removal Tool to see if they can identify and delete the pest.

1. Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

Vista/Windows 7/8/10 users right-click and select Run As Administrator
The tool will start to update the database, please wait for it to complete the update.
Click on I Agree button.
Click on the Scan button.
AdwCleaner will begin its scan ... please be patient as the scan may take some time to complete.
After the scan has finished, click on the Logfile button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, then make sure that you uncheck it before running the "Clean" process.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
After the scan has finished ...
Uncheck any PUP and adware applications that you want to keep.

If you are unsure about one or more of the detected programs, then please copy and paste the scan log, with your questions, and I will provide you with advice about those files.

The Scan logfile report (

AdwCleaner[S#].txt

) will open automatically (where the largest value of

#

represents the most recent report).

Do not follow the remaining instructions until directed to do so by me. If you have no questions about any of the detections, then please proceed to the "Clean" steps below.

Then click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[C#].txt) will open automatically (where the largest value of # represents the most recent report).
Please copy and paste the contents of that logfile into your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.

2. Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Please copy and paste the contents of JRT.txt into your next message.

Thank you and have a great day.

Regards,
-Phil

JennaTills · August 3, 2017

Please find below the JRT log:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by The Professor (Administrator) on 03-Aug-17 at 21:48:37.25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 3

Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\SurfEasy (Registry Value)
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\SurfEasyVPN (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B90708A-26E7-4C7A-8A28-AEC2801CEF44} (Registry Key)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03-Aug-17 at 21:49:52.31
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

JennaTills · August 3, 2017

Also, please find attached an image of my startup objects, i Find a couple of them suspicious...

garioch7 · August 4, 2017

Reece:

Thank you for the JRT log. Did you run AdwCleaner? Where is the log? That is the log that I really want to see, because AdwCleaner is very good at detecting adware and other nuisance issues.

I looked at your startup program list. It all looks normal, except for those two "Program" entries. Can you find any more information about them?

With respect to the redirects, do they happen to occur when you are visiting any particular website? The reason that I ask is because with redirects, it could be caused by malware related to your computer; or, malware related to an infected/hacked website.

Thank you and have a great day.

Regards,
-Phil

JennaTills · August 4, 2017

I thought those 'program' elements were suspicious too, however i have disabled them in the startup menu. I am unable to find any further information about them. the popup windows have stopped. they occurred upon launching the browser (with google.com as set homepage). They are definitely not website based malware. Since running the scans and software that you recommended the popups seem to have stopped.

I am worried however about the eset online scanner however, during the scan it showed at least 17 threats during scan that did not show in the final log. could the malware have 'changed it's stripes' so to speak preventing detection using that tool? if it is still on ym machine it appears to be dormant. otherwise i can say that the popup windows have successfully been apprehended.

the AdwCleaner log is below: [running the AdwCleaner again returns zero infections found]

# AdwCleaner 7.0.1.0 - Logfile created on Thu Aug 03 11:45:56 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 08-02-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy, C:\Program Files (x86)\Cain
PUP.Optional.Legacy, C:\Users\jimmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cain
PUP.Adware.Heuristic, C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
PUP.Adware.Heuristic, C:\ProgramData\{0E511DF6-1923-4AF4-9BFD-A9426C94FCD7}
PUP.Adware.Heuristic, C:\ProgramData\{1CEDDDD4-56D2-463F-BC4E-C5DFFD3533C9}
PUP.Adware.Heuristic, C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log
PUP.Adware.Heuristic, C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log
PUP.Adware.Heuristic, C:\ProgramData\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
PUP.Adware.Heuristic, C:\ProgramData\{8CCB2911-37C0-42BF-A0A7-FE3CB2FBAC53}
PUP.Adware.Heuristic, C:\ProgramData\{972BEEDB-39CF-495B-A950-BFDB60512E9F}
PUP.Adware.Heuristic, C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log
PUP.Adware.Heuristic, C:\ProgramData\{B0CAD5CC-867E-473E-B55F-339F9635A45D}
PUP.Adware.Heuristic, C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log
PUP.Adware.Heuristic, C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
PUP.Adware.Heuristic, C:\ProgramData\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}

***** [ Files ] *****

PUP.Optional.Legacy, C:\END

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk - https:\\launchpage.org\?uid=qT1KGKjchx0cXe9WwiS%2FrxcYbTr59%2Fa6SCzSbZrD71LJwvmmxIoaTfQbiSbI5KG%2FYy8%3D
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - https:\\launchpage.org\?uid=qT1KGKjchx0cXe9WwiS%2FrxcYbTr59%2Fa6SCzSbZrD71LJwvmmxIoaTfQbiSbI5KG%2FYy8%3D
PUP.Optional.Legacy, C:\Users\jimmy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - https:\\launchpage.org\?uid=qT1KGKjchx0cXe9WwiS%2FrxcYbTr59%2Fa6SCzSbZrD71LJwvmmxIoaTfQbiSbI5KG%2FYy8%3D
PUP.Optional.Legacy, C:\Users\jimmy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - https:\\launchpage.org\?uid=qT1KGKjchx0cXe9WwiS%2FrxcYbTr59%2Fa6SCzSbZrD71LJwvmmxIoaTfQbiSbI5KG%2FYy8%3D
PUP.Optional.Legacy, C:\Users\jimmy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - https:\\launchpage.org\?uid=qT1KGKjchx0cXe9WwiS%2FrxcYbTr59%2Fa6SCzSbZrD71LJwvmmxIoaTfQbiSbI5KG%2FYy8%3D

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Software\Appscion
PUP.Optional.Legacy, [Key] - HKCU\Software\Appscion
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Software\cain
PUP.Optional.Legacy, [Key] - HKCU\Software\cain
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Software\Ciuvo
PUP.Optional.Legacy, [Key] - HKCU\Software\Ciuvo
PUP.Optional.Reimage, [Key] - HKLM\SOFTWARE\Reimage

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

Edited August 4, 2017 by JennaTills

garioch7 · August 4, 2017

Reece:

Thank you for the AdwCleaner log. It did find some "junk".

I am happy to hear that the redirects and pop-ups have stopped.

I doubt that any remaining malware, IF ANY, is capable of "changing its stripes." That said, let's be sure, since you are here any ways.

Please run a new FRST scan log for me. If FRST asks to update, please update it as it is constantly being improved to keep pace with the new types of malware that are evolving. Please copy and paste the contents of the "FRST.txt" file and the "Addition.txt" file into your next reply.

I will analyze the fresh FRST logs tomorrow and see if there is anything to be concerned about. If not, we will clean up your computer of the anti-malware utilities that I have been running and send you on your way with a clean bill of health for your computer.

Thank you and have a great weekend.

Regards,
-Phil

JennaTills · August 4, 2017

Wow thanks for the quick reply!

Here are the logs (without the fix code you asked me to use last time). and a good weekend to you too! thanks so much for helping me with this!

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2017
Ran by The Professor (administrator) on THEPROFESSOR (05-08-2017 04:02:21)
Running from C:\Users\jimmy\Downloads
Loaded Profiles: The Professor (Available Profiles: The Professor)
Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(M-Audio) C:\Program Files (x86)\M-Audio\Fast Track Pro\AudioDevMon.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAsenmon.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Intel Corporation) C:\Windows\Temp\irstrtsv\scrncap.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Sensible Vision\Fast Access\FAAppMonOT.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareTactXMacroController.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SoftThinks SAS) C:\Program Files (x86)\AlienRespawn\SftService.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Toaster.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(SoftThinks - Dell) C:\Program Files (x86)\AlienRespawn\Components\Shell\DBRSync.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8512760 2015-08-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320 2015-08-04] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-08] (Intel Corporation)
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [13840 2013-11-05] (Alienware)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [StageLightUpdate] => C:\Program Files\Stagelight\StagelightUpdate.exe [1391104 2014-12-02] ()
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-07-14] (Apple Inc.)
HKLM\...\Run: [TuneClone] => C:\Program Files\TuneClone\TuneClone.exe /silence
HKLM-x32\...\Run: [AlienwareOn-ScreenDisplay] => C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe [4593968 2013-11-16] ()
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-07-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [95976 2015-07-30] (Sensible Vision )
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1870928 2017-04-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597016 2016-03-31] (Oracle Corporation)
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2138272 2016-10-08] (iSkySoft)
HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
HKLM-x32\...\Run: [FAStartup] => [X]
Winlogon\Notify\FastAccess: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll [2015-07-30] (Sensible Vision )
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\Run: [Speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe [44544 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-07] (Piriform Ltd)
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [886352 2017-04-05] (Adobe Systems Incorporated)
HKU\S-1-5-18\...\Run: [] => [X]
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2014-05-16]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{F9D8E17A-8670-4D39-AFBE-9B599BB85B1A}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
Startup: C:\Users\jimmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP DeskJet 3630 series.lnk [2017-08-04]
ShortcutTarget: Monitor Ink Alerts - HP DeskJet 3630 series.lnk -> C:\Program Files\HP\HP DeskJet 3630 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{0e62215e-c434-4bbe-8387-c5d0cf26a32f}: [DhcpNameServer] 8.8.4.4 8.8.8.8
Tcpip\..\Interfaces\{1a1f6fea-32ae-467e-8878-78aa1c0c44c6}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{756096bf-c099-4e25-b48c-5afc0f5286db}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{756096bf-c099-4e25-b48c-5afc0f5286db}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.alienwarearena.com/welcome-au
SearchScopes: HKU\S-1-5-21-2105765451-1135739353-437393356-1001 -> DefaultScope {8B90708A-26E7-4C7A-8A28-AEC2801CEF44} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-06-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_92\bin\ssv.dll [2017-06-12] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
BHO: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll [2015-07-30] (Sensible Vision )
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_92\bin\jp2ssv.dll [2017-06-12] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
BHO-x32: Face recognition web login for FastAccess -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll [2015-07-30] (Sensible Vision )
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: yvymvtl9.default-1501341016159
FF ProfilePath: C:\Users\jimmy\AppData\Roaming\Mozilla\Firefox\Profiles\yvymvtl9.default-1501341016159 [2017-08-05]
FF Homepage: Mozilla\Firefox\Profiles\yvymvtl9.default-1501341016159 -> www.google.com
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: (FastAccess Web Login) - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2015-09-08] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2017-04-14]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-11] ()
FF Plugin: @java.com/DTPlugin,version=11.92.2 -> C:\Program Files\Java\jre1.8.0_92\bin\dtplugin\npDeployJava1.dll [2017-06-12] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.92.2 -> C:\Program Files\Java\jre1.8.0_92\bin\plugin2\npjp2.dll [2017-06-12] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-07-13] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-18] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-05-05] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-30] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-30] (NVIDIA Corporation)
FF Plugin-x32: @sensiblevision.com/FastAccess,version=4.1.110 -> C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll [2014-05-23] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-02] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-02] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-02] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-07-13] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1429043815&from=sfpsnew1&uid=WDCXWD2500KS-00MJB0_WD-WCANKK73788837888","hxxp://google.com/"
CHR Profile: C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default [2017-08-05]
CHR Extension: (Google Slides) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-17]
CHR Extension: (Google Docs) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-17]
CHR Extension: (Google Drive) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-23]
CHR Extension: (YouTube) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-10]
CHR Extension: (Google Search) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-23]
CHR Extension: (Adobe Acrobat) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-05-09]
CHR Extension: (Google Sheets) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-17]
CHR Extension: (Trevx - Music Downloader) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpmaepaboafhefdejcbiciklgjogoghf [2016-06-06]
CHR Extension: (Chrome Remote Desktop) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-07-26]
CHR Extension: (Google Docs Offline) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-05]
CHR Extension: (Skype) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-07-31]
CHR Extension: (Chrome Web Store Payments) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-09]
CHR Extension: (Audio Converter) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojfphighcpfimfhblaigjckljcoeipga [2017-07-26]
CHR Extension: (Gmail) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-17]
CHR Extension: (Chrome Media Router) - C:\Users\jimmy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-26]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [814688 2017-07-13] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
R2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [77872 2017-03-08] (CyberGhost S.R.L)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3042544 2017-03-14] (Microsoft Corporation)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2016-08-18] () [File not signed]
R2 FastTrackProAudioDevMon; C:\Program Files (x86)\M-Audio\Fast Track Pro\AudioDevMon.exe [1688336 2013-05-23] (M-Audio)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [344288 2015-03-20] (Futuremark)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-08] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)
S3 ioloEnergyBooster; C:\Program Files\Alienware\Command Center\ioloEnergyBooster.exe [6145872 2012-11-02] (iolo technologies, LLC)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [783264 2013-09-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-18] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 Mobiola Wave Service; C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe [125088 2011-04-11] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-04] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-04] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-05-04] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-07-26] (Overwolf LTD)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [File not signed]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312056 2015-08-04] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [263264 2017-02-24] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10216688 2016-11-29] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ALSysIO; C:\Users\jimmy\AppData\Local\Temp\ALSysIO64.sys [26488 2017-06-14] (Arthur Liberman) <==== ATTENTION
R3 bcbtums; C:\WINDOWS\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [7474864 2014-05-16] (Broadcom Corporation)
S3 BCMWL63A; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [7474864 2014-05-16] (Broadcom Corporation)
R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW8x64.sys [75056 2013-02-14] (Qualcomm Atheros, Inc.)
S3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [23760 2015-02-27] (Dell Computer Corporation)
S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [24240 2015-05-23] (Dell Computer Corporation)
R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 DroidCam; C:\WINDOWS\system32\DRIVERS\droidcam.sys [33592 2015-05-24] (Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\system32\DRIVERS\droidcamvideo.sys [230712 2015-05-24] (Windows (R) Win 7 DDK provider)
R0 EMSC; C:\WINDOWS\System32\drivers\EMSC.SYS [17720 2012-07-11] ()
R0 EMSC; C:\Windows\SysWOW64\drivers\EMSC.SYS [15160 2012-07-11] ()
S3 facap; C:\WINDOWS\system32\DRIVERS\facap.sys [37888 2012-09-03] (Windows (R) Win 7 DDK provider)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2016-02-03] (REALiX(tm))
R3 irstrtdv; C:\WINDOWS\System32\drivers\irstrtdv.sys [20192 2013-09-12] (Intel Corporation)
S3 iVCam; C:\WINDOWS\system32\DRIVERS\iVCam.sys [540016 2017-04-18] (e2eSoft Corporation)
R3 Ke2200; C:\WINDOWS\System32\drivers\e22w8x64.sys [163536 2013-03-21] (Qualcomm Atheros, Inc.)
S3 KINONI_Wave; C:\WINDOWS\system32\drivers\kinonivad.sys [32360 2016-04-17] (Windows (R) Win 7 DDK provider)
S3 MAUSBFASTTRACKPRO; C:\WINDOWS\system32\DRIVERS\MAudioFastTrackPro.sys [184592 2013-05-23] (M-Audio)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-05] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-19] (Intel Corporation)
R1 MpKslacf8734d; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6583EF18-4551-4256-96C7-73022912E9B3}\MpKslacf8734d.sys [44928 2017-08-05] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmwu.inf_amd64_26aa6356770b2e86\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-05-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-05-04] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-05-04] (NVIDIA Corporation)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R1 RawDisk3; C:\WINDOWS\system32\drivers\rawdsk3.sys [41576 2016-02-19] (EldoS Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [72288 2017-02-24] (Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 ST_Accel; C:\WINDOWS\system32\DRIVERS\ST_Accel.sys [83456 2013-08-07] (STMicroelectronics)
R3 tapse01; C:\WINDOWS\System32\drivers\tapse01.sys [26624 2015-07-23] (The OpenVPN Project)
S0 tclondrv; C:\WINDOWS\System32\DRIVERS\tclondrv.sys [26856 2012-02-24] (TuneClone Software)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 WsAudio_Device; C:\WINDOWS\system32\drivers\VirtualAudio.sys [39160 2017-07-07] (Wondershare)
S3 WsAudio_Device(1); C:\WINDOWS\system32\drivers\VirtualAudio1.sys [31080 2013-01-25] (Wondershare)
R1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-06-06] (Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-05 03:38 - 2017-08-05 03:39 - 002870984 _____ (ESET) C:\Users\jimmy\Downloads\esetsmartinstaller_enu (1).exe
2017-08-05 03:25 - 2017-08-05 03:25 - 000000022 _____ C:\WINDOWS\S.dirmngr
2017-08-03 21:47 - 2017-08-03 21:47 - 001790024 _____ (Malwarebytes) C:\Users\jimmy\Downloads\JRT.exe
2017-08-03 21:44 - 2017-08-05 03:28 - 000000000 ____D C:\AdwCleaner
2017-08-03 21:44 - 2017-08-03 21:44 - 008185288 _____ (Malwarebytes) C:\Users\jimmy\Downloads\AdwCleaner (1).exe
2017-08-03 21:43 - 2017-08-03 21:44 - 008185288 _____ (Malwarebytes) C:\Users\jimmy\Downloads\AdwCleaner.exe
2017-08-02 23:51 - 2017-08-02 23:51 - 002870984 _____ (ESET) C:\Users\jimmy\Downloads\esetsmartinstaller_enu.exe
2017-08-02 21:35 - 2017-08-02 21:35 - 000000000 ____D C:\Program Files (x86)\ESET
2017-08-02 19:10 - 2017-08-02 19:10 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign32d4f7643dcef92f
2017-08-02 15:28 - 2017-08-02 15:28 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsigncc2734175c3b1a01
2017-08-02 15:28 - 2017-08-02 15:28 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign9b64cfba18ed9a80
2017-08-02 15:27 - 2017-08-02 15:27 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsignef019b60e8733357
2017-08-02 15:13 - 2017-08-02 15:13 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign7bb756fd0075efbe
2017-08-02 15:11 - 2017-08-02 15:11 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsignc4ede3ed3ed6a326
2017-08-02 14:15 - 2017-08-02 14:15 - 000001757 _____ C:\Users\jimmy\Desktop\XSplit Broadcaster.lnk
2017-08-02 14:14 - 2017-08-02 17:40 - 000001093 _____ C:\Users\jimmy\Desktop\DroidCam.lnk
2017-08-02 13:41 - 2017-08-02 13:42 - 000008109 _____ C:\Users\jimmy\Downloads\Fixlog.txt
2017-08-02 13:39 - 2017-08-02 13:39 - 000000000 ____D C:\Users\jimmy\Downloads\FRST-OlderVersion
2017-08-02 01:15 - 2017-08-02 01:52 - 000000000 ____D C:\Users\jimmy\Downloads\Life of Pi (2012) [1080p]
2017-07-31 23:58 - 2017-08-01 00:01 - 000000000 ____D C:\Users\jimmy\Downloads\The.Autopsy.of.Jane.Doe.2016.HDRip.XViD-ETRG
2017-07-31 23:52 - 2017-07-31 23:52 - 000000000 ____D C:\Users\jimmy\Downloads\Kong Skull Island (2017) 720p BrRip x264 - VPPV
2017-07-31 23:48 - 2017-07-31 23:48 - 000000000 ____D C:\Users\jimmy\Downloads\Split.2016.1080p.BRRip.x264.AAC-ETRG
2017-07-31 23:45 - 2017-07-31 23:51 - 000000000 ____D C:\Users\jimmy\Downloads\John.Wick.Chapter.2.2017.1080p.WEB-DL.DD5.1.H264-FGT
2017-07-31 23:39 - 2017-07-31 23:50 - 000000000 ____D C:\Users\jimmy\Downloads\Gangs of New York REMASTERED (2002) [1080p]
2017-07-31 13:24 - 2017-08-05 04:02 - 000031328 _____ C:\Users\jimmy\Downloads\FRST.txt
2017-07-31 13:24 - 2017-08-02 13:41 - 000068447 _____ C:\Users\jimmy\Downloads\Addition.txt
2017-07-31 13:23 - 2017-08-02 13:39 - 002381312 _____ (Farbar) C:\Users\jimmy\Downloads\FRST64.exe
2017-07-30 06:11 - 2017-07-30 06:11 - 000002289 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2017-07-27 19:38 - 2017-07-27 19:38 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign97231922f26358cd
2017-07-27 19:33 - 2017-07-27 19:33 - 000000000 ____D C:\Users\jimmy\AppData\Local\M-Audio
2017-07-27 19:33 - 2017-07-27 19:33 - 000000000 ____D C:\ProgramData\M-Audio
2017-07-26 18:59 - 2017-07-26 18:59 - 000000000 ____D C:\Users\jimmy\AppData\Local\UNP
2017-07-26 02:34 - 2017-07-26 02:58 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\NoteBurner iTunes DRM Audio Converter
2017-07-26 02:34 - 2017-07-26 02:34 - 000000000 ____D C:\Users\jimmy\Documents\NoteBurner iTunes DRM Audio Converter
2017-07-26 02:34 - 2017-07-26 02:34 - 000000000 ____D C:\Users\jimmy\AppData\Local\CrashRpt
2017-07-26 02:34 - 2017-07-26 02:34 - 000000000 ____D C:\Program Files (x86)\NoteBurner
2017-07-26 02:19 - 2017-07-26 02:20 - 000000000 ____D C:\Users\jimmy\Documents\Aimersoft DRM Media Converter
2017-07-26 02:19 - 2017-07-26 02:19 - 000000000 ____D C:\Users\jimmy\AppData\Local\Aimersoft
2017-07-26 02:19 - 2013-01-25 17:44 - 000031080 _____ (Wondershare) C:\WINDOWS\system32\Drivers\VirtualAudio1.sys
2017-07-26 02:19 - 2013-01-15 14:41 - 000892928 _____ (Free Software Foundation) C:\WINDOWS\SysWOW64\iconv.dll
2017-07-26 02:19 - 2013-01-15 14:41 - 000675840 _____ () C:\WINDOWS\SysWOW64\ac3filter.ax
2017-07-26 02:19 - 2013-01-15 14:41 - 000496640 _____ C:\WINDOWS\SysWOW64\xvid.ax
2017-07-26 02:12 - 2017-07-26 02:22 - 000000000 ____D C:\Program Files (x86)\Aimersoft
2017-07-26 02:12 - 2017-07-26 02:13 - 000000000 ____D C:\Users\jimmy\Documents\Aimersoft Music Converter
2017-07-26 01:59 - 2017-07-26 01:59 - 000000000 ____D C:\Users\Public\Documents\TuneClone
2017-07-26 01:59 - 2017-07-26 01:59 - 000000000 ____D C:\Users\jimmy\Documents\TuneClone
2017-07-26 01:59 - 2017-07-26 01:59 - 000000000 ____D C:\ProgramData\TuneClone
2017-07-26 01:59 - 2012-02-24 09:00 - 000026856 _____ (TuneClone Software) C:\WINDOWS\system32\Drivers\tclondrv.sys
2017-07-26 01:45 - 2017-07-26 01:55 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\calibre
2017-07-26 01:45 - 2017-07-26 01:51 - 000000000 ____D C:\Users\jimmy\Documents\Calibre Library
2017-07-26 01:45 - 2017-07-26 01:45 - 000000000 ____D C:\Users\jimmy\AppData\Local\calibre-cache
2017-07-26 01:39 - 2017-07-26 01:39 - 000113172 ____H C:\WINDOWS\system32\mlfcache.dat
2017-07-26 01:27 - 2017-07-26 01:27 - 000000000 ____D C:\ProgramData\ProductFeatures
2017-07-26 01:14 - 2017-07-26 01:14 - 000000000 ____D C:\Users\jimmy\AppData\Local\iSkysoft
2017-07-26 01:13 - 2017-07-26 01:31 - 000000000 ____D C:\Program Files (x86)\iSkysoft
2017-07-26 01:13 - 2017-07-26 01:14 - 000000000 ____D C:\Users\Public\Documents\iSkysoft
2017-07-26 01:13 - 2017-07-26 01:14 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\iSkysoft
2017-07-26 01:13 - 2017-07-26 01:14 - 000000000 ____D C:\ProgramData\iSkysoft
2017-07-26 01:13 - 2017-07-07 11:47 - 000039160 _____ (Wondershare) C:\WINDOWS\system32\Drivers\VirtualAudio.sys
2017-07-26 00:55 - 2017-07-26 00:55 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\Bigasoft Audio Converter 5
2017-07-26 00:40 - 2017-07-26 00:54 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WonderFox Soft
2017-07-26 00:40 - 2017-07-26 00:54 - 000000000 ____D C:\Program Files (x86)\WonderFox Soft
2017-07-26 00:40 - 2017-07-26 00:40 - 000000000 ____D C:\Users\jimmy\Documents\WonderFox Soft
2017-07-26 00:34 - 2017-07-26 00:34 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign31807f3abdc2c15d
2017-07-26 00:33 - 2017-07-26 00:33 - 000001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-07-21 21:55 - 2017-07-21 21:55 - 000003584 _____ C:\Users\jimmy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-07-20 12:58 - 2017-07-20 12:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-07-20 12:58 - 2017-07-20 12:58 - 000000000 ____D C:\Program Files\iTunes
2017-07-20 12:58 - 2017-07-20 12:58 - 000000000 ____D C:\Program Files\iPod
2017-07-20 05:46 - 2017-04-22 07:53 - 000029376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2017-07-20 05:46 - 2017-04-22 07:53 - 000018600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2017-07-20 05:46 - 2017-04-22 07:50 - 000030912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2017-07-20 05:46 - 2017-04-22 07:50 - 000018592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2017-07-19 23:29 - 2017-07-19 23:29 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsignff5f777b8ba481fa
2017-07-18 16:25 - 2017-07-18 16:25 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign64be1ad00b683e4f
2017-07-13 18:02 - 2017-07-13 18:02 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign07dd0fcad868ea88
2017-07-12 22:14 - 2017-07-12 22:14 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign9871d365bf081318
2017-07-12 22:09 - 2017-07-12 22:09 - 000000000 ____D C:\Users\jimmy\AppData\Local\Tempzxpsign0ae6a1c1c0ac32a2
2017-07-12 08:31 - 2017-07-07 17:49 - 000340824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-07-12 08:31 - 2017-07-07 17:46 - 000781152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-07-12 08:31 - 2017-07-07 17:45 - 002263832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-07-12 08:31 - 2017-07-07 17:44 - 000108896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-07-12 08:31 - 2017-07-07 17:42 - 007781720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-07-12 08:31 - 2017-07-07 17:40 - 020967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-07-12 08:31 - 2017-07-07 17:37 - 000468320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2017-07-12 08:31 - 2017-07-07 17:37 - 000118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-07-12 08:31 - 2017-07-07 17:32 - 000404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-07-12 08:31 - 2017-07-07 17:29 - 005686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-07-12 08:31 - 2017-07-07 17:29 - 002759712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-07-12 08:31 - 2017-07-07 17:29 - 000857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-07-12 08:31 - 2017-07-07 17:24 - 022220856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-07-12 08:31 - 2017-07-07 17:23 - 000241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-07-12 08:31 - 2017-07-07 17:20 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2017-07-12 08:31 - 2017-07-07 17:19 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-07-12 08:31 - 2017-07-07 17:19 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
2017-07-12 08:31 - 2017-07-07 17:18 - 002532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-07-12 08:31 - 2017-07-07 17:18 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-07-12 08:31 - 2017-07-07 17:18 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\onex.dll
2017-07-12 08:31 - 2017-07-07 17:18 - 000057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-07-12 08:31 - 2017-07-07 17:17 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2017-07-12 08:31 - 2017-07-07 17:14 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-07-12 08:31 - 2017-07-07 17:14 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-07-12 08:31 - 2017-07-07 17:13 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-07-12 08:31 - 2017-07-07 17:13 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2017-07-12 08:31 - 2017-07-07 17:11 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-07-12 08:31 - 2017-07-07 17:10 - 000755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-07-12 08:31 - 2017-07-07 17:09 - 000637952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2017-07-12 08:31 - 2017-07-07 17:09 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-07-12 08:31 - 2017-07-07 17:06 - 018364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-07-12 08:31 - 2017-07-07 17:06 - 007626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-07-12 08:31 - 2017-07-07 17:05 - 019414528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-07-12 08:31 - 2017-07-07 17:03 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2017-07-12 08:31 - 2017-07-07 17:02 - 001313280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2017-07-12 08:31 - 2017-07-07 17:00 - 012187136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-07-12 08:31 - 2017-07-07 17:00 - 000476160 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2017-07-12 08:31 - 2017-07-07 16:57 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-07-12 08:31 - 2017-07-07 16:56 - 006035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-07-12 08:31 - 2017-07-07 16:55 - 004423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-07-12 08:31 - 2017-07-07 16:55 - 003664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-07-12 08:31 - 2017-07-07 16:55 - 001571840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-07-12 08:31 - 2017-07-07 16:54 - 002997248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-07-12 08:31 - 2017-07-07 16:54 - 002027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-07-12 08:31 - 2017-07-07 16:53 - 002483200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-07-12 08:31 - 2017-07-07 16:52 - 004561408 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-07-12 08:31 - 2017-07-07 16:52 - 001599488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-07-12 08:31 - 2017-07-07 16:52 - 001413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2017-07-12 08:31 - 2017-07-07 16:51 - 022569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-07-12 08:31 - 2017-07-07 16:48 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2017-07-12 08:31 - 2017-07-07 16:48 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
2017-07-12 08:31 - 2017-07-07 16:47 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2017-07-12 08:31 - 2017-07-07 16:46 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2017-07-12 08:31 - 2017-07-07 16:45 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-07-12 08:31 - 2017-07-07 16:45 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-07-12 08:31 - 2017-07-07 16:44 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-07-12 08:31 - 2017-07-07 16:44 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\onex.dll
2017-07-12 08:31 - 2017-07-07 16:44 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-07-12 08:31 - 2017-07-07 16:44 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2017-07-12 08:31 - 2017-07-07 16:43 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-07-12 08:31 - 2017-07-07 16:43 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-07-12 08:31 - 2017-07-07 16:43 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-07-12 08:31 - 2017-07-07 16:39 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-07-12 08:31 - 2017-07-07 16:35 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2017-07-12 08:31 - 2017-07-07 16:33 - 000576000 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2017-07-12 08:31 - 2017-07-07 16:31 - 023676416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-07-12 08:31 - 2017-07-07 16:30 - 013090816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-07-12 08:31 - 2017-07-07 16:29 - 000932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-07-12 08:31 - 2017-07-07 16:28 - 002096640 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-07-12 08:31 - 2017-07-07 16:28 - 000759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-07-12 08:31 - 2017-07-07 16:28 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-07-12 08:31 - 2017-07-07 16:27 - 008120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-07-12 08:31 - 2017-07-07 16:24 - 004744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-07-12 08:31 - 2017-07-07 16:24 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-07-12 08:31 - 2017-07-07 16:24 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-07-12 08:31 - 2017-07-07 16:24 - 001513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-07-12 08:31 - 2017-07-06 14:29 - 000690008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2017-07-12 08:31 - 2017-06-22 16:17 - 000987840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2017-07-12 08:31 - 2017-06-22 16:17 - 000485576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2017-07-12 08:31 - 2017-06-21 17:54 - 000603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-07-12 08:31 - 2017-06-21 17:53 - 000794928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-07-12 08:31 - 2017-06-21 17:52 - 002213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-07-12 08:31 - 2017-06-21 17:52 - 000774224 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-07-12 08:31 - 2017-06-21 17:52 - 000088416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2017-07-12 08:31 - 2017-06-21 17:52 - 000081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-07-12 08:31 - 2017-06-21 17:51 - 002255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-07-12 08:31 - 2017-06-21 17:48 - 002681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-07-12 08:31 - 2017-06-21 17:42 - 001573280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-07-12 08:31 - 2017-06-21 17:42 - 000601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-07-12 08:31 - 2017-06-21 17:41 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-07-12 08:31 - 2017-06-21 17:40 - 000328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-07-12 08:31 - 2017-06-21 17:39 - 002048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-07-12 08:31 - 2017-06-21 17:38 - 007220192 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-07-12 08:31 - 2017-06-21 17:38 - 001860288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-07-12 08:31 - 2017-06-21 17:38 - 001738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-07-12 08:31 - 2017-06-21 17:38 - 000790752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2017-07-12 08:31 - 2017-06-21 17:37 - 001157008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-07-12 08:31 - 2017-06-21 17:36 - 000557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-07-12 08:31 - 2017-06-21 17:36 - 000129888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2017-07-12 08:31 - 2017-06-21 17:33 - 000408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2017-07-12 08:31 - 2017-06-21 17:33 - 000092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-07-12 08:31 - 2017-06-21 17:32 - 008169024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-07-12 08:31 - 2017-06-21 17:32 - 004260576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-07-12 08:31 - 2017-06-21 17:32 - 001983408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-07-12 08:31 - 2017-06-21 17:32 - 001702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-07-12 08:31 - 2017-06-21 17:32 - 001072248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-07-12 08:31 - 2017-06-21 17:31 - 001277824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-07-12 08:31 - 2017-06-21 17:31 - 000160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-07-12 08:31 - 2017-06-21 17:30 - 000869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-07-12 08:31 - 2017-06-21 17:30 - 000196960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2017-07-12 08:31 - 2017-06-21 17:29 - 005722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-07-12 08:31 - 2017-06-21 17:28 - 002277288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-07-12 08:31 - 2017-06-21 17:28 - 001504056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-07-12 08:31 - 2017-06-21 17:28 - 000524776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-07-12 08:31 - 2017-06-21 17:28 - 000170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-07-12 08:31 - 2017-06-21 17:27 - 001431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-07-12 08:31 - 2017-06-21 17:27 - 001122344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2017-07-12 08:31 - 2017-06-21 17:27 - 000975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-07-12 08:31 - 2017-06-21 17:27 - 000861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-07-12 08:31 - 2017-06-21 17:27 - 000549088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2017-07-12 08:31 - 2017-06-21 17:27 - 000116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-07-12 08:31 - 2017-06-21 17:26 - 000387864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-07-12 08:31 - 2017-06-21 17:25 - 002168288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-07-12 08:31 - 2017-06-21 17:25 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-07-12 08:31 - 2017-06-21 17:24 - 000846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-07-12 08:31 - 2017-06-21 17:24 - 000154432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll
2017-07-12 08:31 - 2017-06-21 17:22 - 000361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 006665440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 004023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 001845512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 001557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 001277856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-07-12 08:31 - 2017-06-21 17:21 - 000374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-07-12 08:31 - 2017-06-21 17:20 - 001360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-07-12 08:31 - 2017-06-21 17:20 - 000981888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-07-12 08:31 - 2017-06-21 17:20 - 000962768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-07-12 08:31 - 2017-06-21 17:20 - 000312472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2017-07-12 08:31 - 2017-06-21 17:19 - 004312248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-07-12 08:31 - 2017-06-21 17:06 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-07-12 08:31 - 2017-06-21 17:04 - 001631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-12 08:31 - 2017-06-21 17:04 - 001631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-07-12 08:31 - 2017-06-21 17:04 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-07-12 08:31 - 2017-06-21 17:03 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys
2017-07-12 08:31 - 2017-06-21 17:02 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-07-12 08:31 - 2017-06-21 17:02 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmdisk0101.sys
2017-07-12 08:31 - 2017-06-21 17:02 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-07-12 08:31 - 2017-06-21 17:02 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-07-12 08:31 - 2017-06-21 17:01 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-07-12 08:31 - 2017-06-21 17:01 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2017-07-12 08:31 - 2017-06-21 17:01 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-07-12 08:31 - 2017-06-21 17:00 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvisioningHandlers.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uudf.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-12 08:31 - 2017-06-21 17:00 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-07-12 08:31 - 2017-06-21 16:59 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-07-12 08:31 - 2017-06-21 16:59 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-07-12 08:31 - 2017-06-21 16:59 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-07-12 08:31 - 2017-06-21 16:59 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2017-07-12 08:31 - 2017-06-21 16:59 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-07-12 08:31 - 2017-06-21 16:59 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2017-07-12 08:31 - 2017-06-21 16:59 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2017-07-12 08:31 - 2017-06-21 16:59 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.SystemManagement.dll
2017-07-12 08:31 - 2017-06-21 16:58 - 000418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-07-12 08:31 - 2017-06-21 16:58 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-07-12 08:31 - 2017-06-21 16:58 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2017-07-12 08:31 - 2017-06-21 16:58 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-07-12 08:31 - 2017-06-21 16:58 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-07-12 08:31 - 2017-06-21 16:58 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-07-12 08:31 - 2017-06-21 16:58 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-07-12 08:31 - 2017-06-21 16:57 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 001507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000719872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-07-12 08:31 - 2017-06-21 16:56 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-07-12 08:31 - 2017-06-21 16:56 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2017-07-12 08:31 - 2017-06-21 16:56 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-07-12 08:31 - 2017-06-21 16:56 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2017-07-12 08:31 - 2017-06-21 16:55 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2017-07-12 08:31 - 2017-06-21 16:55 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
2017-07-12 08:31 - 2017-06-21 16:54 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-07-12 08:31 - 2017-06-21 16:54 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-07-12 08:31 - 2017-06-21 16:54 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2017-07-12 08:31 - 2017-06-21 16:53 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 017198592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 006288384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2017-07-12 08:31 - 2017-06-21 16:52 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2017-07-12 08:31 - 2017-06-21 16:51 - 000846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2017-07-12 08:31 - 2017-06-21 16:51 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2017-07-12 08:31 - 2017-06-21 16:51 - 000634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2017-07-12 08:31 - 2017-06-21 16:51 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2017-07-12 08:31 - 2017-06-21 16:51 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2017-07-12 08:31 - 2017-06-21 16:51 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-12 08:31 - 2017-06-21 16:50 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-07-12 08:31 - 2017-06-21 16:50 - 000857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2017-07-12 08:31 - 2017-06-21 16:50 - 000661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-07-12 08:31 - 2017-06-21 16:50 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2017-07-12 08:31 - 2017-06-21 16:50 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2017-07-12 08:31 - 2017-06-21 16:50 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 003778048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 002104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 001403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-07-12 08:31 - 2017-06-21 16:49 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2017-07-12 08:31 - 2017-06-21 16:48 - 002333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-07-12 08:31 - 2017-06-21 16:48 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-07-12 08:31 - 2017-06-21 16:48 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroleui.dll
2017-07-12 08:31 - 2017-06-21 16:47 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-07-12 08:31 - 2017-06-21 16:47 - 007655424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-07-12 08:31 - 2017-06-21 16:47 - 001105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-07-12 08:31 - 2017-06-21 16:47 - 000442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 004615168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 001908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 001323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 001137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 001077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 000627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2017-07-12 08:31 - 2017-06-21 16:46 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2017-07-12 08:31 - 2017-06-21 16:45 - 000891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-07-12 08:31 - 2017-06-21 16:45 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-07-12 08:31 - 2017-06-21 16:45 - 000313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-07-12 08:31 - 2017-06-21 16:45 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uexfat.dll
2017-07-12 08:31 - 2017-06-21 16:44 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2017-07-12 08:31 - 2017-06-21 16:44 - 000535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2017-07-12 08:31 - 2017-06-21 16:44 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2017-07-12 08:31 - 2017-06-21 16:44 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ufat.dll
2017-07-12 08:31 - 2017-06-21 16:44 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2017-07-12 08:31 - 2017-06-21 16:43 - 001534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-07-12 08:31 - 2017-06-21 16:43 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-07-12 08:31 - 2017-06-21 16:43 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-07-12 08:31 - 2017-06-21 16:43 - 000653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2017-07-12 08:31 - 2017-06-21 16:43 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-07-12 08:31 - 2017-06-21 16:43 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cnvfat.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 002749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 000981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2017-07-12 08:31 - 2017-06-21 16:42 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-07-12 08:31 - 2017-06-21 16:42 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFSv1.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 003400704 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 001255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 000945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-07-12 08:31 - 2017-06-21 16:41 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 004474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 002641920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 002154496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 001891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 000901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 000611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2017-07-12 08:31 - 2017-06-21 16:40 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 008076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 002538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 000816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 000546304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2017-07-12 08:31 - 2017-06-21 16:39 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 005611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 003733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 003520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2017-07-12 08:31 - 2017-06-21 16:38 - 002695680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 002424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 001984000 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 001275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2017-07-12 08:31 - 2017-06-21 16:38 - 000846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2017-07-12 08:31 - 2017-06-21 16:38 - 000709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 007468544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 006109696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 000875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 000357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2017-07-12 08:31 - 2017-06-21 16:36 - 002648576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-07-12 08:31 - 2017-06-21 16:36 - 001988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-07-12 08:31 - 2017-06-21 16:36 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-07-12 08:31 - 2017-06-21 16:36 - 001247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2017-07-12 08:31 - 2017-06-21 16:36 - 000903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-07-12 08:31 - 2017-06-21 16:36 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 004149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 002740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 002682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 001656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 001369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 001328640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 001232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 001170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 003299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-07-12 08:31 - 2017-06-21 16:34 - 001886720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-07-12 08:31 - 2017-06-21 16:34 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 000621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-07-12 08:31 - 2017-06-21 16:34 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2017-07-12 08:31 - 2017-06-21 16:33 - 001170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-07-12 08:31 - 2017-06-21 16:33 - 001013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2017-07-12 08:31 - 2017-06-21 16:33 - 000751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-07-12 08:31 - 2017-06-21 16:33 - 000691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-07-12 08:31 - 2017-06-21 16:33 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2017-07-12 08:31 - 2017-06-21 16:33 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2017-07-12 08:31 - 2017-06-21 16:32 - 001556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-07-12 08:31 - 2017-06-21 16:32 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-07-12 08:31 - 2017-06-21 16:31 - 003106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2017-07-12 08:31 - 2017-06-21 16:30 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2017-07-12 08:31 - 2017-06-21 16:10 - 000483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-07-12 08:31 - 2017-06-20 12:42 - 000993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2017-07-12 08:31 - 2017-05-23 14:58 - 000448576 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-07-12 08:31 - 2017-03-04 17:10 - 000360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-07-12 08:31 - 2017-03-04 16:56 - 000263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-07-12 08:31 - 2017-03-04 16:28 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-07-12 08:31 - 2017-03-04 16:26 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2017-07-12 08:31 - 2017-03-04 16:23 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2017-07-12 08:31 - 2017-03-04 16:23 - 000583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2017-07-12 08:31 - 2017-03-04 16:21 - 001243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-07-12 08:31 - 2017-03-04 16:21 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2017-07-12 08:31 - 2017-03-04 16:20 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-07-12 08:31 - 2017-03-04 16:20 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2017-07-12 08:31 - 2017-03-04 16:20 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-07-12 08:31 - 2017-03-04 16:20 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vaultcli.dll
2017-07-12 08:31 - 2017-03-04 16:19 - 001589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-07-12 08:31 - 2017-03-04 16:19 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-07-12 08:31 - 2017-03-04 16:18 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2017-07-12 08:31 - 2017-03-04 16:17 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-07-12 08:31 - 2017-03-04 16:16 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-07-12 08:31 - 2017-03-04 16:15 - 001078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-07-12 08:31 - 2017-03-04 16:14 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2017-07-12 08:31 - 2017-03-04 16:12 - 004596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2017-07-12 08:31 - 2017-03-04 16:02 - 002138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-07-12 08:31 - 2016-10-15 13:45 - 001790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-07-12 08:31 - 2016-10-05 19:15 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2017-07-12 08:31 - 2016-09-16 02:58 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-12 08:31 - 2016-09-16 02:47 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2017-07-12 08:31 - 2016-08-27 15:12 - 000244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-07-12 08:30 - 2017-07-07 17:40 - 000376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-07-12 08:30 - 2017-07-07 17:28 - 000223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-07-12 08:30 - 2017-07-07 17:23 - 001600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-07-12 08:30 - 2017-07-07 17:18 - 001100120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2017-07-12 08:30 - 2017-07-07 16:58 - 007217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-07-12 08:30 - 2017-07-07 16:49 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-07-12 08:30 - 2017-07-07 16:47 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-07-12 08:30 - 2017-07-07 16:46 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2017-07-12 08:30 - 2017-07-07 16:45 - 000488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-07-12 08:30 - 2017-07-07 16:45 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-07-12 08:30 - 2017-07-07 16:44 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-07-12 08:30 - 2017-07-07 16:44 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-07-12 08:30 - 2017-07-07 16:43 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-07-12 08:30 - 2017-07-07 16:42 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-07-12 08:30 - 2017-07-07 16:42 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2017-07-12 08:30 - 2017-07-07 16:36 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2017-07-12 08:30 - 2017-07-07 16:34 - 009131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-07-12 08:30 - 2017-07-07 16:29 - 004749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-07-12 08:30 - 2017-07-07 16:28 - 000927744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2017-07-12 08:30 - 2017-07-07 16:25 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-07-12 08:30 - 2017-07-07 16:24 - 005388800 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2017-07-12 08:30 - 2017-07-07 16:24 - 003615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-07-12 08:30 - 2017-07-07 16:24 - 002217472 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2017-07-12 08:30 - 2017-07-07 16:22 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-07-12 08:30 - 2017-06-21 17:52 - 001886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-07-12 08:30 - 2017-06-21 17:51 - 000434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-07-12 08:30 - 2017-06-21 17:50 - 000126304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2017-07-12 08:30 - 2017-06-21 17:47 - 000764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-07-12 08:30 - 2017-06-21 17:40 - 001069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-07-12 08:30 - 2017-06-21 17:40 - 000224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2017-07-12 08:30 - 2017-06-21 17:37 - 002446704 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-07-12 08:30 - 2017-06-21 17:37 - 001369240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2017-07-12 08:30 - 2017-06-21 17:37 - 000146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-07-12 08:30 - 2017-06-21 17:36 - 000624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-07-12 08:30 - 2017-06-21 17:35 - 002915704 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-07-12 08:30 - 2017-06-21 17:35 - 001267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-07-12 08:30 - 2017-06-21 17:31 - 004674360 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-07-12 08:30 - 2017-06-21 17:03 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\uudf.dll
2017-07-12 08:30 - 2017-06-21 17:02 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.SystemManagement.dll
2017-07-12 08:30 - 2017-06-21 17:01 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2017-07-12 08:30 - 2017-06-21 17:01 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2017-07-12 08:30 - 2017-06-21 17:01 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe
2017-07-12 08:30 - 2017-06-21 17:00 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2017-07-12 08:30 - 2017-06-21 17:00 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2017-07-12 08:30 - 2017-06-21 17:00 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-07-12 08:30 - 2017-06-21 17:00 - 000148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2017-07-12 08:30 - 2017-06-21 17:00 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2017-07-12 08:30 - 2017-06-21 17:00 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-07-12 08:30 - 2017-06-21 16:59 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-07-12 08:30 - 2017-06-21 16:59 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2017-07-12 08:30 - 2017-06-21 16:59 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-07-12 08:30 - 2017-06-21 16:59 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-07-12 08:30 - 2017-06-21 16:59 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-07-12 08:30 - 2017-06-21 16:59 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2017-07-12 08:30 - 2017-06-21 16:58 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-07-12 08:30 - 2017-06-21 16:58 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2017-07-12 08:30 - 2017-06-21 16:58 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2017-07-12 08:30 - 2017-06-21 16:58 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-07-12 08:30 - 2017-06-21 16:58 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2017-07-12 08:30 - 2017-06-21 16:57 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-07-12 08:30 - 2017-06-21 16:57 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2017-07-12 08:30 - 2017-06-21 16:57 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2017-07-12 08:30 - 2017-06-21 16:56 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2017-07-12 08:30 - 2017-06-21 16:56 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-07-12 08:30 - 2017-06-21 16:56 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-07-12 08:30 - 2017-06-21 16:56 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2017-07-12 08:30 - 2017-06-21 16:56 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2017-07-12 08:30 - 2017-06-21 16:55 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-07-12 08:30 - 2017-06-21 16:55 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-07-12 08:30 - 2017-06-21 16:54 - 000247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-07-12 08:30 - 2017-06-21 16:54 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2017-07-12 08:30 - 2017-06-21 16:53 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-07-12 08:30 - 2017-06-21 16:53 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2017-07-12 08:30 - 2017-06-21 16:53 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2017-07-12 08:30 - 2017-06-21 16:52 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-07-12 08:30 - 2017-06-21 16:52 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-07-12 08:30 - 2017-06-21 16:52 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-07-12 08:30 - 2017-06-21 16:52 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-07-12 08:30 - 2017-06-21 16:51 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-07-12 08:30 - 2017-06-21 16:50 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2017-07-12 08:30 - 2017-06-21 16:49 - 001913856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2017-07-12 08:30 - 2017-06-21 16:49 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2017-07-12 08:30 - 2017-06-21 16:48 - 000968192 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-07-12 08:30 - 2017-06-21 16:48 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\uexfat.dll
2017-07-12 08:30 - 2017-06-21 16:47 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-07-12 08:30 - 2017-06-21 16:47 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ufat.dll
2017-07-12 08:30 - 2017-06-21 16:47 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-07-12 08:30 - 2017-06-21 16:46 - 003290112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-07-12 08:30 - 2017-06-21 16:46 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-07-12 08:30 - 2017-06-21 16:46 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFSv1.dll
2017-07-12 08:30 - 2017-06-21 16:46 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cnvfat.dll
2017-07-12 08:30 - 2017-06-21 16:45 - 002861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-07-12 08:30 - 2017-06-21 16:44 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2017-07-12 08:30 - 2017-06-21 16:44 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2017-07-12 08:30 - 2017-06-21 16:43 - 000961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2017-07-12 08:30 - 2017-06-21 16:43 - 000953344 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-07-12 08:30 - 2017-06-21 16:43 - 000628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2017-07-12 08:30 - 2017-06-21 16:43 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2017-07-12 08:30 - 2017-06-21 16:42 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-07-12 08:30 - 2017-06-21 16:42 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-07-12 08:30 - 2017-06-21 16:41 - 002279424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-07-12 08:30 - 2017-06-21 16:41 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-07-12 08:30 - 2017-06-21 16:41 - 001359872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-07-12 08:30 - 2017-06-21 16:41 - 001021440 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2017-07-12 08:30 - 2017-06-21 16:41 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-07-12 08:30 - 2017-06-21 16:40 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2017-07-12 08:30 - 2017-06-21 16:40 - 001421824 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-07-12 08:30 - 2017-06-21 16:40 - 000886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-07-12 08:30 - 2017-06-21 16:40 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-07-12 08:30 - 2017-06-21 16:39 - 002916864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-07-12 08:30 - 2017-06-21 16:39 - 001643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-07-12 08:30 - 2017-06-21 16:39 - 001490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-07-12 08:30 - 2017-06-21 16:39 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-07-12 08:30 - 2017-06-21 16:37 - 000716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-07-12 08:30 - 2017-06-21 16:36 - 002318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-07-12 08:30 - 2017-06-21 16:36 - 000881152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2017-07-12 08:30 - 2017-06-21 16:36 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-07-12 08:30 - 2017-06-21 16:35 - 001726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-07-12 08:30 - 2017-06-21 16:34 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2017-07-12 08:30 - 2017-03-04 16:27 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2017-07-12 08:30 - 2016-10-05 19:32 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2017-07-11 22:36 - 2017-07-11 22:37 - 000000000 ____D C:\Program Files\UNP
2017-07-11 22:36 - 2017-07-11 22:36 - 000000000 ____D C:\WINDOWS\system32\UNP
2017-07-07 00:43 - 2017-07-07 00:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-08-05 04:02 - 2015-07-18 06:48 - 000000000 ____D C:\FRST
2017-08-05 03:47 - 2016-10-21 21:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-05 03:40 - 2016-11-20 14:20 - 000000000 ____D C:\Users\jimmy\AppData\LocalLow\Mozilla
2017-08-05 03:33 - 2014-05-16 08:05 - 000000000 ____D C:\Program Files (x86)\AlienRespawn
2017-08-05 03:32 - 2015-09-25 02:30 - 008759400 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-05 03:28 - 2016-10-21 21:14 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-05 03:28 - 2015-04-16 11:00 - 000000000 ____D C:\Users\jimmy\AppData\Local\Adobe
2017-08-05 03:25 - 2016-10-21 21:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-05 03:25 - 2015-04-16 11:16 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-04 22:30 - 2016-07-16 16:04 - 001572864 _____ C:\WINDOWS\system32\config\BBI
2017-08-04 15:49 - 2015-04-16 10:34 - 000000000 ____D C:\Users\jimmy\AppData\Local\Packages
2017-08-04 10:07 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-04 10:04 - 2017-06-13 05:07 - 000000000 ____D C:\Users\jimmy\AppData\Local\e2eSoft
2017-08-04 10:04 - 2017-06-13 05:07 - 000000000 ____D C:\Program Files (x86)\e2eSoft
2017-08-03 21:46 - 2015-04-17 11:48 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-03 21:46 - 2015-04-16 10:53 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-03 16:27 - 2016-10-21 21:15 - 000000000 ____D C:\Users\jimmy
2017-08-03 16:13 - 2014-05-16 08:05 - 000000000 ____D C:\Program Files (x86)\Steam
2017-08-03 07:53 - 2016-07-16 21:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-02 20:04 - 2015-04-16 16:11 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\vlc
2017-08-02 19:26 - 2015-07-20 17:49 - 000000000 ____D C:\Users\jimmy\AppData\Local\CrashDumps
2017-08-02 15:11 - 2015-07-17 16:33 - 000000000 ___RD C:\Users\jimmy\Creative Cloud Files
2017-08-02 14:14 - 2016-06-30 08:06 - 000000000 ____D C:\Users\jimmy\Desktop\Unsorted Desktop
2017-08-02 09:03 - 2017-06-12 19:42 - 000000022 _____ C:\ProgramData\droidcam-settings
2017-07-30 15:00 - 2016-07-16 21:45 - 000000000 ____D C:\WINDOWS\INF
2017-07-30 06:11 - 2015-04-17 11:47 - 000000000 ____D C:\Program Files (x86)\Google
2017-07-28 16:38 - 2016-06-22 22:38 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-07-28 07:45 - 2017-06-14 06:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-07-26 08:51 - 2016-10-21 21:12 - 004929760 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-07-26 01:59 - 2014-05-16 08:02 - 000000000 ____D C:\ProgramData\Temp
2017-07-26 01:49 - 2015-04-17 03:53 - 000000000 ____D C:\Users\jimmy\AppData\Local\Apple Computer
2017-07-26 00:34 - 2015-04-16 11:01 - 000000000 ____D C:\Program Files (x86)\Adobe
2017-07-24 03:42 - 2016-07-16 21:47 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-24 03:42 - 2015-04-18 05:39 - 000000000 ____D C:\Program Files\Microsoft Office 15
2017-07-24 03:03 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\rescache
2017-07-20 05:47 - 2016-07-16 21:36 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-07-19 22:19 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-07-18 18:53 - 2015-05-23 21:40 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\PioneerLog
2017-07-18 18:53 - 2015-05-23 21:29 - 000000000 ____D C:\Users\jimmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pioneer
2017-07-18 18:53 - 2015-05-23 21:29 - 000000000 ____D C:\Program Files (x86)\Pioneer
2017-07-18 18:52 - 2014-05-16 08:00 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-15 00:49 - 2015-04-18 05:57 - 000000000 ____D C:\Users\jimmy\AppData\Local\ElevatedDiagnostics
2017-07-12 12:39 - 2015-09-10 15:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-07-12 12:05 - 2016-07-16 21:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-07-12 12:05 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-07-12 12:05 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-07-12 12:05 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-07-12 12:05 - 2016-07-16 21:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-07-12 12:05 - 2016-07-16 21:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-12 10:41 - 2016-10-21 21:21 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-07-12 10:41 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-07-12 10:41 - 2016-07-16 21:47 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-07-12 08:33 - 2015-04-18 03:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-07-12 08:32 - 2015-04-18 03:45 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-07-12 08:15 - 2016-07-16 21:43 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2017-07-11 22:19 - 2017-01-12 16:18 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2017-07-07 03:03 - 2017-06-13 05:14 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-07-06 12:46 - 2015-04-23 11:51 - 000000000 ____D C:\Program Files\Recuva

==================== Files in the root of some directories =======

2016-07-02 05:40 - 2016-04-27 04:38 - 002972388 _____ () C:\Program Files\Chatty.jar
2014-01-09 01:00 - 2014-01-09 01:00 - 002387968 _____ (Waves Audio Ltd.) C:\Program Files\WaveShell-VST 9.2_x64.dll
2014-01-09 01:00 - 2014-01-09 01:00 - 001732608 _____ (Waves Audio Ltd.) C:\Program Files (x86)\WaveShell-VST 9.2.dll
2015-04-16 15:41 - 2015-04-16 15:56 - 000000103 _____ () C:\Users\jimmy\AppData\Roaming\Camdata.ini
2015-04-16 15:41 - 2015-04-16 15:56 - 000000408 _____ () C:\Users\jimmy\AppData\Roaming\CamLayout.ini
2015-04-16 15:41 - 2015-04-16 15:56 - 000000408 _____ () C:\Users\jimmy\AppData\Roaming\CamShapes.ini
2015-04-16 15:41 - 2015-04-16 15:56 - 000004521 _____ () C:\Users\jimmy\AppData\Roaming\CamStudio.cfg
2015-04-18 09:14 - 2015-03-27 05:30 - 000002827 _____ () C:\Users\jimmy\AppData\Roaming\hejmegui.zip
2015-10-19 13:51 - 2015-10-19 13:51 - 000000112 _____ () C:\Users\jimmy\AppData\Roaming\JP2K CS6 Prefs
2015-04-17 05:37 - 2015-04-17 05:37 - 001249792 _____ (http://www.ruby-lang.org/) C:\Users\jimmy\AppData\Roaming\msvcr90-ruby191.dll
2015-04-18 09:14 - 2015-03-26 15:36 - 000000190 _____ () C:\Users\jimmy\AppData\Roaming\x264 commandline.txt
2017-07-21 21:55 - 2017-07-21 21:55 - 000003584 _____ () C:\Users\jimmy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-04-11 14:10 - 2017-04-11 14:10 - 000000727 _____ () C:\Users\jimmy\AppData\Local\recently-used.xbel
2015-06-22 19:07 - 2017-06-13 04:29 - 000007593 _____ () C:\Users\jimmy\AppData\Local\Resmon.ResmonCfg
2017-01-12 22:45 - 2017-01-12 22:45 - 000000057 _____ () C:\ProgramData\Ament.ini
2016-10-21 21:14 - 2016-10-21 21:14 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2017-06-12 19:42 - 2017-08-02 09:03 - 000000022 _____ () C:\ProgramData\droidcam-settings
2015-10-28 14:30 - 2015-10-28 14:30 - 000005046 _____ () C:\ProgramData\pubjtini.xmz
2016-10-19 16:59 - 2016-10-19 16:59 - 000000032 _____ () C:\ProgramData\Temp.log

Some files in TEMP:
====================
2017-06-14 20:34 - 2017-06-14 20:34 - 006503984 _____ (Microsoft Corporation) C:\Users\jimmy\AppData\Local\Temp\vcredist_x86.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-07-26 23:38

==================== End of FRST.txt ============================

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2017
Ran by The Professor (05-08-2017 04:02:45)
Running from C:\Users\jimmy\Downloads
Windows 10 Home Version 1607 (X64) (2016-10-21 11:22:33)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2105765451-1135739353-437393356-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2105765451-1135739353-437393356-503 - Limited - Disabled)
Guest (S-1-5-21-2105765451-1135739353-437393356-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2105765451-1135739353-437393356-1003 - Limited - Enabled)
The Professor (S-1-5-21-2105765451-1135739353-437393356-1001 - Administrator - Enabled) => C:\Users\jimmy

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Audition CC 2017 (HKLM-x32\...\AUDT_10_1_1) (Version: 10.1.1 - Adobe Systems Incorporated)
Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0.2 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.2.0.211 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2017 (HKLM-x32\...\AME_11_1_0) (Version: 11.1.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015.5 (HKLM-x32\...\PHSP_17_0_1) (Version: 17.0.1 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2017 (HKLM-x32\...\PPRO_11_1_2) (Version: 11.1.2 - Adobe Systems Incorporated)
AlienRespawn (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.9.2.8 - Alienware)
Alienware Command Center (HKLM\...\{D4CE21D4-27E5-46DB-9FFE-553A90AD4B9F}) (Version: 3.5.14.0 - Alienware Corp.) Hidden
Alienware Command Center (HKLM-x32\...\InstallShield_{D4CE21D4-27E5-46DB-9FFE-553A90AD4B9F}) (Version: 3.5.14.0 - Alienware Corp.)
Alienware Digital Delivery (HKLM-x32\...\{03A9F528-A754-460F-B2C1-AC125A147114}) (Version: 2.8.5000.0 - Dell Products, LP)
Alienware On-Screen Display (HKLM-x32\...\{0D69462F-99CC-4F8D-942E-666E21CE59F8}) (Version: 0.33.0.11C - ) Hidden
Alienware On-Screen Display (HKLM-x32\...\InstallShield_{0D69462F-99CC-4F8D-942E-666E21CE59F8}) (Version: 0.33.0.11C - )
Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Autodesk Backburner 2015 (HKLM-x32\...\{8C5F38D2-8EFE-49A4-B3F5-BF3210FED168}) (Version: 15.0.0.0 - Autodesk)
AutoHotkey 1.1.22.00 (HKLM\...\AutoHotkey) (Version: 1.1.22.00 - Lexikos)
AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.0 - )
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 7.35.267.0 - Broadcom Corporation)
Cain & Abel 4.9.56 (HKLM-x32\...\Cain & Abel 4.9.56) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
Dell System Detect (HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\d24084d039586cae) (Version: 8.4.0.5 - Dell)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
EMSC (HKLM-x32\...\{FEF06E73-A519-4510-8CF3-B66041B91D8A}) (Version: 0.0.0.25 - Compal Electronics, Inc.) Hidden
EOS Camera Movie Record 0.3.3 Beta (HKLM\...\{5B0D20D7-AA12-4FC8-9A4A-AF722F430738}_is1) (Version: - Chernov A.A.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Face Recognition (HKLM\...\{AD7B1CE7-CB0E-4E0A-8822-8443C8837490}) (Version: 5.0.90.1 - Sensible Vision)
ffdshow (remove only) (HKLM-x32\...\ffdshow) (Version: - )
Futuremark SystemInfo (HKLM-x32\...\{79659071-4B68-4EC8-833C-49C97B68FCD0}) (Version: 4.36.512.0 - Futuremark)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{09A8EA8A-9C9D-45E4-B20C-3F13C2CCD32C}) (Version: 7.3.0.3830 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Gpg4win (2.3.3) (HKLM-x32\...\GPG4Win) (Version: 2.3.3 - The Gpg4win Project)
Handy Recovery 5.5 (HKLM-x32\...\{4196D960-68B0-4BEB-B312-3C1B4654068D}) (Version: 5.5 - SoftLogica)
HP DeskJet 3630 series Basic Device Software (HKLM\...\{82088106-8F3E-4C76-A919-607CB9BA02AE}) (Version: 35.0.61.54677 - Hewlett-Packard Co.)
HWiNFO64 Version 5.12 (HKLM\...\HWiNFO64_is1) (Version: 5.12 - Martin Malík - REALiX)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Start Technology (HKLM-x32\...\{3D073343-CEEB-4ce7-85AC-A69A7631B5D6}) (Version: 3.0.0.1056 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy)
iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
Java 8 Update 92 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418092F0}) (Version: 8.0.920.14 - Oracle Corporation)
LAV Filters 0.64 (HKLM-x32\...\lavfilters_is1) (Version: 0.64 - Hendrik Leppkes)
mAirList 5.3 (HKLM-x32\...\{80C7EEF9-60FA-437A-A704-906A222146C1}_is1) (Version: 5.3.5 (Build 3200) - mairlist GmbH)
Maltego CE 4.0.11 (HKLM-x32\...\MaltegoCE 4.0.11) (Version: 4.0.11 - Paterva)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
M-Audio Fast Track Pro 6.1.10 (x64) (HKLM\...\{44BCF4BB-2486-465D-8C03-50150201B4EA}) (Version: 6.1.10 - M-Audio)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Home and Student 2013 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 15.0.4945.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mobiola WebCamera for iPhone 2.2.0 (HKLM-x32\...\com.shapeservices.webcamera_iphone_is1) (Version: 2.2.0.0 - SHAPE Services)
Mozilla Firefox 54.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 en-US)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)
MultiBit HD 0.4.1 (HKLM\...\6925-4794-5772-4956) (Version: 0.4.1 - KeepKey,LLC)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.7.2.189 - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: - Native Instruments)
Native Instruments Guitar Rig Mobile I/O (HKLM-x32\...\Native Instruments Guitar Rig Mobile I/O) (Version: - Native Instruments)
Native Instruments Guitar Rig Session I/O (HKLM-x32\...\Native Instruments Guitar Rig Session I/O) (Version: - Native Instruments)
Native Instruments Rig Kontrol 3 (HKLM-x32\...\Native Instruments Rig Kontrol 3) (Version: - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.5.9.132 - Native Instruments)
Native Instruments Traktor 2 (HKLM-x32\...\Native Instruments Traktor 2) (Version: 2.7.0.797 - Native Instruments)
NirSoft Wireless Network Watcher (HKLM-x32\...\NirSoft Wireless Network Watcher) (Version: - )
NoteBurner iTunes DRM Audio Converter 2.2.1 (HKLM-x32\...\NoteBurner iTunes DRM Audio Converter) (Version: 2.2.1 - NoteBurner)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 368.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.71 - NVIDIA Corporation)
NVIDIA 3D Vision Video Player (HKLM-x32\...\{7BF8BD5F-EE1A-4DB1-B810-A4AE1D34530E}) (Version: 1.7.2 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation)
NVIDIA Graphics Driver 368.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.71 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.10.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4945.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4945.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0409-0000-0000000FF1CE}) (Version: 15.0.4945.1001 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.105.329.0 - Overwolf Ltd.)
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
Pioneer MIX Driver (HKLM-x32\...\Pioneer MIX) (Version: 4.4.0.0020 - Pioneer DJ Corporation.)
Qualcomm Atheros Bandwidth Control Filter Driver (HKLM\...\{AC6D2774-D543-4C46-906D-801322D1823D}) (Version: 1.0.30.1052 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (HKLM\...\{F5B2A675-5A6A-46FE-97DC-ECDB96714CE7}) (Version: 1.0.30.1052 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{56BF70E8-EC59-4F68-BEE7-8B71432048C4}) (Version: 1.0.30.1052 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (HKLM\...\{F9D8E17A-8670-4D39-AFBE-9B599BB85B1A}) (Version: 1.0.30.1052 - Qualcomm Atheros) Hidden
R for Windows 3.2.0 (HKLM\...\R for Windows 3.2.0_is1) (Version: 3.2.0 - R Core Team)
Real Time Relativity v1.6.0 (HKLM-x32\...\{0DFC5A30-1D57-4EF6-ABDA-C58C4DC1475B}) (Version: 1.6.0 - Australian National University)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.28144 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7544 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
rekordbox 3.3.0 (HKLM-x32\...\Pioneer rekordbox 3.3.0) (Version: 3.3.0.4268 - Pioneer)
rekordbox 4.4.0 (HKLM-x32\...\Pioneer rekordbox 4.4.0) (Version: 4.4.0.0020 - Pioneer DJ)
RMP4 (HKLM-x32\...\{F78FC958-7354-43EA-BF26-AFCBFE7B9C18}) (Version: 1.05.0000 - RSUPPORT)
RSCC (HKLM-x32\...\{562CBD30-CA59-4640-862C-99C0ECED4B4C}) (Version: 2.02.0000 - RSUPPORT)
SevenZip (HKLM-x32\...\SevenZip) (Version: 9.20 - SevenZip)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0370 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.9 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.9.103 - Skype Technologies S.A.)
SoundSwitch 3.10.2.24485 (HKLM\...\SoundSwitch_is1) (Version: 3.10.2.24485 - Antoine Aflalo)
SpaceEngine version 0.9.8.0 (HKLM-x32\...\{6E7A40FA-86CE-4844-A7DC-F8769F21A62F}_is1) (Version: 0.9.8.0 - SpaceEngine)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.12.0046 - ST Microelectronics)
Stagelight (HKLM\...\StageLight) (Version: 2.0.0.5045 - Open Labs, LLC.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SurfEasy VPN 3.3.443 (HKLM-x32\...\SurfEasy VPN) (Version: 3.3.443 - SurfEasy Inc)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.2.17.55 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.71503 - TeamViewer)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
Universe Sandbox ² (HKLM-x32\...\Steam App 230290) (Version: - Giant Army)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Wave Arts Tube Saturator (HKLM-x32\...\TubeSaturator) (Version: - )
Waves Complete V9r15 (HKLM-x32\...\{91000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.1.15 - Waves)
Waves Diamond Bundle v5.2 (HKLM-x32\...\Waves Diamond Bundle v5.2) (Version: - )
WhatsApp (HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\WhatsApp) (Version: 0.2.2732 - WhatsApp)
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.7850 - Broadcom Corporation)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
WinDFT (HKLM-x32\...\{065F384A-5C64-4532-814A-A24BA5374503}) (Version: 1.0.0 - HGST)
WinDirStat 1.1.2 (HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\WinDirStat) (Version: - )
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
x264vfw - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\x264vfw) (Version: - )
XSplit (HKLM\...\Steam App 433800) (Version: - SplitmediaLabs)
XSplit Broadcaster (HKLM-x32\...\{D5A50472-B688-4D3E-97E3-F1C1187B16D8}) (Version: 3.0.1705.3117 - SplitmediaLabs)
ZaraRadio 1.6.2 (HKLM-x32\...\ZaraRadio_is1) (Version: - Kero Systems S.L.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2105765451-1135739353-437393356-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-F3782DD6E874}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
CustomCLSID: HKU\S-1-5-21-2105765451-1135739353-437393356-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Sync\CoreSyncExtension\CoreSync_x64.dll [2017-07-18] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Sync\CoreSyncExtension\CoreSync_x64.dll [2017-07-18] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Sync\CoreSyncExtension\CoreSync_x64.dll [2017-07-18] ()
ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Program Files (x86)\AlienRespawn\Components\Shell\DBROverlayIconBackuped.dll [2015-12-08] (SoftThinks SAS)
ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Program Files (x86)\AlienRespawn\Components\Shell\DBROverlayIconNotBackuped.dll [2015-12-08] (SoftThinks SAS)
ShellIconOverlayIdentifiers: [DBRShellOverlayBackupFile] -> {831CEBDD-6BAF-4432-BE76-9E0989C14AEF} => C:\Program Files (x86)\AlienRespawn\Components\Shell\DBROverlayIconBackuped.dll [2015-12-08] (SoftThinks SAS)
ShellIconOverlayIdentifiers: [DBRShellOverlayModifiedBackupFile] -> {275E4FD7-21EF-45CF-A836-832E5D2CC1B3} => C:\Program Files (x86)\AlienRespawn\Components\Shell\DBROverlayIconNotBackuped.dll [2015-12-08] (SoftThinks SAS)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Sync\CoreSyncExtension\CoreSync_x64.dll [2017-07-18] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-16] ()
ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\GNU\GnuPG\bin\gpgex.dll [2016-08-18] (g10 Code GmbH)
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-06-08] (Power Software Ltd)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\GNU\GnuPG\bin\gpgex.dll [2016-08-18] (g10 Code GmbH)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-06-08] (Power Software Ltd)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2015-04-09] (Piriform Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-08-01] (NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Sync\CoreSyncExtension\CoreSync_x64.dll [2017-07-18] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2015-06-08] (Power Software Ltd)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2015-04-09] (Piriform Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04608693-4008-4850-962A-F91F4B3EC5F7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-04-28] (Microsoft Corporation)
Task: {1F1DE604-784F-429F-AC4D-086A2864D540} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe [2014-04-07] (Dolby Laboratories Inc.)
Task: {275D3056-C252-4F6C-8535-D8A5C2CC17C8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-04] (NVIDIA Corporation)
Task: {321386C4-41EF-4CD1-80D9-7B1DFBC15304} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-07-26] (Overwolf LTD)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {45342255-8866-4D7C-B61C-785F4A7CC12B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-17] (Google Inc.)
Task: {5EAC89D1-BA2F-402E-860A-5E6A1AA6E1F3} - System32\Tasks\Core Temp Autostart The Professor => C:\Program Files\Core Temp\Core Temp.exe [2013-10-08] ()
Task: {6C161947-4412-4847-BD45-59E55AD7CD9A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-07-12] (Microsoft Corporation)
Task: {72322CCA-34DA-4185-969B-5EEFD6970944} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-04-11] (Microsoft Corporation)
Task: {732F287E-EE50-490B-8CE8-55CB7A61594D} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-lynksys@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {748525B4-6B5B-40C0-80A2-8241C9CE3EE3} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-04] (NVIDIA Corporation)
Task: {757793EE-DBBA-45AB-93BA-DCEEE9FB1E5B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-04] (NVIDIA Corporation)
Task: {7C2E2B8F-FA14-4D20-8BFA-58966FFFF92A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-05-04] (NVIDIA Corporation)
Task: {7E0DE440-268F-4FDA-96A1-F6833D076914} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-05-04] (NVIDIA Corporation)
Task: {8B590A20-5C9E-40A9-9FDF-3D43162FE440} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-04] (NVIDIA Corporation)
Task: {8D0C221F-9E57-4335-BA19-4433FCEEA6CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-17] (Google Inc.)
Task: {8F093474-C2D1-4AE6-812A-7D4C4C5014C9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-04-11] (Microsoft Corporation)
Task: {9F9FEAA7-BB28-4DAE-BE53-BDFF19AA5593} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-04] (NVIDIA Corporation)
Task: {BC5DECC7-062B-49A4-8C87-E8A6B941A8DE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-12] (Adobe Systems Incorporated)
Task: {C1044FFB-74B4-45D9-9818-C0581F4930C7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-04-28] (Microsoft Corporation)
Task: {C3D1237B-5562-45A8-9BE3-56F552D05762} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-07] (Piriform Ltd)
Task: {C9D865E0-357C-4229-98EE-840FAFC52617} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-05-04] (NVIDIA Corporation)
Task: {D052F47A-CE24-4F01-8964-74DCD709B21F} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2017-02-24] (Synaptics Incorporated)
Task: {D341E152-FBAA-4829-ACA7-7C53BEA2D4F7} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe [2017-07-12] (Adobe Systems Incorporated)
Task: {DFA68295-4F6F-4916-B5FD-CC008FABB4B5} - System32\Tasks\Intel(R) Rapid Start Technology Manager => C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe [2013-09-12] (Intel)
Task: {E1832F24-DF2C-464C-99A6-612CB191EE4B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {E684DA1A-D300-44F1-885B-1BE3D7E5F7E3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-04-28] (Microsoft Corporation)
Task: {F86BA7EB-5C64-4EC5-930D-28BB9080BA06} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-04] (Realtek Semiconductor)
Task: {FE349CA7-0290-4D1A-B2FD-BF06DF7162C1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {FF2DA8F6-A828-4262-A18F-7447A89E4913} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-04-28] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\jimmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SevenZip 9.20\Visit SevenZip website.lnk -> hxxp://www.sevenzip.info

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 21:42 - 2016-07-16 21:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-07-12 08:31 - 2017-06-21 17:48 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-21 21:14 - 2016-08-01 22:54 - 000133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-18 05:39 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-08-18 18:27 - 2016-08-18 18:27 - 000216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
2017-06-13 06:34 - 2011-04-11 13:25 - 000125088 _____ () C:\Program Files (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe
2017-06-12 21:56 - 2017-05-04 06:16 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-07-18 00:50 - 2017-07-18 00:50 - 000492112 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\CoreSyncExtension\CoreSync_x64.dll
2016-10-21 21:28 - 2016-10-21 21:28 - 000959168 _____ () C:\Users\jimmy\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2017-03-24 05:24 - 2017-01-31 22:34 - 008909512 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2015-04-16 06:13 - 2015-04-16 06:13 - 000222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-10-22 15:08 - 2016-10-22 15:08 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 22:09 - 2017-03-04 16:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2013-08-08 06:38 - 2013-08-08 06:38 - 000283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2017-06-29 06:11 - 2017-06-23 13:21 - 002692440 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\swiftshader\libglesv2.dll
2017-06-29 06:11 - 2017-06-23 13:21 - 000137048 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\swiftshader\libegl.dll
2015-07-30 13:28 - 2015-07-30 13:28 - 004358888 _____ () C:\Program Files (x86)\Sensible Vision\Fast Access\FAAppMonOT.exe
2017-03-15 22:10 - 2017-03-04 16:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 22:10 - 2017-03-04 16:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 22:10 - 2017-03-04 16:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-07-12 08:31 - 2017-06-21 16:36 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-07-12 08:31 - 2017-06-21 16:35 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-07-12 08:31 - 2017-06-21 16:37 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-08-03 15:51 - 2015-05-14 11:54 - 000422600 _____ () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
2017-06-24 22:15 - 2017-06-24 22:16 - 013207232 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Core.dll
2017-06-24 22:15 - 2017-06-24 22:16 - 001199816 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2017-07-26 15:40 - 2017-07-26 15:40 - 032960512 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe
2017-07-26 15:40 - 2017-07-26 15:40 - 009161728 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-07-14 11:29 - 2017-07-14 11:29 - 003500456 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-07-26 15:40 - 2017-07-26 15:40 - 013154304 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.Visuals.dll
2015-07-30 13:41 - 2015-07-30 13:41 - 000093928 _____ () C:\WINDOWS\SYSTEM32\FAIEExtension.DLL
2013-04-04 14:42 - 2013-04-04 14:42 - 000012424 _____ () C:\Program Files (x86)\Sensible Vision\Fast Access\MFCaptureD3D_2_DLL.dll
2016-08-18 18:14 - 2016-08-18 18:14 - 000222720 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2016-08-18 18:03 - 2016-08-18 18:03 - 000050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2016-08-18 18:14 - 2016-08-18 18:14 - 000073728 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2016-08-18 18:17 - 2016-08-18 18:17 - 000751104 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
2016-08-18 18:09 - 2016-08-18 18:09 - 000103424 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2017-06-12 21:52 - 2017-05-04 06:16 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2013-11-05 10:32 - 2013-11-05 10:32 - 000021008 _____ () C:\Program Files\Alienware\Command Center\Hook32.dll
2014-01-14 16:03 - 2014-01-14 16:03 - 000110088 _____ () c:\Program Files (x86)\Dell Digital Delivery\ServiceTagPlusPlus.dll
2016-07-02 04:23 - 2013-09-18 23:33 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-01-06 03:19 - 2015-12-19 09:52 - 001607920 _____ () C:\Program Files (x86)\AlienRespawn\Components\Restore\STRestoreAPI.dll
2014-05-16 08:06 - 2012-11-26 15:19 - 001153384 _____ () C:\Program Files (x86)\AlienRespawn\Components\Restore\libxml2.dll
2015-02-27 03:05 - 2014-02-19 08:12 - 000117568 _____ () C:\Program Files (x86)\AlienRespawn\Components\Restore\zlib1.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:0B174FAE [141]
AlternateDataStreams: C:\Users\jimmy\AppData\Local\hsJ72jga:3FQyIeDNWEsqWNKwkISIbB [2474]
AlternateDataStreams: C:\Users\jimmy\AppData\Local\RAZvdvn5mwZMrp:8ePvK5izVnxI6NgdPi [2158]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-04-16 11:11 - 2015-07-21 18:06 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2105765451-1135739353-437393356-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\jimmy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "StageLightUpdate"
HKLM\...\StartupApproved\Run: => "TuneClone"
HKLM\...\StartupApproved\Run32: => "AlienwareOn-ScreenDisplay"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "DivXUpdate"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "ADSKAppManager"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "iVCam"
HKLM\...\StartupApproved\Run32: => "Aimersoft Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "iSkysoft Helper Compact.exe"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\StartupFolder: => "Ivacy.lnk"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\StartupFolder: => "Monitor Ink Alerts - HP DeskJet 3630 series.lnk"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "Wisdom-soft ScreenHunter 6.0 Free"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "Speech Recognition"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "SurfEasy"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_2360A9EC402443DD564083D07024A5A5"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "BlueStacks Agent"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "CyberGhost"
HKU\S-1-5-21-2105765451-1135739353-437393356-1001\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{72C08178-A065-4BE5-900E-9EC0E5CED2E0}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe
FirewallRules: [TCP Query User{0F33AB7D-112F-4B8B-88C8-04E6EEBC126B}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe
FirewallRules: [UDP Query User{256A4F89-EF27-4693-8C25-ACDB695CB8BE}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe
FirewallRules: [TCP Query User{74006BCE-8129-40BB-A826-108EC1C8EFE8}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe
FirewallRules: [UDP Query User{0156D741-8DE7-479E-87F7-19AAF45DF28A}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe
FirewallRules: [TCP Query User{59F0C7BA-864D-4539-AC30-7B88028AE1FD}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe
FirewallRules: [{C5576437-8F3D-4713-9267-F00E3F3A2D7F}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{AF3178EB-C2F9-4FD0-BD37-AFD265E8C0B1}] => (Allow) LPort=9987
FirewallRules: [{ACFB7FC5-ACF1-4C2B-8D74-3DBA792253D8}] => (Allow) C:\Users\jimmy\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
FirewallRules: [{26BE1AAE-86AF-4ADE-AEFB-DAFA755759CA}] => (Allow) C:\Users\jimmy\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
FirewallRules: [{4BBB59C0-BA7E-4E9A-ABF0-0C39FF003A28}] => (Allow) C:\Users\jimmy\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
FirewallRules: [{D9D14100-B686-457F-AB50-B50587DC43D6}] => (Allow) C:\Users\jimmy\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
FirewallRules: [{6325A944-23EC-4173-B5BC-37E787A04699}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Universe Sandbox 2\Universe Sandbox VR.exe
FirewallRules: [{5D8512AF-71A6-48C2-9C47-788A83234C72}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Universe Sandbox 2\Universe Sandbox VR.exe
FirewallRules: [UDP Query User{4DE94E7A-9E2B-4B9F-8D4F-72F1DD847DD4}C:\program files\core temp\core temp.exe] => (Allow) C:\program files\core temp\core temp.exe
FirewallRules: [TCP Query User{6D745F7A-9DA0-4F73-91F7-ABA6B31DA630}C:\program files\core temp\core temp.exe] => (Allow) C:\program files\core temp\core temp.exe
FirewallRules: [{142E85F2-BBAF-4A51-9A73-3B2236FACC2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{83D81D41-ECA3-4FE5-8721-1F0D01851927}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2AF9B080-FB91-45DA-AE33-5D21A0CDC4C8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{DDFD5D1C-62F4-41C3-941D-D933CBFC88CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [UDP Query User{9C6CFE05-A13B-4C02-A090-5E36081B49D0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{C5649366-63BF-4360-AC31-AA7F97D01B08}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{579D673F-6182-4F47-9472-40E270F570F1}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe
FirewallRules: [TCP Query User{0A891C9A-C0A1-4CFC-BB6B-860A3146C456}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe
FirewallRules: [UDP Query User{A4BB20DF-DFAD-4A64-BF90-4A2E1E9F1CFC}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe
FirewallRules: [TCP Query User{3731EBAC-8A4D-4305-86F2-690C7E39572E}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe
FirewallRules: [UDP Query User{39BF9020-E136-4646-8B56-483B8E646704}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe
FirewallRules: [TCP Query User{2EF26E12-09CD-4894-A28A-EED73ACD6B72}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe
FirewallRules: [{8D78CE32-6A65-402A-BC88-2351E68D3D43}] => (Block) %ProgramFiles%\Native Instruments\Traktor 2\Traktor.exe
FirewallRules: [{8206C712-F3AF-4067-A338-48D95BE9E5F2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Universe Sandbox 2\Universe Sandbox x64.exe
FirewallRules: [{3A4FDFBB-18D7-483E-9F91-3C133E96903B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Universe Sandbox 2\Universe Sandbox x64.exe
FirewallRules: [{7CFDACBA-6C87-439F-9117-4FCAE529C47D}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{A002760C-3267-49BD-BDCD-C03A884C74BE}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{226BA54D-6D94-4E0A-94F9-20A270F3417E}] => (Block) %ProgramFiles% (x86)\Waves\Applications\wle.exe
FirewallRules: [{91B89804-02A4-4567-9FD9-D7C44474373F}] => (Block) %ProgramFiles% (x86)\Waves\Applications\wlc.exe
FirewallRules: [{FC8CE842-E5BD-45EA-A605-431DE385195A}] => (Block) %ProgramFiles% (x86)\Waves\Applications\wget.exe
FirewallRules: [{AF52033B-251C-4970-AC72-9920067BB677}] => (Block) %ProgramFiles% (x86)\Waves\Applications\Element App.exe
FirewallRules: [{04374348-E543-4B92-90E4-E4466FE56B5F}] => (Block) %ProgramFiles% (x86)\Waves\Applications\GTR 3.5.exe
FirewallRules: [{E8DE4770-2546-4562-AC42-FF3E39401E37}] => (Allow) LPort=3306
FirewallRules: [{1AFCA5EA-DDDF-4B47-B74C-303B40BEE4CB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9B39D747-B797-4B11-81E8-4DF4BCEA7C11}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9EEAA0C9-78BE-48BC-84D4-94FFEF1D86A7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CD53E725-624C-4492-AD22-C00BF7A1D96F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CD928E3D-8197-49F7-8731-5D80BFD49C37}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2862BFE8-851B-4A3D-B718-1286FD521A31}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3CDD2DF7-410D-4C45-A6AD-F719DC75BC29}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DEEBA1B5-8B12-4193-A5F2-91382A2901B2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E2892FD3-EDE3-43AF-B6FE-6C69177C6449}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C44880B8-9070-43F9-B75C-AE38FB01C199}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FEA48575-699D-48DC-9EFF-AA1292E0979E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{46D94EBE-E5F3-4392-999B-DDFA37AD3AC3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{D19F09A3-1A97-4492-8E13-32356D770BA8}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{AD08FBAE-CE77-437C-AA20-D8CA2C62FC7D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{6DEEE937-9462-4F48-BE7D-450C7690C75D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9C6FAB56-8692-4E0B-968E-800A5E98ED61}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{003535FD-5E99-4DF1-B844-DAC2AB176C75}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{61DA7CCC-5A21-4831-A67C-A1D3B54A53A4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{70C72337-1540-49C3-B266-3758EF674976}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6BA37B39-2008-4B1E-AD05-C940F39C5A74}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{309F5593-B19C-4360-9566-7E75EDD5331C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{30859462-6F64-4476-BA34-75C5B63E59BF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{EE837946-22D9-40A2-9638-184236E063E0}] => (Allow) C:\Program Files\HP\HP DeskJet 3630 series\Bin\DeviceSetup.exe
FirewallRules: [{B3E1D98E-B0FE-4875-B09E-3D050FD79779}] => (Allow) LPort=5357
FirewallRules: [{442DDFB8-BF94-40E6-B405-CF4EEC51CDA3}] => (Allow) C:\Program Files\HP\HP DeskJet 3630 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{E531F7C5-6575-4B0C-944B-FAF5E091F375}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe
FirewallRules: [{F7273289-22C5-4E0B-9138-C69266B7FF74}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe
FirewallRules: [{D6320CED-98CE-4B1C-8106-A110AB92F39E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{03418AAC-CC65-4825-9102-482D0F52E9A1}] => (Allow) LPort=5055
FirewallRules: [{8C064484-20AF-46AD-986B-422AC34CA923}] => (Allow) C:\Program Files (x86)\Mobiola WebCamera for iPhone\WebcamForIPhone.exe
FirewallRules: [{6E89F635-8453-4942-9C48-3C974421490D}] => (Allow) C:\Program Files (x86)\Mobiola WebCamera for iPhone\WebcamForIPhone.exe
FirewallRules: [{AAB9C32E-DD87-469D-8DA9-37C7CDDE23E8}] => (Allow) C:\Program Files (x86)\Mobiola WebCamera for iPhone\WebcamForIPhone.exe
FirewallRules: [{960B7EC9-DD39-4F01-A34F-1E6D9D35EAF7}] => (Allow) C:\Program Files (x86)\Mobiola WebCamera for iPhone\WebcamForIPhone.exe
FirewallRules: [{D5A1C3EA-B08A-4C3B-8A87-738DCFE12C32}] => (Allow) %ProgramFiles% (x86)\Mobiola WebCamera for iPhone\WebcamForIPhone.exe
FirewallRules: [{5DE330E9-52A7-4EDB-9C09-562C293F6416}] => (Allow) %ProgramFiles% (x86)\Mobiola WebCamera for iPhone\WebcamForIPhone.exe
FirewallRules: [{74AA9B03-A0DF-4B17-B780-24A67B01CA10}] => (Allow) %ProgramFiles% (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe
FirewallRules: [{DE189E11-D353-43AC-A2B8-2A3251F7D020}] => (Allow) %ProgramFiles% (x86)\Common Files\SHAPE Services\Mobiola Wave Service\DefaultProber.exe
FirewallRules: [{1507ACAE-B2E8-4834-872D-43BA3C03E57B}] => (Allow) %ProgramFiles% (x86)\Common Files\SHAPE Services\Mobiola Wave Service\MobiolaWaveService.exe
FirewallRules: [{8C0BBFC1-6E83-4DE4-B370-DA6D0FC18EA2}] => (Allow) %ProgramFiles% (x86)\Common Files\SHAPE Services\Mobiola Wave Service\DefaultProber.exe
FirewallRules: [TCP Query User{43BCDAE3-48FB-486F-852C-6C6891BD88B3}C:\program files (x86)\steam\steamapps\common\xsplit\xsplitbroadcaster\xsplit.core.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xsplit\xsplitbroadcaster\xsplit.core.exe
FirewallRules: [UDP Query User{A27DD5DC-3BB3-42A6-83D9-1A0119EF464D}C:\program files (x86)\steam\steamapps\common\xsplit\xsplitbroadcaster\xsplit.core.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xsplit\xsplitbroadcaster\xsplit.core.exe
FirewallRules: [{4A419C95-040A-4188-8537-70B037C3B045}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C194B9FC-4779-4D26-9E96-287C3B79AFBA}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.Core.exe
FirewallRules: [{FE0467FF-71F5-4E5D-8E5E-620D8248EE05}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.cam.exe
FirewallRules: [{0A42674A-F507-4EDB-B11C-7D225F289741}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.Core.exe
FirewallRules: [{D9594A9F-9F29-4117-946C-505920EED38A}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.cam.exe
FirewallRules: [{39BFFF32-6054-42C0-9CC4-9D5D24C3682F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XSplit\XSplitBroadcaster\XSplit.Launcher.exe
FirewallRules: [{A8D63946-792C-4C1B-95BF-C4898205F60F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XSplit\XSplitBroadcaster\XSplit.Launcher.exe
FirewallRules: [TCP Query User{2C7D539F-B8E0-4F0B-B056-5019BD9A8AEC}C:\program files (x86)\pioneer\rekordbox 4.4.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.4.0\psvnfsd.exe
FirewallRules: [UDP Query User{F9FE537D-E2E9-4B30-B00B-24785D80E4C2}C:\program files (x86)\pioneer\rekordbox 4.4.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.4.0\psvnfsd.exe
FirewallRules: [TCP Query User{64F2EFA4-E097-46C2-9785-3DEC51EA7E9F}C:\program files (x86)\pioneer\rekordbox 4.4.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.4.0\psvlinksysmgr.exe
FirewallRules: [UDP Query User{454D56C7-5ACB-4EA1-B2D5-3D2B48006282}C:\program files (x86)\pioneer\rekordbox 4.4.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.4.0\psvlinksysmgr.exe
FirewallRules: [TCP Query User{869ABD12-A30D-4455-B7FF-3DC92522666D}C:\program files (x86)\pioneer\rekordbox 4.4.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.4.0\rekordbox.exe
FirewallRules: [UDP Query User{2DEF1DC9-8AD0-428F-BB1B-3A66ABBEB9A0}C:\program files (x86)\pioneer\rekordbox 4.4.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.4.0\rekordbox.exe
FirewallRules: [{27CBE21A-91E7-484F-A2D3-977D8A926ECF}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Restore Points =========================

02-08-2017 13:33:35 Revo Uninstaller's restore point - µTorrent
03-08-2017 21:48:37 JRT Pre-Junkware Removal
05-08-2017 03:31:13 Revo Uninstaller's restore point - KinoniDrivers 2.8.1

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (08/05/2017 04:01:03 AM) (Source: irstrtsv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/05/2017 03:56:03 AM) (Source: irstrtsv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/05/2017 03:51:03 AM) (Source: irstrtsv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/05/2017 03:46:00 AM) (Source: irstrtsv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/05/2017 03:41:00 AM) (Source: irstrtsv) (EventID: 0) (User: )
Description: Event-ID 0

Error: (08/05/2017 03:40:37 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.953_none_42151e83c686086b.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.953_none_89c2555adb023171.manifest.

Error: (08/05/2017 03:40:32 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Activation context generation failed for "c:\program files\r\r-3.2.0\tcl\bin64\tk85.dll".Error in manifest or policy file "c:\program files\r\r-3.2.0\tcl\bin64\tk85.dll" on line 9.
The value "x64" of attribute "processorArchitecture" in element "assemblyIdentity" is invalid.

Error: (08/05/2017 03:40:28 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Waves\Applications\wlc.exe".Error in manifest or policy file "C:\Program Files (x86)\Waves\Applications\WavesQtLibs_4.8.2_Win32_Release\WavesQtLibs_4.8.2_Win32_Release.MANIFEST" on line 8.
Component identity found in manifest does not match the identity of the component requested.
Reference is WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0".
Definition is WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (08/05/2017 03:40:28 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Waves\Applications\GTR 3.5.exe".Error in manifest or policy file "C:\Program Files (x86)\Waves\Applications\WavesQtLibs_4.7.3_Win32_Release\WavesQtLibs_4.7.3_Win32_Release.MANIFEST" on line 8.
Component identity found in manifest does not match the identity of the component requested.
Reference is WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0".
Definition is WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (08/05/2017 03:40:28 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Waves\Applications\Element App.exe".Error in manifest or policy file "C:\Program Files (x86)\Waves\Applications\WavesQtLibs_4.7.3_Win32_Release\WavesQtLibs_4.7.3_Win32_Release.MANIFEST" on line 8.
Component identity found in manifest does not match the identity of the component requested.
Reference is WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0".
Definition is WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

System errors:
=============
Error: (08/05/2017 03:48:56 AM) (Source: DCOM) (EventID: 10010) (User: THEPROFESSOR)
Description: The server {37998346-3765-45B1-8C66-AA88CA6B20B8} did not register with DCOM within the required timeout.

Error: (08/05/2017 03:48:19 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (08/05/2017 03:48:19 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\jimmy\AppData\Local\Temp\ehdrv.sys

Error: (08/05/2017 03:48:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (08/05/2017 03:48:18 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\jimmy\AppData\Local\Temp\ehdrv.sys

Error: (08/05/2017 03:48:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (08/05/2017 03:48:18 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\jimmy\AppData\Local\Temp\ehdrv.sys

Error: (08/05/2017 03:46:53 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Connected Devices Platform Service service terminated with the following error:
Unspecified error

Error: (08/05/2017 03:40:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
This driver has been blocked from loading

Error: (08/05/2017 03:40:22 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\jimmy\AppData\Local\Temp\ehdrv.sys

CodeIntegrity:
===================================
Date: 2017-07-31 18:59:15.901
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 18:59:15.900
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 13:25:06.506
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 13:25:05.445
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 13:25:05.444
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 13:24:44.475
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 13:24:44.474
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-07-31 13:24:42.597
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-4910MQ CPU @ 2.90GHz
Percentage of memory in use: 15%
Total physical RAM: 32691.02 MB
Available physical RAM: 27711.13 MB
Total Virtual: 37555.02 MB
Available Virtual: 32591.57 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:196.26 GB) (Free:47.85 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.39 GB) (Free:126.07 GB) NTFS
Drive g: (ESP) (Fixed) (Total:0.48 GB) (Free:0.46 GB) FAT32
Drive w: (WINRETOOLS) (Fixed) (Total:0.73 GB) (Free:0.29 GB) NTFS
Drive x: (PBR Image) (Fixed) (Total:8.34 GB) (Free:0.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: B88F2230)

Partition: GPT.

========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: DF12B322)

Partition: GPT.

==================== End of Addition.txt ============================

garioch7 · August 4, 2017

Reece:

Wow, you were fast with the FRST scan! I have reviewed your newest logs and they look good to me!

We have one remaining issue ...

1. Important Note: Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.
- Kaspersky Lab report: Evaluating the threat level of software vulnerabilities
- Microsoft: Unprecedented Wave of Java Exploitation
- Ghosts of Java Haunt Users

Personally, I uninstalled Java nearly two years ago on both of my computers, and I have never missed it. Some people do need Java, but most do not. Some older games will not play, except on an older version of Java, so that might be why your Java is so old.

Please follow these steps to update Java:

Click here then click Verify Java version.
If you are notified your Java version is out of date click Update (recommended).
Click Agree and Start Free Java Download.
Save jxpiinstall.exe to your desktop.
Double click the icon then click Install.
Uncheck all optional offers.
Click Next.
Once completed you should be notified that You have successfully installed Java.
If Java notifies you older versions of the program need to be removed check each of the versions and click Uninstall.
Verify the older version(s) was uninstalled then click Next.
Click Close.

.

2. Please reboot your computer after Java has been updated.
Your computer appears clean!

Are you having any computer problems now? If so, please let me know. Otherwise, ENJOY your repaired computer.

.

3. We will now remove the tools we used during this fix using Delfix.

Download Delfix from here and save it to your desktop.

Ensure Remove disinfection tools is checked.
Also place a checkmark next to:
- Create registry backup
- Purge system restore
Click the Run button.

When the tool is finished, a log will open in Notepad. Please copy and paste the log in your next reply.

.

4. . . . Some Final Advice . . .

The most common cause of an infected machine is the Trojan Horse, or programs which appear to be legitimate but which contain malicious payloads, or which are simply malicious in and of themselves. No antivirus, firewall, host-based intrusion prevention system (HIPS), or other security software can fully protect you against this kind of attack. The best way to project yourself is not to run email attachments from untrusted sources, and avoid software downloaded from the internet wherever possible. Remember, when you run an application, you are giving that application permission to do to your machine anything you can do to the machine, including create, modify, or destroy files or other data. In the Windows (and most other systems' such as Unix) security model, applications don't have privileges, users do.

The second most common cause of infection is out of date software. Leaving your system unpatched leaves holes through which attackers can execute code on your behalf without your consent. This goes for far more than common targets such as Windows and Internet Explorer. Most recent threats target other third party software, such as Adobe's Adobe Reader, Shockwave Player, or Flash Player, or Oracle's Java browser plugins. You can check your system for out of date software manually, or by using automated tools such as Secunia's Personal Software Inspector. This goes doubly for security applications such as antivirus and other antimalware products based on definition lists, where out-of-date lists mean no detection of newer malware.

Finally, occasionally you will be forced to run some potentially infected binary, or attackers will use a hole which is unpatched by software vendors, so a last line of defense is needed. That means turning on a firewall (Windows Firewall included with Windows Vista or later is fine) and leaving it on, and using and keeping up-to-date an antivirus solution such as Bitdefender. Antiviral solutions don't even have to cost money; later versions of Windows Defender provide perfectly acceptable protection for free. If for some reason you don't like Windows Defender, there are other free products available as well:

Avira (shows nag screen to purchase full product when updating, home use only)
Bitdefender Free (home use only)

That should be fine for the majority of users. However, if you absolutely want additional protection, consider one or more of the following products:

DNS based website blacklists, such as OpenDNS, Google Public DNS, or the MSMVPs Hosts File
An additional (non-antivirus) antimalware solution, such as MalwareBytes Anti-Malware or Emsisoft Emergency Kit
Internet Explorer zone blacklists such as those provided by SpywareBlaster or ZonedOut

If you want more information on methods malware uses to infect your computer, consider browsing our How did I get infected? topic.

.

It has been a pleasure assisting you and I hope that you will avoid any further infections in the future. Your most important protection step is to ALWAYS HAVE MORE THAN ONE RECENT BACKUP OF YOUR ENTIRE SYSTEM on an external drive that is only connected to your computer long enough to backup or restore. I do system images weekly. With the free backup software out there (Easeus ToDo Backup Home, Macrium Reflect, etc.), and the very reasonable prices for external USB hard drives, there is no reason to not have a backup.

Please copy and paste the contents of the Delfix log into your next reply. If that looks good, then we can conclude your topic.

On behalf of the Malwarebytes Community, thank you for choosing us to assist you with your computer issues, stay safe out there in cyberspace, and have a great day.

Regards,
-Phil

JennaTills · August 5, 2017

Everything seems to be In order I have removed Java as i cannot remember why i have it in the first place... i think it was to view homestarrunner.com haha

anyways thank you once again, i am very grateful for your help

# DelFix v1.013 - Logfile created 05/08/2017 at 15:37:21
# Updated 17/04/2016 by Xplode
# Username : The Professor - THEPROFESSOR
# Operating System : Windows 10 Home (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\jimmy\Downloads\FRST-OlderVersion
Deleted : C:\Users\jimmy\Downloads\Addition.txt
Deleted : C:\Users\jimmy\Downloads\AdwCleaner (1).exe
Deleted : C:\Users\jimmy\Downloads\AdwCleaner.exe
Deleted : C:\Users\jimmy\Downloads\esetsmartinstaller_enu (1).exe
Deleted : C:\Users\jimmy\Downloads\esetsmartinstaller_enu.exe
Deleted : C:\Users\jimmy\Downloads\Fixlog.txt
Deleted : C:\Users\jimmy\Downloads\FRST.txt
Deleted : C:\Users\jimmy\Downloads\FRST64.exe
Deleted : C:\Users\jimmy\Downloads\JRT.exe

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #92 [JRT Pre-Junkware Removal | 08/03/2017 11:48:37]
Deleted : RP #93 [Revo Uninstaller's restore point - KinoniDrivers 2.8.1 | 08/04/2017 17:31:13]

New restore point created !

########## - EOF - ##########

garioch7 · August 5, 2017

Reece:

I am happy to hear that all is well with your computer. It was my pleasure to be of assistance. You were a great person to work with.

I will ask the Moderator to conclude your topic as resolved. Please stay safe out there in cyberspace, but know that if you do need assistance in the future, we are always here to help.

Have a great weekend.

Regards,
-Phil

AdvancedSetup · August 6, 2017

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Malwarebytes failed to resolve my issue

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information