Jump to content

Please help! My laptop has been taken over within a matter of minutes!


Recommended Posts

Please help! I have an HP stream 11 and it suddenly had a message come up regarding malware?? I've tried everything I've read in forums for the last 24 and nothing had helped, it's just getting worse. I no longer I'm able to delete certain files because I don't have to permission. Malwarebytes keeps popping up with a message telling me that PUPs have blocked me from going to a site that I'm trying to go to to clean the virus. I have downloaded as many different malware removers as I can but my computer is becoming less and less usable. Please help!!! Also, every scanner/detector, comes back with a clean result as if nothing is wrong with it, but there's definitely something wrong!!!!

Edited by bobbielynjordan
I needed to add more info
Link to post
Share on other sites
Hello bobbielynjordan and welcome to Malwarebytes,

Run the following and post or attach the produced logs:

Open Malwarebytes Anti-Malware.
 
  • On the Settings tab > Protection Scroll to and make sure the following are selected:
    Scan for Rootkits
    Scan within Archives
     
  • Scroll further to Potential Threat Protection make sure the following are set as follows:
    Potentially Unwanted Programs (PUP`s) set as :- Always detect PUP`s (recommended)
    Potentially Unwanted Modifications (PUM`s) set as :- Alwaysdetect PUM`s (recommended)
     
  • Click on the Scan make sure Threat Scan is selected,
  • A Threat Scan will begin.
  • When the scan is complete if anything is found make sure that the first checkbox at the top is checked (that will automatically check all detected items), then click on the Quarantine Selected Tab
  • If asked to restart your computer to complete the removal, please do so
  • When complete click on Export Summary after deletion (bottom-left corner) and select Copy to Clipboard.
  • Wait for the prompt to restart the computer to appear, then click on Yes.
  • After the restart once you are back at your desktop, open MBAM once more to retrieve the log.


To get the log from Malwarebytes do the following:
 
  • Click on the Reports tab > from main interface.
  • Double click on the Scan log which shows the Date and time of the scan just performed.
  • Click Export > From export you have two options:
    Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply
    Text file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply

     
  • Use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply…


Next,

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"
    user posted image
     
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.


Thank you,

Kevin...
Link to post
Share on other sites
7 hours ago, kevinf80 said:
Thank you for your help! AS far as i can see, neither detected anything, yet again, but here are the logs you requested:
 
Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 3/24/18
Scan Time: 10:46 AM
Log File: 9195f05e-2f7a-11e8-835a-000000000000.json
Administrator: Yes
-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4472
License: Trial
-System Information-
OS: Windows 10 (Build 16299.309)
CPU: x64
File System: NTFS
User: BLUESTREAM23\bobbielynjordan
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 293918
Threats Detected: 0
(No malicious items detected)
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 16 min, 29 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 0
(No malicious items detected)
Physical Sector: 0
(No malicious items detected)

(end)
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by bobbielynjordan (24-03-2018 11:20:43)
Running from C:\Users\bobbi\Downloads
Windows 10 Home Version 1709 16299.309 (X64) (2018-03-09 11:24:09)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================
Administrator (S-1-5-21-3438408323-2851843722-3947246619-500 - Administrator - Disabled)
bobbielynjordan (S-1-5-21-3438408323-2851843722-3947246619-1001 - Administrator - Enabled) => C:\Users\bobbi
DefaultAccount (S-1-5-21-3438408323-2851843722-3947246619-503 - Limited - Disabled)
Guest (S-1-5-21-3438408323-2851843722-3947246619-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3438408323-2851843722-3947246619-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.41 - Piriform)
CyberLink YouCam 7 (HKLM-x32\...\{0078CD4D-B146-4D77-8CF0-268B36C1A3EC}) (Version: 7.0.3529.0 - CyberLink Corp.)
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Grammarly (HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\...\GrammarlyForWindows) (Version: 1.5.35 - Grammarly)
HitmanPro 3.8 (HKLM\...\HitmanPro38) (Version: 3.8.0.292 - SurfRight B.V.)
HP Audio Switch (HKLM\...\HPAudioSwitch) (Version: 1.0.96.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP Dropbox Plugin (HKLM-x32\...\{D12BC084-97D6-438A-AA7C-5962608D17A0}) (Version: 36.0.41.58587 - HP)
HP ENVY 4520 series Basic Device Software (HKLM\...\{B46D9E8C-10FE-4873-996B-CA9EA3D7D9FE}) (Version: 40.11.1122.1796 - HP Inc.)
HP ENVY 4520 series Help (HKLM-x32\...\{201E58BD-2A1D-4C4D-BD6F-ADA7669FE3AE}) (Version: 36.0.0 - Hewlett Packard)
HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.)
HP Google Drive Plugin (HKLM-x32\...\{BFA42100-DB54-467A-BB87-CF70732B4065}) (Version: 36.0.41.58587 - HP)
HP JumpStart Bridge (HKLM-x32\...\{6B4A5299-4837-485A-B71D-7F1CE6F8F018}) (Version: 1.0.0.143 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{0F5EBB0D-DF6D-4DBE-9789-57BF05B3B0FD}) (Version: 1.0.145.0 - HP Inc.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8351.5556 - HP Inc.)
HP Support Assistant (HKLM-x32\...\{7878B5ED-BD5A-49C9-B314-D3B0FA55795D}) (Version: 8.5.37.19 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{0715118B-DC4F-4C69-B1F8-F29631332DFA}) (Version: 12.8.47.1 - HP Inc.)
HP Sure Connect (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 1.0.0.26 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{ABE95EB9-5EA1-42A3-8009-BA7602127ED6}) (Version: 1.4.25 - HP Inc.)
HP Wireless Button Driver (HKLM-x32\...\{AF4C5F64-4E6A-438B-9832-8BDEE0E7B43D}) (Version: 1.1.17.1 - HP)
Intel(R) Chipset Device Software (HKLM-x32\...\{619e726e-d2b4-4e28-9568-c964fd81ee6c}) (Version: 10.1.1.14 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4463 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1094 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{5068B0F8-CE24-4B61-9C2F-301B411FFB9C}) (Version: 18.1.1611.3223 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{ed4a5da7-ac62-4aa5-9502-7b4de55e8cb5}) (Version: 20.20.2 - Intel Corporation)
Logitech Alert Commander (HKLM-x32\...\{9C815CCE-8A56-4C1E-A3CA-D1BA519882BC}) (Version: 3.5.97 - Logitech)
Logitech Camera Diagnostic (HKLM-x32\...\LogiUCDiagnostic) (Version: 1.1.74.0 - Logitech Europe S.A.)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes version 3.4.4.2398 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.4.2398 - Malwarebytes)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.9029.2253 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\...\OneDriveSetup.exe) (Version: 18.025.0204.0009 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9029.2253 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9029.2253 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9029.2253 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.9029.2253 - Microsoft Corporation) Hidden
Product Improvement Study for HP ENVY 4520 series (HKLM\...\{1DDC5451-BE8B-4092-AB04-E92127242886}) (Version: 40.11.1122.1796 - HP Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.29094 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7831 - Realtek Semiconductor Corp.)
Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{BF492E7F-BD3F-4F33-932A-1DD0891968B0}) (Version: 2.13.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{E1D7CB46-BAE9-4D58-99C4-582332B1755A}) (Version: 1.13.0.0 - Microsoft Corporation) Hidden
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22391 - Microsoft Corporation)
Windows Driver Package - Intel Corporation (iagpioe) System  (05/21/2015 604.10120.2652.361) (HKLM\...\AF9226384B030787C4D0F761A23F48F7649D6D17) (Version: 05/21/2015 604.10120.2652.361 - Intel Corporation)
Windows Driver Package - Intel Corporation (iai2ce) System  (06/30/2015 604.10146.2643.2818) (HKLM\...\42CFE5B10021C15BFC08687E1D339C8BB3D32DDA) (Version: 06/30/2015 604.10146.2643.2818 - Intel Corporation)
Windows Driver Package - Intel Corporation (iauarte) System  (05/21/2015 604.10120.2653.391) (HKLM\...\1D4FF76A05A14FF5BA3636A41E0AB237F3A55E14) (Version: 05/21/2015 604.10120.2653.391 - Intel Corporation)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
Yandex Browser (HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\...\YandexBrowser) (Version: 18.1.1.839 - YANDEX)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-03] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-06-21] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-03] (Malwarebytes)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0229352C-FC42-4880-BCA0-7B973BDDE54B} - System32\Tasks\HPJumpStartProvider => C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe [2016-06-02] ()
Task: {2347239D-B4F7-41A5-8027-D8EB8F73B8E1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-09] (Microsoft Corporation)
Task: {27B99144-A256-48E7-91AB-21CB683620BC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-03-06] (Piriform Ltd)
Task: {3200CCF7-EDBC-406D-9111-EBFFDAA69CF8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-02-07] (HP Inc.)
Task: {4D2F926D-FDC6-43BD-8127-429859BD7DE0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {521E0AC8-96E1-46A0-96FC-BCE116480C8F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-03-15] (Microsoft Corporation)
Task: {61A99D5E-2D1F-40BD-BB26-F1E302BB5087} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH7AS4K0M9 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-02-07] (HP Inc.)
Task: {624830A2-BCB2-43F8-97A9-5D2271D63599} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {67945CD1-881D-4DD6-9AC1-48C28305F7A4} - System32\Tasks\Update for Yandex Browser => C:\Users\bobbi\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
Task: {75F4ED8E-E9ED-45A4-AE2D-6F26A28A7ECC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-03-07] (HP Inc.)
Task: {816C5E70-E677-4467-A73D-06B311A4C2BE} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {8BAE7C55-F43D-4F43-8C59-467060DEAD79} - System32\Tasks\HPCeeScheduleForbobbielynjordan => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] (Hewlett-Packard)
Task: {8C17A15A-CE59-481A-8F12-07A560D893D8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-03-15] (Microsoft Corporation)
Task: {9BB803D5-AB3E-4C05-A84D-DC4293AF96B0} - System32\Tasks\HPCustParticipation HP ENVY 4520 series => C:\Program Files\HP\HP ENVY 4520 series\Bin\HPCustPartic.exe [2017-04-06] (HP Inc.)
Task: {B1DDF741-36EB-41EB-95BC-70B185EE8A54} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {C13D9635-7646-4536-9259-C60346A08935} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-02-07] (HP Inc.)
Task: {C34C8923-19AE-4D1F-A107-4DDFDAFEAAA4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-09] (Microsoft Corporation)
Task: {C36D7E7A-A086-40F3-92B5-F3C47137DAE0} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {C578AFA0-4D9E-45CE-95EF-852F0A195FB5} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-03-15] (Microsoft Corporation)
Task: {CD8F651A-E2F0-4F35-A674-048ECB2EECA3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-03-06] (Piriform Ltd)
Task: {D14CDD31-72AC-45CB-AE52-764BB772F42D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {E0C62CF9-AC08-4DB6-AE64-AB312782C052} - System32\Tasks\Microsoft\Office\Microsoft Office Touchless Attach Notification => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-03-12] (Microsoft Corporation)
Task: {E612FC50-91F4-47E4-B02E-041B829B0360} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-09] (Microsoft Corporation)
Task: {EFFE6967-FFEF-411A-BFB7-C7483F46D658} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-03-12] (Microsoft Corporation)
Task: {F18AE3BB-07EA-48EE-9D9A-ACB6A49F948B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-03-12] (Microsoft Corporation)
Task: {F4AD2755-73F4-45E6-8148-A077F6827FB5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {F71C7B12-0609-4AB6-8BEA-D1D23143DFBE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-09] (Microsoft Corporation)
Task: {F93AD73F-8BB6-489B-9AD2-3BBD7318695B} - System32\Tasks\Yandex Browser system update => C:\Program Files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe [2018-02-20] (YANDEX LLC)
Task: {FFFC8116-521F-438A-BE2E-9DAD219AA347} - System32\Tasks\HPCeeScheduleForbobbi => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] (Hewlett-Packard)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForbobbi.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForbobbielynjordan.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\Update for Yandex Browser.job => C:\Users\bobbi\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
Task: C:\WINDOWS\Tasks\Yandex Browser system update.job => C:\Program Files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Priceline.com.lnk -> C:\Program Files (x86)\HP\Shared\WizLink.exe () -> hxxp://www.priceline.com/?refid=PLHBC6240OPQ&refclickid=square
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VUDU - Streaming Movies.lnk -> C:\Program Files (x86)\HP\Shared\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?bd=all&c=*&locale=en_us&pf=cnnb&s=VUDU_URL&tp=startmenu
==================== Loaded Modules (Whitelisted) ==============
2017-09-29 08:41 - 2017-09-29 08:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-03-24 01:43 - 2018-02-05 15:44 - 002299168 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-03-24 01:43 - 2018-03-01 11:31 - 002488608 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2018-03-14 11:45 - 2018-02-21 19:26 - 011044864 ____C () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-03-14 11:45 - 2018-02-21 19:21 - 001804288 ____C () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 000264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2018-03-09 20:42 - 2018-03-09 20:46 - 001227440 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9029.22105.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2018-02-27 03:07 - 2018-02-27 03:07 - 004601048 ____C () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9029.22105.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-03-16 20:19 - 2018-03-16 20:22 - 000173568 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11802.1001.11.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2018-03-09 20:42 - 2018-03-09 20:42 - 002250240 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11802.1001.11.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 002144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 007955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 000341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 000028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-13 00:38 - 2012-09-13 00:38 - 000127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2012-09-13 00:39 - 2012-09-13 00:39 - 000336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\67533924.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\87458041.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\67533924.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\87458041.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-10-30 02:24 - 2015-10-30 02:21 - 000000824 ____C C:\WINDOWS\system32\Drivers\etc\hosts

==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 68.105.28.11 - 68.105.29.11
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{605B2C96-316C-4F07-8D42-1FA6483F3E96}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{1257D989-63F6-49B7-8745-2BABE3C77469}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{B22C456F-EF37-4045-AECE-AE7A8DA50A0B}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe
FirewallRules: [{D9A0A975-E816-4A61-97B0-C189308DF696}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe
FirewallRules: [{6F3F74B0-D601-4C4B-8B58-A55BA16B287B}] => (Allow) c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{30258DB5-7A52-4DAB-A30A-1515981AD2C5}] => (Allow) C:\Users\bobbi\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
FirewallRules: [{89DA5E97-EDFC-4F54-8EBD-05DE8EA362C8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0B6ABAE7-0538-452D-8AB6-BCCB424E74B9}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\DeviceSetup.exe
FirewallRules: [{A495B95D-A27B-425F-B800-18393997EE6C}] => (Allow) LPort=5357
FirewallRules: [{30BBBC7D-B9AC-4802-87E8-B8AD535DA05C}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{A83DCF46-8945-482A-8826-ADC7E4B3E9C1}] => (Allow) C:\Users\bobbi\AppData\Local\Temp\7zS03C6\HPDiagnosticCoreUI.exe
FirewallRules: [{229ECE0C-6930-47A6-AB00-8601E3B0A7BC}] => (Allow) C:\Users\bobbi\AppData\Local\Temp\7zS03C6\HPDiagnosticCoreUI.exe
FirewallRules: [TCP Query User{9D8D84DE-47AC-4510-AF8D-EBA4459218B4}D:\logitech alert commander.exe] => (Allow) D:\logitech alert commander.exe
FirewallRules: [UDP Query User{84ECE639-C3BC-43D4-9B2A-DE6B437787F4}D:\logitech alert commander.exe] => (Allow) D:\logitech alert commander.exe
==================== Restore Points =========================

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================
Application errors:
==================
Error: (03/24/2018 11:04:00 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
Error: (03/24/2018 11:04:00 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "aspnet_state" in DLL "C:\Windows\System32\aspnet_counters.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
Error: (03/24/2018 11:03:59 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "ASP.NET_4.0.30319" in DLL "C:\Windows\System32\aspnet_counters.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
Error: (03/24/2018 11:03:59 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "ASP.NET" in DLL "C:\Windows\System32\aspnet_counters.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
Error: (03/24/2018 10:51:10 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: BLUESTREAM23)
Description: Package Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy+App was terminated because it took too long to suspend.
Error: (03/24/2018 10:49:15 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program ShellExperienceHost.exe version 10.0.16299.15 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 1db0
Start Time: 01d3c3441e3a42c4
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Report Id: e3d9cad2-55f4-4103-a15a-8db9f99b3da7
Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: App
Error: (03/24/2018 10:48:19 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: BLUESTREAM23)
Description: Package Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy+App was terminated because it took too long to suspend.
Error: (03/24/2018 10:44:20 AM) (Source: COM) (EventID: 10031) (User: )
Description: An unmarshaling policy check was performed when unmarshaling a custom marshaled object and the class {41FD88F7-F295-4D39-91AC-A85F3149A05B} was rejected

System errors:
=============
Error: (03/24/2018 10:51:08 AM) (Source: DCOM) (EventID: 10010) (User: BLUESTREAM23)
Description: The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout.
Error: (03/24/2018 10:46:46 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (03/24/2018 10:44:21 AM) (Source: DCOM) (EventID: 10010) (User: BLUESTREAM23)
Description: The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout.
Error: (03/24/2018 10:44:13 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.
Error: (03/24/2018 10:43:40 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (03/24/2018 02:43:31 AM) (Source: DCOM) (EventID: 10010) (User: BLUESTREAM23)
Description: The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout.
Error: (03/24/2018 02:43:31 AM) (Source: DCOM) (EventID: 10010) (User: BLUESTREAM23)
Description: The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout.
Error: (03/24/2018 02:30:57 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Windows Defender:
===================================
Date: 2018-03-24 02:39:27.640
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {82D6CB20-C11A-4EA9-8B67-A4870C40A822}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2018-03-23 21:38:17.762
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {E51DD1CE-5CE4-4ABB-892A-729B73F582D0}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2018-03-23 06:57:29.018
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {B178A1F6-F6D3-4A4C-B546-CAF750129C22}
Scan Type: Antimalware
Scan Parameters: Full Scan
Date: 2018-03-22 18:24:57.777
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {B46801D1-E405-45F4-AE23-16E9F0112BF2}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2018-03-20 21:28:26.851
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {606DB5D3-F882-4D4C-8924-5EBA484F123E}
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2018-03-23 19:42:50.724
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.263.1018.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14600.4
Error code: 0x80240438
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
Date: 2018-03-23 07:09:51.330
Description:
Windows Defender Antivirus has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.263.1003.0
Update Source: Microsoft Update Server
Signature Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.14600.4
Error code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Date: 2018-03-23 06:58:38.245
Description:
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware protection has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.
Date: 2018-03-23 05:29:36.932
Description:
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware protection has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.
Date: 2018-03-23 05:26:04.115
Description:
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware protection has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.
CodeIntegrity:
===================================
Date: 2018-03-24 11:15:12.380
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:15:10.535
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:14:43.337
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:14:42.518
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:14:32.898
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:14:31.379
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:14:30.281
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2018-03-24 11:14:29.567
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Celeron(R) CPU N3060 @ 1.60GHz
Percentage of memory in use: 60%
Total physical RAM: 4001.58 MB
Available physical RAM: 1576.59 MB
Total Virtual: 5665.58 MB
Available Virtual: 2876.22 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:27.89 GB) (Free:7.15 GB) NTFS
Drive d: (ESD-USB) (Removable) (Total:29.71 GB) (Free:27.92 GB) FAT32
\\?\Volume{3d20fd4c-97d5-4db9-b4e7-2ba6806db104}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
\\?\Volume{283e83e0-c860-47a6-8b3d-0a3257562b00}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.43 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 29.1 GB) (Disk ID: B302FACF)
Partition: GPT.
========================================================
Disk: 1 (Protective MBR) (Size: 29.7 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================
 
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018
Ran by bobbielynjordan (administrator) on BLUESTREAM23 (24-03-2018 11:18:45)
Running from C:\Users\bobbi\Downloads
Loaded Profiles: bobbielynjordan (Available Profiles: bobbielynjordan)
Platform: Windows 10 Home Version 1709 16299.309 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\MsMpEng.exe
(YANDEX LLC) C:\Program Files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(YANDEX LLC) C:\Program Files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18022-0\NisSrv.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(HP Inc.) C:\Program Files\HP\HP ENVY 4520 series\Bin\ScanToPCActivationApp.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam7\YouCamService7.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc.) C:\Program Files\HP\HP ENVY 4520 series\Bin\HPNetworkCommunicatorCom.exe
(HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9029.22105.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9029.22105.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11802.1001.11.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Farbar) C:\Users\bobbi\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8822528 2016-06-20] (Realtek Semiconductor)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
HKLM-x32\...\Run: [YouCam Service7] => C:\Program Files (x86)\CyberLink\YouCam7\YouCamService7.exe [466712 2017-12-14] (CyberLink Corp.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [701984 2017-07-13] (HP Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\...\Run: [HP ENVY 4520 series (NET)] => C:\Program Files\HP\HP ENVY 4520 series\Bin\ScanToPCActivationApp.exe [3770504 2017-04-06] (HP Inc.)
HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-03-06] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Audio Switch.lnk [2016-06-27]
ShortcutTarget: HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitchLC.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2016-12-03]
ShortcutTarget: HP JumpStart Launch.lnk -> c:\Windows\Installer\{0F5EBB0D-DF6D-4DBE-9789-57BF05B3B0FD}\HPlogo_blue.ico ()
Startup: C:\Users\bobbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk [2018-03-24]
ShortcutTarget: Logitech . Product Registration.lnk -> C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
Tcpip\..\Interfaces\{94bbb22d-243f-4a63-9e22-565211a1e3f2}: [DhcpNameServer] 68.105.28.11 68.105.29.11 68.105.28.12
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-3438408323-2851843722-3947246619-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-03-02] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-02] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-02] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-02] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-03-02] (Microsoft Corporation)
Edge:
======
Edge Extension: (Grammarly for Microsoft Edge) -> EdgeExtension_GrammarlyGrammarlyforMicrosoftEdge_zee0y2571dhse => C:\Program Files\WindowsApps\Grammarly.GrammarlyforMicrosoftEdge_1.92.1460.0_neutral__zee0y2571dhse [2018-03-10]
FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-02] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-02] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-03-02] (Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default [2018-03-23]
CHR Extension: (Slides) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-03-03]
CHR Extension: (Docs) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-03]
CHR Extension: (Google Drive) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-03-03]
CHR Extension: (YouTube) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-03-03]
CHR Extension: (Sheets) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-03-03]
CHR Extension: (Google Docs Offline) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-03-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-03-03]
CHR Extension: (Gmail) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-03-03]
CHR Extension: (Chrome Media Router) - C:\Users\bobbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-03]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7962288 2018-03-12] (Microsoft Corporation)
R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1699368 2018-01-28] (Intel Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135488 2018-03-23] (SurfRight B.V.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [892928 2016-06-02] (HP Inc.) [File not signed]
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [459800 2016-06-02] (HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332144 2017-11-21] (HP Inc.)
S2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc.)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [535592 2018-01-12] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [356336 2016-06-21] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [887784 2015-09-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [174368 2015-04-21] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6440736 2018-03-03] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268928 2017-12-20] ()
R2 osrss; C:\WINDOWS\system32\osrss.dll [108584 2018-01-18] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312576 2016-06-20] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-08-18] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\NisSrv.exe [356152 2018-03-09] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MsMpEng.exe [106280 2018-03-09] (Microsoft Corporation)
R2 YandexBrowserService; C:\Program Files (x86)\Yandex\YandexBrowser\18.1.1.839\service_update.exe [1062392 2018-02-20] (YANDEX LLC)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3758720 2017-12-20] (Intel® Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 clwvd7; C:\WINDOWS\system32\DRIVERS\clwvd7.sys [61184 2017-11-15] (CyberLink Corporation)
S3 clwvdPFC; C:\WINDOWS\system32\DRIVERS\clwvdPFC.sys [61696 2017-10-04] (CyberLink Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [74696 2017-11-28] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [70088 2017-11-28] (Intel Corporation)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [383432 2017-11-28] (Intel Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [76200 2018-01-18] ()
R3 HpqKbFiltr; C:\WINDOWS\System32\drivers\HpqKbFiltr64.sys [37112 2015-06-17] (Hewlett-Packard Company)
R3 iagpioe; C:\WINDOWS\System32\drivers\iagpioe.sys [41984 2015-06-03] (Intel(R) Corporation)
S3 iai2ce; C:\WINDOWS\System32\drivers\iai2ce.sys [90112 2015-07-07] (Intel(R) Corporation)
S3 iauarte; C:\WINDOWS\System32\drivers\iauarte.sys [112640 2015-06-03] (Intel(R) Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2018-01-10] (Intel Corporation)
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7383544 2016-06-21] (Intel Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [193248 2018-03-24] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [109800 2018-03-24] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [45960 2018-03-24] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-03-24] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [101600 2018-03-24] (Malwarebytes)
R1 MpKslfbdcd5f8; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A51C72E4-E4C1-4000-A60C-20E027C3689A}\MpKslfbdcd5f8.sys [58120 2018-03-24] (Microsoft Corporation)
R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [8623040 2018-02-05] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [329664 2017-10-26] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [69216 2017-01-25] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [55384 2017-08-18] (Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-15] (Intel Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-03-09] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288296 2018-03-09] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129568 2018-03-09] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)
S3 WLRAWMp50x64; C:\WINDOWS\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)
S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)
S3 WLRAWSp50x64; C:\WINDOWS\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)
S3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)
U3 aspnet_state; no ImagePath
S3 H2OFFT; \SystemRoot\System32\drivers\H2OFFT64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-03-24 11:16 - 2018-03-24 11:18 - 002403328 ____C (Farbar) C:\Users\bobbi\Downloads\FRST64 (1).exe
2018-03-24 11:16 - 2018-03-24 11:16 - 000000000 ____C C:\Users\bobbi\Downloads\FRST64 (2).exe.0uizhr4.partial
2018-03-24 02:47 - 2018-03-24 02:47 - 000000000 __HDC C:\OneDriveTemp
2018-03-24 02:45 - 2018-03-24 10:43 - 000673034 ____C C:\TDSSKiller.3.1.0.16_24.03.2018_02.45.51_log.txt
2018-03-24 02:45 - 2018-03-24 02:45 - 000045960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2018-03-24 02:42 - 2018-03-24 02:43 - 000055816 ____C C:\TDSSKiller.3.1.0.16_24.03.2018_02.42.21_log.txt
2018-03-24 02:42 - 2018-03-24 02:42 - 000001550 ____C C:\Users\bobbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Logitech Alert Commander.lnk
2018-03-24 02:41 - 2018-03-24 02:41 - 004944584 ____C (AO Kaspersky Lab) C:\Users\bobbi\Downloads\tdsskiller.exe
2018-03-24 01:44 - 2018-03-24 02:44 - 000109800 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2018-03-24 01:43 - 2018-03-24 10:45 - 000101600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2018-03-24 01:43 - 2018-03-24 02:44 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2018-03-24 01:43 - 2018-03-24 01:43 - 000193248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2018-03-24 01:43 - 2018-03-24 01:43 - 000001919 ____C C:\Users\Public\Desktop\Malwarebytes.lnk
2018-03-24 01:43 - 2018-03-24 01:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-03-24 01:43 - 2018-01-18 09:03 - 000076200 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2018-03-24 01:39 - 2018-03-24 01:39 - 071234984 ____C (Malwarebytes ) C:\Users\bobbi\Downloads\mb3-setup-consumer-3.4.4.2398-1.0.322-1.0.4458.exe
2018-03-24 01:28 - 2018-03-24 01:28 - 040510072 ____C (Microsoft Corporation) C:\Users\bobbi\Downloads\Windows-KB890830-x64-V5.58.exe
2018-03-24 01:20 - 2018-03-24 01:20 - 000000000 ____D C:\Users\bobbi\AppData\Local\Logitech® Webcam Software
2018-03-24 01:13 - 2018-03-24 01:13 - 000000000 ____D C:\Users\bobbi\AppData\Roaming\Leadertech
2018-03-24 01:13 - 2018-03-24 01:13 - 000000000 ____D C:\Users\bobbi\AppData\Local\ElevatedDiagnostics
2018-03-24 01:10 - 2018-03-24 01:13 - 000000000 ____D C:\Program Files (x86)\Logitech
2018-03-24 01:10 - 2018-03-24 01:10 - 000001720 ____C C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2018-03-24 01:08 - 2018-03-24 01:08 - 002081616 ____C (Logitech Europe S.A.) C:\Users\bobbi\Downloads\LogiCamDiagnostic1.1.74.0.exe
2018-03-24 01:06 - 2018-03-24 01:07 - 074520472 ____C (Logitech, Inc.) C:\Users\bobbi\Downloads\lws280.exe
2018-03-24 00:24 - 2018-03-24 00:24 - 000395552 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-03-24 00:23 - 2018-03-24 00:23 - 000000072 ___SH C:\bootTel.dat
2018-03-23 23:46 - 2018-03-23 23:46 - 000000000 ___DC C:\Logitech Alert Recordings
2018-03-23 23:46 - 2018-03-23 23:46 - 000000000 ____D C:\ProgramData\LogiShrd
2018-03-23 23:40 - 2018-03-23 23:40 - 000035241 ____C C:\Users\bobbi\Downloads\Shortcut.txt
2018-03-23 23:39 - 2018-03-23 23:41 - 000037591 ____C C:\Users\bobbi\Downloads\Addition.txt
2018-03-23 23:35 - 2018-03-24 11:19 - 000018330 ____C C:\Users\bobbi\Downloads\FRST.txt
2018-03-23 23:35 - 2018-03-24 11:18 - 000000000 ___DC C:\Users\bobbi\Downloads\FRST-OlderVersion
2018-03-23 23:34 - 2018-03-24 11:18 - 000000000 ___DC C:\FRST
2018-03-23 23:34 - 2018-03-23 23:34 - 000001412 ____C C:\Users\Public\Desktop\Logitech Alert Commander.lnk
2018-03-23 23:33 - 2018-03-24 01:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2018-03-23 23:33 - 2013-10-31 10:47 - 000035352 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\WLRAWMp50x64.sys
2018-03-23 23:33 - 2013-10-31 10:47 - 000034328 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\WLRAWSp50x64.sys
2018-03-23 23:32 - 2018-03-23 23:32 - 000000000 ____D C:\ProgramData\Logitech
2018-03-23 23:26 - 2018-03-23 23:27 - 162669544 ____C (Logitech ) C:\Users\bobbi\Downloads\LogitechAlertCommander_3.5.97.exe
2018-03-23 23:23 - 2018-03-24 01:12 - 000000000 ____D C:\Program Files\Common Files\logishrd
2018-03-23 21:22 - 2018-03-23 21:22 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\64332358.sys
2018-03-23 21:21 - 2018-03-23 21:38 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-03-23 21:21 - 2018-03-23 21:22 - 000000000 ___DC C:\Users\bobbi\Desktop\mbar
2018-03-23 19:38 - 2018-03-23 19:38 - 000002884 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-03-23 19:38 - 2018-03-23 19:38 - 000000870 ____C C:\Users\Public\Desktop\CCleaner.lnk
2018-03-23 19:38 - 2018-03-23 19:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-03-23 19:36 - 2018-03-23 19:38 - 001464308 ____C C:\TDSSKiller.3.1.0.16_23.03.2018_19.36.16_log.txt
2018-03-23 19:30 - 2018-03-23 19:31 - 000055350 ____C C:\TDSSKiller.3.1.0.16_23.03.2018_19.30.10_log.txt
2018-03-23 18:50 - 2018-03-23 18:50 - 000001973 ____C C:\Users\Public\Desktop\HitmanPro.lnk
2018-03-23 18:49 - 2018-03-23 18:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2018-03-23 18:49 - 2018-03-23 18:50 - 000000000 ____D C:\Program Files\HitmanPro
2018-03-23 07:11 - 2018-03-23 07:12 - 000000000 __HDC C:\$SysReset
2018-03-23 05:43 - 2018-03-23 06:00 - 000000000 ___DC C:\AdwCleaner
2018-03-23 05:28 - 2018-03-23 05:28 - 000000000 ____D C:\WINDOWS\pss
2018-03-23 05:26 - 2018-03-23 06:58 - 000000214 ____C C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2018-03-21 22:13 - 2018-03-21 22:13 - 000000000 ___DC C:\System.sav
2018-03-20 13:06 - 2018-03-20 13:10 - 000000000 ____D C:\ProgramData\HitmanPro
2018-03-20 12:36 - 2018-03-24 01:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-03-20 12:36 - 2018-03-20 12:36 - 000000000 ____D C:\Program Files\Malwarebytes
2018-03-17 13:05 - 2018-03-17 13:05 - 000000000 ___DC C:\Users\bobbi\Documents\HpReg_Backup
2018-03-17 13:02 - 2018-03-17 13:02 - 000002092 ____C C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2018-03-17 13:02 - 2018-03-17 13:02 - 000000000 ____D C:\Users\bobbi\AppData\Roaming\HPPSDr
2018-03-17 12:50 - 2018-03-24 10:53 - 000004182 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{6154805D-5D63-491A-AD84-B8A3232E0786}
2018-03-17 12:31 - 2018-03-17 12:31 - 000003746 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP ENVY 4520 series
2018-03-17 12:31 - 2018-03-17 12:31 - 000000000 ____D C:\ProgramData\Visan
2018-03-17 12:31 - 2018-03-17 12:31 - 000000000 ____D C:\ProgramData\HP Photo Creations
2018-03-17 12:31 - 2018-03-17 12:31 - 000000000 ____D C:\Program Files (x86)\HP Photo Creations
2018-03-17 12:30 - 2018-03-17 12:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2018-03-17 12:30 - 2018-03-17 12:30 - 000002260 ____C C:\Users\Public\Desktop\HP ENVY 4520 series.lnk
2018-03-17 12:29 - 2018-03-17 12:34 - 000000000 ____D C:\Users\bobbi\AppData\Local\HP
2018-03-16 20:23 - 2018-03-21 22:24 - 000000398 ____C C:\WINDOWS\Tasks\HPCeeScheduleForbobbielynjordan.job
2018-03-16 20:23 - 2018-03-20 20:01 - 000003330 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForbobbielynjordan
2018-03-15 21:17 - 2018-03-15 21:17 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2018-03-15 04:04 - 2018-03-02 16:09 - 000834552 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-03-15 04:04 - 2018-03-02 16:09 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-03-14 11:46 - 2018-03-01 02:37 - 007831760 ____C (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-03-14 11:46 - 2018-03-01 02:31 - 008602520 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-03-14 11:46 - 2018-03-01 02:29 - 000733592 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2018-03-14 11:46 - 2018-03-01 02:17 - 002710736 ____C (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-03-14 11:46 - 2018-03-01 02:15 - 002574232 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-03-14 11:46 - 2018-03-01 02:14 - 007384576 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-03-14 11:46 - 2018-03-01 02:14 - 001694224 ____C (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-03-14 11:46 - 2018-03-01 02:14 - 000147872 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2018-03-14 11:46 - 2018-03-01 02:10 - 001779936 ____C (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-03-14 11:46 - 2018-03-01 02:09 - 001054272 ____C (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-03-14 11:46 - 2018-03-01 01:30 - 005615968 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-03-14 11:46 - 2018-03-01 01:28 - 006480616 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-03-14 11:46 - 2018-03-01 01:28 - 002193168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-03-14 11:46 - 2018-03-01 01:26 - 001524776 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-03-14 11:46 - 2018-03-01 01:26 - 001057816 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-03-14 11:46 - 2018-03-01 01:21 - 001558856 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2018-03-14 11:46 - 2018-03-01 01:03 - 002902528 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-03-14 11:46 - 2018-03-01 01:03 - 000471552 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2018-03-14 11:46 - 2018-03-01 01:03 - 000344576 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-03-14 11:46 - 2018-03-01 01:01 - 019354624 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-03-14 11:46 - 2018-03-01 00:57 - 000369152 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-03-14 11:46 - 2018-03-01 00:56 - 018922496 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-03-14 11:46 - 2018-03-01 00:56 - 000559104 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-03-14 11:46 - 2018-03-01 00:54 - 003664384 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-03-14 11:46 - 2018-03-01 00:54 - 000665088 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-03-14 11:46 - 2018-03-01 00:54 - 000463360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-03-14 11:46 - 2018-03-01 00:53 - 000536576 ____C (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-03-14 11:46 - 2018-03-01 00:53 - 000056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2018-03-14 11:46 - 2018-03-01 00:52 - 011923968 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-03-14 11:46 - 2018-03-01 00:52 - 006030336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-03-14 11:46 - 2018-03-01 00:51 - 000034816 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2018-03-14 11:46 - 2018-03-01 00:50 - 003677184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-03-14 11:46 - 2018-03-01 00:50 - 002869760 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-03-14 11:46 - 2018-03-01 00:49 - 000529408 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2018-03-14 11:46 - 2018-03-01 00:48 - 000431616 ____C (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2018-03-14 11:46 - 2018-03-01 00:47 - 023674368 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-03-14 11:46 - 2018-03-01 00:46 - 000770048 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-03-14 11:46 - 2018-03-01 00:45 - 000708096 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-03-14 11:46 - 2018-03-01 00:45 - 000594944 ____C (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-03-14 11:46 - 2018-03-01 00:43 - 012830208 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-03-14 11:46 - 2018-03-01 00:42 - 002084352 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-03-14 11:46 - 2018-03-01 00:41 - 008103936 ____C (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-03-14 11:46 - 2018-03-01 00:41 - 004745728 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-03-14 11:46 - 2018-03-01 00:41 - 003334144 ____C (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-03-14 11:46 - 2018-03-01 00:41 - 001548288 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-03-14 11:46 - 2018-03-01 00:41 - 000812032 ____C (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-03-14 11:46 - 2018-03-01 00:39 - 000899584 ____C (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2018-03-14 11:46 - 2018-03-01 00:38 - 000726016 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2018-03-14 11:46 - 2018-02-21 21:13 - 000279456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2018-03-14 11:46 - 2018-02-21 21:13 - 000077216 ____C (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-03-14 11:46 - 2018-02-21 21:11 - 000109984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2018-03-14 11:46 - 2018-02-21 21:10 - 000285080 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2018-03-14 11:46 - 2018-02-21 21:08 - 001206688 ____C (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-03-14 11:46 - 2018-02-21 21:08 - 001055648 ____C (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-03-14 11:46 - 2018-02-21 21:08 - 000571288 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-03-14 11:46 - 2018-02-21 21:03 - 000712600 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-03-14 11:46 - 2018-02-21 21:03 - 000082848 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-03-14 11:46 - 2018-02-21 21:02 - 000149400 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2018-03-14 11:46 - 2018-02-21 21:00 - 000187296 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2018-03-14 11:46 - 2018-02-21 20:54 - 000437144 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2018-03-14 11:46 - 2018-02-21 20:51 - 000555424 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-03-14 11:46 - 2018-02-21 20:51 - 000045472 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-03-14 11:46 - 2018-02-21 20:50 - 000362904 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-03-14 11:46 - 2018-02-21 19:31 - 000057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2018-03-14 11:46 - 2018-02-21 19:30 - 000192512 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2018-03-14 11:46 - 2018-02-21 19:30 - 000046080 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-03-14 11:46 - 2018-02-21 19:26 - 001015296 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-03-14 11:45 - 2018-03-01 22:36 - 017085440 ____C (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-03-14 11:45 - 2018-03-01 22:02 - 000037888 ____C C:\WINDOWS\system32\SpectrumSyncClient.dll
2018-03-14 11:45 - 2018-03-01 22:01 - 000640000 ____C (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-03-14 11:45 - 2018-03-01 22:00 - 000329728 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2018-03-14 11:45 - 2018-03-01 22:00 - 000248320 ____C (Microsoft Corporation) C:\WINDOWS\system32\svf.dll
2018-03-14 11:45 - 2018-03-01 22:00 - 000230912 ____C (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-03-14 11:45 - 2018-03-01 21:59 - 000956416 ____C (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-03-14 11:45 - 2018-03-01 15:28 - 000181760 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-03-14 11:45 - 2018-03-01 02:50 - 000270744 ____C (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-03-14 11:45 - 2018-03-01 02:49 - 000389536 ____C (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2018-03-14 11:45 - 2018-03-01 02:48 - 000664472 ____C (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-03-14 11:45 - 2018-03-01 02:47 - 000749464 ____C (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-03-14 11:45 - 2018-03-01 02:47 - 000035224 ____C (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2018-03-14 11:45 - 2018-03-01 02:46 - 002003352 ____C (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2018-03-14 11:45 - 2018-03-01 02:46 - 001568664 ____C (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-03-14 11:45 - 2018-03-01 02:46 - 000609176 ____C (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-03-14 11:45 - 2018-03-01 02:46 - 000138144 ____C (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2018-03-14 11:45 - 2018-03-01 02:45 - 000070040 ____C (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2018-03-14 11:45 - 2018-03-01 02:40 - 002514936 ____C (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-03-14 11:45 - 2018-03-01 02:40 - 000461720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-03-14 11:45 - 2018-03-01 02:40 - 000273304 ____C (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2018-03-14 11:45 - 2018-03-01 02:30 - 000540064 ____C (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2018-03-14 11:45 - 2018-03-01 02:30 - 000264040 ____C (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-03-14 11:45 - 2018-03-01 02:27 - 001173576 ____C (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-03-14 11:45 - 2018-03-01 02:26 - 000170912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-03-14 11:45 - 2018-03-01 02:25 - 000377752 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-03-14 11:45 - 2018-03-01 02:23 - 000749976 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-03-14 11:45 - 2018-03-01 02:19 - 000710768 ____C (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-03-14 11:45 - 2018-03-01 02:17 - 000519152 ____C (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-03-14 11:45 - 2018-03-01 02:17 - 000408984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-03-14 11:45 - 2018-03-01 02:14 - 007675784 ____C (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-03-14 11:45 - 2018-03-01 02:14 - 005105664 ____C (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll
2018-03-14 11:45 - 2018-03-01 02:14 - 000356952 ____C (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-03-14 11:45 - 2018-03-01 02:14 - 000128928 ____C (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2018-03-14 11:45 - 2018-03-01 02:12 - 000677272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-03-14 11:45 - 2018-03-01 02:12 - 000250264 ____C (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2018-03-14 11:45 - 2018-03-01 02:12 - 000189344 ____C (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2018-03-14 11:45 - 2018-03-01 02:11 - 000093600 ____C (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-03-14 11:45 - 2018-03-01 02:10 - 000075168 ____C (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2018-03-14 11:45 - 2018-03-01 02:10 - 000022936 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys
2018-03-14 11:45 - 2018-03-01 01:51 - 000777904 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-03-14 11:45 - 2018-03-01 01:48 - 001930736 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-03-14 11:45 - 2018-03-01 01:39 - 000213400 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2018-03-14 11:45 - 2018-03-01 01:29 - 006092152 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-03-14 11:45 - 2018-03-01 01:29 - 000574960 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2018-03-14 11:45 - 2018-03-01 01:28 - 000115096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2018-03-14 11:45 - 2018-03-01 01:27 - 000284112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-03-14 11:45 - 2018-03-01 01:27 - 000221592 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2018-03-14 11:45 - 2018-03-01 01:23 - 005105664 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll
2018-03-14 11:45 - 2018-03-01 01:09 - 025251840 ____C (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-03-14 11:45 - 2018-03-01 01:03 - 000162304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2018-03-14 11:45 - 2018-03-01 01:03 - 000065536 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2018-03-14 11:45 - 2018-03-01 01:01 - 006575616 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-03-14 11:45 - 2018-03-01 01:01 - 000155648 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-03-14 11:45 - 2018-03-01 01:01 - 000019456 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-03-14 11:45 - 2018-03-01 01:00 - 000098304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-03-14 11:45 - 2018-03-01 00:59 - 000220672 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll
2018-03-14 11:45 - 2018-03-01 00:58 - 004839424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-03-14 11:45 - 2018-03-01 00:58 - 000459776 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-03-14 11:45 - 2018-03-01 00:58 - 000405504 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2018-03-14 11:45 - 2018-03-01 00:58 - 000368128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-03-14 11:45 - 2018-03-01 00:55 - 000346112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2018-03-14 11:45 - 2018-03-01 00:54 - 003181568 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-03-14 11:45 - 2018-03-01 00:54 - 001296896 ____C (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-03-14 11:45 - 2018-03-01 00:54 - 000496128 ____C (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-03-14 11:45 - 2018-03-01 00:53 - 000863232 ____C (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2018-03-14 11:45 - 2018-03-01 00:53 - 000399872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-03-14 11:45 - 2018-03-01 00:53 - 000246272 ____C (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-03-14 11:45 - 2018-03-01 00:53 - 000206848 ____C (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2018-03-14 11:45 - 2018-03-01 00:53 - 000107520 ____C (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2018-03-14 11:45 - 2018-03-01 00:53 - 000097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2018-03-14 11:45 - 2018-03-01 00:53 - 000092160 ____C (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-03-14 11:45 - 2018-03-01 00:53 - 000039424 ____C (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2018-03-14 11:45 - 2018-03-01 00:51 - 002329088 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2018-03-14 11:45 - 2018-03-01 00:51 - 000201728 ____C (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-03-14 11:45 - 2018-03-01 00:51 - 000023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-03-14 11:45 - 2018-03-01 00:50 - 000526336 ____C (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-03-14 11:45 - 2018-03-01 00:50 - 000118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-03-14 11:45 - 2018-03-01 00:50 - 000075264 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2018-03-14 11:45 - 2018-03-01 00:49 - 000675328 ____C (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-03-14 11:45 - 2018-03-01 00:49 - 000301056 ____C (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2018-03-14 11:45 - 2018-03-01 00:49 - 000066048 ____C (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2018-03-14 11:45 - 2018-03-01 00:48 - 000543232 ____C (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2018-03-14 11:45 - 2018-03-01 00:47 - 000579584 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2018-03-14 11:45 - 2018-03-01 00:47 - 000484352 ____C (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2018-03-14 11:45 - 2018-03-01 00:46 - 004051968 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2018-03-14 11:45 - 2018-03-01 00:46 - 000026624 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2018-03-14 11:45 - 2018-03-01 00:45 - 000386560 ____C (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2018-03-14 11:45 - 2018-03-01 00:44 - 008030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-03-14 11:45 - 2018-03-01 00:44 - 005195776 ____C (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-03-14 11:45 - 2018-03-01 00:42 - 003505664 ____C (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2018-03-14 11:45 - 2018-03-01 00:40 - 005833216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-03-14 11:45 - 2018-03-01 00:39 - 002222592 ____C (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-03-14 11:45 - 2018-03-01 00:39 - 002035712 ____C (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-03-14 11:45 - 2018-03-01 00:39 - 000666624 ____C (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll
2018-03-14 11:45 - 2018-03-01 00:38 - 000963072 ____C (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-03-14 11:45 - 2018-03-01 00:36 - 004050432 ____C (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-03-14 11:45 - 2018-03-01 00:36 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2018-03-14 11:45 - 2018-03-01 00:35 - 000568320 ____C (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2018-03-14 11:45 - 2018-03-01 00:35 - 000128000 ____C (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
2018-03-14 11:45 - 2018-03-01 00:35 - 000050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2018-03-14 11:45 - 2018-02-21 21:23 - 001092016 ____C (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-03-14 11:45 - 2018-02-21 21:23 - 000924648 ____C (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-03-14 11:45 - 2018-02-21 21:07 - 001415296 ____C (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-03-14 11:45 - 2018-02-21 21:07 - 001209248 ____C (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-03-14 11:45 - 2018-02-21 21:07 - 000194456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys
2018-03-14 11:45 - 2018-02-21 20:59 - 021351624 ____C (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-03-14 11:45 - 2018-02-21 20:52 - 000103328 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-03-14 11:45 - 2018-02-21 20:51 - 000097176 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2018-03-14 11:45 - 2018-02-21 20:50 - 000229272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2018-03-14 11:45 - 2018-02-21 19:41 - 020286120 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-03-14 11:45 - 2018-02-21 19:30 - 000043008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys
2018-03-14 11:45 - 2018-02-21 19:27 - 001282048 ____C (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-03-14 11:45 - 2018-02-21 19:25 - 000086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2018-03-14 11:45 - 2018-02-21 19:16 - 001286144 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-03-14 11:45 - 2018-02-21 19:12 - 000076288 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2018-03-14 11:25 - 2018-03-14 11:25 - 000000000 ___DC C:\Users\Public\Documents\CyberLink
2018-03-10 19:33 - 2018-03-22 19:41 - 000000000 ___DC C:\Users\bobbi\Documents\PerfectCam
2018-03-10 17:54 - 2018-03-10 17:54 - 000000000 ___DC C:\Users\bobbi\Documents\Avatar
2018-03-10 17:51 - 2018-03-10 19:46 - 000000000 ____D C:\Users\Public\CyberLink
2018-03-10 17:51 - 2018-03-10 17:51 - 000000000 ____D C:\Users\bobbi\AppData\Roaming\CyberLink
2018-03-10 17:50 - 2018-03-22 22:37 - 000000000 ____D C:\Users\bobbi\AppData\Local\CyberLink
2018-03-10 17:50 - 2018-03-22 19:40 - 000000000 ___DC C:\Users\bobbi\Documents\YouCam
2018-03-10 17:49 - 2017-10-04 11:14 - 000061696 _____ (CyberLink Corporation) C:\WINDOWS\system32\Drivers\clwvdPFC.sys
2018-03-10 17:47 - 2018-03-22 22:39 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information
2018-03-10 17:47 - 2018-03-10 17:47 - 000002257 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 7.lnk
2018-03-10 17:47 - 2018-03-10 17:47 - 000001974 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 7 Mirror.lnk
2018-03-10 17:47 - 2017-11-15 12:49 - 000061184 _____ (CyberLink Corporation) C:\WINDOWS\system32\Drivers\clwvd7.sys
2018-03-10 17:43 - 2018-03-22 22:38 - 000000000 ____D C:\Program Files (x86)\CyberLink
2018-03-10 17:42 - 2018-03-10 17:43 - 000000000 ____D C:\ProgramData\Temp
2018-03-10 17:17 - 2018-03-22 22:39 - 000000000 ____D C:\ProgramData\install_clap
2018-03-10 17:17 - 2018-03-22 22:39 - 000000000 ____D C:\ProgramData\install_backup
2018-03-10 17:10 - 2018-03-23 19:43 - 000000000 ____D C:\WINDOWS\Panther
2018-03-10 17:03 - 2018-03-10 19:33 - 000000000 ____D C:\ProgramData\CyberLink
2018-03-10 16:31 - 2018-03-21 22:13 - 000000000 ___DC C:\SWSetup
2018-03-10 16:31 - 2014-09-10 11:14 - 000163480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 001070232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomctl.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000660120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomct2.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000617896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000444328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MShflxgd.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000416408 _____ (Microsoft Corporation ) C:\WINDOWS\SysWOW64\comct332.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000279192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatgrd.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000259736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msflxgrd.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000253080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatlst.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000222360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tabctl32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000219288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\richtx32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000218776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dblist32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000212112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mci32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000179352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmask32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000170920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comct232.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000131728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinet.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000130712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msstdfmt.dll
2018-03-10 16:31 - 2013-11-25 08:27 - 000127640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswinsck.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000119960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscomm32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000108696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTKPRP.DLL
2018-03-10 16:31 - 2013-11-25 08:27 - 000104088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\picclp32.ocx
2018-03-10 16:31 - 2013-11-25 08:27 - 000084624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysinfo.ocx
2018-03-10 16:31 - 2011-01-12 14:36 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71u.dll
2018-03-10 16:31 - 2011-01-12 14:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71DEU.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ITA.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71FRA.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ESP.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ENU.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71KOR.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71JPN.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHT.DLL
2018-03-10 16:31 - 2011-01-12 14:25 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHS.DLL
2018-03-10 16:31 - 2011-01-12 14:19 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71.dll
2018-03-10 16:31 - 2011-01-12 13:53 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2018-03-10 16:31 - 2008-04-15 07:00 - 001355776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvbvm50.dll
2018-03-10 16:31 - 2007-02-01 11:13 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2018-03-10 16:31 - 2007-02-01 08:11 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2018-03-10 16:31 - 2007-01-30 11:04 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr70.dll
2018-03-10 16:31 - 2006-08-25 15:28 - 001017344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70u.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70ita.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70fra.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70esp.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70deu.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70enu.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70kor.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70jpn.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70cht.dll
2018-03-10 16:31 - 2006-08-25 15:15 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70chs.dll
2018-03-10 16:31 - 2006-08-25 15:07 - 001024000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc70.dll
2018-03-10 16:31 - 2006-08-25 14:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl70.dll
2018-03-10 16:31 - 2005-01-20 10:25 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvci70.dll
2018-03-10 16:31 - 2002-01-04 20:40 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVCP70.DLL
2018-03-10 16:31 - 1996-01-11 19:00 - 000935632 _____ (Microsoft Corporation) C:\WINDOWS\system\Vb40016.dll
2018-03-10 16:31 - 1996-01-11 19:00 - 000722192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb40032.dll
2018-03-10 16:31 - 1994-11-17 16:00 - 000210944 _____ C:\WINDOWS\SysWOW64\msvcrt10.dll
2018-03-10 16:31 - 1993-05-11 12:00 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system\Vbrun300.dll
2018-03-10 16:31 - 1992-10-20 17:00 - 000356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll
2018-03-10 16:31 - 1991-05-09 18:00 - 000271264 _____ C:\WINDOWS\system\vbrun100.dll
2018-03-10 16:27 - 2018-03-10 16:27 - 000000000 ____D C:\WINDOWS\system32\Intel
2018-03-10 16:26 - 2018-03-24 11:10 - 000000488 ____C C:\WINDOWS\Tasks\Yandex Browser system update.job
2018-03-10 16:26 - 2018-03-23 19:43 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex Browser
2018-03-10 16:26 - 2018-03-14 11:25 - 000000458 ____C C:\WINDOWS\Tasks\Update for Yandex Browser.job
2018-03-10 16:26 - 2018-03-10 17:11 - 000003524 _____ C:\WINDOWS\System32\Tasks\Update for Yandex Browser
2018-03-10 16:26 - 2018-03-10 16:26 - 000003646 _____ C:\WINDOWS\System32\Tasks\Yandex Browser system update
2018-03-10 16:26 - 2018-03-10 16:26 - 000000000 ____D C:\ProgramData\Yandex
2018-03-10 16:26 - 2018-03-10 16:26 - 000000000 ____D C:\Program Files (x86)\Yandex
2018-03-10 16:24 - 2018-03-10 16:24 - 000000000 ____D C:\Users\bobbi\AppData\Local\Yandex
2018-03-10 16:23 - 2018-03-10 16:26 - 000000000 ____D C:\Users\bobbi\AppData\Roaming\Yandex
2018-03-10 16:15 - 2018-03-10 16:15 - 000000000 ____D C:\Users\bobbi\AppData\Local\DBG
2018-03-10 12:07 - 2018-03-10 12:07 - 000000000 ___DC C:\Users\bobbi\Documents\Custom Office Templates
2018-03-10 11:14 - 2018-03-10 11:15 - 000000000 ____D C:\Users\bobbi\AppData\Roaming\Grammarly
2018-03-10 11:14 - 2018-03-10 11:15 - 000000000 ____D C:\Users\bobbi\AppData\Local\SquirrelTemp
2018-03-10 11:14 - 2018-03-10 11:14 - 000002544 ____C C:\Users\bobbi\Desktop\Grammarly.lnk
2018-03-10 11:14 - 2018-03-10 11:14 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grammarly
2018-03-10 11:14 - 2018-03-10 11:14 - 000000000 ____D C:\Users\bobbi\AppData\Local\GrammarlyForWindows
2018-03-09 21:02 - 2018-03-09 21:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-03-09 20:51 - 2018-02-10 01:18 - 000319864 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-03-09 20:51 - 2018-02-10 01:16 - 000739696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-03-09 20:51 - 2018-02-10 01:15 - 001954048 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-03-09 20:51 - 2018-02-10 01:15 - 000471968 ____C (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2018-03-09 20:51 - 2018-02-10 01:14 - 004504464 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-03-09 20:51 - 2018-02-10 01:14 - 002395032 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-03-09 20:51 - 2018-02-10 01:13 - 000373656 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-03-09 20:51 - 2018-02-10 01:12 - 001277848 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-03-09 20:51 - 2018-02-10 01:09 - 000755712 ____C (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-03-09 20:51 - 2018-02-10 01:08 - 003010248 ____C (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-03-09 20:51 - 2018-02-10 01:08 - 000048112 ____C (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2018-03-09 20:51 - 2018-02-10 01:07 - 004506576 ____C (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-03-09 20:51 - 2018-02-10 01:06 - 000494488 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-03-09 20:51 - 2018-02-10 01:04 - 006791984 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-03-09 20:51 - 2018-02-10 01:04 - 001426672 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-03-09 20:51 - 2018-02-10 01:04 - 001254144 ____C (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-03-09 20:51 - 2018-02-10 01:04 - 001170008 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-03-09 20:51 - 2018-02-10 01:04 - 000603920 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-03-09 20:51 - 2018-02-10 01:03 - 000404888 ____C (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2018-03-09 20:51 - 2018-02-10 00:21 - 001615712 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-03-09 20:51 - 2018-02-10 00:17 - 000597160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-03-09 20:51 - 2018-02-10 00:09 - 003485392 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-03-09 20:51 - 2018-02-10 00:06 - 006014688 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-03-09 20:51 - 2018-02-10 00:06 - 004670728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-03-09 20:51 - 2018-02-10 00:06 - 000982528 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-03-09 20:51 - 2018-02-10 00:05 - 001246432 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-03-09 20:51 - 2018-02-10 00:05 - 001149272 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-03-09 20:51 - 2018-02-10 00:05 - 000662208 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-03-09 20:51 - 2018-02-09 23:49 - 000329728 ____C (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-03-09 20:51 - 2018-02-09 23:47 - 017160704 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-03-09 20:51 - 2018-02-09 23:47 - 013704192 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-03-09 20:51 - 2018-02-09 23:46 - 002393600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-03-09 20:51 - 2018-02-09 23:46 - 000169472 ____C (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-03-09 20:51 - 2018-02-09 23:46 - 000018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll
2018-03-09 20:51 - 2018-02-09 23:45 - 007545344 ____C (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-03-09 20:51 - 2018-02-09 23:44 - 001498112 ____C (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-03-09 20:51 - 2018-02-09 23:43 - 006466560 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-03-09 20:51 - 2018-02-09 23:43 - 000394752 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-03-09 20:51 - 2018-02-09 23:42 - 000813568 ____C (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-03-09 20:51 - 2018-02-09 23:42 - 000403968 ____C (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2018-03-09 20:51 - 2018-02-09 23:42 - 000236032 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-03-09 20:51 - 2018-02-09 23:41 - 000815616 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-03-09 20:51 - 2018-02-09 23:41 - 000365568 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-03-09 20:51 - 2018-02-09 23:39 - 002976256 ____C (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-03-09 20:51 - 2018-02-09 23:38 - 004815360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-03-09 20:51 - 2018-02-09 23:38 - 002857984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-03-09 20:51 - 2018-02-09 23:38 - 001167360 ____C (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-03-09 20:51 - 2018-02-09 23:38 - 001057792 ____C (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2018-03-09 20:51 - 2018-02-09 23:38 - 000556544 ____C (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2018-03-09 20:51 - 2018-02-09 23:38 - 000462336 ____C (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-03-09 20:51 - 2018-02-09 23:37 - 004772352 ____C (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2018-03-09 20:51 - 2018-02-09 23:37 - 002784256 ____C (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-03-09 20:51 - 2018-02-09 23:37 - 001488384 ____C (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-03-09 20:51 - 2018-02-09 23:37 - 000456704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2018-03-09 20:51 - 2018-02-09 23:36 - 002464768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-03-09 20:51 - 2018-02-09 23:36 - 000685056 ____C (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-03-09 20:51 - 2018-02-09 23:35 - 004384768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2018-03-09 20:51 - 2018-02-09 23:35 - 000842240 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2018-03-09 20:51 - 2018-02-09 23:34 - 004249600 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-03-09 20:51 - 2018-02-09 23:33 - 001509888 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-03-09 20:51 - 2018-01-01 07:50 - 005905752 ____C (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-03-09 20:51 - 2018-01-01 07:45 - 000398744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2018-03-09 20:51 - 2018-01-01 07:41 - 000559512 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-03-09 20:51 - 2018-01-01 07:39 - 000902416 ____C (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-03-09 20:51 - 2018-01-01 07:39 - 000129432 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-03-09 20:51 - 2018-01-01 07:36 - 000166296 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2018-03-09 20:51 - 2018-01-01 07:26 - 000428952 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-03-09 20:51 - 2018-01-01 07:25 - 000615768 ____C (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2018-03-09 20:51 - 2018-01-01 07:03 - 000123512 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-03-09 20:51 - 2018-01-01 06:34 - 000703568 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-03-09 20:51 - 2018-01-01 06:25 - 000097792 ____C C:\WINDOWS\system32\runexehelper.exe
2018-03-09 20:51 - 2018-01-01 06:23 - 000250368 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-03-09 20:51 - 2018-01-01 06:19 - 000461312 ____C (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-03-09 20:51 - 2018-01-01 06:18 - 000374784 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-03-09 20:51 - 2018-01-01 06:18 - 000261632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2018-03-09 20:51 - 2018-01-01 06:17 - 000542208 ____C (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2018-03-09 20:51 - 2018-01-01 06:15 - 012687872 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-03-09 20:51 - 2018-01-01 06:15 - 000588800 ____C (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2018-03-09 20:51 - 2018-01-01 06:13 - 013657600 ____C (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-03-09 20:51 - 2018-01-01 06:13 - 003121664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-03-09 20:51 - 2018-01-01 06:12 - 002633216 ____C (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-03-09 20:51 - 2018-01-01 06:12 - 001424896 ____C (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-03-09 20:51 - 2018-01-01 06:09 - 000925184 ____C (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-03-09 20:51 - 2018-01-01 06:08 - 000424448 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2018-03-09 20:50 - 2018-02-10 01:16 - 002406456 ____C (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-03-09 20:50 - 2018-02-10 01:14 - 001002592 ____C (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-03-09 20:50 - 2018-02-10 01:11 - 000711432 ____C (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-03-09 20:50 - 2018-02-10 01:10 - 002447768 ____C (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-03-09 20:50 - 2018-02-10 01:09 - 003904296 ____C (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-03-09 20:50 - 2018-02-10 01:09 - 000525208 ____C (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-03-09 20:50 - 2018-02-10 01:07 - 000705944 ____C (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-03-09 20:50 - 2018-02-10 01:04 - 000374032 ____C (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2018-03-09 20:50 - 2018-02-10 01:03 - 001619808 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2018-03-09 20:50 - 2018-02-10 00:15 - 001145624 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-03-09 20:50 - 2018-02-10 00:09 - 002338776 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-03-09 20:50 - 2018-02-10 00:08 - 000592792 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-03-09 20:50 - 2018-02-09 23:50 - 001313792 ____C (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-03-09 20:50 - 2018-02-09 23:48 - 002890240 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-03-09 20:50 - 2018-02-09 23:46 - 001008640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-03-09 20:50 - 2018-02-09 23:45 - 000115200 ____C (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2018-03-09 20:50 - 2018-02-09 23:43 - 000570368 ____C (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-03-09 20:50 - 2018-02-09 23:42 - 001425408 ____C (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-03-09 20:50 - 2018-02-09 23:42 - 000098304 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2018-03-09 20:50 - 2018-02-09 23:41 - 001495552 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-03-09 20:50 - 2018-02-09 23:41 - 000721408 ____C (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-03-09 20:50 - 2018-02-09 23:40 - 003405824 ____C (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-03-09 20:50 - 2018-02-09 23:40 - 000601088 ____C (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2018-03-09 20:50 - 2018-02-09 23:39 - 004592640 ____C (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-03-09 20:50 - 2018-02-09 23:39 - 002741248 ____C (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2018-03-09 20:50 - 2018-02-09 23:39 - 002209280 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-03-09 20:50 - 2018-02-09 23:38 - 003169280 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-03-09 20:50 - 2018-02-09 23:38 - 001353728 ____C (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2018-03-09 20:50 - 2018-02-09 23:37 - 003578368 ____C (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2018-03-09 20:50 - 2018-02-09 23:37 - 001822208 ____C (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-03-09 20:50 - 2018-02-09 23:36 - 002859520 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2018-03-09 20:50 - 2018-02-09 23:36 - 001739264 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-03-09 20:50 - 2018-02-09 23:36 - 001559552 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-03-09 20:50 - 2018-02-09 23:36 - 001230848 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2018-03-09 20:50 - 2018-02-09 23:33 - 001570816 ____C (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2018-03-09 20:50 - 2018-02-08 22:35 - 004959688 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2018-03-09 20:50 - 2018-01-01 07:50 - 000780464 ____C (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-03-09 20:50 - 2018-01-01 07:42 - 000184984 ____C (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-03-09 20:50 - 2018-01-01 07:03 - 000650328 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-03-09 20:50 - 2018-01-01 06:19 - 000334848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-03-09 20:50 - 2018-01-01 06:11 - 000880640 ____C (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-03-09 20:50 - 2018-01-01 06:05 - 002510848 ____C (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-03-09 20:50 - 2018-01-01 06:05 - 001160704 ____C (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-03-09 20:49 - 2018-02-10 01:21 - 000479912 ____C (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2018-03-09 20:49 - 2018-02-10 01:20 - 000599448 ____C (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-03-09 20:49 - 2018-02-10 01:19 - 001133888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-03-09 20:49 - 2018-02-10 01:18 - 001193192 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2018-03-09 20:49 - 2018-02-10 01:18 - 000098272 ____C (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2018-03-09 20:49 - 2018-02-10 01:18 - 000022400 ____C (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2018-03-09 20:49 - 2018-02-10 01:13 - 001416392 ____C (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-03-09 20:49 - 2018-02-10 01:13 - 000535960 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2018-03-09 20:49 - 2018-02-10 01:12 - 004537040 ____C (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2018-03-09 20:49 - 2018-02-10 01:12 - 001313016 ____C (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2018-03-09 20:49 - 2018-02-10 01:11 - 001029528 ____C (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2018-03-09 20:49 - 2018-02-10 01:10 - 000614160 ____C (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-03-09 20:49 - 2018-02-10 01:10 - 000246168 ____C (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-03-09 20:49 - 2018-02-10 01:10 - 000154520 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2018-03-09 20:49 - 2018-02-10 01:09 - 000491264 ____C (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2018-03-09 20:49 - 2018-02-10 01:08 - 000687552 ____C (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2018-03-09 20:49 - 2018-02-10 01:08 - 000398824 ____C (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2018-03-09 20:49 - 2018-02-10 01:08 - 000096200 ____C (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2018-03-09 20:49 - 2018-02-10 01:07 - 000436632 ____C (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-03-09 20:49 - 2018-02-10 01:06 - 004486904 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-03-09 20:49 - 2018-02-10 01:06 - 000824896 ____C (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2018-03-09 20:49 - 2018-02-10 01:06 - 000727448 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2018-03-09 20:49 - 2018-02-10 01:06 - 000594048 ____C (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-03-09 20:49 - 2018-02-10 01:06 - 000100248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2018-03-09 20:49 - 2018-02-10 01:06 - 000087384 ____C (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2018-03-09 20:49 - 2018-02-10 01:05 - 000688064 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-03-09 20:49 - 2018-02-10 01:05 - 000413888 ____C (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-03-09 20:49 - 2018-02-10 01:05 - 000070856 ____C (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2018-03-09 20:49 - 2018-02-10 01:04 - 001430760 ____C (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2018-03-09 20:49 - 2018-02-10 01:04 - 000614296 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2018-03-09 20:49 - 2018-02-10 01:04 - 000339872 ____C (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2018-03-09 20:49 - 2018-02-10 01:04 - 000260896 ____C (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-03-09 20:49 - 2018-02-10 01:04 - 000212880 ____C (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-03-09 20:49 - 2018-02-10 01:03 - 000849304 ____C (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-03-09 20:49 - 2018-02-10 01:03 - 000722616 ____C (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2018-03-09 20:49 - 2018-02-10 01:03 - 000706600 ____C (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2018-03-09 20:49 - 2018-02-10 01:03 - 000098712 ____C (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2018-03-09 20:49 - 2018-02-10 01:02 - 002773400 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2018-03-09 20:49 - 2018-02-10 01:02 - 001103768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-03-09 20:49 - 2018-02-10 01:02 - 000628632 ____C (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2018-03-09 20:49 - 2018-02-10 01:02 - 000617304 ____C (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2018-03-09 20:49 - 2018-02-10 00:18 - 001384288 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-03-09 20:49 - 2018-02-10 00:17 - 002255112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-03-09 20:49 - 2018-02-10 00:17 - 000542856 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-03-09 20:49 - 2018-02-10 00:12 - 004382032 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2018-03-09 20:49 - 2018-02-10 00:11 - 001250528 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2018-03-09 20:49 - 2018-02-10 00:10 - 000422592 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2018-03-09 20:49 - 2018-02-10 00:09 - 001123456 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-03-09 20:49 - 2018-02-10 00:09 - 000559976 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2018-03-09 20:49 - 2018-02-10 00:09 - 000354200 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2018-03-09 20:49 - 2018-02-10 00:08 - 003980720 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-03-09 20:49 - 2018-02-10 00:07 - 000543920 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-03-09 20:49 - 2018-02-10 00:07 - 000527864 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2018-03-09 20:49 - 2018-02-10 00:07 - 000123808 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2018-03-09 20:49 - 2018-02-10 00:07 - 000089504 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2018-03-09 20:49 - 2018-02-10 00:07 - 000083216 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll
2018-03-09 20:49 - 2018-02-10 00:07 - 000061024 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000718232 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000654456 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000551672 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000386424 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000193248 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000129184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000079256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2018-03-09 20:49 - 2018-02-10 00:05 - 000077552 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
2018-03-09 20:49 - 2018-02-10 00:05 - 000074992 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2018-03-09 20:49 - 2018-02-10 00:03 - 000505160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2018-03-09 20:49 - 2018-02-09 23:50 - 000849920 ____C (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-03-09 20:49 - 2018-02-09 23:49 - 001664512 ____C (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2018-03-09 20:49 - 2018-02-09 23:49 - 000385536 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2018-03-09 20:49 - 2018-02-09 23:49 - 000232960 ____C (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe
2018-03-09 20:49 - 2018-02-09 23:48 - 000033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-03-09 20:49 - 2018-02-09 23:48 - 000025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2018-03-09 20:49 - 2018-02-09 23:47 - 000331264 ____C (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-03-09 20:49 - 2018-02-09 23:47 - 000201216 ____C (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-03-09 20:49 - 2018-02-09 23:47 - 000143872 ____C (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-03-09 20:49 - 2018-02-09 23:47 - 000043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-03-09 20:49 - 2018-02-09 23:46 - 001470976 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2018-03-09 20:49 - 2018-02-09 23:46 - 000225792 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2018-03-09 20:49 - 2018-02-09 23:46 - 000199168 ____C (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2018-03-09 20:49 - 2018-02-09 23:46 - 000173568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-03-09 20:49 - 2018-02-09 23:46 - 000135680 ____C (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2018-03-09 20:49 - 2018-02-09 23:46 - 000082432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2018-03-09 20:49 - 2018-02-09 23:46 - 000026112 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2018-03-09 20:49 - 2018-02-09 23:45 - 000306688 ____C (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-03-09 20:49 - 2018-02-09 23:45 - 000288768 ____C (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2018-03-09 20:49 - 2018-02-09 23:45 - 000093696 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2018-03-09 20:49 - 2018-02-09 23:45 - 000079872 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2018-03-09 20:49 - 2018-02-09 23:45 - 000043008 ____C (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2018-03-09 20:49 - 2018-02-09 23:45 - 000016384 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\EnterpriseAppMgmtClient.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000800768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2018-03-09 20:49 - 2018-02-09 23:44 - 000503296 ____C (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_User.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000427008 ____C (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000388608 ____C (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000336896 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000302592 ____C (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000276992 ____C (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000276480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000208384 ____C (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2018-03-09 20:49 - 2018-02-09 23:44 - 000059392 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 003756032 ____C (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000580608 ____C (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000566272 ____C (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000456704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000391168 ____C (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000311808 ____C (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000268288 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000247296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000181248 ____C (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000147456 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000110080 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000084480 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2018-03-09 20:49 - 2018-02-09 23:43 - 000013312 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 001216000 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 001113600 ____C (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2018-03-09 20:49 - 2018-02-09 23:42 - 000975872 ____C (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000950784 ____C (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000837632 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000792064 ____C (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000731136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2018-03-09 20:49 - 2018-02-09 23:42 - 000634880 ____C (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000397824 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000286720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000270336 ____C (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000234496 ____C (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000233984 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000228352 ____C (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2018-03-09 20:49 - 2018-02-09 23:42 - 000225280 ____C (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2018-03-09 20:49 - 2018-02-09 23:42 - 000160768 ____C (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000160256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000130048 ____C (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000078336 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000035328 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2018-03-09 20:49 - 2018-02-09 23:42 - 000024064 ____C (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe
2018-03-09 20:49 - 2018-02-09 23:41 - 000859648 ____C (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2018-03-09 20:49 - 2018-02-09 23:41 - 000820224 ____C (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000504832 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000466432 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000451072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000401408 ____C (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000377856 ____C (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2018-03-09 20:49 - 2018-02-09 23:41 - 000288768 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000255488 ____C (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000221184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000124928 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2018-03-09 20:49 - 2018-02-09 23:41 - 000063488 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 004498432 ____C (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-03-09 20:49 - 2018-02-09 23:40 - 004113408 ____C (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 003367936 ____C (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 002873344 ____C (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 001234432 ____C (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 001002496 ____C (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000940544 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000939520 ____C (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000930816 ____C (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000886784 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2018-03-09 20:49 - 2018-02-09 23:40 - 000856576 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000756736 ____C (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000691200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000526336 ____C (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000508416 ____C (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2018-03-09 20:49 - 2018-02-09 23:40 - 000499200 ____C (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000463360 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2018-03-09 20:49 - 2018-02-09 23:40 - 000421376 ____C (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000366080 ____C (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000343040 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000298496 ____C (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000232960 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000195072 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2018-03-09 20:49 - 2018-02-09 23:40 - 000177152 ____C (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 005500928 ____C (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 002677760 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 002490880 ____C (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 001669120 ____C (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000908800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000721920 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000680960 ____C (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000658432 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000648704 ____C (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000621056 ____C (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000462848 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000447488 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000315904 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
2018-03-09 20:49 - 2018-02-09 23:39 - 000157696 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2018-03-09 20:49 - 2018-02-09 23:39 - 000020992 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
2018-03-09 20:49 - 2018-02-09 23:38 - 006722560 ____C (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2018-03-09 20:49 - 2018-02-09 23:38 - 003125760 ____C (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 002184192 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 002082304 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-03-09 20:49 - 2018-02-09 23:38 - 001968640 ____C (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 001597952 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 001228800 ____C (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 001166336 ____C (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000982016 ____C (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2018-03-09 20:49 - 2018-02-09 23:38 - 000939520 ____C (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000885248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000863744 ____C (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000755712 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2018-03-09 20:49 - 2018-02-09 23:38 - 000699904 ____C (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000668160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000653312 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000598528 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000524800 ____C (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000509440 ____C (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000506880 ____C (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000401920 ____C (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-03-09 20:49 - 2018-02-09 23:38 - 000324608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2018-03-09 20:49 - 2018-02-09 23:37 - 003419136 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-03-09 20:49 - 2018-02-09 23:37 - 003287040 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 002523648 ____C (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 000965632 ____C (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 000862208 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 000417792 ____C (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 000365568 ____C (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 000308224 ____C (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2018-03-09 20:49 - 2018-02-09 23:37 - 000199680 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2018-03-09 20:49 - 2018-02-09 23:37 - 000198656 ____C (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 002462208 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 001759744 ____C (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 001342464 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000915968 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000695296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000599552 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000576512 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000559104 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000403968 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000383488 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2018-03-09 20:49 - 2018-02-09 23:36 - 000141824 ____C (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 005388800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 002814976 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 002413568 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 002349568 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 002013184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-03-09 20:49 - 2018-02-09 23:35 - 001474560 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000943104 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000941568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000918528 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000862208 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000826880 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2018-03-09 20:49 - 2018-02-09 23:35 - 000796160 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000667136 ____C (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000455680 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000433664 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000402944 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2018-03-09 20:49 - 2018-02-09 23:35 - 000329728 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2018-03-09 20:49 - 2018-02-09 23:34 - 006532096 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2018-03-09 20:49 - 2018-02-09 23:34 - 002983936 ____C (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2018-03-09 20:49 - 2018-02-09 23:34 - 000624640 ____C (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2018-03-09 20:49 - 2018-02-09 23:34 - 000464384 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2018-03-09 20:49 - 2018-02-09 23:34 - 000433152 ____C (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2018-03-09 20:49 - 2018-02-09 23:34 - 000111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 001936384 ____C (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2018-03-09 20:49 - 2018-02-09 23:33 - 001661440 ____C (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 001557504 ____C (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2018-03-09 20:49 - 2018-02-09 23:33 - 000621568 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 000620544 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 000604672 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 000482816 ____C (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 000341504 ____C (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 000266752 ____C (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2018-03-09 20:49 - 2018-02-09 23:33 - 000217088 ____C (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2018-03-09 20:49 - 2018-02-09 23:33 - 000093696 ____C (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2018-03-09 20:49 - 2018-02-09 23:32 - 002427904 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2018-03-09 20:49 - 2018-02-09 23:32 - 000681472 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2018-03-09 20:49 - 2018-02-09 23:32 - 000392704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2018-03-09 20:49 - 2018-02-09 23:32 - 000073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2018-03-09 20:49 - 2018-02-09 23:32 - 000056832 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll
2018-03-09 20:49 - 2018-02-09 23:31 - 001488896 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2018-03-09 20:49 - 2018-02-09 23:31 - 001159680 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2018-03-09 20:49 - 2018-02-09 23:31 - 000301056 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll
2018-03-09 20:49 - 2018-02-09 23:31 - 000190464 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2018-03-09 20:49 - 2018-02-09 23:31 - 000078848 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2018-03-09 20:49 - 2018-02-09 21:59 - 000804240 ____C C:\WINDOWS\SysWOW64\locale.nls
2018-03-09 20:49 - 2018-02-09 21:59 - 000804240 ____C C:\WINDOWS\system32\locale.nls
2018-03-09 20:49 - 2018-02-08 22:35 - 001234888 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2018-03-09 20:49 - 2018-02-08 22:35 - 001002952 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2018-03-09 20:49 - 2018-02-08 22:35 - 000892872 ____C (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2018-03-09 20:49 - 2018-02-08 22:35 - 000065992 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2018-03-09 20:49 - 2018-02-01 22:36 - 003903944 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2018-03-09 20:49 - 2018-02-01 22:36 - 000921032 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2018-03-09 20:49 - 2018-02-01 22:36 - 000854976 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2018-03-09 20:49 - 2018-02-01 22:36 - 000649672 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2018-03-09 20:49 - 2018-02-01 22:36 - 000054720 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2018-03-09 20:49 - 2018-01-01 07:52 - 000066712 ____C (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2018-03-09 20:49 - 2018-01-01 07:51 - 000191816 ____C (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-03-09 20:49 - 2018-01-01 07:51 - 000059800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2018-03-09 20:49 - 2018-01-01 07:49 - 000292376 ____C (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2018-03-09 20:49 - 2018-01-01 07:48 - 000382360 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2018-03-09 20:49 - 2018-01-01 07:47 - 000649304 ____C (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2018-03-09 20:49 - 2018-01-01 07:46 - 000898216 ____C (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-03-09 20:49 - 2018-01-01 07:43 - 000367336 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2018-03-09 20:49 - 2018-01-01 07:43 - 000062872 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fsdepends.sys
2018-03-09 20:49 - 2018-01-01 07:41 - 000549552 ____C (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2018-03-09 20:49 - 2018-01-01 07:39 - 000508264 ____C (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-03-09 20:49 - 2018-01-01 07:38 - 000038808 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys
2018-03-09 20:49 - 2018-01-01 07:37 - 000461720 ____C (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2018-03-09 20:49 - 2018-01-01 07:36 - 000113560 ____C (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2018-03-09 20:49 - 2018-01-01 07:36 - 000057752 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbios.sys
2018-03-09 20:49 - 2018-01-01 07:34 - 001336344 ____C (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2018-03-09 20:49 - 2018-01-01 07:27 - 000163736 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-03-09 20:49 - 2018-01-01 07:26 - 000081304 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2018-03-09 20:49 - 2018-01-01 07:06 - 000311192 ____C (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2018-03-09 20:49 - 2018-01-01 07:03 - 000566664 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-03-09 20:49 - 2018-01-01 06:49 - 000481464 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2018-03-09 20:49 - 2018-01-01 06:49 - 000258808 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2018-03-09 20:49 - 2018-01-01 06:46 - 000289816 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2018-03-09 20:49 - 2018-01-01 06:45 - 000450928 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2018-03-09 20:49 - 2018-01-01 06:42 - 001003152 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2018-03-09 20:49 - 2018-01-01 06:25 - 000475648 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2018-03-09 20:49 - 2018-01-01 06:24 - 000240640 ____C (Microsoft Corporation) C:\WINDOWS\system32\AboutSettingsHandlers.dll
2018-03-09 20:49 - 2018-01-01 06:24 - 000202240 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-03-09 20:49 - 2018-01-01 06:24 - 000096256 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2018-03-09 20:49 - 2018-01-01 06:23 - 000561152 ____C (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2018-03-09 20:49 - 2018-01-01 06:23 - 000121344 ____C (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2018-03-09 20:49 - 2018-01-01 06:23 - 000080384 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmclr.sys
2018-03-09 20:49 - 2018-01-01 06:22 - 000031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2018-03-09 20:49 - 2018-01-01 06:22 - 000025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2018-03-09 20:49 - 2018-01-01 06:22 - 000017408 ____C (Microsoft Corporation) C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll
2018-03-09 20:49 - 2018-01-01 06:21 - 000133632 ____C (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2018-03-09 20:49 - 2018-01-01 06:21 - 000097280 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2018-03-09 20:49 - 2018-01-01 06:21 - 000097280 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\raspptp.sys
2018-03-09 20:49 - 2018-01-01 06:21 - 000080896 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2018-03-09 20:49 - 2018-01-01 06:21 - 000062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2018-03-09 20:49 - 2018-01-01 06:20 - 000215552 ____C (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000212992 ____C (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000204288 ____C (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000186368 ____C (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000175616 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000134656 ____C (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000133632 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000104960 ____C (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2018-03-09 20:49 - 2018-01-01 06:20 - 000082432 ____C (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000795136 ____C (Microsoft Corporation) C:\WINDOWS\system32\NaturalAuth.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000430080 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000416768 ____C (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2018-03-09 20:49 - 2018-01-01 06:19 - 000340480 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2018-03-09 20:49 - 2018-01-01 06:19 - 000316928 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2018-03-09 20:49 - 2018-01-01 06:19 - 000188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000174592 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000149504 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000097792 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoert2.dll
2018-03-09 20:49 - 2018-01-01 06:19 - 000073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2018-03-09 20:49 - 2018-01-01 06:18 - 000748032 ____C (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000699904 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000588800 ____C (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000465920 ____C (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000436224 ____C (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000432640 ____C (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000427008 ____C (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000425984 ____C (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000380928 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\EncDec.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000369664 ____C (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000259072 ____C (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000210944 ____C (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2018-03-09 20:49 - 2018-01-01 06:18 - 000082944 ____C (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 001485312 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 000791552 ____C (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 000616960 ____C (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 000555520 ____C (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 000423936 ____C (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 000341504 ____C (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2018-03-09 20:49 - 2018-01-01 06:17 - 000112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
2018-03-09 20:49 - 2018-01-01 06:16 - 000966656 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2018-03-09 20:49 - 2018-01-01 06:16 - 000956928 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-03-09 20:49 - 2018-01-01 06:16 - 000624128 ____C (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2018-03-09 20:49 - 2018-01-01 06:16 - 000235008 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2018-03-09 20:49 - 2018-01-01 06:15 - 001657856 ____C (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2018-03-09 20:49 - 2018-01-01 06:15 - 001245184 ____C (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2018-03-09 20:49 - 2018-01-01 06:15 - 000970240 ____C (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2018-03-09 20:49 - 2018-01-01 06:15 - 000951808 ____C (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2018-03-09 20:49 - 2018-01-01 06:15 - 000434176 ____C (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2018-03-09 20:49 - 2018-01-01 06:15 - 000258560 ____C (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2018-03-09 20:49 - 2018-01-01 06:14 - 001097728 ____C (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-03-09 20:49 - 2018-01-01 06:14 - 000985600 ____C (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2018-03-09 20:49 - 2018-01-01 06:14 - 000870912 ____C (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-03-09 20:49 - 2018-01-01 06:13 - 000897024 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2018-03-09 20:49 - 2018-01-01 06:12 - 001573376 ____C (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2018-03-09 20:49 - 2018-01-01 06:12 - 000760320 ____C (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2018-03-09 20:49 - 2018-01-01 06:11 - 001816576 ____C (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-03-09 20:49 - 2018-01-01 06:11 - 001343488 ____C (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2018-03-09 20:49 - 2018-01-01 06:11 - 000715776 ____C (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2018-03-09 20:49 - 2018-01-01 06:10 - 002528256 ____C (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2018-03-09 20:49 - 2018-01-01 06:10 - 000012800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscproxystub.dll
2018-03-09 20:49 - 2018-01-01 06:08 - 000505344 ____C (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2018-03-09 20:49 - 2018-01-01 06:06 - 000018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2018-03-09 20:48 - 2018-02-09 23:47 - 000055808 ____C (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2018-03-09 20:48 - 2018-02-09 23:47 - 000033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2018-03-09 20:48 - 2018-02-09 23:47 - 000002560 ____C (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-03-09 20:48 - 2018-02-09 23:46 - 000004608 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2018-03-09 20:48 - 2018-02-09 23:45 - 000288256 ____C (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2018-03-09 20:48 - 2018-02-09 23:44 - 000048640 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
2018-03-09 20:48 - 2018-02-09 23:44 - 000002560 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-03-09 20:48 - 2018-02-09 23:42 - 000184832 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2018-03-09 20:48 - 2018-02-09 23:38 - 000174592 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
2018-03-09 20:48 - 2018-02-09 23:35 - 000332288 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll
2018-03-09 20:48 - 2018-02-09 23:33 - 000125952 ____C (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2018-03-09 20:48 - 2018-01-01 06:24 - 000038912 ____C (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2018-03-09 20:48 - 2018-01-01 06:23 - 000047104 ____C (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2018-03-09 20:48 - 2018-01-01 06:19 - 000142848 ____C (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2018-03-09 20:42 - 2018-03-09 20:42 - 000000000 ____D C:\Users\bobbi\AppData\Roaming\WildTangent
2018-03-09 20:40 - 2018-03-19 22:34 - 000000000 ____D C:\Users\bobbi\AppData\Local\PlaceholderTileLogoFolder
2018-03-09 07:52 - 2018-03-09 07:58 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-03-09 07:52 - 2018-03-09 07:53 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-03-09 07:50 - 2018-03-09 07:50 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-03-09 07:48 - 2018-03-09 07:48 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-03-09 07:48 - 2018-03-09 07:48 - 000000000 ____D C:\Program Files\MSBuild
2018-03-09 07:48 - 2018-03-09 07:48 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-03-09 07:48 - 2018-03-09 07:48 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-03-09 07:47 - 2017-09-28 18:50 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-03-09 07:47 - 2017-09-28 18:50 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-03-09 07:47 - 2017-09-28 18:50 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-03-09 07:47 - 2017-09-22 21:19 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-03-09 07:47 - 2017-09-22 21:19 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-03-09 07:47 - 2017-09-22 21:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-03-09 06:53 - 2018-03-09 06:53 - 000000000 ___HD C:\Users\bobbi\MicrosoftEdgeBackups
2018-03-09 06:53 - 2018-03-09 06:53 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-03-09 06:52 - 2018-03-15 04:05 - 000000000 ___RD C:\Users\bobbi\3D Objects
2018-03-09 06:52 - 2018-03-09 06:54 - 000000000 ____D C:\Users\bobbi\AppData\Local\ConnectedDevicesPlatform
2018-03-09 06:51 - 2018-03-09 06:51 - 000000020 ___SH C:\Users\bobbi\ntuser.ini
2018-03-09 06:25 - 2018-03-09 06:25 - 000000000 ____D C:\ProgramData\USOShared
2018-03-09 06:22 - 2018-03-24 02:44 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
2018-03-09 06:22 - 2018-03-23 20:42 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-03-09 06:22 - 2018-03-15 02:58 - 000003256 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForbobbi
2018-03-09 06:22 - 2018-03-09 06:22 - 000002860 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3438408323-2851843722-3947246619-1001
2018-03-09 06:22 - 2018-03-09 06:22 - 000002252 _____ C:\WINDOWS\System32\Tasks\HPJumpStartProvider
2018-03-09 06:22 - 2018-03-09 06:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\WiseCleaner
2018-03-09 06:22 - 2018-03-09 06:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2018-03-09 06:22 - 2018-03-09 06:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2018-03-09 06:21 - 2018-03-09 06:22 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2018-03-09 06:21 - 2018-03-09 06:22 - 000007623 _____ C:\WINDOWS\diagerr.xml
2018-03-09 06:17 - 2018-03-09 06:17 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-03-09 06:15 - 2018-03-23 05:25 - 000000000 ____D C:\Users\bobbi
2018-03-09 06:10 - 2018-03-09 06:10 - 000000000 ____D C:\Program Files\Common Files\Intel
2018-03-09 06:10 - 2018-03-09 06:10 - 000000000 ____D C:\Program Files (x86)\Cisco
2018-03-09 06:10 - 2017-09-29 08:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-03-09 06:09 - 2016-06-21 04:05 - 000095232 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2018-03-09 06:09 - 2016-06-21 04:05 - 000091136 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-03-09 06:07 - 2018-03-24 10:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-03-09 04:43 - 2018-01-23 13:58 - 000548000 ____C (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-03-09 04:36 - 2018-03-09 04:36 - 000000726 ____C C:\Users\bobbi\Desktop\Windows 10 Update Assistant.lnk
2018-03-07 23:19 - 2018-03-07 23:19 - 000000000 ___DC C:\WINDOWS\UpdateAssistant
2018-03-05 20:47 - 2018-03-05 23:59 - 000000000 ___DC C:\ESD
2018-03-05 07:46 - 2018-03-09 04:51 - 000000000 ___DC C:\Windows10Upgrade
2018-03-05 07:46 - 2018-03-09 04:36 - 000000738 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 Update Assistant.lnk
2018-03-05 00:17 - 2018-03-05 00:17 - 000000000 ___DC C:\Users\bobbi\AppData\Local\CEF
2018-03-03 19:53 - 2018-03-09 04:51 - 000000036 ____C C:\WINDOWS\progress.ini
2018-03-03 16:58 - 2018-03-23 19:38 - 000000000 ___DC C:\Program Files\CCleaner
2018-03-03 16:57 - 2018-03-03 17:11 - 000000000 ___DC C:\Program Files (x86)\Google
2018-03-03 16:57 - 2018-03-03 16:58 - 000000000 ___DC C:\Users\bobbi\AppData\Local\Google
2018-03-03 16:24 - 2018-03-15 04:03 - 000000364 ____C C:\WINDOWS\Tasks\HPCeeScheduleForbobbi.job
2018-03-02 03:56 - 2016-07-13 20:40 - 009891328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2018-03-02 03:50 - 2018-01-10 21:45 - 000402544 _____ (Intel Corporation) C:\WINDOWS\system32\ibtproppage.dll
2018-03-02 03:50 - 2018-01-10 21:45 - 000117392 _____ C:\WINDOWS\system32\Drivers\ibtfw.dat
2018-03-02 03:29 - 2010-12-13 05:37 - 000772976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LcProxy2.ax
2018-03-02 03:28 - 2010-12-13 05:37 - 000514416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LcProxy2.ax
2018-03-02 03:28 - 2010-12-13 05:37 - 000036720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nx6000.sys
2018-03-02 03:27 - 2010-12-13 05:37 - 000707952 _____ (Microsoft Corporation) C:\WINDOWS\system32\LCCoin36.dll
2018-03-02 03:27 - 2010-12-13 05:37 - 000078704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nx6000res.dll
2018-03-02 03:27 - 2010-12-13 05:37 - 000078704 _____ (Microsoft Corporation) C:\WINDOWS\system32\nx6000res.dll
2018-03-02 02:52 - 2015-06-17 14:44 - 001804696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdfcoinstaller01011.dll
2018-03-02 02:52 - 2015-06-17 14:40 - 000037112 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\Drivers\HpqKbFiltr64.sys
2018-02-27 15:39 - 2018-03-09 07:58 - 000000000 ___DC C:\WINDOWS\SysWOW64\BestPractices
2018-02-27 15:39 - 2018-03-09 07:53 - 000000000 ___DC C:\WINDOWS\system32\BestPractices
2018-02-27 15:30 - 2018-03-03 02:16 - 000011020 ___HC C:\Users\bobbi\AppData\Local\IconCache.db.backup
2018-02-27 00:36 - 2018-03-05 00:07 - 000000000 ___DC C:\Users\bobbi\AppData\Local\Hewlett-Packard
2018-02-26 23:12 - 2018-03-09 02:06 - 000000000 ___DC C:\Program Files\rempl
2018-02-26 23:10 - 2018-03-14 12:07 - 000000000 ___DC C:\WINDOWS\system32\MRT
2018-02-26 23:09 - 2018-03-23 18:35 - 130364688 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-02-26 23:09 - 2018-03-23 18:34 - 130364688 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-02-26 23:09 - 2018-01-18 02:05 - 000108584 ____C (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2018-02-26 22:40 - 2018-03-09 07:58 - 000000000 ___DC C:\Program Files\UNP
2018-02-26 22:33 - 2018-02-26 22:33 - 000000000 ___DC C:\Users\bobbi\AppData\Local\NetworkTiles
2018-02-26 22:27 - 2018-02-27 00:32 - 000000000 ___DC C:\Users\bobbi\AppData\Local\MicrosoftEdge
2018-02-26 22:26 - 2018-03-24 02:47 - 000000000 __RDC C:\Users\bobbi\OneDrive
2018-02-26 22:26 - 2018-03-06 23:54 - 000002374 ____C C:\Users\bobbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-02-26 22:26 - 2018-02-26 22:26 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Macromedia
2018-02-26 22:25 - 2018-02-26 22:25 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\HP
2018-02-26 22:24 - 2018-02-26 22:24 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Hewlett-Packard
2018-02-26 22:23 - 2018-02-27 14:57 - 000000000 ___DC C:\Users\bobbi\AppData\Local\Comms
2018-02-26 22:22 - 2018-02-26 22:22 - 000000000 ___DC C:\Users\bobbi\AppData\Local\Publishers
2018-02-26 22:20 - 2018-02-26 22:20 - 000000000 ___DC C:\Users\bobbi\AppData\Local\ActiveSync
2018-02-26 22:19 - 2018-03-16 20:15 - 000000000 ___DC C:\Users\bobbi\AppData\Local\VirtualStore
2018-02-26 22:18 - 2018-03-23 22:23 - 000000000 ___DC C:\Users\bobbi\AppData\Local\Packages
2018-02-26 22:18 - 2018-03-15 20:39 - 000000000 _SHDC C:\Users\bobbi\IntelGraphicsProfiles
2018-02-26 22:18 - 2018-03-09 06:52 - 000000000 ___DC C:\Users\bobbi\AppData\Local\TileDataLayer
2018-02-26 22:18 - 2018-02-26 22:18 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Synaptics
2018-02-26 22:18 - 2018-02-26 22:18 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Intel
2018-02-26 22:18 - 2018-02-26 22:18 - 000000000 ___DC C:\Users\bobbi\AppData\Roaming\Adobe
2018-02-26 22:16 - 2018-02-26 22:08 - 000000000 ___DC C:\Users\bobbi\Documents\hp.system.package.metadata
2018-02-26 22:16 - 2018-02-26 22:08 - 000000000 ___DC C:\Users\bobbi\Documents\hp.applications.package.appdata
2018-02-26 22:14 - 2018-02-26 22:14 - 000000000 SHDCL C:\Documents and Settings
2018-02-26 22:13 - 2018-03-09 06:20 - 000022840 ____C C:\WINDOWS\system32\emptyregdb.dat
2018-02-26 22:08 - 2018-02-26 22:08 - 000000000 ___DC C:\Users\Default\Documents\hp.system.package.metadata
2018-02-26 22:08 - 2018-02-26 22:08 - 000000000 ___DC C:\Users\Default\Documents\hp.applications.package.appdata
2018-02-26 22:08 - 2018-02-26 22:08 - 000000000 ___DC C:\Users\Default User\Documents\hp.system.package.metadata
2018-02-26 22:08 - 2018-02-26 22:08 - 000000000 ___DC C:\Users\Default User\Documents\hp.applications.package.appdata
2018-02-26 21:53 - 2018-03-24 02:45 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-02-26 21:53 - 2018-03-15 20:54 - 000000000 ___DC C:\Intel
2018-02-26 21:53 - 2018-03-09 07:53 - 000000000 ___DC C:\WINDOWS\system32\SRSLabs
2018-02-26 21:53 - 2018-03-09 07:52 - 000000000 ___DC C:\Program Files\Realtek
2018-02-26 21:53 - 2018-03-09 06:11 - 000013730 ____C C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2018-02-26 21:53 - 2018-03-09 06:11 - 000001851 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2018-02-26 21:53 - 2018-03-09 06:11 - 000000000 ___DC C:\WINDOWS\SysWOW64\sda
2018-02-26 21:53 - 2018-03-09 06:11 - 000000000 ___DC C:\WINDOWS\SysWOW64\RTCOM
2018-02-26 21:53 - 2018-03-09 06:08 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2018-02-26 21:53 - 2018-02-26 21:53 - 000000000 ___DC C:\ProgramData\SRS Labs
2018-02-26 21:53 - 2018-02-26 21:53 - 000000000 ____C C:\WINDOWS\system32\GfxValDisplayLog.bin
2018-02-26 21:53 - 2018-02-26 21:53 - 000000000 ____C C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2018-02-26 21:53 - 2018-02-26 21:53 - 000000000 ____C C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2018-02-26 21:52 - 2018-03-09 06:10 - 000000000 ___DC C:\Program Files (x86)\Intel
2018-02-26 21:52 - 2018-03-09 06:09 - 000000000 ___DC C:\Program Files\Intel
2018-02-26 21:52 - 2018-02-26 21:52 - 000000000 ____C C:\WINDOWS\system32\Drivers\Msft_User_esif_umdf2_02_00_00.Wdf
2018-02-26 21:52 - 2018-02-26 21:52 - 000000000 ____C C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2018-02-26 21:52 - 2018-02-26 21:52 - 000000000 ____C C:\WINDOWS\system32\Drivers\Msft_Kernel_esif_lf_01011.Wdf
2018-02-26 21:12 - 2018-02-26 21:12 - 000000000 ____C C:\Recovery.txt
2018-02-26 21:12 - 2016-12-03 08:39 - 000000000 ____C C:\WINDOWS\system32\Drivers\103C_HP_cNB_Stream Laptop 11-y0XX_Y5335KV_0U_Q5CD64841D9_E5CD6170CPK DPS_4A_I82A9_SHP_V04.20_BF.10_T160902_W1101-0_L409_M4002_J31_7Intel_86C4_91.60_#161203_N8086095A_(X7V31UA#ABA)_XMOBILE_CN10_Z.MRK
2018-02-26 21:06 - 2018-03-21 22:13 - 000000000 ___DC C:\Program Files (x86)\HP
2018-02-26 21:06 - 2018-03-09 07:52 - 000000000 ___DC C:\Program Files\Synaptics
2018-02-26 20:51 - 2018-03-09 07:58 - 000000000 ___DC C:\WINDOWS\system32\Tasks_Migrated
2018-02-26 20:51 - 2018-02-26 20:51 - 000000000 ___DC C:\ProgramData\Comms
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-03-24 11:04 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-03-24 02:43 - 2017-09-29 03:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-03-24 01:11 - 2017-09-29 08:44 - 000000000 ____D C:\WINDOWS\INF
2018-03-24 00:41 - 2015-11-03 01:05 - 001526942 ____C C:\WINDOWS\system32\PerfStringBackup.INI
2018-03-23 22:23 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-03-23 19:43 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-03-22 21:15 - 2017-09-29 08:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-03-21 22:12 - 2016-12-03 08:39 - 000000000 ___DC C:\WINDOWS\HP
2018-03-20 20:00 - 2016-06-27 10:08 - 000014848 ____C (Hewlett-Packard) C:\WINDOWS\HPCUST2.exe
2018-03-19 17:47 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\rescache
2018-03-17 13:02 - 2016-06-27 12:10 - 000000000 ___DC C:\ProgramData\HP
2018-03-17 12:30 - 2016-06-27 12:10 - 000000000 ___DC C:\Program Files\HP
2018-03-15 20:59 - 2017-09-29 08:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-03-15 20:58 - 2016-06-27 12:14 - 000000000 ___DC C:\Program Files (x86)\Microsoft Office
2018-03-15 04:05 - 2015-11-02 13:02 - 000000000 _RHDC C:\Users\Public\AccountPictures
2018-03-15 04:02 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\TextInput
2018-03-15 04:02 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-03-15 04:02 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-03-14 12:08 - 2017-09-29 08:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-03-14 11:49 - 2017-09-29 08:41 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-03-14 11:49 - 2017-09-29 08:41 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-03-11 04:58 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\appcompat
2018-03-10 17:47 - 2016-06-27 12:10 - 000000000 __HDC C:\Program Files (x86)\InstallShield Installation Information
2018-03-10 17:43 - 2016-06-27 12:12 - 000000000 ___DC C:\ProgramData\Package Cache
2018-03-10 16:31 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\System
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\Provisioning
2018-03-09 21:44 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-03-09 21:44 - 2017-09-29 03:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-03-09 21:02 - 2017-09-29 08:46 - 000000000 ___RD C:\Program Files\Windows Defender
2018-03-09 20:42 - 2016-12-03 08:41 - 000000000 __RDC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-03-09 20:42 - 2016-12-03 08:39 - 000000000 ___DC C:\ProgramData\WildTangent
2018-03-09 20:42 - 2016-12-03 08:39 - 000000000 ___DC C:\Program Files (x86)\WildTangent Games
2018-03-09 08:07 - 2017-09-29 08:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-03-09 07:58 - 2017-09-29 08:49 - 000000000 ____D C:\WINDOWS\Setup
2018-03-09 07:58 - 2017-09-29 08:46 - 000000000 __RHD C:\Users\Public\Libraries
2018-03-09 07:58 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\spool
2018-03-09 07:58 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-03-09 07:58 - 2017-09-29 08:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-03-09 07:58 - 2016-12-03 08:35 - 000000000 __HDC C:\WINDOWS\system32\WLANProfiles
2018-03-09 07:58 - 2016-06-27 12:15 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
2018-03-09 07:58 - 2016-06-27 12:10 - 000000000 __RDC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2018-03-09 06:28 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\Registration
2018-03-09 06:25 - 2017-09-29 08:46 - 000000000 ____D C:\ProgramData\USOPrivate
2018-03-09 06:22 - 2017-09-29 08:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-03-09 06:22 - 2017-09-29 03:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-03-09 06:14 - 2017-09-29 03:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-03-09 06:14 - 2015-11-03 01:05 - 000886066 ____C C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2018-03-09 06:12 - 2017-09-29 08:46 - 000000000 ___RD C:\WINDOWS\PrintDialog
2018-03-09 06:12 - 2017-09-29 08:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-03-09 06:10 - 2016-12-03 08:31 - 000000000 ___DC C:\ProgramData\Intel
2018-02-26 22:24 - 2016-06-27 12:10 - 000000000 ___DC C:\ProgramData\Hewlett-Packard
2018-02-26 22:01 - 2016-12-03 08:38 - 000000000 ___DC C:\ProgramData\Synaptics
2018-02-26 22:01 - 2016-12-03 08:30 - 000000000 ___DC C:\Program Files (x86)\Realtek
2018-02-26 22:01 - 2016-06-27 12:12 - 000000000 ___DC C:\ProgramData\Apple
2018-02-26 22:01 - 2016-06-27 12:11 - 000000000 __RDC C:\Program Files (x86)\Online Services
2018-02-26 22:00 - 2016-12-03 08:31 - 000000000 ___DC C:\Program Files\DIFX
2018-02-26 22:00 - 2016-06-27 12:14 - 000000000 ___DC C:\Program Files\Microsoft Office 15
2018-02-26 22:00 - 2016-06-27 12:11 - 000000000 __RDC C:\Program Files\Online Services
2018-02-26 22:00 - 2016-06-27 12:11 - 000000000 ___DC C:\Program Files\HPCommRecovery
2018-02-26 22:00 - 2016-06-27 12:11 - 000000000 ___DC C:\Program Files (x86)\HP Inc
2018-02-26 22:00 - 2016-06-27 12:08 - 000000000 ___DC C:\Program Files (x86)\Hewlett-Packard
2018-02-26 22:00 - 2016-06-24 01:47 - 000000000 __HDC C:\hp
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-03-09 06:07
==================== End of FRST.txt ============================
 
 
 
16

 

Link to post
Share on other sites

Thanks for those logs, continue:

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Download AdwCleaner by Malwarebytes onto your Desktop.

Or from this Mirror
 
  • Right-click on AdwCleaner.exe and select user posted imageRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Accept the EULA (I accept), then click on Scan
  • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all the active processes
  • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
  • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply


Next,

Download Sophos Free Virus Removal Tool and save it to your desktop.

If your security alerts to this scan either accept the alert or turn off your security to allow Sophos to run and complete.....

Please Do Not use your PC whilst the scan is in progress.... This scan is very thorough so may take several hours...
 
  • Double click the icon and select Run
  • Click Next
  • Select I accept the terms in this license agreement, then click Next twice
  • Click Install
  • Click Finish to launch the program
  • Once the virus database has been updated click Start Scanning
  • If any threats are found click Details, then View log file... (bottom left hand corner)
  • Copy and paste the results in your reply
  • Close the Notepad document, close the Threat Details screen, then click Start cleanup
  • Click Exit to close the program
  • If no threats were found please confirm that result....



The Virus Removal Tool scans the following areas of your computer:
  • Memory, including system memory on 32-bit (x86) versions of Windows
  • The Windows registry
  • All local hard drives, fixed and removable
  • Mapped network drives are not scanned.


Note: If threats are found in the computer memory, the scan stops. This is because further scanning could enable the threat to spread. You will be asked to click Start Cleanup to remove the threats before continuing the scan.

Let me see those logs in your reply, also tell me if there are any remaining issues or concerns...

Thank you,

Kevin

fixlist.txt

Link to post
Share on other sites
Fix result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by bobbielynjordan (24-03-2018 14:09:59) Run:1
Running from C:\Users\bobbi\Downloads
Loaded Profiles: bobbielynjordan (Available Profiles: bobbielynjordan)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
U3 aspnet_state; no ImagePath
S3 H2OFFT; \SystemRoot\System32\drivers\H2OFFT64.sys [X]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\67533924.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\87458041.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\67533924.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\87458041.sys => ""="Driver"
Hosts:
EmptyTemp:
CMD: ipconfig /flushDNS
end
 

*****************
Processes closed successfully.
Restore point was successfully created.
"HKLM\System\CurrentControlSet\Services\aspnet_state" => removed successfully
aspnet_state => service removed successfully
"HKLM\System\CurrentControlSet\Services\H2OFFT" => removed successfully
H2OFFT => service removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\67533924.sys" => removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\87458041.sys" => removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\67533924.sys" => removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\87458041.sys" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
========= ipconfig /flushDNS =========

Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========= End of CMD: =========

=========== EmptyTemp: ==========
BITS transfer queue => 7364608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 33002383 B
Java, Flash, Steam htmlcache => 1156 B
Windows/system/drivers => 1364366 B
Edge => 87907931 B
Chrome => 154749 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 44788 B
bobbi => 110676742 B
RecycleBin => 18298 B
EmptyTemp: => 229.4 MB temporary data Removed.
================================

The system needed a reboot.
==== End of Fixlog 14:11:15 ====
 
 
# AdwCleaner 7.0.8.0 - Logfile created on Sat Mar 24 19:56:36 2018
# Updated on 2018/08/02 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
No malicious services deleted.
***** [ Folders ] *****
No malicious folders deleted.
***** [ Files ] *****
No malicious files deleted.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks deleted.
***** [ Registry ] *****
No malicious registry entries deleted.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries deleted.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries deleted.
*************************
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
 
*************************
C:/AdwCleaner/AdwCleaner[C0].txt - [1129 B] - [2018/3/23 11:0:58]
C:/AdwCleaner/AdwCleaner[S0].txt - [945 B] - [2018/3/23 11:0:0]
C:/AdwCleaner/AdwCleaner[S1].txt - [1077 B] - [2018/3/24 19:55:9]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########
 
 
2018-03-24 20:07:14.911 Sophos Virus Removal Tool version 2.6.1
2018-03-24 20:07:14.911 Copyright (c) 2009-2017 Sophos Limited. All rights reserved.
2018-03-24 20:07:14.911 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.
2018-03-24 20:07:14.911 Windows version 6.2 SP 0.0  build 9200 SM=0x300 PT=0x1 WOW64
2018-03-24 20:07:14.927 Checking for updates...
2018-03-24 20:07:15.198 Update progress: proxy server not available
2018-03-24 20:07:48.316 Downloading updates...
2018-03-24 20:07:48.316 Update progress: [I96736] sdds.svrt_10: adding primary package C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED baseVersion=1
2018-03-24 20:07:48.317 Update progress: [I95020] sdds.svrt_10: looking for packages included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
2018-03-24 20:07:48.318 Update progress: [I22529] sdds.svrt_10: looking for supplements included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
2018-03-24 20:07:48.318 Update progress: [I49502] sdds.savi0910.xml: found supplement SAVIW32 LATEST path= baseVersion= [included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=]
2018-03-24 20:07:48.318 Update progress: [I95020] sdds.savi0910.xml: looking for packages included from product SAVIW32 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I22529] sdds.savi0910.xml: looking for supplements included from product SAVIW32 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I49502] sdds.data0910.xml: found supplement IDE547 LATEST path= baseVersion= [included from product SAVIW32 LATEST path=]
2018-03-24 20:07:48.318 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE547 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE547 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I49502] sdds.data0910.xml: found supplement IDE548 LATEST path= baseVersion= [included from product IDE547 LATEST path=]
2018-03-24 20:07:48.318 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE548 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE548 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I49502] sdds.data0910.xml: found supplement IDE549 LATEST path= baseVersion= [included from product IDE548 LATEST path=]
2018-03-24 20:07:48.318 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE549 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE549 LATEST path=
2018-03-24 20:07:48.318 Update progress: [I49502] sdds.data0910.xml: found supplement IDE550 LATEST path= baseVersion= [included from product IDE549 LATEST path=]
2018-03-24 20:07:48.318 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE550 LATEST path=
2018-03-24 20:07:48.319 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE550 LATEST path=
2018-03-24 20:07:48.319 Update progress: [I49502] sdds.data0910.xml: found supplement IDE551 LATEST path= baseVersion= [included from product IDE550 LATEST path=]
2018-03-24 20:07:48.319 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE551 LATEST path=
2018-03-24 20:07:48.319 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE551 LATEST path=
2018-03-24 20:07:48.319 Update progress: [I49502] sdds.data0910.xml: found supplement IDE552 LATEST path= baseVersion= [included from product IDE551 LATEST path=]
2018-03-24 20:07:48.319 Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE552 LATEST path=
2018-03-24 20:07:48.319 Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE552 LATEST path=
2018-03-24 20:07:48.319 Update progress: [I19463] Syncing product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
2018-03-24 20:07:48.851 Update progress: [I19463] Syncing product SAVIW32 LATEST path=
2018-03-24 20:07:48.851 Update progress: [I19463] Product download size 178991033 bytes
2018-03-24 20:07:51.123 Option all = no
2018-03-24 20:07:51.124 Option recurse = yes
2018-03-24 20:07:51.124 Option archive = no
2018-03-24 20:07:51.124 Option service = yes
2018-03-24 20:07:51.124 Option confirm = yes
2018-03-24 20:07:51.124 Option sxl = yes
2018-03-24 20:07:51.129 Option max-data-age = 35
2018-03-24 20:07:51.129 Option vdl-logging = yes
2018-03-24 20:07:51.173 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2018-03-24 20:07:51.173 Machine ID: a3014cd481254dcb844d734725559d64
2018-03-24 20:07:51.383 Component SVRTcli.exe version 2.6.1
2018-03-24 20:07:51.384 Component control.dll version 2.6.1
2018-03-24 20:07:51.384 Component SVRTservice.exe version 2.6.1
2018-03-24 20:07:51.384 Component engine\osdp.dll version 1.44.1.2286
2018-03-24 20:07:51.385 Component engine\veex.dll version 3.68.6.2286
2018-03-24 20:07:51.385 Component engine\savi.dll version 9.0.7.2286
2018-03-24 20:07:51.522 Component rkdisk.dll version 1.5.31.1
2018-03-24 20:07:51.522 Version info: Product version 2.6.1
2018-03-24 20:07:51.524 Version info: Detection engine 3.68.6
2018-03-24 20:07:51.524 Version info: Detection data 5.46
2018-03-24 20:07:51.524 Version info: Build date 11/28/2017
2018-03-24 20:07:51.524 Version info: Data files added 689
2018-03-24 20:07:51.525 Version info: Last successful update (not yet updated)
2018-03-24 20:08:03.013 Update progress: [I19463] Syncing product IDE547 LATEST path=
2018-03-24 20:08:03.013 Update progress: [I19463] Product download size 4521286 bytes
2018-03-24 20:08:08.823 Update progress: [I19463] Syncing product IDE548 LATEST path=
2018-03-24 20:08:08.823 Update progress: [I19463] Product download size 3541768 bytes
2018-03-24 20:08:13.052 Update progress: [I19463] Syncing product IDE549 LATEST path=
2018-03-24 20:08:13.052 Update progress: [I19463] Product download size 4830037 bytes
2018-03-24 20:08:17.161 Update progress: [I19463] Syncing product IDE550 LATEST path=
2018-03-24 20:08:17.161 Update progress: [I19463] Product download size 2760469 bytes
2018-03-24 20:08:19.683 Update progress: [I19463] Syncing product IDE551 LATEST path=
2018-03-24 20:08:19.683 Update progress: [I19463] Product download size 944776 bytes
2018-03-24 20:08:20.817 Update progress: [I19463] Syncing product IDE552 LATEST path=
2018-03-24 20:08:21.039 Installing updates...
2018-03-24 20:08:22.304 Error level 1
2018-03-24 20:08:58.609 Update successful
2018-03-24 20:09:25.787 Option all = no
2018-03-24 20:09:25.788 Option recurse = yes
2018-03-24 20:09:25.788 Option archive = no
2018-03-24 20:09:25.788 Option service = yes
2018-03-24 20:09:25.788 Option confirm = yes
2018-03-24 20:09:25.788 Option sxl = yes
2018-03-24 20:09:25.791 Option max-data-age = 35
2018-03-24 20:09:25.791 Option vdl-logging = yes
2018-03-24 20:09:25.822 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2018-03-24 20:09:25.822 Machine ID: a3014cd481254dcb844d734725559d64
2018-03-24 20:09:25.822 Component SVRTcli.exe version 2.6.1
2018-03-24 20:09:25.822 Component control.dll version 2.6.1
2018-03-24 20:09:25.822 Component SVRTservice.exe version 2.6.1
2018-03-24 20:09:25.822 Component engine\osdp.dll version 1.44.1.2286
2018-03-24 20:09:25.822 Component engine\veex.dll version 3.68.6.2286
2018-03-24 20:09:25.822 Component engine\savi.dll version 9.0.7.2286
2018-03-24 20:09:25.822 Component rkdisk.dll version 1.5.31.1
2018-03-24 20:09:25.822 Version info: Product version 2.6.1
2018-03-24 20:09:25.822 Version info: Detection engine 3.68.6
2018-03-24 20:09:25.822 Version info: Detection data 5.46
2018-03-24 20:09:25.822 Version info: Build date 11/28/2017
2018-03-24 20:09:25.822 Version info: Data files added 690
2018-03-24 20:09:25.822 Version info: Last successful update 3/24/2018 3:08:58 PM
2018-03-24 20:18:55.073 Warning: rootkit scan failed to open device "\\?\Volume{cfe8aca9-21b8-4635-bb18-6b214e66c40a}" (87)
2018-03-24 20:18:59.063 Could not open C:\hiberfil.sys
2018-03-24 20:19:08.469 Could not open C:\pagefile.sys
2018-03-24 21:02:34.737 Could not open C:\swapfile.sys
2018-03-24 21:13:05.585 Could not open C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
2018-03-24 21:13:13.942 Could not open C:\Windows\System32\config\BBI
2018-03-24 21:13:14.108 Could not open C:\Windows\System32\config\RegBack\DEFAULT
2018-03-24 21:13:14.108 Could not open C:\Windows\System32\config\RegBack\SAM
2018-03-24 21:13:14.108 Could not open C:\Windows\System32\config\RegBack\SECURITY
2018-03-24 21:13:14.108 Could not open C:\Windows\System32\config\RegBack\SOFTWARE
2018-03-24 21:13:14.108 Could not open C:\Windows\System32\config\RegBack\SYSTEM
2018-03-24 21:53:16.842 >>> Virus 'Troj/Decept-HV' found in file D:\FileHistory\bobbielynjordan\LAPTOP-9J17HVD1\Data\C\Users\bobbi\Downloads\DriverToolkitInstaller (2018_03_17 01_26_16 UTC).exe
2018-03-24 22:09:41.698 The following items will be cleaned up:
2018-03-24 22:09:41.698 Troj/Decept-HV
2018-03-24 22:10:18.002 Threat 'Troj/Decept-HV' has been cleaned up.
2018-03-24 22:10:18.002 File "D:\FileHistory\bobbielynjordan\LAPTOP-9J17HVD1\Data\C\Users\bobbi\Downloads\DriverToolkitInstaller (2018_03_17 01_26_16 UTC).exe" belongs to 'Troj/Decept-HV'.
2018-03-24 22:10:18.002 File "D:\FileHistory\bobbielynjordan\LAPTOP-9J17HVD1\Data\C\Users\bobbi\Downloads\DriverToolkitInstaller (2018_03_17 01_26_16 UTC).exe" has been cleaned up.
2018-03-24 22:10:18.002 Removal successful
2018-03-24 22:10:19.236 Error level 0
 
 
 
 
 
 
 
 
 
 
 
 
 
Link to post
Share on other sites
  • 2 weeks later...

There is nothing to worry about with the search findings, those are system entries..... Unless you have remaining issues continue to clean up:

Uninstall Sophos AV http://www.askvg.com/how-to-completely-uninstall-remove-a-software-program-in-windows-without-using-3rd-party-software/

Also delete this folder if still present: C:\ProgramData\Sophos

Next,

Download "Delfix by Xplode" and save it to your desktop.

Or use the following if first link is down:

"Delfix link mirror"

If your security program alerts to Delfix either, accept the alert or turn your security off.

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

Make Sure the following items are checked:

 
  • Remove disinfection tools <----- this will remove tools we may have used.
  • Purge System Restore <--- this will remove all previous and possibly exploited restore points, a new point relative to system status at present will be created.
  • Reset system settings <--- this will reset any system settings back to default that were changed either by us during cleansing or malware/infection


Now click on "Run" and wait patiently until the tool has completed.

The tool will create a log when it has completed. We don't need you to post this.

Any remnant files/logs from tools we have used can be deleted…

Next,

Read the following links to fully understand PC Security and Best Practices, you may find them useful....

Answers to Common Security Questions and best Practices

Do I need a Registry Cleaner?

Take care and surf safe

Kevin... user posted image
Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.