Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02 Ran by 109041 (administrator) on FEIT4289 on 04-09-2014 11:16:06 Running from C:\Users\109041\Desktop Platform: Windows 7 Enterprise Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Mentor Graphics Corporation) C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation (2)\binCFW\remotesolverdispatcherservice.exe (Mentor Graphics Corporation) C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation (2)\binCFW\dispatcher.exe () C:\Program Files\Synergy\synergyd.exe (Microsoft Corporation) C:\Windows\SysWOW64\CCM\CcmExec.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe (Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks (2)\sldworks_fs.exe (http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks\sldworks_fs.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe () C:\Program Files\Synergy\synergys.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-11] (Elaborate Bytes AG) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKLM\...\Policies\Explorer: [NoWelcomeScreen] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Run: [GoogleChromeAutoLaunch_A682536674AEA585419BF4D3442F0BAF] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.) HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Policies\system: [DisableChangePassword] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Policies\Explorer: [NoResolveSearch] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Policies\Explorer: [ForceClassicControlPanel] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Policies\Explorer: [ForceStartMenuLogOff] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\Policies\Explorer: [NoWelcomeScreen] 1 HKU\S-1-5-21-1217972059-2701456385-109863289-65428\...\MountPoints2: {5142726b-28c3-11e4-8005-40a8f0615fb7} - F:\SETUP.EXE Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks 2013 Fast Start.lnk ShortcutTarget: SolidWorks 2013 Fast Start.lnk -> C:\Windows\Installer\{B6B5EA7E-B91F-443D-A958-B0062FB53804}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks 2014 Fast Start.lnk ShortcutTarget: SolidWorks 2014 Fast Start.lnk -> C:\Windows\Installer\{4FFA60C4-9A8B-4C9E-8265-2241B266304C}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC) ShellIconOverlayIdentifiers: 1TortoiseNormal -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 2TortoiseModified -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 3TortoiseConflict -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 4TortoiseLocked -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 5TortoiseReadOnly -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 6TortoiseDeleted -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 7TortoiseAdded -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 8TortoiseIgnored -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers: 9TortoiseUnversioned -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 1TortoiseNormal -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 2TortoiseModified -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 3TortoiseConflict -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 4TortoiseLocked -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 5TortoiseReadOnly -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 6TortoiseDeleted -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 7TortoiseAdded -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 8TortoiseIgnored -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: 9TortoiseUnversioned -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://my.feit.uts.edu.au/myfeit HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://my.feit.uts.edu.au/myfeit StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\109041\AppData\Roaming\Mozilla\Firefox\Profiles\8lgtfyrs.default FF Homepage: https://my.feit.uts.edu.au/myfeit FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> CHR StartupUrls: Default -> "hxxp://www.google.com.au/", "hxxp://au.search.yahoo.com/?fr=spigot-yhp-gcmac&ilc=12&type=997063" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Translate) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2014-08-15] CHR Extension: (GChat Pix) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahdcbmcfcelhbaajmnfilcmnchogibdn [2014-08-15] CHR Extension: (Google Docs) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-14] CHR Extension: (Google Drive) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-14] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-14] CHR Extension: (ColorZilla) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2014-08-15] CHR Extension: (YouTube) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-14] CHR Extension: (Google Search) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-14] CHR Extension: (LastPass: Free Password Manager) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-08-15] CHR Extension: (eHistory) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiiknjobjfknoghbeelhfilaaikffopb [2014-08-15] CHR Extension: (WhatFont) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2014-08-15] CHR Extension: (Search the current site) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\jliolpcnkmolaaecncdfeofombdekjcp [2014-09-02] CHR Extension: (Currency Converter) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\lncdobdbibdgoiohgnflmjajfphcnakg [2014-09-02] CHR Extension: (Google Wallet) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-14] CHR Extension: (Gmail) - C:\Users\109041\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-14] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation) R2 RemoteSolverDispatcher; C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation (2)\binCFW\remotesolverdispatcherservice.exe [218248 2013-02-22] (Mentor Graphics Corporation) S3 smstsmgr; C:\WINDOWS\SysWOW64\CCM\TSManager.exe [246624 2009-09-18] (Microsoft Corporation) S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2014-08-14] (SolidWorks) [File not signed] R2 Synergy; C:\Program Files\Synergy\synergyd.exe [298496 2014-05-23] () [File not signed] S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [494864 2013-09-22] (Intel Corporation) S3 IFCoEMP; C:\Windows\system32\drivers\ifM52x64.sys [339728 2010-08-13] (Intel(R) Corporation) S3 IFCoEVB; C:\Windows\system32\drivers\ifP52X64.sys [65808 2010-08-13] (Intel(R) Corporation) R3 prepdrvr; C:\WINDOWS\SysWOW64\CCM\prepdrv.sys [26992 2009-09-18] (Microsoft Corporation) S1 vcdrom; \??\C:\Users\109041\Desktop\mount\VCdRom.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-04 11:10 - 2014-09-04 11:10 - 00000777 _____ () C:\Users\109041\Desktop\JRT.txt 2014-09-04 11:07 - 2014-09-04 11:07 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-09-04 11:06 - 2014-09-04 11:06 - 01016261 _____ (Thisisu) C:\Users\109041\Desktop\JRT.exe 2014-09-04 11:06 - 2014-09-04 11:06 - 00004347 _____ () C:\Users\109041\Desktop\AdwCleaner[S0]_after_clean.txt 2014-09-04 10:58 - 2014-09-04 11:16 - 00016216 _____ () C:\Users\109041\Desktop\FRST.txt 2014-09-04 10:57 - 2014-09-04 11:16 - 00000000 ____D () C:\FRST 2014-09-04 10:57 - 2014-09-04 10:57 - 02104832 _____ (Farbar) C:\Users\109041\Desktop\FRST64.exe 2014-09-04 10:57 - 2014-09-04 10:57 - 00003897 _____ () C:\Users\109041\Desktop\AdwCleaner[R0].txt 2014-09-04 10:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll 2014-09-04 10:54 - 2014-09-04 11:03 - 00000000 ____D () C:\AdwCleaner 2014-09-04 10:54 - 2014-09-04 10:54 - 01370467 _____ () C:\Users\109041\Desktop\AdwCleaner.exe 2014-09-04 10:45 - 2014-09-04 10:47 - 00137102 _____ () C:\Users\109041\Desktop\OTL.Txt 2014-09-04 10:03 - 2014-09-04 10:03 - 00602112 _____ (OldTimer Tools) C:\Users\109041\Desktop\OTL.exe 2014-09-04 04:31 - 2014-09-04 04:31 - 00000000 ____D () C:\ProgramData\DealsFactor 2014-09-03 10:59 - 2014-09-03 10:59 - 00001936 _____ () C:\Users\109041\Downloads\Experiment_RTK_measurement[1].kmz 2014-09-03 10:59 - 2014-09-03 10:59 - 00001936 _____ () C:\Users\109041\Downloads\Experiment_RTK_measurement[1] (1).kmz 2014-09-02 14:39 - 2014-09-02 23:19 - 00000000 ____D () C:\ProgramData\88a2b581896dae35 2014-09-01 16:22 - 2014-09-04 09:47 - 00000000 _____ () C:\Users\109041\AppData\Local\Temptable.xml 2014-09-01 16:00 - 2014-09-01 16:00 - 00000000 ____D () C:\Users\109041\Documents\Freek 2014-08-29 12:37 - 2014-08-29 13:54 - 00000000 ____D () C:\Users\109041\Downloads\MFL_related 2014-08-29 10:11 - 2014-08-29 10:11 - 143673076 _____ () C:\Users\109041\Downloads\MFL_related.rar 2014-08-28 16:03 - 2014-08-28 16:03 - 02305480 _____ () C:\Users\109041\Downloads\MFL_Design.rar 2014-08-28 16:03 - 2014-08-28 16:03 - 00000000 ____D () C:\Users\109041\Downloads\MFL_Design 2014-08-28 15:30 - 2014-08-28 15:33 - 34401285 _____ () C:\Users\109041\Downloads\MeshLab_v133_64bit.exe 2014-08-28 10:33 - 2014-08-28 10:33 - 00000000 ____D () C:\Users\109041\Downloads\Camera Uploads (1) 2014-08-28 10:32 - 2014-08-28 10:32 - 00000000 ____D () C:\Users\109041\Downloads\Camera Uploads 2014-08-28 10:29 - 2014-08-28 10:30 - 412394833 _____ () C:\Users\109041\Downloads\Camera Uploads (1).zip 2014-08-28 10:29 - 2014-08-28 10:29 - 32826543 _____ () C:\Users\109041\Downloads\Camera Uploads.zip 2014-08-28 10:18 - 2014-08-29 03:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-08-28 10:17 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\109041\AppData\Local\Microsoft Help 2014-08-28 10:16 - 2014-08-28 10:16 - 00002990 _____ () C:\WINDOWS\System32\Tasks\elbyExecuteWithUAC 2014-08-28 10:16 - 2014-08-28 10:16 - 00001264 _____ () C:\Users\Public\Desktop\Virtual CloneDrive.lnk 2014-08-28 10:16 - 2014-08-28 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes 2014-08-28 10:16 - 2014-08-28 10:16 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes 2014-08-28 10:15 - 2014-08-28 10:16 - 01640984 _____ () C:\Users\109041\Downloads\SetupVirtualCloneDrive5470.exe 2014-08-28 10:13 - 2014-08-28 10:13 - 00061064 _____ () C:\Users\109041\Downloads\winxpvirtualcdcontrolpanel_21.exe 2014-08-28 10:11 - 2014-08-28 10:11 - 00000000 ____D () C:\Users\109041\Downloads\Project Professional 2013 (x86 and x64) - DVD (English) 2014-08-28 10:09 - 2014-08-28 10:09 - 00000078 _____ () C:\Users\109041\Desktop\UTS_DreamSpark_Software_Keys.txt 2014-08-28 10:08 - 2014-08-28 10:11 - 00003072 _____ () C:\Users\109041\Downloads\SecureDownloadManager.log 2014-08-28 10:08 - 2014-08-28 10:08 - 00000183 _____ () C:\Users\109041\Downloads\100314637623.sdx 2014-08-28 10:07 - 2014-08-28 10:07 - 00775168 _____ () C:\Users\109041\Downloads\SDM_EN.msi 2014-08-28 10:07 - 2014-08-28 10:07 - 00000000 ____D () C:\Users\109041\AppData\Roaming\e-academy Inc 2014-08-28 10:07 - 2014-08-28 10:07 - 00000000 ____D () C:\Users\109041\AppData\Local\e-academy Inc 2014-08-25 15:28 - 2014-09-04 10:38 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-08-25 15:28 - 2014-08-25 15:28 - 00699568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-08-25 15:28 - 2014-08-25 15:28 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-08-25 15:28 - 2014-08-25 15:28 - 00003768 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-08-25 15:28 - 2014-08-25 15:28 - 00000000 ____D () C:\WINDOWS\system32\Macromed 2014-08-25 12:49 - 2014-08-25 12:49 - 00352358 _____ () C:\Users\109041\Downloads\PARTserver77824559.zip 2014-08-25 12:49 - 2014-08-25 12:49 - 00000000 ____D () C:\Users\109041\Downloads\PARTserver77824559 2014-08-25 12:48 - 2014-08-25 12:48 - 00463394 _____ () C:\Users\109041\Downloads\HepcoCADFiles_25_Aug_2014_034825.zip 2014-08-25 12:48 - 2014-08-25 12:48 - 00000000 ____D () C:\Users\109041\Downloads\HepcoCADFiles_25_Aug_2014_034825 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Synergy_Configs 2014-08-21 10:33 - 2014-08-29 10:39 - 00000000 ____D () C:\Users\109041\Documents\MATLAB 2014-08-21 10:33 - 2014-08-21 10:33 - 00000000 ____D () C:\Users\109041\AppData\Local\MathWorks 2014-08-21 10:32 - 2014-08-21 10:32 - 00000000 ____D () C:\Users\109041\AppData\Roaming\MathWorks 2014-08-21 10:06 - 2014-08-21 10:06 - 00002427 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synergy.lnk 2014-08-21 10:06 - 2014-08-21 10:06 - 00000963 _____ () C:\Users\109041\Desktop\synergy.exe - Shortcut.lnk 2014-08-21 09:59 - 2014-08-21 09:59 - 08531968 _____ () C:\Users\109041\Downloads\synergy-1.5.0-r2278-Windows-x64.msi 2014-08-19 16:21 - 2014-08-19 16:21 - 01453746 _____ () C:\Users\109041\Downloads\Lab Safety Documents.zip 2014-08-19 16:21 - 2014-08-19 16:21 - 00000000 ____D () C:\Users\109041\Documents\Lab 2.05 2014-08-19 09:45 - 2014-08-25 15:28 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-08-19 09:45 - 2014-08-19 09:45 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-08-19 09:45 - 2014-08-19 09:45 - 00002029 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-08-19 09:45 - 2014-08-19 09:45 - 00000000 ____D () C:\Users\109041\AppData\Local\Adobe 2014-08-19 09:27 - 2014-08-19 09:27 - 00002222 _____ () C:\Users\Public\Desktop\Google Earth.lnk 2014-08-19 09:27 - 2014-08-19 09:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth 2014-08-19 09:26 - 2014-08-19 09:27 - 00895120 _____ (Google Inc.) C:\Users\109041\Downloads\GoogleEarthSetup.exe 2014-08-18 10:51 - 2014-08-19 16:49 - 00000000 ____D () C:\Users\109041\AppData\Roaming\TortoiseSVN 2014-08-16 15:26 - 2014-08-16 15:26 - 00000000 ____D () C:\SMSTSLog 2014-08-16 03:03 - 2014-02-07 11:23 - 03156480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-08-16 03:03 - 2013-07-04 22:50 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll 2014-08-16 03:03 - 2013-07-04 21:50 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll 2014-08-16 03:01 - 2014-08-16 03:01 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-16 03:01 - 2014-08-16 03:01 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-16 03:00 - 2013-08-27 19:01 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2014-08-16 03:00 - 2013-08-27 19:01 - 01143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2014-08-16 03:00 - 2013-08-27 18:21 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2014-08-16 03:00 - 2013-08-01 22:09 - 00983488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-08-15 21:24 - 2014-08-15 21:24 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-15 21:23 - 2014-08-15 21:23 - 00000000 ____D () C:\Program Files\Intel 2014-08-15 21:22 - 2010-12-13 14:44 - 00011325 _____ () C:\Users\Administrator\Desktop\Join-StaffPCtoDomain.ps1 2014-08-15 21:18 - 2013-08-09 01:04 - 00553784 _____ (Intel Corporation) C:\WINDOWS\system32\PROUnstl.exe 2014-08-15 21:16 - 2014-08-15 21:16 - 00001453 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-15 21:16 - 2014-08-15 21:16 - 00001419 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-15 21:16 - 2014-08-15 21:16 - 00000000 ____D () C:\Users\Administrator 2014-08-15 21:16 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla 2014-08-15 21:16 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla 2014-08-15 21:16 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe 2014-08-15 21:16 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Adobe 2014-08-15 21:16 - 2011-06-02 16:23 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Macromedia 2014-08-15 21:16 - 2009-07-14 15:09 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini 2014-08-15 21:16 - 2009-07-14 14:54 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-15 21:16 - 2009-07-14 14:49 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-15 16:32 - 2014-08-15 16:32 - 00000000 ____D () C:\Users\105273\AppData\Roaming\WinRAR 2014-08-15 16:32 - 2014-08-15 16:32 - 00000000 ____D () C:\Users\105273\AppData\Roaming\Subversion 2014-08-15 12:40 - 2014-08-15 12:40 - 24077496 _____ (NoMachine S.a.r.l. ) C:\Users\109041\Downloads\nomachine_4.2.27_1.exe 2014-08-15 10:47 - 2014-08-15 10:47 - 00000000 ____D () C:\Users\109041\AppData\Local\TortoiseSVN 2014-08-15 10:33 - 2014-09-04 09:52 - 00000000 ____D () C:\Users\109041\AppData\Local\TempSWBackupDirectory 2014-08-15 10:32 - 2014-09-03 12:22 - 00000000 ____D () C:\Users\109041\AppData\Local\SolidWorks 2014-08-15 10:32 - 2014-08-28 10:32 - 00124448 _____ () C:\Users\109041\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-15 10:32 - 2014-08-15 10:49 - 00000000 ____D () C:\Users\109041\AppData\Roaming\SolidWorks 2014-08-15 10:32 - 2014-08-15 10:32 - 00000000 ____D () C:\Users\109041\Documents\SolidWorksComposer 2014-08-15 10:30 - 2014-09-02 17:05 - 00000000 ____D () C:\Users\109041\Documents\SW 2014-08-14 16:52 - 2014-08-03 21:10 - 26992640 _____ () C:\Users\109041\Downloads\RT-N66U_3.0.0.4_376.44_0.trx 2014-08-14 16:52 - 2014-08-03 21:10 - 00000387 _____ () C:\Users\109041\Downloads\md5sums.txt 2014-08-14 16:52 - 2014-08-03 21:09 - 00098162 _____ () C:\Users\109041\Downloads\README-merlin.txt 2014-08-14 16:51 - 2014-08-14 16:52 - 27014748 _____ () C:\Users\109041\Downloads\RT-N66U_3.0.0.4_376.44_0.zip 2014-08-14 16:06 - 2014-09-04 09:55 - 00000000 ____D () C:\Users\109041\AppData\Local\TSVNCache 2014-08-14 16:06 - 2014-08-14 16:06 - 00000000 ____D () C:\Users\109041\AppData\Roaming\Subversion 2014-08-14 15:58 - 2014-08-14 15:59 - 00000000 ____D () C:\Users\115164\AppData\Local\TempSWBackupDirectory 2014-08-14 15:58 - 2014-08-14 15:58 - 00121752 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-14 15:58 - 2014-08-14 15:58 - 00000000 ____D () C:\Users\115164\AppData\Local\SolidWorks 2014-08-14 15:58 - 2014-08-14 15:58 - 00000000 ____D () C:\ProgramData\FLEXnet 2014-08-14 15:31 - 2014-08-14 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidWorks 2013 2014-08-14 15:31 - 2014-08-14 15:31 - 00002735 _____ () C:\Users\Public\Desktop\SolidWorks 2013 x64 Edition.lnk 2014-08-14 15:22 - 2014-08-14 15:22 - 00000000 ____D () C:\ProgramData\Simpoe 2014-08-14 15:21 - 2014-08-14 15:52 - 00000000 ____D () C:\ProgramData\COSMOS Applications 2014-08-14 15:20 - 2014-08-14 15:51 - 00000000 ____D () C:\ProgramData\SolidWorks Flow Simulation 2014-08-14 15:20 - 2014-08-14 15:20 - 00000000 ____D () C:\Users\115164\Documents\SolidWorksComposer 2014-08-14 15:19 - 2014-08-14 15:19 - 00000000 ____D () C:\Users\115164\AppData\Roaming\help_images_otherUI 2014-08-14 15:19 - 2014-08-14 15:19 - 00000000 ____D () C:\Program Files (x86)\SolidWorks Corp 2014-08-14 15:19 - 2014-08-14 15:19 - 00000000 _____ () C:\WINDOWS\eDrawingOfficeAutomator.INI 2014-08-14 15:18 - 2014-08-14 15:50 - 00000000 ____D () C:\ProgramData\DassaultSystemes 2014-08-14 15:18 - 2014-08-14 15:18 - 00000000 ____D () C:\Users\115164\Documents\SolidWorks Visual Studio Tools for Applications 2014-08-14 15:18 - 2014-08-14 15:18 - 00000000 ____D () C:\Users\115164\AppData\Roaming\DassaultSystemes 2014-08-14 15:18 - 2014-08-14 15:18 - 00000000 ____D () C:\Users\115164\AppData\Local\DassaultSystemes 2014-08-14 15:13 - 2014-08-14 15:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidWorks 2014 2014-08-14 15:13 - 2014-08-14 15:13 - 00002727 _____ () C:\Users\Public\Desktop\SolidWorks 2014 x64 Edition.lnk 2014-08-14 15:06 - 2014-08-14 15:53 - 00000000 ____D () C:\Program Files\SolidWorks Corp 2014-08-14 15:06 - 2014-08-14 15:26 - 00000000 ____D () C:\ProgramData\SolidWorks 2014-08-14 15:06 - 2014-08-14 15:19 - 00000000 ____D () C:\Program Files\Common Files\SolidWorks Shared 2014-08-14 15:06 - 2014-08-14 15:06 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared 2014-08-14 15:06 - 2014-08-14 15:06 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\ProgramData\Apple 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\Program Files\Bonjour 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-08-14 15:04 - 2014-08-14 15:04 - 00000000 ____D () C:\Users\115164\Documents\Visual Studio 2005 2014-08-14 15:04 - 2014-08-14 15:04 - 00000000 ____D () C:\Users\115164\AppData\Local\Microsoft Help 2014-08-14 15:04 - 2014-08-14 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005 2014-08-14 15:03 - 2014-08-14 15:03 - 00000000 ____D () C:\Program Files (x86)\MSECache 2014-08-14 15:02 - 2014-08-15 10:51 - 00000000 ____D () C:\SolidWorks Data 2014-08-14 15:01 - 2014-08-14 15:59 - 00000000 ____D () C:\Users\115164\AppData\Roaming\SolidWorks 2014-08-14 15:01 - 2014-08-14 15:24 - 00000000 ____D () C:\WINDOWS\SolidWorks 2014-08-14 14:59 - 2014-08-14 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN 2014-08-14 14:59 - 2014-08-14 14:59 - 00000000 ____D () C:\Program Files\TortoiseSVN 2014-08-14 14:59 - 2014-08-14 14:59 - 00000000 ____D () C:\Program Files\Common Files\TortoiseOverlays 2014-08-14 14:51 - 2014-08-14 14:51 - 00000000 ____D () C:\ProgramData\TEMP 2014-08-14 14:49 - 2014-08-25 10:26 - 00000000 ____D () C:\Program Files\Synergy 2014-08-14 14:48 - 2014-08-21 15:20 - 00000940 _____ () C:\Users\109041\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\Administrator\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\115164\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\110344\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\106784\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\105273\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MeshLab 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MeshLab 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files\VCG 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client 2014-08-14 14:46 - 2014-08-14 14:44 - 06052529 _____ (Tim Kosse) C:\Users\115164\Downloads\FileZilla_3.9.0.3_win32-setup [1].exe 2014-08-14 14:43 - 2014-08-14 14:59 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Subversion 2014-08-14 14:43 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\Documents\MATLAB 2014-08-14 14:43 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\AppData\Roaming\MathWorks 2014-08-14 14:43 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\AppData\Local\MathWorks 2014-08-14 14:24 - 2014-08-14 14:24 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2014a.lnk 2014-08-14 14:24 - 2014-08-14 14:24 - 00001297 _____ () C:\Users\Public\Desktop\MATLAB R2014a.lnk 2014-08-14 14:24 - 2014-08-14 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB 2014-08-14 14:23 - 2014-09-04 11:14 - 00000548 _____ () C:\WINDOWS\Tasks\MATLAB R2014a Startup Accelerator.job 2014-08-14 14:23 - 2014-08-14 14:23 - 00003726 _____ () C:\WINDOWS\System32\Tasks\MATLAB R2014a Startup Accelerator 2014-08-14 14:23 - 2014-08-14 14:23 - 00000000 ____D () C:\ProgramData\MathWorks 2014-08-14 14:10 - 2014-08-14 14:24 - 00000000 ____D () C:\Program Files\MATLAB 2014-08-14 14:06 - 2014-08-14 14:06 - 00005328 __RSH () C:\Users\115164\ntuser.pol 2014-08-14 14:06 - 2014-08-14 14:06 - 00001457 _____ () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 14:06 - 2014-08-14 14:06 - 00001423 _____ () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 14:06 - 2014-08-14 14:06 - 00000000 ____D () C:\Users\115164\AppData\Local\Google 2014-08-14 14:06 - 2014-08-14 14:06 - 00000000 ____D () C:\Users\115164 2014-08-14 14:06 - 2014-05-15 13:10 - 00315392 _____ () C:\Users\115164\Desktop\FEIT_ComputerCheck.exe 2014-08-14 14:06 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Mozilla 2014-08-14 14:06 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\115164\AppData\Local\Mozilla 2014-08-14 14:06 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Adobe 2014-08-14 14:06 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\115164\AppData\Local\Adobe 2014-08-14 14:06 - 2011-06-02 16:23 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Macromedia 2014-08-14 14:06 - 2009-07-14 15:09 - 00000020 ___SH () C:\Users\115164\ntuser.ini 2014-08-14 14:06 - 2009-07-14 14:54 - 00000000 ___RD () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-14 14:06 - 2009-07-14 14:49 - 00000000 ___RD () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-14 14:02 - 2014-08-15 16:32 - 00005328 __RSH () C:\Users\105273\ntuser.pol 2014-08-14 14:02 - 2014-08-15 16:32 - 00000000 ____D () C:\Users\105273 2014-08-14 14:02 - 2014-08-14 14:02 - 00001453 _____ () C:\Users\105273\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 14:02 - 2014-08-14 14:02 - 00001419 _____ () C:\Users\105273\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 14:02 - 2014-08-14 14:02 - 00000000 ____D () C:\Users\105273\AppData\Local\Google 2014-08-14 14:02 - 2014-05-15 13:10 - 00315392 _____ () C:\Users\105273\Desktop\FEIT_ComputerCheck.exe 2014-08-14 14:02 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\105273\AppData\Roaming\Mozilla 2014-08-14 14:02 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\105273\AppData\Local\Mozilla 2014-08-14 14:02 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\105273\AppData\Roaming\Adobe 2014-08-14 14:02 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\105273\AppData\Local\Adobe 2014-08-14 14:02 - 2011-06-02 16:23 - 00000000 ____D () C:\Users\105273\AppData\Roaming\Macromedia 2014-08-14 14:02 - 2009-07-14 15:09 - 00000020 ___SH () C:\Users\105273\ntuser.ini 2014-08-14 14:02 - 2009-07-14 14:54 - 00000000 ___RD () C:\Users\105273\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-14 14:02 - 2009-07-14 14:49 - 00000000 ___RD () C:\Users\105273\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-14 12:23 - 2014-08-14 12:23 - 00000000 ____D () C:\Users\109041\AppData\Roaming\WinRAR 2014-08-14 12:19 - 2014-09-01 12:59 - 00005328 __RSH () C:\Users\109041\ntuser.pol 2014-08-14 12:19 - 2014-09-01 12:59 - 00000000 ____D () C:\Users\109041 2014-08-14 12:19 - 2014-08-19 09:27 - 00000000 ____D () C:\Users\109041\AppData\Local\Google 2014-08-14 12:19 - 2014-08-14 12:19 - 00001457 _____ () C:\Users\109041\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 12:19 - 2014-08-14 12:19 - 00001423 _____ () C:\Users\109041\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 12:19 - 2011-10-24 10:16 - 00460288 _____ () C:\Users\109041\Desktop\FEIT User Logon Info.exe 2014-08-14 12:19 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\109041\AppData\Roaming\Mozilla 2014-08-14 12:19 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\109041\AppData\Local\Mozilla 2014-08-14 12:19 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\109041\AppData\Roaming\Adobe 2014-08-14 12:19 - 2011-06-02 16:23 - 00000000 ____D () C:\Users\109041\AppData\Roaming\Macromedia 2014-08-14 12:19 - 2009-07-14 15:09 - 00000020 ___SH () C:\Users\109041\ntuser.ini 2014-08-14 12:19 - 2009-07-14 14:54 - 00000000 ___RD () C:\Users\109041\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-14 12:19 - 2009-07-14 14:49 - 00000000 ___RD () C:\Users\109041\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-14 11:07 - 2013-12-06 12:30 - 01882112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-08-14 11:07 - 2013-12-06 12:30 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll 2014-08-14 11:07 - 2013-12-06 12:02 - 01237504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-08-14 11:07 - 2013-12-06 12:02 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll 2014-08-14 11:06 - 2013-09-28 11:09 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2014-08-14 11:04 - 2013-09-25 12:26 - 00154560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2014-08-14 11:04 - 2013-09-25 12:26 - 00095680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2014-08-14 11:04 - 2013-09-25 12:23 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2014-08-14 11:04 - 2013-09-25 12:23 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2014-08-14 11:04 - 2013-09-25 12:23 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll 2014-08-14 11:04 - 2013-09-25 12:22 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2014-08-14 11:04 - 2013-09-25 12:21 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-08-14 11:04 - 2013-09-25 12:21 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll 2014-08-14 11:04 - 2013-09-25 11:58 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2014-08-14 11:04 - 2013-09-25 11:57 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2014-08-14 11:04 - 2013-09-25 11:57 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll 2014-08-14 11:04 - 2013-09-25 11:56 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll 2014-08-14 11:04 - 2013-09-25 11:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2014-08-14 11:04 - 2013-07-04 22:18 - 00458712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2014-08-14 11:03 - 2013-07-09 15:51 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2014-08-14 11:03 - 2013-07-09 14:52 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2014-08-14 10:59 - 2014-04-29 21:39 - 17849344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-08-14 10:59 - 2014-04-29 21:15 - 02382848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-08-14 10:59 - 2014-04-29 20:28 - 12347392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-08-14 10:59 - 2014-04-29 20:07 - 02382848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-08-14 10:58 - 2014-02-04 12:32 - 00624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2014-08-14 10:58 - 2014-02-04 12:04 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2014-08-14 10:58 - 2013-10-03 12:23 - 00404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2014-08-14 10:58 - 2013-10-03 12:00 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2014-08-14 10:57 - 2014-03-08 14:06 - 10926592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-08-14 10:57 - 2014-03-08 13:49 - 02334720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-08-14 10:57 - 2014-03-08 13:41 - 01347072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-08-14 10:57 - 2014-03-08 13:40 - 01392128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-08-14 10:57 - 2014-03-08 13:39 - 01494528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-08-14 10:57 - 2014-03-08 13:38 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll 2014-08-14 10:57 - 2014-03-08 13:37 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-08-14 10:57 - 2014-03-08 13:34 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2014-08-14 10:57 - 2014-03-08 13:34 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-08-14 10:57 - 2014-03-08 13:33 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-08-14 10:57 - 2014-03-08 13:32 - 02147840 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-08-14 10:57 - 2014-03-08 13:32 - 00729088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-08-14 10:57 - 2014-03-08 13:30 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-08-14 10:57 - 2014-03-08 13:24 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2014-08-14 10:57 - 2014-03-08 09:20 - 09739264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-08-14 10:57 - 2014-03-08 09:12 - 01806848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-08-14 10:57 - 2014-03-08 09:03 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-08-14 10:57 - 2014-03-08 09:02 - 01427968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-08-14 10:57 - 2014-03-08 09:02 - 01129472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-08-14 10:57 - 2014-03-08 09:00 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll 2014-08-14 10:57 - 2014-03-08 08:59 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-08-14 10:57 - 2014-03-08 08:57 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2014-08-14 10:57 - 2014-03-08 08:57 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-08-14 10:57 - 2014-03-08 08:56 - 00421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-08-14 10:57 - 2014-03-08 08:54 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-08-14 10:57 - 2014-03-08 08:53 - 01796096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-08-14 10:57 - 2014-03-08 08:52 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-08-14 10:57 - 2014-03-08 08:47 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2014-08-14 10:57 - 2013-07-06 16:03 - 01910208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-08-14 10:11 - 2014-08-14 10:12 - 00000000 ____D () C:\Users\110344\AppData\Roaming\vlc 2014-08-14 10:11 - 2014-08-14 10:11 - 00001076 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Users\110344\AppData\Roaming\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-08-14 10:10 - 2014-09-04 11:12 - 00000894 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-08-14 10:10 - 2014-09-04 10:20 - 00000898 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-08-14 10:10 - 2014-08-19 09:27 - 00000000 ____D () C:\Program Files (x86)\Google 2014-08-14 10:10 - 2014-08-14 10:21 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-08-14 10:10 - 2014-08-14 10:15 - 00003894 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-08-14 10:10 - 2014-08-14 10:15 - 00003642 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-08-14 10:10 - 2014-08-14 10:10 - 00000000 ____D () C:\Users\110344\AppData\Local\Google 2014-08-14 10:10 - 2014-08-14 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-08-14 10:09 - 2014-08-28 14:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-14 10:09 - 2014-08-25 15:28 - 00001097 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-08-14 10:09 - 2014-08-25 15:28 - 00001085 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-08-14 10:09 - 2014-08-14 10:09 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-14 09:38 - 2013-07-09 15:52 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2014-08-14 09:38 - 2013-07-09 14:52 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2014-08-14 09:37 - 2014-01-29 12:32 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2014-08-14 09:37 - 2014-01-29 12:06 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2014-08-14 09:37 - 2013-11-27 11:41 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys 2014-08-14 09:37 - 2013-11-27 11:41 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys 2014-08-14 09:37 - 2013-11-27 11:41 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2014-08-14 09:37 - 2013-11-27 11:41 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys 2014-08-14 09:37 - 2013-11-27 11:41 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys 2014-08-14 09:37 - 2013-11-27 11:41 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys 2014-08-14 09:37 - 2013-11-27 11:41 - 00007808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys 2014-08-14 09:37 - 2013-10-19 12:18 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-08-14 09:37 - 2013-10-19 11:36 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-08-14 09:37 - 2013-10-06 06:25 - 01474048 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2014-08-14 09:37 - 2013-10-06 05:57 - 01168384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2014-08-14 09:37 - 2013-10-04 12:16 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys 2014-08-14 09:37 - 2013-10-04 11:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2014-08-14 09:37 - 2013-08-02 12:23 - 05550528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-08-14 09:37 - 2013-08-02 12:15 - 01732032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-08-14 09:37 - 2013-08-02 12:15 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll 2014-08-14 09:37 - 2013-08-02 12:15 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2014-08-14 09:37 - 2013-08-02 12:15 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2014-08-14 09:37 - 2013-08-02 12:14 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2014-08-14 09:37 - 2013-08-02 12:14 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll 2014-08-14 09:37 - 2013-08-02 12:13 - 01161216 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-08-14 09:37 - 2013-08-02 12:13 - 00424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\apisetschema.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00006144 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-security-base-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00005120 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-file-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00004608 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00004608 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-synch-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-localization-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-misc-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-memory-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-heap-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-util-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-string-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-profile-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-io-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-handle-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-debug-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 12:12 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-console-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:59 - 03968960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntkrnlpa.exe 2014-08-14 09:37 - 2013-08-02 11:59 - 03913664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntoskrnl.exe 2014-08-14 09:37 - 2013-08-02 11:51 - 01292192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-08-14 09:37 - 2013-08-02 11:50 - 01114112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-08-14 09:37 - 2013-08-02 11:50 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-08-14 09:37 - 2013-08-02 11:50 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apisetschema.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00005120 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00004608 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00004096 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:48 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 11:09 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe 2014-08-14 09:37 - 2013-08-02 10:59 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2014-08-14 09:37 - 2013-08-02 10:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe 2014-08-14 09:37 - 2013-08-02 10:45 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll 2014-08-14 09:37 - 2013-08-02 10:45 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe 2014-08-14 09:37 - 2013-08-02 10:45 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe 2014-08-14 09:37 - 2013-08-02 10:43 - 00006144 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 10:43 - 00004608 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 10:43 - 00003584 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-08-14 09:37 - 2013-08-02 10:43 - 00003072 ____H (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-08-14 09:37 - 2013-07-26 12:24 - 14172672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-08-14 09:37 - 2013-07-26 12:24 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll 2014-08-14 09:37 - 2013-07-26 11:55 - 12872704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-08-14 09:37 - 2013-07-26 11:55 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll 2014-08-14 09:37 - 2013-07-25 19:25 - 01888768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2014-08-14 09:37 - 2013-07-25 18:57 - 01620992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2014-08-14 09:37 - 2013-07-12 20:41 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys 2014-08-14 09:37 - 2013-07-09 15:46 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll 2014-08-14 09:37 - 2013-07-09 15:46 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll 2014-08-14 09:37 - 2013-07-09 14:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptsvc.dll 2014-08-14 09:37 - 2013-07-09 14:46 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll 2014-08-14 09:37 - 2013-07-03 14:05 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys 2014-08-14 09:37 - 2013-07-03 14:05 - 00032896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2014-08-14 09:37 - 2013-06-26 08:55 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys 2014-08-14 09:37 - 2013-06-15 14:35 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2014-08-14 09:37 - 2013-06-15 14:32 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tssecsrv.sys 2014-08-14 09:37 - 2013-06-06 15:50 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2014-08-14 09:37 - 2013-06-06 15:49 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2014-08-14 09:37 - 2013-06-06 15:49 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2014-08-14 09:37 - 2013-06-06 15:47 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2014-08-14 09:37 - 2013-06-06 14:57 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2014-08-14 09:37 - 2013-06-06 14:51 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2014-08-14 09:37 - 2013-06-06 14:50 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2014-08-14 09:37 - 2013-06-06 13:30 - 00368128 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2014-08-14 09:37 - 2013-06-06 13:01 - 00295424 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2014-08-14 09:37 - 2013-06-06 13:01 - 00034304 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2014-08-14 09:37 - 2012-11-29 08:56 - 00054376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys 2014-08-14 09:37 - 2012-11-29 08:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wdfres.dll 2014-08-14 09:37 - 2012-11-29 08:56 - 00000003 _____ () C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-08-14 09:35 - 2014-08-14 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2014-08-14 09:35 - 2014-08-14 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-14 09:35 - 2013-07-20 20:33 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-08-14 09:35 - 2013-07-20 20:33 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2014-08-14 09:33 - 2014-08-14 09:33 - 00000000 ____D () C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-14 09:32 - 2014-08-29 03:03 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-14 09:32 - 2014-08-28 10:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-14 09:32 - 2014-08-28 10:17 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-14 09:32 - 2014-08-14 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8 2014-08-14 09:32 - 2014-08-14 09:32 - 00000000 ____D () C:\Users\110344\AppData\Local\Microsoft Help 2014-08-14 09:32 - 2014-08-14 09:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-14 09:31 - 2014-08-14 09:31 - 00000000 __RHD () C:\MSOCache 2014-08-14 09:31 - 2013-10-12 12:32 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2014-08-14 09:31 - 2013-10-12 12:31 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-08-14 09:31 - 2013-10-12 12:30 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2014-08-14 09:31 - 2013-10-12 12:29 - 00859648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2014-08-14 09:31 - 2013-10-12 12:29 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2014-08-14 09:31 - 2013-10-12 12:04 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2014-08-14 09:31 - 2013-10-12 12:03 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2014-08-14 09:31 - 2013-10-12 12:03 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-08-14 09:31 - 2013-10-12 12:01 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2014-08-14 09:31 - 2013-10-12 11:33 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe 2014-08-14 09:31 - 2013-10-12 11:33 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe 2014-08-14 09:31 - 2013-10-12 11:15 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe 2014-08-14 09:31 - 2013-10-12 11:15 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe 2014-08-14 09:27 - 2014-08-14 09:27 - 00001453 _____ () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 09:27 - 2014-08-14 09:27 - 00001419 _____ () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 09:27 - 2014-08-14 09:27 - 00000488 __RSH () C:\Users\110344\ntuser.pol 2014-08-14 09:27 - 2014-08-14 09:27 - 00000000 ____D () C:\Users\110344 2014-08-14 09:27 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\110344\AppData\Roaming\Mozilla 2014-08-14 09:27 - 2011-06-02 16:38 - 00000000 ____D () C:\Users\110344\AppData\Local\Mozilla 2014-08-14 09:27 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\110344\AppData\Roaming\Adobe 2014-08-14 09:27 - 2011-06-02 16:36 - 00000000 ____D () C:\Users\110344\AppData\Local\Adobe 2014-08-14 09:27 - 2011-06-02 16:23 - 00000000 ____D () C:\Users\110344\AppData\Roaming\Macromedia 2014-08-14 09:27 - 2009-07-14 15:09 - 00000020 ___SH () C:\Users\110344\ntuser.ini 2014-08-14 09:27 - 2009-07-14 14:54 - 00000000 ___RD () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-08-14 09:27 - 2009-07-14 14:49 - 00000000 ___RD () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-08-13 04:53 - 2014-08-13 04:53 - 00004764 _____ () C:\WINDOWS\SysWOW64\CcmFramework.ini 2014-08-13 04:53 - 2014-08-13 04:53 - 00000621 _____ () C:\WINDOWS\SysWOW64\CcmFramework.h 2014-08-13 04:53 - 2014-08-13 04:53 - 00000000 ____D () C:\WINDOWS\ms 2014-08-13 04:53 - 2009-09-18 04:00 - 00930160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ccmcore.dll 2014-08-13 04:53 - 2009-09-18 04:00 - 00026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xprslib.dll 2014-08-13 04:44 - 2014-09-04 11:15 - 01348326 _____ () C:\WINDOWS\WindowsUpdate.log 2014-08-13 04:42 - 2014-08-13 04:42 - 00000000 ____D () C:\WINDOWS\CSC 2014-08-11 15:04 - 2013-09-22 14:57 - 00494864 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\e1d62x64.sys 2014-08-11 15:04 - 2013-07-25 02:36 - 00073480 _____ (Intel Corporation) C:\WINDOWS\system32\e1dmsg.dll 2014-08-11 15:04 - 2013-07-11 06:36 - 00089888 _____ (Intel Corporation) C:\WINDOWS\system32\NicInstD.dll 2014-08-11 15:04 - 2012-01-06 13:03 - 00003114 _____ () C:\WINDOWS\system32\e1d62x64.din ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-04 11:16 - 2014-09-04 10:58 - 00016216 _____ () C:\Users\109041\Desktop\FRST.txt 2014-09-04 11:16 - 2014-09-04 10:57 - 00000000 ____D () C:\FRST 2014-09-04 11:15 - 2014-08-13 04:44 - 01348326 _____ () C:\WINDOWS\WindowsUpdate.log 2014-09-04 11:14 - 2014-08-14 14:23 - 00000548 _____ () C:\WINDOWS\Tasks\MATLAB R2014a Startup Accelerator.job 2014-09-04 11:14 - 2013-08-06 02:35 - 00000405 _____ () C:\WINDOWS\SMSCFG.INI 2014-09-04 11:12 - 2014-08-14 10:10 - 00000894 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-04 11:11 - 2013-08-06 02:32 - 00000128 _____ () C:\WINDOWS\system32\config\netlogon.ftl 2014-09-04 11:11 - 2009-07-14 15:08 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-09-04 11:11 - 2009-07-14 14:51 - 00045960 _____ () C:\WINDOWS\setupact.log 2014-09-04 11:11 - 2009-07-14 14:45 - 00016064 ____H () C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-04 11:11 - 2009-07-14 14:45 - 00016064 ____H () C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-04 11:10 - 2014-09-04 11:10 - 00000777 _____ () C:\Users\109041\Desktop\JRT.txt 2014-09-04 11:07 - 2014-09-04 11:07 - 00000000 ____D () C:\WINDOWS\ERUNT 2014-09-04 11:06 - 2014-09-04 11:06 - 01016261 _____ (Thisisu) C:\Users\109041\Desktop\JRT.exe 2014-09-04 11:06 - 2014-09-04 11:06 - 00004347 _____ () C:\Users\109041\Desktop\AdwCleaner[S0]_after_clean.txt 2014-09-04 11:04 - 2011-07-22 04:00 - 00024422 _____ () C:\WINDOWS\PFRO.log 2014-09-04 11:03 - 2014-09-04 10:54 - 00000000 ____D () C:\AdwCleaner 2014-09-04 10:57 - 2014-09-04 10:57 - 02104832 _____ (Farbar) C:\Users\109041\Desktop\FRST64.exe 2014-09-04 10:57 - 2014-09-04 10:57 - 00003897 _____ () C:\Users\109041\Desktop\AdwCleaner[R0].txt 2014-09-04 10:54 - 2014-09-04 10:54 - 01370467 _____ () C:\Users\109041\Desktop\AdwCleaner.exe 2014-09-04 10:47 - 2014-09-04 10:45 - 00137102 _____ () C:\Users\109041\Desktop\OTL.Txt 2014-09-04 10:38 - 2014-08-25 15:28 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-09-04 10:20 - 2014-08-14 10:10 - 00000898 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-04 10:03 - 2014-09-04 10:03 - 00602112 _____ (OldTimer Tools) C:\Users\109041\Desktop\OTL.exe 2014-09-04 10:03 - 2009-07-14 15:13 - 00822162 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-09-04 09:55 - 2014-08-14 16:06 - 00000000 ____D () C:\Users\109041\AppData\Local\TSVNCache 2014-09-04 09:52 - 2014-08-15 10:33 - 00000000 ____D () C:\Users\109041\AppData\Local\TempSWBackupDirectory 2014-09-04 09:47 - 2014-09-01 16:22 - 00000000 _____ () C:\Users\109041\AppData\Local\Temptable.xml 2014-09-04 04:31 - 2014-09-04 04:31 - 00000000 ____D () C:\ProgramData\DealsFactor 2014-09-03 12:22 - 2014-08-15 10:32 - 00000000 ____D () C:\Users\109041\AppData\Local\SolidWorks 2014-09-03 10:59 - 2014-09-03 10:59 - 00001936 _____ () C:\Users\109041\Downloads\Experiment_RTK_measurement[1].kmz 2014-09-03 10:59 - 2014-09-03 10:59 - 00001936 _____ () C:\Users\109041\Downloads\Experiment_RTK_measurement[1] (1).kmz 2014-09-02 23:19 - 2014-09-02 14:39 - 00000000 ____D () C:\ProgramData\88a2b581896dae35 2014-09-02 17:05 - 2014-08-15 10:30 - 00000000 ____D () C:\Users\109041\Documents\SW 2014-09-01 16:00 - 2014-09-01 16:00 - 00000000 ____D () C:\Users\109041\Documents\Freek 2014-09-01 12:59 - 2014-08-14 12:19 - 00005328 __RSH () C:\Users\109041\ntuser.pol 2014-09-01 12:59 - 2014-08-14 12:19 - 00000000 ____D () C:\Users\109041 2014-08-29 13:54 - 2014-08-29 12:37 - 00000000 ____D () C:\Users\109041\Downloads\MFL_related 2014-08-29 10:39 - 2014-08-21 10:33 - 00000000 ____D () C:\Users\109041\Documents\MATLAB 2014-08-29 10:11 - 2014-08-29 10:11 - 143673076 _____ () C:\Users\109041\Downloads\MFL_related.rar 2014-08-29 03:03 - 2014-08-14 09:32 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-29 03:01 - 2014-08-28 10:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-08-28 16:03 - 2014-08-28 16:03 - 02305480 _____ () C:\Users\109041\Downloads\MFL_Design.rar 2014-08-28 16:03 - 2014-08-28 16:03 - 00000000 ____D () C:\Users\109041\Downloads\MFL_Design 2014-08-28 15:33 - 2014-08-28 15:30 - 34401285 _____ () C:\Users\109041\Downloads\MeshLab_v133_64bit.exe 2014-08-28 14:58 - 2014-08-14 10:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-28 14:58 - 2009-07-14 14:45 - 00465304 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-08-28 10:33 - 2014-08-28 10:33 - 00000000 ____D () C:\Users\109041\Downloads\Camera Uploads (1) 2014-08-28 10:32 - 2014-08-28 10:32 - 00000000 ____D () C:\Users\109041\Downloads\Camera Uploads 2014-08-28 10:32 - 2014-08-15 10:32 - 00124448 _____ () C:\Users\109041\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-28 10:30 - 2014-08-28 10:29 - 412394833 _____ () C:\Users\109041\Downloads\Camera Uploads (1).zip 2014-08-28 10:29 - 2014-08-28 10:29 - 32826543 _____ () C:\Users\109041\Downloads\Camera Uploads.zip 2014-08-28 10:18 - 2014-08-14 09:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-08-28 10:18 - 2009-07-14 17:23 - 00000000 ____D () C:\WINDOWS\ShellNew 2014-08-28 10:17 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\109041\AppData\Local\Microsoft Help 2014-08-28 10:17 - 2014-08-14 09:32 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-08-28 10:17 - 2009-07-14 13:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-08-28 10:16 - 2014-08-28 10:16 - 00002990 _____ () C:\WINDOWS\System32\Tasks\elbyExecuteWithUAC 2014-08-28 10:16 - 2014-08-28 10:16 - 00001264 _____ () C:\Users\Public\Desktop\Virtual CloneDrive.lnk 2014-08-28 10:16 - 2014-08-28 10:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes 2014-08-28 10:16 - 2014-08-28 10:16 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes 2014-08-28 10:16 - 2014-08-28 10:15 - 01640984 _____ () C:\Users\109041\Downloads\SetupVirtualCloneDrive5470.exe 2014-08-28 10:13 - 2014-08-28 10:13 - 00061064 _____ () C:\Users\109041\Downloads\winxpvirtualcdcontrolpanel_21.exe 2014-08-28 10:11 - 2014-08-28 10:11 - 00000000 ____D () C:\Users\109041\Downloads\Project Professional 2013 (x86 and x64) - DVD (English) 2014-08-28 10:11 - 2014-08-28 10:08 - 00003072 _____ () C:\Users\109041\Downloads\SecureDownloadManager.log 2014-08-28 10:09 - 2014-08-28 10:09 - 00000078 _____ () C:\Users\109041\Desktop\UTS_DreamSpark_Software_Keys.txt 2014-08-28 10:08 - 2014-08-28 10:08 - 00000183 _____ () C:\Users\109041\Downloads\100314637623.sdx 2014-08-28 10:07 - 2014-08-28 10:07 - 00775168 _____ () C:\Users\109041\Downloads\SDM_EN.msi 2014-08-28 10:07 - 2014-08-28 10:07 - 00000000 ____D () C:\Users\109041\AppData\Roaming\e-academy Inc 2014-08-28 10:07 - 2014-08-28 10:07 - 00000000 ____D () C:\Users\109041\AppData\Local\e-academy Inc 2014-08-25 15:28 - 2014-08-25 15:28 - 00699568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-08-25 15:28 - 2014-08-25 15:28 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-08-25 15:28 - 2014-08-25 15:28 - 00003768 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-08-25 15:28 - 2014-08-25 15:28 - 00000000 ____D () C:\WINDOWS\system32\Macromed 2014-08-25 15:28 - 2014-08-19 09:45 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-08-25 15:28 - 2014-08-14 10:09 - 00001097 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-08-25 15:28 - 2014-08-14 10:09 - 00001085 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-08-25 15:28 - 2011-06-02 16:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-08-25 12:49 - 2014-08-25 12:49 - 00352358 _____ () C:\Users\109041\Downloads\PARTserver77824559.zip 2014-08-25 12:49 - 2014-08-25 12:49 - 00000000 ____D () C:\Users\109041\Downloads\PARTserver77824559 2014-08-25 12:48 - 2014-08-25 12:48 - 00463394 _____ () C:\Users\109041\Downloads\HepcoCADFiles_25_Aug_2014_034825.zip 2014-08-25 12:48 - 2014-08-25 12:48 - 00000000 ____D () C:\Users\109041\Downloads\HepcoCADFiles_25_Aug_2014_034825 2014-08-25 10:26 - 2014-08-14 14:49 - 00000000 ____D () C:\Program Files\Synergy 2014-08-25 10:25 - 2014-08-25 10:25 - 00000000 ____D () C:\Synergy_Configs 2014-08-22 14:49 - 2013-08-05 08:36 - 00835104 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2014-08-21 15:20 - 2014-08-14 14:48 - 00000940 _____ () C:\Users\109041\Desktop\MeshLab.lnk 2014-08-21 10:33 - 2014-08-21 10:33 - 00000000 ____D () C:\Users\109041\AppData\Local\MathWorks 2014-08-21 10:32 - 2014-08-21 10:32 - 00000000 ____D () C:\Users\109041\AppData\Roaming\MathWorks 2014-08-21 10:06 - 2014-08-21 10:06 - 00002427 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synergy.lnk 2014-08-21 10:06 - 2014-08-21 10:06 - 00000963 _____ () C:\Users\109041\Desktop\synergy.exe - Shortcut.lnk 2014-08-21 09:59 - 2014-08-21 09:59 - 08531968 _____ () C:\Users\109041\Downloads\synergy-1.5.0-r2278-Windows-x64.msi 2014-08-19 16:49 - 2014-08-18 10:51 - 00000000 ____D () C:\Users\109041\AppData\Roaming\TortoiseSVN 2014-08-19 16:21 - 2014-08-19 16:21 - 01453746 _____ () C:\Users\109041\Downloads\Lab Safety Documents.zip 2014-08-19 16:21 - 2014-08-19 16:21 - 00000000 ____D () C:\Users\109041\Documents\Lab 2.05 2014-08-19 09:45 - 2014-08-19 09:45 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-08-19 09:45 - 2014-08-19 09:45 - 00002029 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-08-19 09:45 - 2014-08-19 09:45 - 00000000 ____D () C:\Users\109041\AppData\Local\Adobe 2014-08-19 09:45 - 2011-06-02 16:24 - 00000000 ____D () C:\ProgramData\Adobe 2014-08-19 09:27 - 2014-08-19 09:27 - 00002222 _____ () C:\Users\Public\Desktop\Google Earth.lnk 2014-08-19 09:27 - 2014-08-19 09:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth 2014-08-19 09:27 - 2014-08-19 09:26 - 00895120 _____ (Google Inc.) C:\Users\109041\Downloads\GoogleEarthSetup.exe 2014-08-19 09:27 - 2014-08-14 12:19 - 00000000 ____D () C:\Users\109041\AppData\Local\Google 2014-08-19 09:27 - 2014-08-14 10:10 - 00000000 ____D () C:\Program Files (x86)\Google 2014-08-16 15:26 - 2014-08-16 15:26 - 00000000 ____D () C:\SMSTSLog 2014-08-16 03:01 - 2014-08-16 03:01 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-08-16 03:01 - 2014-08-16 03:01 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-08-15 21:24 - 2014-08-15 21:24 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-08-15 21:23 - 2014-08-15 21:23 - 00000000 ____D () C:\Program Files\Intel 2014-08-15 21:16 - 2014-08-15 21:16 - 00001453 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-15 21:16 - 2014-08-15 21:16 - 00001419 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-15 21:16 - 2014-08-15 21:16 - 00000000 ____D () C:\Users\Administrator 2014-08-15 16:37 - 2013-08-05 08:37 - 00027070 __RSH () C:\ProgramData\ntuser.pol 2014-08-15 16:32 - 2014-08-15 16:32 - 00000000 ____D () C:\Users\105273\AppData\Roaming\WinRAR 2014-08-15 16:32 - 2014-08-15 16:32 - 00000000 ____D () C:\Users\105273\AppData\Roaming\Subversion 2014-08-15 16:32 - 2014-08-14 14:02 - 00005328 __RSH () C:\Users\105273\ntuser.pol 2014-08-15 16:32 - 2014-08-14 14:02 - 00000000 ____D () C:\Users\105273 2014-08-15 13:44 - 2009-07-14 13:20 - 00000000 ____D () C:\WINDOWS\rescache 2014-08-15 12:40 - 2014-08-15 12:40 - 24077496 _____ (NoMachine S.a.r.l. ) C:\Users\109041\Downloads\nomachine_4.2.27_1.exe 2014-08-15 10:51 - 2014-08-14 15:02 - 00000000 ____D () C:\SolidWorks Data 2014-08-15 10:49 - 2014-08-15 10:32 - 00000000 ____D () C:\Users\109041\AppData\Roaming\SolidWorks 2014-08-15 10:47 - 2014-08-15 10:47 - 00000000 ____D () C:\Users\109041\AppData\Local\TortoiseSVN 2014-08-15 10:32 - 2014-08-15 10:32 - 00000000 ____D () C:\Users\109041\Documents\SolidWorksComposer 2014-08-14 16:52 - 2014-08-14 16:51 - 27014748 _____ () C:\Users\109041\Downloads\RT-N66U_3.0.0.4_376.44_0.zip 2014-08-14 16:06 - 2014-08-14 16:06 - 00000000 ____D () C:\Users\109041\AppData\Roaming\Subversion 2014-08-14 15:59 - 2014-08-14 15:58 - 00000000 ____D () C:\Users\115164\AppData\Local\TempSWBackupDirectory 2014-08-14 15:59 - 2014-08-14 15:01 - 00000000 ____D () C:\Users\115164\AppData\Roaming\SolidWorks 2014-08-14 15:58 - 2014-08-14 15:58 - 00121752 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2014-08-14 15:58 - 2014-08-14 15:58 - 00000000 ____D () C:\Users\115164\AppData\Local\SolidWorks 2014-08-14 15:58 - 2014-08-14 15:58 - 00000000 ____D () C:\ProgramData\FLEXnet 2014-08-14 15:53 - 2014-08-14 15:06 - 00000000 ____D () C:\Program Files\SolidWorks Corp 2014-08-14 15:52 - 2014-08-14 15:21 - 00000000 ____D () C:\ProgramData\COSMOS Applications 2014-08-14 15:51 - 2014-08-14 15:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidWorks 2013 2014-08-14 15:51 - 2014-08-14 15:20 - 00000000 ____D () C:\ProgramData\SolidWorks Flow Simulation 2014-08-14 15:50 - 2014-08-14 15:18 - 00000000 ____D () C:\ProgramData\DassaultSystemes 2014-08-14 15:31 - 2014-08-14 15:31 - 00002735 _____ () C:\Users\Public\Desktop\SolidWorks 2013 x64 Edition.lnk 2014-08-14 15:26 - 2014-08-14 15:06 - 00000000 ____D () C:\ProgramData\SolidWorks 2014-08-14 15:24 - 2014-08-14 15:01 - 00000000 ____D () C:\WINDOWS\SolidWorks 2014-08-14 15:22 - 2014-08-14 15:22 - 00000000 ____D () C:\ProgramData\Simpoe 2014-08-14 15:20 - 2014-08-14 15:20 - 00000000 ____D () C:\Users\115164\Documents\SolidWorksComposer 2014-08-14 15:20 - 2014-08-14 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidWorks 2014 2014-08-14 15:19 - 2014-08-14 15:19 - 00000000 ____D () C:\Users\115164\AppData\Roaming\help_images_otherUI 2014-08-14 15:19 - 2014-08-14 15:19 - 00000000 ____D () C:\Program Files (x86)\SolidWorks Corp 2014-08-14 15:19 - 2014-08-14 15:19 - 00000000 _____ () C:\WINDOWS\eDrawingOfficeAutomator.INI 2014-08-14 15:19 - 2014-08-14 15:06 - 00000000 ____D () C:\Program Files\Common Files\SolidWorks Shared 2014-08-14 15:18 - 2014-08-14 15:18 - 00000000 ____D () C:\Users\115164\Documents\SolidWorks Visual Studio Tools for Applications 2014-08-14 15:18 - 2014-08-14 15:18 - 00000000 ____D () C:\Users\115164\AppData\Roaming\DassaultSystemes 2014-08-14 15:18 - 2014-08-14 15:18 - 00000000 ____D () C:\Users\115164\AppData\Local\DassaultSystemes 2014-08-14 15:13 - 2014-08-14 15:13 - 00002727 _____ () C:\Users\Public\Desktop\SolidWorks 2014 x64 Edition.lnk 2014-08-14 15:06 - 2014-08-14 15:06 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared 2014-08-14 15:06 - 2014-08-14 15:06 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\ProgramData\Apple 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\Program Files\Bonjour 2014-08-14 15:05 - 2014-08-14 15:05 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-08-14 15:05 - 2009-07-14 13:20 - 00000000 ____D () C:\WINDOWS\system32\inetsrv 2014-08-14 15:04 - 2014-08-14 15:04 - 00000000 ____D () C:\Users\115164\Documents\Visual Studio 2005 2014-08-14 15:04 - 2014-08-14 15:04 - 00000000 ____D () C:\Users\115164\AppData\Local\Microsoft Help 2014-08-14 15:04 - 2014-08-14 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005 2014-08-14 15:03 - 2014-08-14 15:03 - 00000000 ____D () C:\Program Files (x86)\MSECache 2014-08-14 15:03 - 2014-08-14 09:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8 2014-08-14 14:59 - 2014-08-14 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN 2014-08-14 14:59 - 2014-08-14 14:59 - 00000000 ____D () C:\Program Files\TortoiseSVN 2014-08-14 14:59 - 2014-08-14 14:59 - 00000000 ____D () C:\Program Files\Common Files\TortoiseOverlays 2014-08-14 14:59 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Subversion 2014-08-14 14:51 - 2014-08-14 14:51 - 00000000 ____D () C:\ProgramData\TEMP 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\Administrator\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\115164\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\110344\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\106784\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000896 _____ () C:\Users\105273\Desktop\MeshLab.lnk 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MeshLab 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MeshLab 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files\VCG 2014-08-14 14:48 - 2014-08-14 14:48 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client 2014-08-14 14:44 - 2014-08-14 14:46 - 06052529 _____ (Tim Kosse) C:\Users\115164\Downloads\FileZilla_3.9.0.3_win32-setup [1].exe 2014-08-14 14:43 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\Documents\MATLAB 2014-08-14 14:43 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\AppData\Roaming\MathWorks 2014-08-14 14:43 - 2014-08-14 14:43 - 00000000 ____D () C:\Users\115164\AppData\Local\MathWorks 2014-08-14 14:24 - 2014-08-14 14:24 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2014a.lnk 2014-08-14 14:24 - 2014-08-14 14:24 - 00001297 _____ () C:\Users\Public\Desktop\MATLAB R2014a.lnk 2014-08-14 14:24 - 2014-08-14 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB 2014-08-14 14:24 - 2014-08-14 14:10 - 00000000 ____D () C:\Program Files\MATLAB 2014-08-14 14:23 - 2014-08-14 14:23 - 00003726 _____ () C:\WINDOWS\System32\Tasks\MATLAB R2014a Startup Accelerator 2014-08-14 14:23 - 2014-08-14 14:23 - 00000000 ____D () C:\ProgramData\MathWorks 2014-08-14 14:06 - 2014-08-14 14:06 - 00005328 __RSH () C:\Users\115164\ntuser.pol 2014-08-14 14:06 - 2014-08-14 14:06 - 00001457 _____ () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 14:06 - 2014-08-14 14:06 - 00001423 _____ () C:\Users\115164\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 14:06 - 2014-08-14 14:06 - 00000000 ____D () C:\Users\115164\AppData\Local\Google 2014-08-14 14:06 - 2014-08-14 14:06 - 00000000 ____D () C:\Users\115164 2014-08-14 14:06 - 2009-07-14 14:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2014-08-14 14:02 - 2014-08-14 14:02 - 00001453 _____ () C:\Users\105273\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 14:02 - 2014-08-14 14:02 - 00001419 _____ () C:\Users\105273\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 14:02 - 2014-08-14 14:02 - 00000000 ____D () C:\Users\105273\AppData\Local\Google 2014-08-14 12:23 - 2014-08-14 12:23 - 00000000 ____D () C:\Users\109041\AppData\Roaming\WinRAR 2014-08-14 12:19 - 2014-08-14 12:19 - 00001457 _____ () C:\Users\109041\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 12:19 - 2014-08-14 12:19 - 00001423 _____ () C:\Users\109041\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 11:07 - 2009-07-14 12:34 - 00000478 _____ () C:\WINDOWS\win.ini 2014-08-14 10:21 - 2014-08-14 10:10 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-08-14 10:15 - 2014-08-14 10:10 - 00003894 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-08-14 10:15 - 2014-08-14 10:10 - 00003642 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-08-14 10:12 - 2014-08-14 10:11 - 00000000 ____D () C:\Users\110344\AppData\Roaming\vlc 2014-08-14 10:11 - 2014-08-14 10:11 - 00001076 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Users\110344\AppData\Roaming\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-08-14 10:11 - 2014-08-14 10:11 - 00000000 ____D () C:\Program Files (x86)\VideoLAN 2014-08-14 10:10 - 2014-08-14 10:10 - 00000000 ____D () C:\Users\110344\AppData\Local\Google 2014-08-14 10:10 - 2014-08-14 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-08-14 10:09 - 2014-08-14 10:09 - 00000000 ____D () C:\ProgramData\Mozilla 2014-08-14 09:35 - 2014-08-14 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2014-08-14 09:35 - 2014-08-14 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework 2014-08-14 09:34 - 2014-08-14 09:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2014-08-14 09:34 - 2009-07-14 15:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-08-14 09:33 - 2014-08-14 09:33 - 00000000 ____D () C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2014-08-14 09:32 - 2014-08-14 09:32 - 00000000 ____D () C:\Users\110344\AppData\Local\Microsoft Help 2014-08-14 09:32 - 2014-08-14 09:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2014-08-14 09:31 - 2014-08-14 09:31 - 00000000 __RHD () C:\MSOCache 2014-08-14 09:27 - 2014-08-14 09:27 - 00001453 _____ () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-08-14 09:27 - 2014-08-14 09:27 - 00001419 _____ () C:\Users\110344\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-08-14 09:27 - 2014-08-14 09:27 - 00000488 __RSH () C:\Users\110344\ntuser.pol 2014-08-14 09:27 - 2014-08-14 09:27 - 00000000 ____D () C:\Users\110344 2014-08-13 05:24 - 2013-08-06 02:22 - 00000000 ____D () C:\WINDOWS\panther 2014-08-13 04:53 - 2014-08-13 04:53 - 00004764 _____ () C:\WINDOWS\SysWOW64\CcmFramework.ini 2014-08-13 04:53 - 2014-08-13 04:53 - 00000621 _____ () C:\WINDOWS\SysWOW64\CcmFramework.h 2014-08-13 04:53 - 2014-08-13 04:53 - 00000000 ____D () C:\WINDOWS\ms 2014-08-13 04:53 - 2013-08-06 02:35 - 00000000 ____D () C:\WINDOWS\ccmsetup 2014-08-13 04:53 - 2013-08-05 08:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\CCM 2014-08-13 04:52 - 2011-06-02 14:37 - 00000000 __SHD () C:\Recovery 2014-08-13 04:52 - 2009-07-14 13:20 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-08-13 04:44 - 2011-06-02 15:17 - 00052071 _____ () C:\WINDOWS\iis7.log 2014-08-13 04:44 - 2009-07-14 14:46 - 00004822 _____ () C:\WINDOWS\DtcInstall.log 2014-08-13 04:43 - 2011-06-04 01:34 - 00007581 _____ () C:\WINDOWS\TSSysprep.log 2014-08-13 04:42 - 2014-08-13 04:42 - 00000000 ____D () C:\WINDOWS\CSC 2014-08-13 04:34 - 2009-07-14 15:38 - 00025600 ___SH () C:\WINDOWS\system32\config\BCD-Template.LOG 2014-08-13 04:34 - 2009-07-14 15:32 - 00028672 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-08-05 09:20 - 2011-06-02 14:51 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe Some content of TEMP: ==================== C:\Users\109041\AppData\Local\Temp\ose00000.exe C:\Users\109041\AppData\Local\Temp\Quarantine.exe C:\Users\109041\AppData\Local\Temp\VCdControlTool.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-27 00:58 ==================== End Of Log ============================