Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-07-2015
Ran by Stan (administrator) on GRADMABARB on 08-07-2015 13:27:59
Running from C:\Users\Stan\Desktop
Loaded Profiles: Stan (Available Profiles: Barbara & Stan & barb & BarBara_2 & Guest)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\DragonAssistant3\DragonAssistantMaintenance.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\IIS\RtkI2SAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\IIS\RtI2SBgProc64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtkNGui64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtI2SBgProc64.exe
(Microsoft Corporation) C:\Windows\Speech\Common\sapisvr.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Xmarks.com) C:\Program Files (x86)\Xmarks\IE Extension\xmarkssync.exe
(Neuber Software - www.neuber.com) C:\Program Files (x86)\Security Task Manager\SpyProtector.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkNGui] => C:\Program Files\Realtek\Audio\AP\RtkNGui64.exe [8653528 2015-04-18] (Realtek Semiconductor)
HKLM\...\Run: [RtI2SBgProc] => C:\Program Files\Realtek\Audio\AP\RtI2SBgProc64.exe [2707672 2014-12-23] (Realtek Semiconductor)
HKLM\...\Run: [CxAgent] => C:\Program Files\Realtek\Audio\AP\CXAPOAgent64.exe [742592 2014-12-23] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2858664 2015-03-24] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [ISUSPM] => c:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [654088 2015-02-17] (Hewlett-Packard Development Company, L.P.)
HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\...\Run: [Speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe [44032 2014-11-21] (Microsoft Corporation)
HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\...\Run: [Xmarks] => C:\Program Files (x86)\Xmarks\IE Extension\xmarkssync.exe [1178680 2014-11-06] (Xmarks.com)
HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\...\Run: [Spy Protector] => C:\Program Files (x86)\Security Task Manager\SpyProtector.exe [143696 2015-01-20] (Neuber Software - www.neuber.com)
Startup: C:\Users\Stan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk [2015-03-24]
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe (No File)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://hp13.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp13.msn.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp13.msn.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp13.msn.com
HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1652165426-3740713580-4145899124-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-02-25] (Eyeo GmbH)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-18] (Oracle Corporation)
BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-03-31] ()
BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2014-12-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-18] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-02-25] (Eyeo GmbH)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-03-31] ()
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0F7BE24D-7455-4EB7-B01A-758E6A379643}: [DhcpNameServer] 40.25.1.201 40.25.1.202
Tcpip\..\Interfaces\{C7D997EE-65DF-4A13-B9A1-56476CE2513A}: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default
FF DefaultSearchEngine: Yahoo Search!
FF DefaultSearchEngine.US: Google
FF SelectedSearchEngine: Yahoo Search!
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-18] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015-03-18] ()
FF Plugin-x32: @kaspersky.com/online_banking_08806E753BE44495B44E90AA2513BDC5 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015-03-18] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-03-18] ()
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-04-01] (Microsoft Corporation)
FF Extension: Xmarks - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\foxmarks@kei.com [2015-07-01]
FF Extension: LastPass - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\support@lastpass.com [2015-04-23]
FF Extension: browse pulse - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\{0f93dffa-0882-4ab1-9fb6-767b5032dcf7}.xpi [2015-04-07]
FF Extension: NoScript - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-03-24]
FF Extension: Adblock Plus - C:\Users\Stan\AppData\Roaming\Mozilla\Firefox\Profiles\68eic5ec.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-24]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015-03-18]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-03-18]
FF HKLM-x32\...\Firefox\Extensions: [online_banking_08806E753BE44495B44E90AA2513BDC5@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015-03-18]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe [194000 2015-06-28] (Kaspersky Lab ZAO)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 DAMSvc; c:\Program Files (x86)\Nuance\DragonAssistant3\DragonAssistantMaintenance.exe [4259808 2014-10-06] (Nuance Communications, Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [608520 2015-02-17] (Hewlett-Packard Development Company, L.P.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18584 2014-10-09] (Intel Corporation)
S2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [125168 2014-11-04] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-04-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
R2 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [394184 2014-10-15] (Intel)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-11-10] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-12-04] ()
R2 RtkI2SCodec; C:\Program Files\Realtek\Audio\IIS\RtkI2SAudioService64.exe [149720 2015-04-18] (Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [220840 2015-03-24] (Synaptics Incorporated)
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\Unchecky_svc.exe [164600 2015-06-17] (RaMMicHaeL)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)
R2 ZeroConfigService; c:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-12-04] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [113864 2013-07-18] (ASIX Electronics Corp.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-20] (Microsoft Corporation)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-06-28] (Kaspersky Lab UK Ltd)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [120312 2014-06-10] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [225008 2014-11-04] (Intel Corporation)
R3 IntcADSP; C:\Windows\system32\DRIVERS\IntcADSP.sys [725232 2015-04-18] (Intel(R) Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-28] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [64368 2015-06-28] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [159960 2015-06-28] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [226480 2015-07-01] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [831664 2015-06-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39792 2015-06-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [40304 2015-06-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [39792 2015-06-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [24944 2015-06-28] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [77680 2015-06-28] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [85360 2015-06-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [190648 2015-06-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-11-10] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3494680 2014-12-08] (Intel Corporation)
R3 RTKI2SAC; C:\Windows\system32\DRIVERS\RTKI2SAC.sys [216280 2015-04-18] (Realtek Semiconductor Corp.)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [773848 2014-11-10] (Realsil Semiconductor Corporation)
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-11-21] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2014-12-08] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31400 2015-03-24] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [213296 2014-10-15] (Windows (R) Win 7 DDK provider)
R3 VirtualButtons; C:\Windows\System32\drivers\VirtualButtons.sys [31512 2014-11-03] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-08 13:27 - 2015-07-08 13:27 - 00000714 _____ C:\Users\Stan\Documents\Desktop - Shortcut.lnk
2015-07-08 13:23 - 2015-07-08 13:23 - 01388304 _____ C:\Users\Public\VOIP.dat
2015-07-08 12:35 - 2015-07-08 12:35 - 00002696 _____ C:\Users\Stan\Desktop\AdwCleaner[S4].txt
2015-07-08 12:24 - 2015-07-08 12:25 - 02244096 _____ C:\Users\Stan\Downloads\AdwCleaner.exe
2015-07-08 10:01 - 2015-07-08 13:27 - 00022320 _____ C:\Users\Stan\Desktop\FRST.txt
2015-07-08 10:01 - 2015-07-08 10:02 - 00030798 _____ C:\Users\Stan\Desktop\Addition.txt
2015-07-08 09:59 - 2015-07-08 13:28 - 00000000 ____D C:\FRST
2015-07-08 09:58 - 2015-07-08 09:56 - 02112512 _____ (Farbar) C:\Users\Stan\Desktop\FRST64.exe
2015-07-08 09:56 - 2015-07-08 09:56 - 02112512 _____ (Farbar) C:\Users\Stan\Downloads\FRST64.exe
2015-07-07 16:41 - 2015-07-07 16:41 - 00000000 ____D C:\Users\Barbara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xmarks
2015-07-07 16:41 - 2015-07-07 16:41 - 00000000 ____D C:\Program Files (x86)\Xmarks
2015-07-07 16:24 - 2015-07-07 17:02 - 00000000 ____D C:\Users\Barbara\AppData\Local\Xmarks
2015-07-07 16:23 - 2015-07-07 16:23 - 02904064 _____ C:\Users\Barbara\Downloads\xmarks-installer-for-ie-1.3.15.msi
2015-07-06 15:00 - 2015-07-06 15:00 - 00002244 _____ C:\Users\Stan\Desktop\HP Support Assistant.lnk
2015-07-06 14:57 - 2015-07-06 14:57 - 37602760 _____ (Hewlett-Packard ) C:\Users\Stan\Downloads\sp68201(2).exe
2015-07-06 13:51 - 2015-07-06 13:51 - 37602760 _____ (Hewlett-Packard ) C:\Users\Stan\Downloads\sp68201(1).exe
2015-07-06 13:48 - 2015-07-06 13:48 - 00000000 ____D C:\MATS
2015-07-06 13:43 - 2015-07-06 13:44 - 00347816 _____ (Microsoft Corporation) C:\Users\Stan\Downloads\MicrosoftFixit.ProgramInstallUninstall.Run.exe
2015-07-06 00:37 - 2015-07-06 00:37 - 37602760 _____ (Hewlett-Packard ) C:\Users\Stan\Downloads\sp68201.exe
2015-07-06 00:35 - 2015-07-06 00:35 - 00000000 ____D C:\Users\Stan\AppData\Roaming\hpqLog
2015-07-05 23:56 - 2015-07-05 23:56 - 00000000 ____D C:\Program Files (x86)\Hp
2015-07-05 23:55 - 2015-07-05 23:56 - 05197824 _____ C:\Users\Stan\Downloads\HPSupportSolutionsFramework-11.51.0049.msi
2015-07-05 21:33 - 2015-07-05 21:33 - 00000000 ____D C:\Users\Stan\AppData\Local\HP
2015-07-05 18:58 - 2015-07-05 18:58 - 00001641 _____ C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk
2015-07-05 18:55 - 2015-07-05 18:55 - 00001058 _____ C:\Users\BarBara_2\Documents\Malwarebytes results.txt
2015-07-05 18:55 - 2015-07-05 18:55 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\OpenOffice
2015-07-05 00:21 - 2015-07-05 00:21 - 00001627 _____ C:\Users\Barbara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware.lnk
2015-07-05 00:04 - 2015-07-07 06:32 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1652165426-3740713580-4145899124-1007
2015-07-05 00:04 - 2015-07-07 04:06 - 00003950 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{5D5917FF-48DF-47A0-B9EF-33A9D9AF3EB9}
2015-07-05 00:04 - 2015-07-05 00:04 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\Macromedia
2015-07-05 00:00 - 2015-07-05 19:06 - 00000000 ____D C:\Users\BarBara_2\AppData\Local\Mozilla
2015-07-05 00:00 - 2015-07-05 00:00 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\Mozilla
2015-07-04 23:09 - 2015-07-04 23:10 - 24346240 _____ (Malwarebytes Corporation ) C:\Users\Stan\Downloads\mbam-setup-web-2.1.8.1057.exe
2015-07-04 21:23 - 2015-07-05 15:55 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\7A4E469D.sys
2015-07-04 12:47 - 2015-07-04 12:47 - 00001181 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
2015-07-04 12:47 - 2015-07-04 12:47 - 00001170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
2015-07-04 12:47 - 2015-07-04 12:47 - 00001158 _____ C:\Users\Public\Desktop\Security Task Manager.lnk
2015-07-04 12:47 - 2015-07-04 12:47 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2015-07-04 12:34 - 2015-07-04 12:35 - 02811146 _____ C:\Users\Stan\Downloads\SecurityTaskManager_Setup.zip
2015-07-04 03:02 - 2015-07-04 03:04 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Stan\Downloads\mbam-setup-2.1.8.1057(1).exe
2015-07-04 02:34 - 2015-07-04 02:34 - 00000000 ____D C:\Windows\LastGood.Tmp
2015-07-04 01:17 - 2015-07-08 12:32 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-04 01:17 - 2015-07-04 01:17 - 00001125 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-04 01:17 - 2015-07-04 01:17 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-04 01:17 - 2015-07-04 01:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-04 01:17 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-04 01:17 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-04 01:17 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-04 01:04 - 2015-07-04 01:05 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Stan\Downloads\mbam-setup-2.1.8.1057.exe
2015-07-03 18:20 - 2015-07-07 06:38 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\ClassicShell
2015-07-03 18:17 - 2015-07-07 04:00 - 00000000 ____D C:\Users\BarBara_2\Documents\Youcam
2015-07-03 18:17 - 2015-07-07 03:58 - 00000000 ___RD C:\Users\BarBara_2\OneDrive
2015-07-03 18:17 - 2015-07-03 18:17 - 00000000 ____D C:\Users\BarBara_2\AppData\Local\CyberLink
2015-07-03 18:16 - 2015-07-05 19:43 - 00000000 ____D C:\Users\BarBara_2\AppData\Local\Packages
2015-07-03 18:16 - 2015-07-03 18:16 - 00002357 _____ C:\Users\BarBara_2\Desktop\Safe Money.lnk
2015-07-03 18:16 - 2015-07-03 18:16 - 00001453 _____ C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-03 18:16 - 2015-07-03 18:16 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\Synaptics
2015-07-03 18:16 - 2015-07-03 18:16 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\Intel
2015-07-03 18:16 - 2015-07-03 18:16 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\Adobe
2015-07-03 18:16 - 2015-07-03 18:16 - 00000000 ____D C:\Users\BarBara_2\AppData\Local\VirtualStore
2015-07-03 18:16 - 2015-07-03 18:16 - 00000000 ____D C:\Users\BarBara_2\AppData\Local\Power2Go
2015-07-03 18:04 - 2015-07-03 18:17 - 00000000 ____D C:\Users\BarBara_2
2015-07-03 18:04 - 2015-07-03 18:04 - 00000020 ___SH C:\Users\BarBara_2\ntuser.ini
2015-07-03 18:04 - 2015-03-19 18:57 - 00000000 ___RD C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-03 18:04 - 2014-12-26 04:13 - 00000000 ___HD C:\Users\BarBara_2\Documents\hp.system.package.metadata
2015-07-03 18:04 - 2014-11-21 07:39 - 00000000 ___RD C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-03 18:04 - 2014-11-21 07:39 - 00000000 ___RD C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-03 18:04 - 2014-11-20 23:50 - 00000369 _____ C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-07-03 18:04 - 2014-11-20 23:50 - 00000369 _____ C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-07-03 18:04 - 2013-08-22 10:36 - 00000000 ____D C:\Users\BarBara_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-03 13:16 - 2015-07-04 02:57 - 00003162 _____ C:\Windows\System32\Tasks\HPCeeScheduleForbarb
2015-07-03 13:16 - 2015-07-04 02:57 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForbarb.job
2015-07-02 23:26 - 2015-07-02 23:26 - 00000000 ____D C:\Users\Barbara\AppData\Roaming\OpenOffice
2015-07-02 23:22 - 2015-07-02 23:22 - 00001128 _____ C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2015-07-02 23:22 - 2015-07-02 23:22 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-07-02 23:22 - 2015-07-02 23:22 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2015-07-02 23:20 - 2015-07-02 23:20 - 00000000 ____D C:\Users\Barbara\Desktop\OpenOffice 4.1.1 (en-US) Installation Files
2015-07-02 23:15 - 2015-07-02 23:16 - 140852175 _____ C:\Users\Barbara\Downloads\Apache_OpenOffice_4.1.1_Win_x86_install_en-US.exe
2015-07-02 22:07 - 2015-07-04 02:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-01 23:05 - 2015-07-01 23:05 - 00002322 _____ C:\Users\Stan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startscreen.lnk
2015-07-01 23:03 - 2015-07-08 12:12 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForStan.job
2015-07-01 23:03 - 2015-07-08 09:43 - 00003162 _____ C:\Windows\System32\Tasks\HPCeeScheduleForStan
2015-07-01 19:24 - 2015-07-01 19:24 - 00000000 ____D C:\Users\Barbara\Desktop\Old Firefox Data
2015-07-01 19:11 - 2015-07-07 03:57 - 00000362 _____ C:\Windows\Tasks\HPCeeScheduleForBarbara.job
2015-07-01 19:11 - 2015-07-06 23:07 - 00003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForBarbara
2015-07-01 19:07 - 2015-07-01 19:07 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2015-07-01 19:02 - 2014-04-15 18:35 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2015-07-01 19:02 - 2014-04-15 18:34 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2015-07-01 19:01 - 2015-05-15 17:01 - 00133288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-01 19:01 - 2015-05-15 16:05 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-01 19:01 - 2015-05-15 15:47 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-01 19:01 - 2015-05-15 15:23 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-01 19:01 - 2015-05-15 14:42 - 03682304 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-01 19:01 - 2015-05-15 14:32 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-01 19:01 - 2015-05-15 14:31 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-01 19:01 - 2015-05-15 14:28 - 02223104 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-01 19:01 - 2015-05-15 14:28 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-07-01 19:01 - 2015-05-15 14:28 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-01 19:01 - 2015-05-15 14:27 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-01 19:01 - 2015-05-15 14:21 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-01 19:01 - 2015-05-15 14:21 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-01 19:01 - 2015-05-15 14:19 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-01 19:01 - 2015-05-15 14:19 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-01 19:01 - 2015-05-11 13:17 - 01201664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-07-01 19:01 - 2015-05-07 12:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-07-01 19:01 - 2015-05-07 12:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-07-01 19:01 - 2015-05-07 11:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-07-01 19:01 - 2015-05-07 11:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-07-01 19:01 - 2015-05-07 10:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-07-01 19:01 - 2015-05-07 10:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-07-01 19:01 - 2015-05-02 19:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-07-01 19:01 - 2015-04-29 18:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-07-01 19:01 - 2015-01-05 22:01 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2015-07-01 19:01 - 2015-01-05 21:59 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2015-07-01 19:01 - 2015-01-05 20:12 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2015-07-01 19:01 - 2015-01-05 20:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2015-07-01 19:00 - 2015-05-12 08:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-07-01 19:00 - 2015-05-11 19:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-07-01 19:00 - 2015-05-11 11:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-07-01 19:00 - 2015-05-07 11:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-07-01 19:00 - 2015-05-03 10:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-01 19:00 - 2015-05-03 09:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-01 19:00 - 2015-05-03 09:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-07-01 19:00 - 2015-05-03 09:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-07-01 19:00 - 2015-05-01 18:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-07-01 19:00 - 2015-04-30 20:13 - 06521800 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2015-07-01 19:00 - 2015-04-30 20:13 - 01488000 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-07-01 19:00 - 2015-04-30 20:13 - 00261376 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2015-07-01 19:00 - 2015-04-28 08:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2015-07-01 19:00 - 2015-04-28 08:13 - 00513480 _____ C:\Windows\system32\locale.nls
2015-07-01 19:00 - 2015-04-24 21:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-07-01 19:00 - 2015-04-23 10:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-07-01 19:00 - 2015-04-23 10:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-07-01 19:00 - 2014-11-17 15:17 - 00672984 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-07-01 19:00 - 2014-11-17 15:17 - 00273240 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-07-01 19:00 - 2014-11-15 14:05 - 00801584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-07-01 19:00 - 2014-11-15 01:29 - 00962216 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-07-01 19:00 - 2014-11-14 01:57 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-07-01 19:00 - 2014-11-14 01:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2015-07-01 19:00 - 2014-11-14 01:46 - 02171904 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-07-01 19:00 - 2014-11-14 00:03 - 00885760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-07-01 19:00 - 2014-11-10 13:06 - 02485056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-07-01 19:00 - 2014-11-10 13:06 - 00473408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-07-01 19:00 - 2014-11-10 13:06 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-07-01 19:00 - 2014-11-10 13:06 - 00136512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2015-07-01 19:00 - 2014-11-09 21:57 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2015-07-01 19:00 - 2014-11-09 20:37 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2015-07-01 19:00 - 2014-11-09 20:34 - 01084416 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-07-01 19:00 - 2014-11-09 20:26 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-07-01 19:00 - 2014-11-09 20:20 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2015-07-01 19:00 - 2014-11-09 20:09 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2015-07-01 19:00 - 2014-11-09 20:08 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2015-07-01 19:00 - 2014-11-09 20:06 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-07-01 19:00 - 2014-11-09 19:57 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2015-07-01 19:00 - 2014-11-09 19:57 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2015-07-01 19:00 - 2014-11-07 23:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2015-07-01 19:00 - 2014-11-07 22:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2015-07-01 19:00 - 2014-11-07 22:56 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2015-07-01 19:00 - 2014-11-07 22:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2015-07-01 19:00 - 2014-11-07 22:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2015-07-01 19:00 - 2014-11-07 22:24 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2015-07-01 19:00 - 2014-11-07 22:13 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2015-07-01 19:00 - 2014-11-07 22:13 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2015-07-01 19:00 - 2014-11-07 22:13 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2015-07-01 19:00 - 2014-11-07 21:48 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2015-07-01 19:00 - 2014-11-07 21:38 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2015-07-01 19:00 - 2014-11-07 21:17 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2015-07-01 19:00 - 2014-11-07 21:03 - 00733696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-07-01 19:00 - 2014-11-07 20:58 - 04837376 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-07-01 19:00 - 2014-11-07 20:49 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-07-01 19:00 - 2014-11-06 22:58 - 00952896 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-07-01 19:00 - 2014-11-06 22:20 - 00786120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-07-01 19:00 - 2014-11-04 21:12 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2015-07-01 19:00 - 2014-11-04 21:12 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2015-07-01 19:00 - 2014-11-04 21:06 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2015-07-01 19:00 - 2014-11-04 20:44 - 00657920 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2015-07-01 19:00 - 2014-11-04 20:43 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2015-07-01 19:00 - 2014-11-04 20:41 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-07-01 19:00 - 2014-11-04 20:39 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSHVHOST.DLL
2015-07-01 19:00 - 2014-11-04 20:39 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\QSVRMGMT.DLL
2015-07-01 19:00 - 2014-11-04 20:33 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2015-07-01 19:00 - 2014-11-04 20:21 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2015-07-01 19:00 - 2014-11-04 20:20 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2015-07-01 19:00 - 2014-11-04 20:18 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-07-01 19:00 - 2014-11-04 20:14 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-07-01 19:00 - 2014-11-04 20:06 - 00555520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2015-07-01 19:00 - 2014-11-04 14:33 - 00058176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2015-07-01 19:00 - 2014-11-04 14:25 - 00059712 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-07-01 19:00 - 2014-11-04 14:25 - 00051008 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-07-01 19:00 - 2014-11-04 01:55 - 00026112 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-07-01 19:00 - 2014-11-04 01:54 - 00108544 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-07-01 19:00 - 2014-11-04 01:54 - 00032256 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-07-01 19:00 - 2014-11-04 01:54 - 00030208 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-07-01 19:00 - 2014-11-04 01:27 - 00128512 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-07-01 19:00 - 2014-11-04 00:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-07-01 19:00 - 2014-10-30 19:51 - 18823168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-07-01 19:00 - 2014-10-30 19:10 - 15158784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-07-01 19:00 - 2014-10-28 22:05 - 00551232 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2015-07-01 19:00 - 2014-10-28 20:55 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2015-07-01 19:00 - 2014-10-28 20:13 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2015-07-01 19:00 - 2014-10-20 20:59 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2015-07-01 19:00 - 2014-10-20 20:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eventcls.dll
2015-07-01 19:00 - 2014-10-20 19:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2015-07-01 19:00 - 2014-10-20 19:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2015-07-01 19:00 - 2014-10-20 19:31 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2015-07-01 19:00 - 2014-10-20 19:30 - 01454080 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2015-07-01 19:00 - 2014-10-20 19:20 - 01142272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2015-07-01 19:00 - 2014-10-16 23:56 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-07-01 19:00 - 2014-10-16 22:35 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-07-01 18:59 - 2015-05-03 10:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-07-01 18:59 - 2015-05-03 09:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2015-07-01 18:50 - 2015-07-01 18:50 - 00003154 _____ C:\Windows\System32\Tasks\YCMServiceAgent
2015-07-01 18:50 - 2014-01-27 22:58 - 00041704 _____ (CyberLink Corporation) C:\Windows\system32\Drivers\clwvd.sys
2015-07-01 11:48 - 2015-07-01 11:48 - 00000000 ____D C:\Users\Barbara\AppData\Local\GWX
2015-06-28 13:53 - 2015-06-28 14:07 - 00000000 ____D C:\Program Files (x86)\Site Spider Mark II
2015-06-17 22:53 - 2015-04-30 15:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-06-17 22:53 - 2015-04-30 15:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-06-17 12:44 - 2015-05-22 08:08 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-17 12:44 - 2015-05-21 08:08 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-17 12:44 - 2015-05-21 08:08 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-17 12:44 - 2015-05-21 08:08 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-17 12:44 - 2015-05-21 08:08 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-17 12:44 - 2015-05-21 08:08 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-17 12:44 - 2015-05-21 08:08 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-17 12:44 - 2015-04-30 18:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-17 12:44 - 2015-04-30 17:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-17 12:44 - 2015-04-16 17:07 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-17 12:44 - 2015-04-09 19:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-06-17 12:44 - 2015-04-09 19:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-06-17 12:44 - 2015-03-19 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-06-17 12:44 - 2015-03-19 22:08 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-06-17 12:44 - 2015-03-19 21:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-06-17 12:44 - 2015-03-19 21:07 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-06-17 12:44 - 2015-03-19 20:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-06-17 12:44 - 2015-03-17 12:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-06-17 12:44 - 2015-03-08 21:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-06-17 12:44 - 2015-03-03 20:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2015-06-17 12:44 - 2015-03-03 20:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2015-06-17 12:44 - 2015-03-01 20:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2015-06-17 12:44 - 2015-03-01 20:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2015-06-17 12:44 - 2015-01-29 19:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-06-17 12:44 - 2014-11-14 01:58 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2015-06-17 12:43 - 2015-05-27 09:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-17 12:43 - 2015-05-27 09:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-17 12:43 - 2015-05-25 08:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-17 12:43 - 2015-05-25 08:07 - 01430528 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-17 12:43 - 2015-05-22 22:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-17 12:43 - 2015-05-22 22:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-17 12:43 - 2015-05-22 22:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-17 12:43 - 2015-05-22 22:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-17 12:43 - 2015-05-22 22:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-17 12:43 - 2015-05-22 21:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-17 12:43 - 2015-05-22 21:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-17 12:43 - 2015-05-22 21:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-17 12:43 - 2015-05-22 21:47 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-06-17 12:43 - 2015-05-22 21:43 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-06-17 12:43 - 2015-05-22 21:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-17 12:43 - 2015-05-22 21:38 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-17 12:43 - 2015-05-22 21:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-17 12:43 - 2015-05-22 21:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-17 12:43 - 2015-05-22 21:28 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-06-17 12:43 - 2015-05-22 21:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-17 12:43 - 2015-05-22 21:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-17 12:43 - 2015-05-22 21:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-17 12:43 - 2015-05-22 14:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-17 12:43 - 2015-05-22 14:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-17 12:43 - 2015-05-22 14:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-17 12:43 - 2015-05-22 13:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-17 12:43 - 2015-05-22 13:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-17 12:43 - 2015-05-22 13:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-17 12:43 - 2015-05-22 13:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-17 12:43 - 2015-05-22 13:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-17 12:43 - 2015-05-22 13:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-06-17 12:43 - 2015-05-22 13:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-17 12:43 - 2015-05-22 13:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-06-17 12:43 - 2015-05-22 13:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-06-17 12:43 - 2015-05-22 13:08 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-17 12:43 - 2015-05-22 13:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-17 12:43 - 2015-05-22 13:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-17 12:43 - 2015-05-22 12:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-17 12:43 - 2015-05-22 12:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-17 12:43 - 2015-05-22 12:49 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-06-17 12:43 - 2015-05-22 12:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-17 12:43 - 2015-05-22 12:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-17 12:43 - 2015-05-21 11:47 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-17 12:43 - 2015-04-24 21:34 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-17 12:43 - 2015-04-24 21:33 - 00549888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-17 12:43 - 2015-04-21 11:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-06-17 12:43 - 2015-04-21 10:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-17 12:43 - 2015-04-21 10:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-06-17 12:43 - 2015-04-16 01:17 - 00325464 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-06-17 12:43 - 2015-04-13 17:37 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2015-06-17 12:43 - 2015-04-13 17:34 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2015-06-17 12:43 - 2015-04-09 20:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-06-17 12:43 - 2015-04-09 19:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-06-17 12:43 - 2015-04-09 19:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-06-17 12:43 - 2015-04-09 19:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-06-17 12:43 - 2015-04-09 19:17 - 01018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-06-17 12:43 - 2015-04-08 17:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-06-17 12:43 - 2015-04-08 17:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll
2015-06-17 12:43 - 2015-04-02 19:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2015-06-17 12:43 - 2015-04-02 19:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2015-06-17 12:43 - 2015-04-01 17:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2015-06-17 12:43 - 2015-04-01 17:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2015-06-17 12:43 - 2015-03-31 23:21 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-06-17 12:43 - 2015-03-31 23:18 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-06-17 12:43 - 2015-03-31 23:17 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-06-17 12:43 - 2015-03-31 23:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-06-17 12:43 - 2015-03-31 22:46 - 03633664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-06-17 12:43 - 2015-03-31 22:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2015-06-17 12:43 - 2015-03-31 22:17 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-06-17 12:43 - 2015-03-31 22:17 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-06-17 12:43 - 2015-03-31 21:53 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-06-17 12:43 - 2015-03-31 21:53 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-06-17 12:43 - 2015-03-31 21:45 - 02749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-06-17 12:43 - 2015-03-31 21:45 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-06-17 12:43 - 2015-03-31 21:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2015-06-17 12:43 - 2015-03-31 21:14 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-06-17 12:43 - 2015-03-31 21:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-06-17 12:43 - 2015-03-30 00:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-06-17 12:43 - 2015-03-26 22:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-06-17 12:43 - 2015-03-26 21:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-06-17 12:43 - 2015-03-26 21:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-17 12:43 - 2015-03-12 23:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-06-17 12:43 - 2015-03-12 23:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-06-17 12:43 - 2015-03-12 21:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2015-06-17 12:43 - 2015-03-12 20:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-06-17 12:43 - 2015-03-12 19:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-06-17 12:43 - 2015-03-10 20:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-06-17 12:43 - 2015-03-10 20:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-06-17 12:43 - 2015-03-05 22:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-06-17 12:43 - 2015-03-05 21:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2015-06-17 12:43 - 2015-03-05 21:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-06-17 12:43 - 2015-02-17 18:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-06-17 12:31 - 2015-07-01 11:47 - 00000000 ____D C:\Program Files (x86)\CutterGeneration

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-08 13:12 - 2015-04-01 18:38 - 00000000 ____D C:\Users\Stan\AppData\Roaming\ClassicShell
2015-07-08 13:00 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\system32\sru
2015-07-08 12:53 - 2015-04-03 22:53 - 00000000 ____D C:\Users\Stan\AppData\Local\Xmarks
2015-07-08 12:39 - 2014-11-20 23:42 - 00958356 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-08 12:34 - 2015-01-30 21:30 - 00006469 _____ C:\Windows\SysWOW64\Gms.log
2015-07-08 12:33 - 2015-03-24 21:22 - 00000000 ____D C:\Users\Stan\Documents\Youcam
2015-07-08 12:33 - 2015-03-18 14:30 - 00045202 _____ C:\Users\Public\CAFADEBUG.log
2015-07-08 12:32 - 2015-03-18 18:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-07-08 12:32 - 2013-08-22 09:46 - 00042512 _____ C:\Windows\setupact.log
2015-07-08 12:32 - 2013-08-22 09:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-08 12:31 - 2015-03-24 20:06 - 00000000 ____D C:\AdwCleaner
2015-07-08 12:12 - 2015-03-17 03:22 - 01239260 _____ C:\Windows\WindowsUpdate.log
2015-07-08 12:12 - 2014-11-20 23:32 - 00093396 _____ C:\Windows\PFRO.log
2015-07-08 12:10 - 2015-04-03 19:45 - 00010389 _____ C:\Users\Stan\Documents\Notetab2015.otl
2015-07-08 09:41 - 2015-03-24 21:52 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{321391DF-523D-4638-95CE-264995B3F5A3}
2015-07-08 01:29 - 2015-04-01 18:32 - 00000000 ____D C:\Users\Barbara\AppData\Roaming\ClassicShell
2015-07-07 23:54 - 2015-03-18 14:34 - 00003942 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{499BD9E8-C12F-40AB-8697-9163ABBCBC05}
2015-07-07 17:02 - 2015-03-17 03:49 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1652165426-3740713580-4145899124-1001
2015-07-07 16:53 - 2015-03-17 03:45 - 00000000 ____D C:\Users\Barbara\Documents\Youcam
2015-07-07 16:36 - 2015-03-24 21:25 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1652165426-3740713580-4145899124-1004
2015-07-07 16:36 - 2015-03-17 03:44 - 00000000 ____D C:\Users\Barbara
2015-07-07 16:07 - 2015-04-03 19:45 - 00008269 _____ C:\Users\Stan\Documents\Notetab2015.bak
2015-07-07 13:15 - 2015-03-18 15:32 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2015-07-07 07:28 - 2015-04-04 23:50 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1652165426-3740713580-4145899124-1005
2015-07-07 06:40 - 2015-04-04 23:20 - 00000000 ____D C:\Users\barb\Documents\Youcam
2015-07-06 15:00 - 2015-01-30 21:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-07-06 15:00 - 2015-01-30 21:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-06 14:59 - 2015-01-30 21:03 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-07-06 14:59 - 2014-12-26 04:13 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2015-07-06 00:49 - 2013-08-22 08:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-07-06 00:40 - 2013-08-22 09:44 - 00368464 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-06 00:38 - 2014-11-28 10:07 - 00000000 ____D C:\SWSetup
2015-07-05 20:31 - 2015-04-06 00:33 - 00001109 _____ C:\Users\barb\Documents\Notetab 2015 barb.otl
2015-07-05 20:27 - 2015-04-06 00:33 - 00001079 _____ C:\Users\barb\Documents\Notetab 2015 barb.bak
2015-07-05 20:22 - 2015-04-09 00:16 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D44D5C6D-83EE-4795-A008-DA055259133C}
2015-07-05 20:17 - 2015-04-18 21:59 - 00000000 ____D C:\Users\barb\AppData\Local\Xmarks
2015-07-04 13:36 - 2015-04-04 23:19 - 00000000 ____D C:\Users\barb
2015-07-04 02:34 - 2015-01-30 21:17 - 00003256 _____ C:\Windows\system32\Drivers\CxSfPt.DAT
2015-07-04 02:29 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\security
2015-07-03 18:43 - 2015-03-17 03:45 - 00000000 ___RD C:\Users\Barbara\OneDrive
2015-07-03 18:21 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\AppReadiness
2015-07-03 18:16 - 2015-03-17 03:44 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-07-02 23:33 - 2015-03-18 23:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-02 23:23 - 2015-04-07 23:20 - 00000000 ____D C:\ProgramData\Unchecky
2015-07-02 23:22 - 2015-03-18 21:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.1
2015-07-02 23:22 - 2015-03-18 21:52 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3
2015-07-02 23:20 - 2013-08-22 10:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-07-02 21:42 - 2015-03-19 14:58 - 00000000 ____D C:\Users\Barbara\Documents\Setup Info
2015-07-02 18:39 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\rescache
2015-07-01 19:16 - 2015-03-17 03:44 - 00000000 ____D C:\Users\Barbara\AppData\Local\Packages
2015-07-01 19:07 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\SysWOW64\setup
2015-07-01 19:07 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\SysWOW64\inetsrv
2015-07-01 19:07 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\system32\setup
2015-07-01 19:07 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\system32\inetsrv
2015-07-01 19:06 - 2013-08-22 10:36 - 00000000 ___RD C:\Windows\ToastData
2015-07-01 19:06 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\WinStore
2015-07-01 19:04 - 2013-08-22 10:20 - 00000000 ____D C:\Windows\CbsTemp
2015-07-01 18:50 - 2015-01-30 21:31 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-07-01 18:50 - 2015-01-30 21:31 - 00000000 ____D C:\Windows\Hewlett-Packard
2015-07-01 18:49 - 2015-01-30 21:31 - 00000000 ____D C:\Program Files (x86)\CyberLink
2015-07-01 18:49 - 2015-01-30 21:30 - 00000000 ____D C:\ProgramData\TEMP
2015-07-01 18:46 - 2015-03-18 15:10 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2015-07-01 18:46 - 2015-01-30 21:30 - 00000000 ____D C:\ProgramData\CyberLink
2015-07-01 17:37 - 2015-03-18 22:18 - 00000000 ____D C:\Users\Barbara\Documents\Barbs Writing
2015-07-01 12:03 - 2014-10-22 21:13 - 00226480 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2015-06-28 14:12 - 2014-11-22 14:12 - 00085360 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys
2015-06-28 14:12 - 2014-11-20 13:39 - 00077680 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys
2015-06-28 14:12 - 2014-11-10 17:48 - 00190648 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2015-06-28 14:12 - 2013-08-22 08:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-06-28 14:12 - 2013-04-12 14:34 - 00024944 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klpd.sys
2015-06-28 14:11 - 2014-10-10 17:02 - 00039792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys
2015-06-28 14:11 - 2014-08-19 12:31 - 00064368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kldisk.sys
2015-06-28 14:11 - 2014-03-31 10:47 - 00478392 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2015-06-28 14:03 - 2014-12-13 18:21 - 00831664 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-06-28 14:03 - 2014-11-28 18:19 - 00159960 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2015-06-28 14:03 - 2014-10-30 04:22 - 00040304 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2015-06-28 14:03 - 2013-08-08 16:11 - 00039792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klmouflt.sys
2015-06-28 14:03 - 2013-01-14 20:10 - 00247016 _____ (Kaspersky Lab UK Ltd) C:\Windows\system32\Drivers\cm_km_w.sys
2015-06-19 22:02 - 2014-11-21 07:47 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-19 22:02 - 2014-11-21 07:47 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-18 00:26 - 2015-04-06 11:37 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-06-18 00:26 - 2015-04-06 11:37 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-18 00:26 - 2015-03-19 18:57 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-18 00:26 - 2014-11-21 07:38 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-18 00:26 - 2013-08-22 10:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-06-18 00:26 - 2013-08-22 10:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-18 00:26 - 2013-08-22 08:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-06-18 00:23 - 2015-03-24 21:20 - 00000000 ____D C:\Users\Stan
2015-06-17 22:52 - 2015-03-19 15:13 - 00000000 ____D C:\Windows\system32\MRT
2015-06-17 22:49 - 2014-11-20 23:20 - 00000000 ____D C:\Program Files\Windows Journal

==================== Files in the root of some directories =======

2015-03-31 00:57 - 2015-03-31 00:57 - 10934856 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2015-04-06 21:05 - 2015-04-06 21:05 - 0000017 _____ () C:\Users\Stan\AppData\Local\resmon.resmoncfg

Files to move or delete:
====================
C:\Users\Public\VOIP.dat


Some files in TEMP:
====================
C:\Users\Stan\AppData\Local\Temp\Quarantine.exe
C:\Users\Stan\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-03 20:21

==================== End of log ============================