Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-03-2016
Ran by Pavilion (administrator) on PAVILION-PC (04-03-2016 21:15:58)
Running from C:\Users\Pavilion\Desktop
Loaded Profiles: Pavilion (Available Profiles: Pavilion)
Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Program Files (x86)\PasswordBoss\PBUpdater\PBUpdater.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(VentureOmni Technologies) C:\Users\Pavilion\AppData\Local\JumpstThun357\VOTPrx.exe
() C:\Program Files\shopperz170220161305\Aluobo.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(AMD) C:\Windows\System32\atieclxx.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe
(DotC United Inc) C:\Program Files (x86)\MPC AdCleaner\AdCleaner.exe
() C:\Program Files\shopperz170220161305\Fuuwiili.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\NowUSeeItPlayer\NowUSeeItPlayer.exe
() C:\Program Files (x86)\PasswordBoss\PasswordBoss.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\msrtn32\msrtn32.exe
(TODO: <Company name>) C:\Program Files (x86)\Note-up\Note-up.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Google Inc.) C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Temp\20160203\ct.exe
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
() C:\Program Files (x86)\dataup\dataup.exe
() C:\Program Files (x86)\PasswordBoss\PBIEBroker.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ArcadeTwist) C:\Users\Pavilion\AppData\Local\ElastiMotio68\Elaccumulate.exe
(DotC United Inc) C:\Program Files (x86)\MPC AdCleaner\AdxEngine.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\msrtn32\cdhtr.exe
() C:\Program Files (x86)\msrtn32\rthdcpd.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [msrtn32] => C:\Program Files (x86)\msrtn32\msrtn32.exe [1140736 2016-01-22] ()
HKLM-x32\...\Run: [Note-up] => C:\Program Files (x86)\Note-up\note-up.exe [6772736 2015-10-09] (TODO: <Company name>)
HKLM-x32\...\Run: [NowUSeeIt Player] => C:\Program Files (x86)\NowUSeeItPlayer\NowUSeeItPlayer.exe [764144 2016-01-11] ()
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3862440 2016-02-24] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\Run: [NowUSeeIt Player] => C:\Program Files (x86)\NowUSeeItPlayer\NowUSeeItPlayer.exe [764144 2016-01-11] ()
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\Run: [Chromium] => c:\users\pavilion\appdata\local\chromium\application\chrome.exe [1044480 2016-01-25] (The Chromium Authors)
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\Run: [PasswordBoss] => C:\Program Files (x86)\PasswordBoss\PasswordBoss.exe [277024 2016-02-12] ()
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1454864 2016-03-02] (Lavasoft)
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\RunOnce: [Uninstall C:\Users\Pavilion\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Pavilion\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\Policies\Explorer: [NoInternetIcon] 1
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [805888 2015-10-29] (Microsoft Corporation)
AppInit_DLLs: C:\ProgramData\TomorrowGames\STNPM64.dll => C:\ProgramData\TomorrowGames\STNPM64.dll [1096704 2016-01-26] (TomorrowGames)
AppInit_DLLs:  C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AllPCoptimizer.exe.lnk [2016-01-24]
ShortcutTarget: AllPCoptimizer.exe.lnk -> C:\Windows\Installer\{20A647C6-0C59-42A7-B3B4-1E95674496BB}\NewShortcut1_4CA89A60165741188EC12DF8484E49A4.exe (Flexera Software LLC)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-1747109027-2776113220-583691413-1000] => 127.0.0.1:18159
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2016-03-02] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2016-03-02] (Lavasoft Limited)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\Parameters: [NameServer] 82.163.142.7 95.211.158.134
Tcpip\..\Interfaces\{2ed144c8-ef99-402e-87d7-8fcfa45cd0fc}: [NameServer] 82.163.142.7 95.211.158.134
Tcpip\..\Interfaces\{2ed144c8-ef99-402e-87d7-8fcfa45cd0fc}: [DhcpNameServer] 82.163.142.7
Tcpip\..\Interfaces\{5b447fc4-bb07-11e5-aeb0-806e6f6e6963}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{932a3ca1-e4cc-4f12-810a-b5d9a4f2e6c0}: [NameServer] 82.163.142.7 95.211.158.134
Tcpip\..\Interfaces\{932a3ca1-e4cc-4f12-810a-b5d9a4f2e6c0}: [DhcpNameServer] 82.163.142.7
Tcpip\..\Interfaces\{f1c5c097-c7f1-4f25-a6a0-4a6c47b249bf}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{f7912289-cfbf-458c-b7f7-005fc5492d6e}: [NameServer] 82.163.142.7 95.211.158.134
Tcpip\..\Interfaces\{f7912289-cfbf-458c-b7f7-005fc5492d6e}: [DhcpNameServer] 75.75.75.75 75.75.76.76

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = search.mpc.am
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = search.mpc.am
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = search.mpc.am
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = search.mpc.am
HKU\S-1-5-21-1747109027-2776113220-583691413-1000\Software\Microsoft\Internet Explorer\Main,Start Page = search.mpc.am
SearchScopes: HKLM -> DefaultScope {0644EE93-D778-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsBVVtAQAwVbV9ZVQtcFQAVdRQBUwoXDAcSdQsABFxGEgBCcR9aFQQTSEcFME0FCFwEURNNfWpdAEsSSWJGInJWDk4=&q={searchTerms}
SearchScopes: HKLM -> {0644EE93-D778-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsBVVtAQAwVbV9ZVQtcFQAVdRQBUwoXDAcSdQsABFxGEgBCcR9aFQQTSEcFME0FCFwEURNNfWpdAEsSSWJGInJWDk4=&q={searchTerms}
SearchScopes: HKLM -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = hxxp://www.palikan.com/results.php?f=4&a=bfp_cmi_16_07&cd=2XzuyEtN2Y1L1Qzu0CzztD0A0AzyzyyByE0DyEzyzy0C0EtCtN0D0Tzu0StCyDtDzztN1L2XzutAtFtCzztFtCtFyDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzzzz0F0E0C0FtGyB0D0DyBtGyBtByDtCtGtA0DyDzztG0BtA0B0DyBzyyDyDtAzz0BtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0BtCyEtA0A0C0CtGtD0F0EyBtGyEtCyByCtG0BtCzz0CtGyEtA0ByDzy0A0B0A0C0DtAyB2QtN0A0LzutB&cr=211330450&ir=&q={searchTerms}
SearchScopes: HKLM -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_tpvidsft_16_08&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1Qzu0CzztD0A0AzyzyyByE0DyEzyzy0C0EtCtN0D0Tzu0StCyDtCyEtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StByB0D0A0Czy0EtAtGyEzytAtCtGyEyByCyDtGyDzzyDzztGtCtB0DtDyEyD0FzzyCyEtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0BtCyEtA0A0C0CtGtD0F0EyBtGyEtCyByCtG0BtCzz0CtGyEtA0ByDzy0A0B0A0C0DtAyB2QtN0A0LzutB%26cr%3D1871480410%26a%3Dwny_tpvidsft_16_08%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1747109027-2776113220-583691413-1000 -> DefaultScope {0644EE93-D778-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsBVVtAQAwVbV9ZVQtcFQAVdRQBUwoXDAcSdQsABFxGEgBCcR9aFQQTSEcFME0FCFwEURNNfWpdAEsSSWJGInJWDk4=&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1747109027-2776113220-583691413-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D030316-A7CC6EA01761F42C6B1F&form=CONBDF&conlogo=CT3331971&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1747109027-2776113220-583691413-1000 -> {0644EE93-D778-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsBVVtAQAwVbV9ZVQtcFQAVdRQBUwoXDAcSdQsABFxGEgBCcR9aFQQTSEcFME0FCFwEURNNfWpdAEsSSWJGInJWDk4=&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1747109027-2776113220-583691413-1000 -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsBVVtAQAwVbV9ZVQtcFQAVdRQBUwoXDAcSdQsABFxGEgBCcR9aFQQTSEcFME0FCFwEURNNfWpdAEsSSWJGInJWDk4=&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1747109027-2776113220-583691413-1000 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsBVVtAQAwVbV9ZVQtcFQAVdRQBUwoXDAcSdQsABFxGEgBCcR9aFQQTSEcFME0FCFwEURNNfWpdAEsSSWJGInJWDk4=&q={searchTerms}
BHO: shopperz170220161305 -> {5372DE0D-02B6-4505-883A-431BBB712096} -> C:\Program Files\shopperz170220161305\Mhnoav64.dll [2016-02-17] ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-04-09] (Oracle Corporation)
BHO: Password Boss -> {99af1bd8-7efc-4361-aed5-8c612492a051} -> C:\WINDOWS\system32\mscoree.dll [2015-10-29] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-09] (Oracle Corporation)
BHO-x32: shopperz170220161305 -> {5372DE0D-02B6-4505-883A-431BBB712096} -> C:\Program Files\shopperz170220161305\Mhnoav.dll [2016-02-17] ()
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-09] (Oracle Corporation)
BHO-x32: Password Boss -> {99af1bd8-7efc-4361-aed5-8c612492a051} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-09] (Oracle Corporation)
Toolbar: HKLM - Password Boss Toolbar - {2b43dc1c-e3a3-4bad-8242-6fa6302d3f34} - C:\WINDOWS\system32\mscoree.dll [2015-10-29] (Microsoft Corporation)
Toolbar: HKLM-x32 - Password Boss Toolbar - {2b43dc1c-e3a3-4bad-8242-6fa6302d3f34} - C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-29] (Microsoft Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-09] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-09] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1747109027-2776113220-583691413-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Pavilion\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-01-26] (Citrix Online)
FF HKLM\...\Firefox\Extensions: [{FF8D2983-3FE2-4DB7-8182-209032C82EAD}] - C:\Program Files\shopperz260120162332\Firefox\{FF8D2983-3FE2-4DB7-8182-209032C82EAD}.xpi
FF Extension: shopperz260120162332 - C:\Program Files\shopperz260120162332\Firefox\{FF8D2983-3FE2-4DB7-8182-209032C82EAD}.xpi [2016-01-26] [not signed]
FF HKLM\...\Firefox\Extensions: [{01597E45-9F85-42DD-8FCD-2996E25BCBD6}] - C:\Program Files\groover270120160530\Firefox\{01597E45-9F85-42DD-8FCD-2996E25BCBD6}.xpi
FF Extension: groover270120160530 - C:\Program Files\groover270120160530\Firefox\{01597E45-9F85-42DD-8FCD-2996E25BCBD6}.xpi [2016-01-26] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{FF8D2983-3FE2-4DB7-8182-209032C82EAD}] - C:\Program Files\shopperz260120162332\Firefox\{FF8D2983-3FE2-4DB7-8182-209032C82EAD}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{01597E45-9F85-42DD-8FCD-2996E25BCBD6}] - C:\Program Files\groover270120160530\Firefox\{01597E45-9F85-42DD-8FCD-2996E25BCBD6}.xpi

Chrome: 
=======
CHR HomePage: Default -> about:blank
CHR StartupUrls: Default -> "about:blank"
CHR NewTab: Default -> "chrome-extension://ljibkigjccbegnbeojkoafejpoiachej/newtab.html","chrome-extension://jlcgehabolcakkjhgmgpkagpolbjlhfa/newtab/newtab-hp.html"
CHR DefaultSearchURL: Default -> hxxp://search.mpc.am?q={searchTerms}&cx=partner-pub-3796753109442372:3837783968
CHR DefaultSearchKeyword: Default -> mpc safe search
CHR Profile: C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-25]
CHR Extension: (Google Docs) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-25]
CHR Extension: (Google Sheets) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-25]
CHR Extension: (Google Docs Offline) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-25]
CHR Extension: (Search Module Plus v2) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlcgehabolcakkjhgmgpkagpolbjlhfa [2016-02-25]
CHR Extension: (Palikan New Tab) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej [2016-02-25]
CHR Extension: (Gmail) - C:\Users\Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-25]
CHR HKLM\...\Chrome\Extension: [ljibkigjccbegnbeojkoafejpoiachej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1747109027-2776113220-583691413-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1747109027-2776113220-583691413-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ljibkigjccbegnbeojkoafejpoiachej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ljibkigjccbegnbeojkoafejpoiachej] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 4A4D9D04-DA07-40F9-8670-5691287EE347; C:\Program Files\shopperz170220161305\Aluobo.exe [232808 2016-02-17] ()
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-02-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3934184 2016-02-24] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-02-24] (AVG Technologies CZ, s.r.o.)
R3 Dataup; C:\Program Files (x86)\dataup\dataup.exe [77824 2015-08-06] () [File not signed] <==== ATTENTION
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2751760 2016-03-02] (Lavasoft Limited)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [348640 2016-02-24] (DotC United Inc)
R2 PBUpdater; C:\Program Files (x86)\PasswordBoss\PBUpdater\PBUpdater.exe [72888 2016-02-12] ()
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [17168 2016-03-02] ()
R3 VOTPrx; C:\Users\Pavilion\AppData\Local\JumpstThun357\VOTPrx.exe [1726800 2015-08-07] (VentureOmni Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-29] (Microsoft Corporation)
R2 windowsmanagementservice; C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\Temp\20160203\ct.exe [850944 2015-07-24] (Google Inc.) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athwnx.sys [4207104 2015-10-29] (Qualcomm Atheros Communications, Inc.)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378288 2016-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [269232 2016-02-15] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
R1 bsdriver; C:\WINDOWS\system32\drivers\bsdriver.sys [34712 2016-01-26] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-03] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [59112 2016-02-24] (DotC United Inc)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-29] (Realtek                                            )
R2 SPDRIVER_1.42.1.10633; C:\Program Files (x86)\ShopperPro3\JSDriver\1.42.1.10633\jsdrv.sys [53048 2016-01-17] ()
S3 tsusbhub; C:\Windows\System32\drivers\tsusbhub.sys [117248 2010-11-20] (Microsoft Corporation) [File not signed]
R2 VOTw8; C:\WINDOWS\system32\Drivers\VOTw864.sys [44136 2015-08-07] (VentureOmni Technologies)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-29] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-29] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-29] (Microsoft Corporation)
S1 cherimoya; system32\drivers\cherimoya.sys [X]
U3 idsvc; no ImagePath
U3 spbiupd; no ImagePath
U3 wpcsvc; no ImagePath

========================== Drivers MD5 =======================

C:\Windows\System32\drivers\1394ohci.sys DF1C3D7E6C7929AD83BE22852B5B08CB
C:\Windows\System32\drivers\3ware.sys 2C5B3035B86770ADD2FE9BFBAF5B35A4
C:\Windows\system32\DRIVERS\Accelerometer.sys 5C368F4B04ED2A923E6AFCA2D37BAFF5
C:\Windows\System32\drivers\ACPI.sys 6B6C39AB2CD7BEB6CFF624522E5449DE
C:\Windows\System32\Drivers\acpiex.sys 7EADED8087C392876521F7EBCE846EF4
C:\Windows\System32\drivers\acpipagr.sys C498887123327CDFD73A05E7A2780920
C:\Windows\System32\drivers\acpipmi.sys C8DBE6EFFCF014CAA010B9BDDAC833EC
C:\Windows\System32\drivers\acpitime.sys 17039DBEB3B7B9ADCDB4B4533AA9771F
C:\Windows\System32\drivers\ADP80XX.SYS F7D0CD345D2DA42E7042ABCD73662403
C:\Windows\system32\drivers\afd.sys 70148EFA9A562E7185B75BBE7D376BF7
C:\Windows\System32\drivers\agp440.sys 870F1A2C936F92B5D053DF7EC75B352F
C:\Windows\System32\DRIVERS\ahcache.sys 3DF7751D5DC6525E7DC6617FBB45054F
C:\Windows\System32\drivers\amdk8.sys B70F0F2F54B4A4DB6E9C830454752F5A
C:\Windows\system32\DRIVERS\atikmdag.sys E66C25946B3D9268D8E10D3769CF4719
C:\Windows\system32\DRIVERS\atikmpag.sys D1D66D1D42E53B53AFC7598058E71796
C:\Windows\System32\drivers\amdppm.sys 35E890482C9728DD5C552B85DA8A5AB2
C:\Windows\System32\drivers\amdsata.sys 5B30BCFE6E02E45D3EE268FF001BC5E0
C:\Windows\System32\drivers\amdsbs.sys F20B30F35A5C7888441B4DCA001ECF8E
C:\Windows\System32\drivers\amdxata.sys AFE838D7576C581D6483529621AB10CC
C:\Windows\System32\drivers\appid.sys 2BBD3A492B93C7E669D01EE88977D7DE
C:\Windows\System32\drivers\arcsas.sys E3FE8F610B1CC12BC3B2E6BC43DC97E2
C:\Windows\System32\drivers\asyncmac.sys 5E00748A1AD246CAECBBB7553BED36CC
C:\Windows\System32\drivers\atapi.sys 492B99D2E3D5D7BFD5F0AE1BE7BD37DD
C:\Windows\System32\drivers\athwnx.sys F1F16542AC6404DDC44A447A875AD13A
C:\Windows\System32\DRIVERS\avgboota.sys 344B89E8D91B1F25239310DCC7337ED0
C:\Windows\System32\DRIVERS\avgdiska.sys FF641C4AD6F27902A7D3CA57BEAA8E80
C:\Windows\System32\DRIVERS\avgidsdrivera.sys 9A809D3EA1569177B1CFA2A20E334C9D
C:\Windows\System32\DRIVERS\avgidsha.sys D54A730B8DA065C33901737446D7C006
C:\Windows\System32\DRIVERS\avgldx64.sys D2E83AA008426FC9408272035E50D40B
C:\Windows\System32\DRIVERS\avgloga.sys 1B77FEC764628B1555086F749D911859
C:\Windows\System32\DRIVERS\avgmfx64.sys 84A1DB9E6C23DDD18A34B87708DDDD30
C:\Windows\System32\DRIVERS\avgrkx64.sys 392339315A0738429B3C9E92A0F8F995
C:\Windows\System32\DRIVERS\avguniva.sys EADED7133726FEEC05C3A7CF0F661590
C:\Windows\system32\DRIVERS\avgwfpa.sys E1280D6DE33584FF88B128C9A6773719
C:\Windows\System32\drivers\bxvbda.sys 6447BA6FA709514B6C803D159B4C7D1E
C:\Windows\System32\drivers\BasicDisplay.sys B4AC08B1D04D0CE085435E5CD0E663C5
C:\Windows\System32\drivers\BasicRender.sys 25B5BB369DEE2BAE4BF459C978FF9035
C:\Windows\System32\drivers\bcmfn.sys 3F5523DCEFE42B385659C5CB46A6B810
C:\Windows\System32\drivers\bcmfn2.sys 0B750A6A6D847E73CA48ADD7A0F5A393
C:\Windows\System32\Drivers\Beep.sys 5A88834AEE15D97695FAE0837B73B3E4
C:\Windows\System32\DRIVERS\bowser.sys DA2C6F7ACE392193C424FEA975C5BFFB
C:\WINDOWS\system32\drivers\bsdriver.sys 672E789F6BD45750A79B2F4CD31A2919
C:\Windows\System32\drivers\BthAvrcpTg.sys CAEC7BC11AF69A181AF7932E636E09E4
C:\Windows\System32\drivers\bthhfenum.sys 5F2B4B32E986C058525D3BA2A475A16C
C:\Windows\System32\drivers\BthHFHid.sys 5406289E8AE2CB52FC408154E0A64BA7
C:\Windows\System32\drivers\bthmodem.sys A76F20CCCA31895A1DA78A875E50F946
C:\Windows\System32\drivers\buttonconverter.sys BF89BDBA5D3A0B4256D3F6FC8D31880D
C:\Windows\System32\drivers\capimg.sys C24C27FDF93B85A4EFCF25F830253AA2
C:\Windows\System32\DRIVERS\cdfs.sys 7F9C7226D743B232907ED2537B8A574F
C:\Windows\System32\drivers\cdrom.sys 82D97776BF982AA143BDC7DFB5054EA8
C:\Windows\System32\drivers\circlass.sys 0505C1D991D0F9D47F3353BB98597C7E
C:\Windows\System32\drivers\CLFS.sys 8B4B39C507ABA09AAFE8E3932D1B392C
C:\Windows\System32\drivers\CmBatt.sys 95832B049E2833B9F5189823CDF946C7
C:\Windows\System32\Drivers\cng.sys 80977779A19947939D680A4899E829EC
C:\Windows\System32\DRIVERS\cnghwassist.sys 58D640BC2294C71BDE0953F12D4B432F
C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys 14F9883588398A1BDE49C75098C75DE6
C:\Windows\System32\drivers\condrv.sys 02B8E49148DE5E0A2F6FDF28CE94A6AC
C:\Windows\System32\drivers\csc.sys 5D578EAAFB6FD4F59523E5878B541296
C:\Windows\System32\drivers\dam.sys 2619DC483579DB9FE804044C1ADFFD1A
C:\Windows\System32\Drivers\dfsc.sys C9478D7DB7BE5D7ACE65CB1167F07320
C:\Windows\System32\drivers\disk.sys 4904B152E4942BF700F2D73228B4D477
C:\Windows\System32\drivers\dmvsc.sys 0197AE4B9790A4E73751CACFAA480126
C:\Windows\System32\drivers\drmkaud.sys 25FA06D3B49D6ADF8E874FFCDCD76B50
C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS 29CCFF428E5EB70AE429C3DA8968E1EC
C:\Windows\System32\drivers\dxgkrnl.sys A2512BC5F2ABD84D8B3CB0D76ADB749A
C:\Windows\System32\drivers\evbda.sys 491275B864B704B54EC08168344E0F38
C:\Windows\System32\drivers\EhStorClass.sys CEF108FCE06892CFA5F1B49527D4BF49
C:\Windows\System32\drivers\EhStorTcgDrv.sys 5B1EAAE3001A7A320C106FC3859F4111
C:\Windows\System32\drivers\errdev.sys 7A2705148A4BB3CA255F81624338B461
C:\Windows\System32\Drivers\exfat.sys DFE8A33FBCF6F38182631A4D6097B92D
C:\Windows\System32\Drivers\fastfat.sys 03DE0EC072C5EBD5B018CAD83F1E522A
C:\Windows\System32\drivers\fdc.sys 9D299AE86D671488926126A84DF77BFD
C:\Windows\System32\drivers\filecrypt.sys 8F12AB59336143B680F71B217B495AD2
C:\Windows\System32\drivers\fileinfo.sys 92ECCFA58C8195B8EA33ED942469D4E6
C:\Windows\System32\drivers\filetrace.sys 87C51FDD50C17882BA93E28BBABB9847
C:\Windows\System32\drivers\flpydisk.sys E99261DD76D1C9E05AF575939CAE5AC5
C:\Windows\System32\drivers\fltmgr.sys 25D7A58625E1453E40D36825DE74E4F1
C:\Windows\System32\drivers\FsDepends.sys B4175E8BE60B099686FF55CA7D692316
C:\Windows\System32\Drivers\Fs_Rec.sys CC71372CEB811A72F1DC99089C5CBF53
C:\Windows\System32\DRIVERS\fvevol.sys 421497634C86EF4B8F86D0EBC076728F
C:\Windows\System32\drivers\gagp30kx.sys B9981A4CB9F728B3312A3885BFAA7204
C:\Windows\System32\drivers\vmgencounter.sys 77555B11B264991DDC26872FFCF1AB97
C:\Windows\System32\drivers\genericusbfn.sys F3AC9652D88BF87BA6596CBEA28CE10F
C:\Windows\System32\Drivers\msgpioclx.sys F802FBABF0C4DF1BAA733187B2E476F5
C:\Windows\System32\drivers\gpuenergydrv.sys D011B0ADB15F4815310CE1BF4780B33E
C:\Windows\System32\drivers\HdAudio.sys 0F93EBE9071A6BB1548BF0F816EEA24B
C:\Windows\System32\drivers\HDAudBus.sys 84BC034B6BB763733C1949B7B9BAF976
C:\Windows\System32\drivers\HidBatt.sys 6B8CB114B8E64C0636EB49F7B914D1FC
C:\Windows\System32\drivers\hidbth.sys D1AD197CCDAAC0CB4819DA1D6EB17BAE
C:\Windows\System32\drivers\hidi2c.sys 64909DECCFCC6FB5D9A5BAFDCCB31FEE
C:\Windows\System32\drivers\hidinterrupt.sys F510F7B7BF61DEAAC04E65C3B65E8D59
C:\Windows\System32\drivers\hidir.sys 90F3ED42D423C942BA5EA54E2FFE7AC7
C:\Windows\System32\drivers\hidusb.sys 128DEDDD61915DBA4D451D91D21F0513
C:\Windows\System32\DRIVERS\hpdskflt.sys 4E0BEC0F78096FFD6D3314B497FC49D3
C:\Windows\System32\drivers\HpSAMD.sys FF442DCDCE1F6E9FAA9C8AD0CD1D199B
C:\Windows\System32\drivers\HTTP.sys A403DAE4B083EB96BC6CEDB47639B4F8
C:\Windows\System32\drivers\hwpolicy.sys CBA5E88A0F0475B7F49653BB72150BEF
C:\Windows\System32\drivers\hyperkbd.sys D668FAB4B0397B426EE3D41683B9A1C0
C:\Windows\System32\drivers\i8042prt.sys 53FDD9E69189E546DE4740F8C4D8AB2F
C:\Windows\System32\drivers\iai2c.sys 9A2A2F3C69B9A30B6E78536F6D258BAD
C:\Windows\System32\drivers\iaLPSS2i_I2C.sys 59A20F5AD9F4AE54098154359519408E
C:\Windows\System32\drivers\iaLPSSi_GPIO.sys 16A10CCEDCF5AC4CAAE43DC9FC40392F
C:\Windows\System32\drivers\iaLPSSi_I2C.sys EB82A11613326691508D9ED9A4FE29E7
C:\Windows\System32\drivers\iaStorAV.sys 6B0029A0253098CCE28EACCFDB9E7208
C:\Windows\System32\drivers\iaStorV.sys 9652E1E35A92D8C75710C17A63B15796
C:\Windows\System32\drivers\ibbus.sys FFADF691F7BF727AF5C863454A372723
C:\Windows\System32\drivers\intelide.sys ECDB27420D3A98424666904525A8562A
C:\Windows\System32\drivers\intelpep.sys 8FF1978643EFD219C5BA49690191D701
C:\Windows\System32\drivers\intelppm.sys B61B60F36E1C8022FA8166ABF0F66B07
C:\Windows\System32\drivers\ioqos.sys CA0D42029AFFC4514D295E1EF823D02D
C:\Windows\System32\DRIVERS\ipfltdrv.sys 6E3F9D95235DFC9417384080A216F310
C:\Windows\System32\drivers\IPMIDrv.sys 4F527ECB5EAB47D8EAF34A469666C469
C:\Windows\System32\drivers\ipnat.sys 9E5E8F2A1996F23B7E9687846AA81B01
C:\Windows\System32\drivers\irenum.sys C317EB660138BC9CBFE37CCDE56351AE
C:\Windows\System32\drivers\isapnp.sys 531994A6D9399D9B74BE12B5BB58A81E
C:\Windows\System32\drivers\msiscsi.sys 68D5354A4A9692EEC24664C60F47D4A2
C:\Windows\System32\drivers\kbdclass.sys 701D7DB13B0815E7076EF4CB4CE981F8
C:\Windows\System32\drivers\kbdhid.sys 884EBBDDBF5968003B40185BD96FF0E6
C:\Windows\System32\drivers\kdnic.sys 6B3A0C7902811E6372643447E41F7048
C:\Windows\System32\Drivers\ksecdd.sys 982C795DE20CED7AEDD2E7899B5D9BC1
C:\Windows\System32\Drivers\ksecpkg.sys 7D8B9214692C4D0F1646215D9984E19A
C:\Windows\system32\drivers\ksthunk.sys E9BB0023D730701BB5D9839B44F5E6B5
C:\Windows\System32\drivers\lltdio.sys EC34EED89C34B27C292166B725AC7A7B
C:\Windows\System32\drivers\lsi_sas.sys 961F28D879D345BFA50AF51285C90F2E
C:\Windows\System32\drivers\lsi_sas2i.sys 6BFB8D1B3407518BE06B6F81F92FA0F5
C:\Windows\System32\drivers\lsi_sas3i.sys BE0E47988D78F731DEC2C0CB03E765CB
C:\Windows\System32\drivers\lsi_sss.sys F99BF02BE9219986817BF094981EEB18
C:\Windows\system32\drivers\luafv.sys 2FCF837196082864F66CFD9CAB256275
C:\WINDOWS\system32\drivers\mbam.sys CFBC6C6D8A492697CABD1D353EE64933
C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys 78488AF2AB2111D67B3C4044707A519B
C:\WINDOWS\system32\drivers\mwac.sys 08DECFCB9BA97786165A69AB1015BC30
C:\Windows\System32\drivers\megasas.sys 2ED29B635F35E31A1C0D3DDB7DD2AD03
C:\Windows\System32\drivers\megasr.sys 22E3CB85870879CBAE13C5095A8B12E3
C:\Windows\System32\drivers\mlx4_bus.sys D41920FBFFF2BBCBBC69A5B383AD022E
C:\Windows\system32\drivers\mmcss.sys 64BD0C87064EA20C2D3DC4199F9C239C
C:\Windows\System32\drivers\modem.sys 8D4B46FA84A3A3702EDADD37FAC6EDBA
C:\Windows\System32\drivers\monitor.sys 78FEC1BDB168370F131BFBFEA0A04E9D
C:\Windows\System32\drivers\mouclass.sys D1CC0833CFBC4222A95CAA5D0C8C78FF
C:\Windows\System32\drivers\mouhid.sys C2E05EC6B80BCF5AE362DA873E1BCE64
C:\Windows\System32\drivers\mountmgr.sys D5B7668A8F6C67C51FA5C6C513396D6C
C:\Windows\System32\DRIVERS\MPCKpt.sys CB2CE2BBB49963231A293E974174D1A0
C:\Windows\System32\drivers\mpsdrv.sys 5FBCB85D127BE21E3A9DAF11A13C00EA
C:\Windows\System32\drivers\mqac.sys 2B9A1FF2450BAF7A795941BE471F16EF
C:\Windows\system32\drivers\mrxdav.sys 37C9EC0398BFC22C616711E41AE157D5
C:\Windows\System32\DRIVERS\mrxsmb.sys 61F9F27A8C3D7BCD287FE98A440421CE
C:\Windows\System32\DRIVERS\mrxsmb10.sys CCAD845F4D21D0E0E0468205EE865473
C:\Windows\System32\DRIVERS\mrxsmb20.sys 0F47A6C09F0A7FB5513D322A2B9BE4EC
C:\Windows\System32\drivers\bridge.sys A934DF064C503A31683DD7EECDBD327A
C:\Windows\System32\Drivers\Msfs.sys D123343DDB02E372B02BF2C4293F835F
C:\Windows\System32\drivers\msgpiowin32.sys B3358F380BA3F29F56BE0F7734C24D5F
C:\Windows\System32\drivers\mshidkmdf.sys B2044D5D125F249680508EC0B2AAEFAC
C:\Windows\System32\drivers\mshidumdf.sys 36ABE7FC80BED4FE44754AE5CFB51432
C:\Windows\System32\drivers\msisadrv.sys 59307FEAFC9E72EEEC56B7FD7D294F4C
C:\Windows\system32\DRIVERS\MSKSSRV.sys E9457EDFEBC774199F907395C6D09CA2
C:\Windows\System32\drivers\mslldp.sys C85D79735641D27C5821C35ECDDC2334
C:\Windows\system32\DRIVERS\MSPCLOCK.sys EF75184B64356850D0F04D049C253526
C:\Windows\system32\DRIVERS\MSPQM.sys 543933D166C618E7588EA77707EC1683
C:\Windows\System32\Drivers\MsRPC.sys 182711E9DDF70121A20EBB61B2DFB9E8
C:\Windows\System32\drivers\mssmbios.sys E887FFDD6734C496407E9219225CB6FF
C:\Windows\system32\DRIVERS\MSTEE.sys 83A2AB75951000D681FABDB80C07AEFC
C:\Windows\System32\drivers\MTConfig.sys 4FA0483896FC16583851EFB733FCB083
C:\Windows\System32\Drivers\mup.sys 60F88248608315E13391C2F1C3B4473F
C:\Windows\System32\drivers\mvumis.sys 218705233D02776AE4D19CC37D985C1B
C:\Windows\System32\DRIVERS\nwifi.sys 536A0806CE2061A2157E65D4D8ABF30C
C:\Windows\System32\drivers\ndfltr.sys B57CE307DA101C739885B7CC0678077F
C:\Windows\System32\drivers\ndis.sys AFAECF904F1C343EBD50F91BC8D0DBE8
C:\Windows\System32\drivers\ndiscap.sys 202260E7CDD731A32AF62ABD1ABEE008
C:\Windows\System32\drivers\NdisImPlatform.sys A1D473D0CF10561F29B58EA7C5412A92
C:\Windows\System32\DRIVERS\ndistapi.sys 1A0AE283B8DE6BB76412A0F8213D45AC
C:\Windows\System32\drivers\ndisuio.sys A74EE2D2C0BFF5EC3A6185791868C4CA
C:\Windows\System32\drivers\NdisVirtualBus.sys 32A9BD1342640D48AD85C8B3E812B984
C:\Windows\System32\drivers\ndiswan.sys 6A6A8CF5EE61801375A38EBB871D4057
C:\Windows\System32\DRIVERS\ndiswan.sys 6A6A8CF5EE61801375A38EBB871D4057
C:\Windows\System32\DRIVERS\NDProxy.sys 50AEF8EF0064A91ABB08D858D039C9DE
C:\Windows\System32\drivers\Ndu.sys D358DF634F52247CB43F0781218F4D6E
C:\Windows\System32\drivers\netbios.sys 026618ECF6C4BEBDCB7885D42EC0DBE4
C:\Windows\System32\DRIVERS\netbt.sys F51C02D992A8D6BC5EC4D990F227D4C7
C:\Windows\System32\Drivers\Npfs.sys 465DC580170CD844206D7E3EF1DBF2A1
C:\Windows\System32\drivers\npsvctrig.sys 29395C214D2CD4C81F73166AB988A797
C:\Windows\System32\drivers\nsiproxy.sys 2871225495F832A8C8A7DD1A17EDB3DC
C:\Windows\System32\Drivers\NTFS.sys EFEFC245B884B1BE0401931398DCD707
C:\Windows\System32\Drivers\Null.sys 6DBD703320484C37CEA9E4E2D266A8CE
C:\Windows\System32\drivers\nvraid.sys 604D27CC38CC23493F218D0BB834B3FF
C:\Windows\System32\drivers\nvstor.sys 8B50D897657AB4A15FD9E251BBF7D107
C:\Windows\System32\drivers\nv_agp.sys 31F990B2B6B91E9D7A667405CE12FCB1
C:\Windows\System32\drivers\parport.sys 7D0FC96264C0F8F2C1321E33E8EB646C
C:\Windows\System32\drivers\partmgr.sys 24AC0FD10325FBC2303B29A5F237AEB0
C:\Windows\System32\drivers\pci.sys 1D4E995955BDAE781C46CB97AE1CFB58
C:\Windows\System32\drivers\pciide.sys 2B4D98DF0CA57FB9536DBC80D2449D1F
C:\Windows\System32\drivers\pcmcia.sys F4D5793BF2E58AF15C6CF2FEEF9E73EB
C:\Windows\System32\drivers\pcw.sys 22A53744CEEADFFFD33BA010FAD95229
C:\Windows\System32\drivers\pdc.sys 48F3A3222CF340FE31535CB6D49C6D6F
C:\Windows\System32\drivers\peauth.sys E2F8376F9731D12A009C522036C6073A
C:\Windows\System32\drivers\percsas2i.sys 1398A85E59698067CBBE1D66A9C13ADF
C:\Windows\System32\drivers\percsas3i.sys 35F7C7AD709D909D618D9EDF987FC3ED
C:\Windows\System32\drivers\raspptp.sys 5BA6B9AD03B81546BA64E488C4EF9D17
C:\Windows\System32\drivers\processr.sys 21AECFF3EB5748CBE12538A2500EFDE5
C:\Windows\System32\drivers\pacer.sys 596FB6C5A72F34B7566930985E543806
C:\Windows\system32\drivers\qwavedrv.sys CFBA9C976CBF6796E5DC39EF59984021
C:\Windows\System32\DRIVERS\rasacd.sys 7B2AD8C55217B514C14281AB97B4E21D
C:\Windows\System32\drivers\AgileVpn.sys E15A9CE1E2E7D1C8DF97A4FC1FFE6289
C:\Windows\System32\drivers\rasl2tp.sys 381B8F2311A0375676B635EA5E7C8AB0
C:\Windows\System32\DRIVERS\raspppoe.sys 3369023EB5790A75BA7DABA14B75D922
C:\Windows\System32\drivers\rassstp.sys 1E32A8CD65C4AD0A827CFEB13034DA29
C:\Windows\System32\DRIVERS\rdbss.sys 2B648363E4C5E34B469C58596F377DD9
C:\Windows\System32\drivers\rdpbus.sys D0221C13960E274CC539D72D5A842ED0
C:\Windows\System32\drivers\rdpdr.sys 1DC2CC74B51E4DC4CD5A20C1021E4010
C:\Windows\System32\drivers\rdpvideominiport.sys 177DF954D0DEC0465A380C75F6E7F65F
C:\Windows\System32\drivers\rdyboost.sys 5D1680871054D2B0B8A971BC8AB3B837
C:\Windows\System32\Drivers\ReFSv1.sys 341E6830DA70F65730300DAB4CB0B490
C:\Windows\System32\drivers\rspndr.sys 0AC5FCDC29ED97ECDEF1276425EE2059
C:\Windows\System32\drivers\rt640x64.sys FBEFF38DE03450E03E6CD9E8E37A8C74
C:\Windows\System32\drivers\vms3cap.sys 044890BB0D6CF1E23C1087234D320509
C:\Windows\System32\drivers\sbp2port.sys 530F797129776AA7E81994783A97E2AD
C:\Windows\System32\DRIVERS\scfilter.sys 9B6B1D4DB35A3D9BEAF023BC95E1F49D
C:\Windows\System32\drivers\sdbus.sys E1137E39C3BB3EF9AF2243745D901D60
C:\Windows\System32\drivers\sdstor.sys DE6D7DC78D956928F59F7415A0F41E13
C:\Windows\System32\drivers\SerCx.sys 67585C295FF2D221679E376B68893B35
C:\Windows\System32\drivers\SerCx2.sys B8C4852CBCAAC1374C08EC7445443824
C:\Windows\System32\drivers\serenum.sys D3A103944A8FCD78FD48B2B19092790C
C:\Windows\System32\drivers\serial.sys 88D58E1DAA6C5062DD3A26273106961F
C:\Windows\System32\drivers\sermouse.sys 0F5B43074AE731D2C6F061241C9D84A6
C:\Windows\System32\drivers\sfloppy.sys D9FE59276BD56A9643C32D5FACE2F251
C:\Windows\System32\drivers\SiSRaid2.sys ABBE803FE0BDAE0E5BE74DDEFBE62F23
C:\Windows\System32\drivers\sisraid4.sys 6043DF55CFE3C7ACF477645FA64DEA98
C:\Windows\System32\drivers\spaceport.sys 1A6CB30F0EFC1632E6F1B852CA892583
C:\Windows\System32\drivers\SpbCx.sys E1C158F6C00359278727A2CEE5D2ED71
C:\Program Files (x86)\ShopperPro3\JSDriver\1.42.1.10633\jsdrv.sys 27A09A902C1591AE8BD532AAC3250078
C:\Windows\System32\DRIVERS\srv.sys ACC1709EC7FE6EB8999DBC91C50C2B34
C:\Windows\System32\DRIVERS\srv2.sys AFBCFC946FAE7483E27BD316D03F94A5
C:\Windows\System32\DRIVERS\srvnet.sys 107C1EBE79710E4A759449BD6604245A
C:\Windows\System32\drivers\stexstor.sys CCDA497C880AD16D87EDFAEFCFB2EDF5
C:\Windows\System32\drivers\storahci.sys BF8EA6FC3358C2F69678E3E94F764F84
C:\Windows\System32\drivers\vmstorfl.sys 32FF460DA8C1F370F5C08B7654899B73
C:\Windows\System32\drivers\stornvme.sys CC21DB3EF619B9480FE31A4EFE92CBEB
C:\Windows\System32\drivers\storqosflt.sys 390B8A75768E2689586539C224520895
C:\Windows\System32\drivers\storufs.sys 770A92D9D3A0BF61C97C3AFCB36847D9
C:\Windows\System32\drivers\storvsc.sys 736A2418E3E7F3DB3CF6EB0A55D1D581
C:\Windows\System32\drivers\swenum.sys BD98B0225BCD49E8A62F4F8EE1D1F613
C:\Windows\System32\drivers\Synth3dVsc.sys CAE4B27B469C583131EA5AAE622F5D76
C:\Windows\system32\DRIVERS\SynTP.sys AC3CC98B1BDB6540021D3FFB105AC2B9
C:\Windows\System32\drivers\tcpip.sys 892F30506DCCF230C5A57019C1D8D31B
C:\Windows\System32\drivers\tcpip.sys 892F30506DCCF230C5A57019C1D8D31B
C:\Windows\System32\drivers\tcpipreg.sys 17F37EC9042D84561C550620643D9A85
C:\Windows\system32\DRIVERS\tdx.sys 91D3F2A6253EF83EFBD7903028F58C4D
C:\Windows\System32\drivers\terminpt.sys E730D0EB1B84EBC98423FC8D285EDBC0
C:\Windows\System32\drivers\tpm.sys 169B0A246067457FEF8A18EED7EED9D5
C:\Windows\System32\drivers\TsUsbFlt.sys 48E828C66AB016E48F2CB4DD585315FD
C:\Windows\System32\drivers\TsUsbGD.sys 267C76EE60736EA5A1811A53FA02AABE
C:\Windows\System32\drivers\tsusbhub.sys E1748D04AE40118B62BC18AC86032192
C:\Windows\System32\drivers\tunnel.sys 8CE72F094B822AD5EE9C3A3AFC0C16B6
C:\Windows\System32\drivers\uagp35.sys 42C546414F80BD6C0137FC3A106F8A69
C:\Windows\System32\drivers\uaspstor.sys 1686DBC81748B096232B15F16C302985
C:\Windows\System32\Drivers\UcmCx.sys 3995CC3DEDED258768B8EBC2F4C0DC73
C:\Windows\System32\drivers\UcmUcsi.sys 1C95F7CE37D9EFB90EBE987A9712356C
C:\Windows\System32\drivers\ucx01000.sys AED081772091C98173905E2DF28C223B
C:\Windows\System32\drivers\udecx.sys DCA34A111C29E4578DF2B8CEA3C7CDBD
C:\Windows\System32\DRIVERS\udfs.sys 718A956AE00CE086F381044AB66CC29C
C:\Windows\System32\drivers\UEFI.sys BA760F8E66428BA9FF1E8BFBC6248136
C:\Windows\System32\drivers\ufx01000.sys 5F0D997E6FC5A418D7673148CEF72887
C:\Windows\System32\drivers\UfxChipidea.sys 2B1DABA97DDF5365FC66EE7DEDD86A13
C:\Windows\System32\drivers\ufxsynopsys.sys DB630FC660443D63EBAB2C830C298EFE
C:\Windows\System32\drivers\uliagpkx.sys 6DE78C04BF32ECA7AF3064F53687C9A5
C:\Windows\System32\drivers\umbus.sys 67D1E0E6E4D5D33AF0AEF0E33B4DA0F4
C:\Windows\System32\drivers\umpass.sys 11680607944A719EF20E0E740785712A
C:\Windows\System32\drivers\urschipidea.sys 2410A0C20D21A25E6C01979FA886BE90
C:\Windows\System32\drivers\urscx01000.sys 6E59CE43B6BA5AA1ADCF36A4DBBB92BB
C:\Windows\System32\drivers\urssynopsys.sys E8A59FA109A22FC07E44BDFCC9727DBD
C:\Windows\System32\drivers\usbccgp.sys D8A44550ECE102B6443F5D54DCE7DAB3
C:\Windows\System32\drivers\usbcir.sys 66B3D22DAB5312FF238ABF5C6D9F8FAB
C:\Windows\System32\drivers\usbehci.sys 3E4F20DB902D2E2914F3FF3DB9772200
C:\Windows\System32\drivers\usbhub.sys 41F7F00D76904416EF1F9EFA1A4C37A2
C:\Windows\System32\drivers\UsbHub3.sys 12A0B486EA13DF46C27B90CC2CE92FE5
C:\Windows\System32\drivers\usbohci.sys DAB35CCA86F5FBE77D870A40089BC4A1
C:\Windows\System32\drivers\usbprint.sys 21162F65C7756AAECAEBED9E67D0A5FE
C:\Windows\System32\drivers\usbser.sys CA6369870F91F3D367D26278E0AD0DDF
C:\Windows\System32\drivers\USBSTOR.SYS 37C2CD8587BF7F785381EB7B26916B52
C:\Windows\System32\drivers\usbuhci.sys 8B3E458A8851F9A3B2109B1680EE1159
C:\Windows\System32\Drivers\usbvideo.sys 4B13B61CBB9CC3CB373C60B930D648F5
C:\Windows\System32\drivers\USBXHCI.SYS 325727F01F03C504CF788618A13DC266
C:\Windows\System32\drivers\vdrvroot.sys E1BE37312785A71862516F66B3FD24CE
C:\Windows\System32\drivers\VerifierExt.sys E42C0F2850735FF9D908B9DB581E6314
C:\Windows\System32\drivers\vhdmp.sys EC15FD6A28757793E2DA394CD94ABD52
C:\Windows\System32\drivers\vhf.sys D0C9632C350F46786643A069251BC249
C:\Windows\System32\drivers\vmbus.sys E886CB75DA2B6EB35469EF10135624C7
C:\Windows\System32\drivers\VMBusHID.sys 46D2EC27820EC0F798F85821E53C2942
C:\Windows\System32\drivers\volmgr.sys B9265F47E7A354BAAA0AF5CBA3F8F7CE
C:\Windows\System32\drivers\volmgrx.sys BEE9C8B72AB752B794F69C2B9B3678AA
C:\Windows\System32\drivers\volsnap.sys E1F91A727A04C9F8199D04FF3BBBF63C
C:\WINDOWS\system32\Drivers\VOTw864.sys 6C50BD013DD96C9BDB5F3F68D641E12F
C:\Windows\System32\drivers\vpci.sys F7B1B1101271E31F43CC76E890704F51
C:\Windows\System32\drivers\vsmraid.sys D48ED0A08BD2FD25A833E6AC99623091
C:\Windows\System32\drivers\vstxraid.sys 6990D4AFDF545669D4E6C232F26DE1FB
C:\Windows\System32\drivers\vwifibus.sys 1EE11F0508C58EF081F4176E66D6970B
C:\Windows\System32\drivers\vwififlt.sys 938E4EF58E42D252B742B0E243011B90
C:\Windows\System32\drivers\vwifimp.sys 3BE5AAC930447FD18D4A8255A2FEC95C
C:\Windows\System32\drivers\wacompen.sys 00C27B64C758C111E5D78A70DE6CA2B6
C:\Windows\System32\DRIVERS\wanarp.sys 8CB53620B2C2F0641DD7563EA0FDF491
C:\Windows\System32\DRIVERS\wanarp.sys 8CB53620B2C2F0641DD7563EA0FDF491
C:\Windows\system32\drivers\WdBoot.sys 069D3D6E20AD753B34FCE856F0436869
C:\Windows\System32\drivers\Wdf01000.sys 6CC727E94CD84E9720FDCDA8089CABCC
C:\Windows\system32\drivers\WdFilter.sys E3E97151A1D1E87BB2D5371F66C5F169
C:\Windows\System32\DRIVERS\wdiwifi.sys E70DDD8E2245CC67547B0861983912D8
C:\Windows\System32\Drivers\WdNisDrv.sys 07B043160399AF4009054E2EA3464BF4
C:\Windows\System32\drivers\wfplwfs.sys C11272713719922DE5711094333BD166
C:\Windows\System32\drivers\wimmount.sys EF536C54AB9281FDC4E83B07279FCFC4
C:\Windows\System32\drivers\WindowsTrustedRT.sys D8966A76408107224C6013993135DD78
C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys 8B102A7B6CE326FD4208CC7C2D183343
C:\Windows\System32\drivers\winmad.sys 4A53441C1C4D2878BEF27E381138BB2D
C:\Windows\System32\drivers\WinUSB.SYS 260907CE034FE327AC99BDA4153AB22F
C:\Windows\System32\drivers\winverbs.sys 40A3E8D729F458B2C9A8BD9380FF83D5
C:\Windows\System32\drivers\wmiacpi.sys 8F010BF65238F3F822D22BA12831796E
C:\Windows\System32\Drivers\Wof.sys 2A9650FCC696DB28E45EA8B33B99B8E6
C:\Windows\System32\DRIVERS\wpcfltr.sys 22C52D7EE7C7D0E02C8EFD8CAE8E3A71
C:\Windows\System32\drivers\WpdUpFltr.sys 1C08E424CBDD5065BB7266F8C048C1B1
C:\Windows\system32\drivers\ws2ifsl.sys 638B43D39A3D0B47024555CF1095E6F1
C:\Windows\System32\drivers\WudfPf.sys A928F25CB62232F413EE655352856E10
C:\Windows\System32\drivers\WudfRd.sys A932391623D5CEC4EF4A2A17D3CEBFCD
C:\Windows\system32\DRIVERS\WUDFRd.sys A932391623D5CEC4EF4A2A17D3CEBFCD
C:\Windows\system32\DRIVERS\WUDFRd.sys A932391623D5CEC4EF4A2A17D3CEBFCD
C:\Windows\System32\drivers\xboxgip.sys 80BC02A73A3949A7AEF34791206C7D7F
C:\Windows\System32\drivers\xinputhid.sys 1F1EF8E701859581251B52035C1C1CEF

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Three Months Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-04 21:15 - 2016-03-04 21:19 - 00048401 _____ C:\Users\Pavilion\Desktop\FRST.txt
2016-03-04 21:15 - 2016-03-04 21:15 - 00000000 ____D C:\FRST
2016-03-04 21:13 - 2016-03-04 21:15 - 02374144 _____ (Farbar) C:\Users\Pavilion\Desktop\FRST64.exe
2016-03-04 20:20 - 2016-03-04 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
2016-03-04 07:19 - 2016-03-04 07:19 - 00000000 _____ C:\WINDOWS\SysWOW64\ws.db
2016-03-04 07:08 - 2016-03-04 07:08 - 00000000 ____D C:\ProgramData\36db0c4b-56b3-0
2016-03-03 13:03 - 2016-03-03 13:03 - 00003888 _____ C:\WINDOWS\System32\Tasks\{78F050FA-630C-8830-4A0C-DB36C4C6C07E}
2016-03-03 13:03 - 2016-03-03 13:03 - 00000000 ____D C:\ProgramData\a4d5839c
2016-03-03 13:03 - 2016-03-03 13:03 - 00000000 ____D C:\ProgramData\36db0c4b-40f5-0
2016-03-03 13:03 - 2016-03-03 13:03 - 00000000 ____D C:\ProgramData\{07d02610-312c-0}
2016-03-03 13:03 - 2016-03-03 13:03 - 00000000 ____D C:\ProgramData\{0724b90a-612c-1}
2016-03-02 21:48 - 2016-03-02 21:48 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\AVG
2016-03-02 21:41 - 2016-03-02 21:41 - 00001009 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-03-02 21:41 - 2016-03-02 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-03-02 21:30 - 2016-03-02 21:30 - 00000000 ___HD C:\$AVG
2016-03-02 20:59 - 2016-03-02 21:30 - 00000000 ____D C:\ProgramData\Avg
2016-03-02 20:59 - 2016-03-02 21:17 - 00000000 ____D C:\Program Files (x86)\AVG
2016-03-02 20:57 - 2016-03-02 21:47 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Avg
2016-03-02 20:57 - 2016-03-02 21:03 - 00000000 ____D C:\Users\Pavilion\AppData\Local\AvgSetupLog
2016-03-02 20:56 - 2016-03-04 18:59 - 00000000 ____D C:\ProgramData\MFAData
2016-03-02 20:56 - 2016-03-02 20:56 - 00000000 ____D C:\Users\Pavilion\AppData\Local\MFAData
2016-03-02 20:56 - 2016-03-02 20:56 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Avg2015
2016-03-02 20:55 - 2016-03-02 20:56 - 01142328 _____ (Download Assistant) C:\Users\Pavilion\Documents\AVG_Free_Setup.exe
2016-03-02 20:24 - 2016-03-02 20:24 - 00000559 _____ C:\prefs.js
2016-03-02 20:24 - 2016-03-02 20:24 - 00000000 ____D C:\searchplugins
2016-03-02 20:23 - 2016-03-02 20:23 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Lavasoft
2016-03-02 20:23 - 2016-03-02 20:23 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Lavasoft
2016-03-02 20:23 - 2016-03-02 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2016-03-02 20:22 - 2016-03-02 22:50 - 00002936 _____ C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini
2016-03-02 20:22 - 2016-03-02 22:50 - 00002936 _____ C:\WINDOWS\system32\LavasoftTcpServiceOff.ini
2016-03-02 20:22 - 2016-03-02 20:22 - 00425744 _____ (Lavasoft Limited) C:\WINDOWS\system32\LavasoftTcpService64.dll
2016-03-02 20:22 - 2016-03-02 20:22 - 00345360 _____ (Lavasoft Limited) C:\WINDOWS\SysWOW64\LavasoftTcpService.dll
2016-03-02 20:22 - 2016-03-02 20:22 - 00000000 ____D C:\Program Files (x86)\Lavasoft
2016-03-02 20:20 - 2016-03-02 20:20 - 00000000 ____D C:\ProgramData\Lavasoft
2016-03-02 02:21 - 2016-03-02 02:21 - 00000000 ____D C:\WINDOWS\system32\kaio
2016-03-01 13:17 - 2016-03-01 13:17 - 00000000 ____D C:\WINDOWS\system32\hope
2016-02-26 09:05 - 2016-02-26 09:05 - 00000000 ____D C:\WINDOWS\system32\byjg
2016-02-25 20:31 - 2016-02-25 20:31 - 00000000 ____D C:\WINDOWS\system32\uke
2016-02-25 08:03 - 2016-02-25 08:03 - 00000000 ____D C:\WINDOWS\system32\hebj
2016-02-24 09:28 - 2016-02-24 09:28 - 00001570 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-24 09:00 - 2016-02-24 08:49 - 00388608 _____ (Trend Micro Inc.) C:\Users\Pavilion\Desktop\HijackThis.exe
2016-02-23 14:13 - 2016-02-23 14:13 - 00000000 ____D C:\WINDOWS\system32\Drivers\NSx64
2016-02-23 14:13 - 2016-02-23 14:13 - 00000000 ____D C:\ProgramData\NortonInstaller
2016-02-23 14:13 - 2016-02-23 14:13 - 00000000 ____D C:\ProgramData\Norton
2016-02-23 14:13 - 2016-02-23 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2016-02-23 14:13 - 2016-02-23 14:13 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-02-23 14:13 - 2016-02-23 14:13 - 00000000 ____D C:\Program Files (x86)\Norton Security
2016-02-23 14:12 - 2016-02-23 14:12 - 46892569 _____ (Google Inc. ) C:\Users\Pavilion\Downloads\chrome-setup.exe
2016-02-23 14:06 - 2016-02-24 20:51 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\ScreenSnapshotTool
2016-02-23 14:06 - 2016-02-23 14:06 - 00000000 ____D C:\Users\Public\Documents\Guid
2016-02-23 14:06 - 2016-02-23 14:06 - 00000000 ____D C:\Users\Public\Documents\Baidu
2016-02-23 14:06 - 2016-02-23 14:06 - 00000000 ____D C:\Program Files (x86)\ScreenSnapshotTool
2016-02-22 23:57 - 2016-02-24 09:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-02-21 18:59 - 2016-02-21 18:59 - 00003584 _____ C:\Users\Pavilion\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-02-21 00:16 - 2016-02-21 00:16 - 00000000 ____D C:\WINDOWS\system32\kylq
2016-02-20 21:37 - 2016-02-20 21:37 - 00000000 ____D C:\WINDOWS\system32\mabj
2016-02-18 13:08 - 2016-02-18 13:08 - 00000000 ____D C:\WINDOWS\system32\cao
2016-02-18 08:10 - 2016-02-18 08:11 - 00000000 ____D C:\Users\Pavilion\AppData\Local\30464E43-1455783058-4B31-385A-C80AA9974D49
2016-02-17 14:32 - 2016-03-02 20:32 - 00000144 _____ C:\Users\Pavilion\AppData\Roaming\WB.CFG
2016-02-17 13:35 - 2016-02-17 13:35 - 00002349 _____ C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2016-02-17 13:35 - 2016-02-17 13:35 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Chromium
2016-02-17 13:34 - 2016-02-17 13:34 - 00003402 _____ C:\WINDOWS\System32\Tasks\PBOnce
2016-02-17 13:33 - 2016-02-24 09:02 - 00003640 _____ C:\WINDOWS\System32\Tasks\ProfessionalCleaningSoftware_Popup
2016-02-17 13:33 - 2016-02-17 13:37 - 00000000 ____D C:\ProgramData\PasswordBoss
2016-02-17 13:33 - 2016-02-17 13:33 - 00003418 _____ C:\WINDOWS\System32\Tasks\ProfessionalCleaningSoftware_Start
2016-02-17 13:33 - 2016-02-17 13:33 - 00003336 _____ C:\WINDOWS\System32\Tasks\PasswordBoss_Desktop
2016-02-17 13:33 - 2016-02-17 13:33 - 00001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Password Boss.lnk
2016-02-17 13:33 - 2016-02-17 13:33 - 00001124 _____ C:\Users\Public\Desktop\Password Boss.lnk
2016-02-17 13:33 - 2016-02-17 13:33 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\updates
2016-02-17 13:33 - 2016-02-17 13:33 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Professional_Cleaning_Sof
2016-02-17 13:33 - 2016-02-17 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PasswordBoss
2016-02-17 13:32 - 2016-03-04 20:32 - 00000306 _____ C:\WINDOWS\Tasks\Go_Palikan.job
2016-02-17 13:32 - 2016-03-03 07:32 - 00000000 ____D C:\Users\Pavilion\AppData\Local\{745E4202-50F6-2EBA-3D6E-0B521906F7CA}
2016-02-17 13:32 - 2016-02-17 13:33 - 00000000 ____D C:\Program Files (x86)\PasswordBoss
2016-02-17 13:32 - 2016-02-17 13:32 - 00002790 _____ C:\WINDOWS\System32\Tasks\Go_Palikan
2016-02-17 13:32 - 2016-02-17 13:32 - 00000000 ____D C:\ProgramData\InstallMate
2016-02-17 13:31 - 2016-02-17 13:31 - 00000000 ____D C:\Program Files (x86)\Pro PC Cleaner
2016-02-17 03:55 - 2016-02-17 03:55 - 00000000 ____D C:\WINDOWS\system32\eiko
2016-02-17 03:26 - 2016-03-03 07:50 - 00000000 ____D C:\Program Files\shopperz170220161305
2016-02-17 03:26 - 2016-03-02 22:56 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\ToqtudDoabje
2016-02-17 03:26 - 2016-02-17 03:26 - 00003424 _____ C:\WINDOWS\System32\Tasks\Ruoijfij
2016-02-17 03:26 - 2016-02-17 03:26 - 00000150 _____ C:\Users\Pavilion\Desktop\FTM+.url
2016-02-17 03:26 - 2016-02-17 03:26 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Shortcut Installer
2016-02-17 03:24 - 2016-02-17 03:24 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sound+ 1.0
2016-02-17 03:23 - 2016-02-17 03:23 - 00001124 _____ C:\Users\Pavilion\Desktop\VirusDefense.lnk
2016-02-17 03:23 - 2016-02-17 03:23 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirusDefense
2016-02-17 03:23 - 2016-02-17 03:23 - 00000000 ____D C:\Program Files (x86)\VirusDefense
2016-02-17 03:13 - 2016-03-03 07:45 - 00000000 ____D C:\Users\Pavilion\AppData\Local\30464E43-1455678818-4B31-385A-C80AA9974D49
2016-02-17 03:11 - 2016-03-03 07:51 - 00000000 ____D C:\Program Files (x86)\30464E43-1455707515-4B31-385A-C80AA9974D49
2016-02-17 03:11 - 2016-02-17 03:11 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2016-02-17 03:11 - 2016-02-17 03:11 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\ASPackage
2016-02-17 01:34 - 2016-02-17 01:34 - 00011264 _____ () C:\WINDOWS\errr.exe
2016-02-16 15:09 - 2016-02-16 15:09 - 00000000 ____D C:\WINDOWS\system32\genp
2016-02-15 16:38 - 2016-02-15 16:38 - 00269232 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgmfx64.sys
2016-02-15 05:52 - 2016-02-15 05:52 - 00012288 _____ () C:\WINDOWS\MyTrayApp.exe
2016-02-15 01:44 - 2016-02-15 01:44 - 00000000 ____D C:\WINDOWS\system32\oget
2016-02-14 23:35 - 2016-02-14 23:35 - 00022528 _____ () C:\WINDOWS\HardwareInformation.exe
2016-02-14 02:32 - 2016-02-14 02:32 - 00000000 ____D C:\WINDOWS\system32\dyk
2016-02-12 19:34 - 2016-02-12 19:34 - 00003919 _____ C:\WINDOWS\ab.bat
2016-02-11 16:10 - 2016-02-11 16:10 - 00000000 ____D C:\WINDOWS\system32\yul
2016-02-10 21:23 - 2016-02-10 21:23 - 00000000 ____D C:\WINDOWS\system32\tecb
2016-02-10 18:54 - 2016-02-10 18:54 - 00000000 ____D C:\WINDOWS\system32\sabm
2016-02-10 15:49 - 2016-02-10 15:49 - 00000000 ____D C:\WINDOWS\system32\katn
2016-02-10 08:53 - 2016-02-10 08:53 - 00000000 ____D C:\WINDOWS\system32\dos
2016-02-09 23:58 - 2016-02-09 23:58 - 00000000 ____D C:\WINDOWS\system32\ooom
2016-02-09 17:08 - 2016-02-09 17:08 - 00000000 ____D C:\WINDOWS\system32\fil
2016-02-09 07:52 - 2016-02-09 07:52 - 00000000 ____D C:\WINDOWS\system32\coe
2016-02-09 01:33 - 2016-02-09 01:33 - 00000000 ____D C:\WINDOWS\system32\vywi
2016-02-08 05:02 - 2016-02-08 05:02 - 00000000 ____D C:\WINDOWS\system32\buo
2016-02-08 01:54 - 2016-02-08 01:54 - 00000000 ____D C:\WINDOWS\system32\ieu
2016-02-07 11:59 - 2016-02-07 11:59 - 00000000 ____D C:\WINDOWS\system32\eih
2016-02-06 17:48 - 2016-02-06 17:48 - 00000000 ____D C:\WINDOWS\system32\lang
2016-02-06 14:15 - 2016-02-06 14:15 - 00000000 ____D C:\WINDOWS\system32\robo
2016-02-06 13:16 - 2016-02-06 13:16 - 00000000 ____D C:\WINDOWS\system32\faw
2016-02-06 11:21 - 2016-02-06 11:21 - 00000000 ____D C:\WINDOWS\system32\nir
2016-02-06 05:49 - 2016-02-06 05:49 - 00000000 ____D C:\WINDOWS\system32\nen
2016-02-05 21:56 - 2016-02-05 21:56 - 00000000 ____D C:\WINDOWS\system32\lodb
2016-02-04 07:36 - 2016-02-04 07:36 - 00000000 ____D C:\WINDOWS\system32\higs
2016-02-03 21:03 - 2016-03-04 20:24 - 00000000 ____D C:\Program Files (x86)\MPC AdCleaner
2016-02-03 21:03 - 2016-02-03 21:03 - 00003428 _____ C:\WINDOWS\System32\Tasks\MPC AdCleaner
2016-02-03 21:03 - 2016-02-03 21:03 - 00001932 _____ C:\Users\Pavilion\Desktop\MPC AdCleaner.lnk
2016-02-03 21:03 - 2016-02-03 21:03 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MPC AdCleaner
2016-02-03 20:49 - 2016-03-04 20:20 - 00001798 _____ C:\Users\Public\Desktop\MPC Cleaner.lnk
2016-02-03 18:54 - 2016-02-03 18:54 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindoWeather
2016-02-03 18:50 - 2016-02-25 05:59 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner
2016-02-03 18:50 - 2016-02-24 09:09 - 00059112 _____ (DotC United Inc) C:\WINDOWS\system32\Drivers\MPCKpt.sys
2016-02-03 18:47 - 2016-03-02 22:08 - 00000000 ____D C:\Program Files (x86)\WindoWeather
2016-02-03 14:36 - 2016-03-03 07:54 - 00003832 _____ C:\WINDOWS\System32\Tasks\DriverRestore_ScheduledScan
2016-02-03 14:36 - 2016-03-03 07:54 - 00003674 _____ C:\WINDOWS\System32\Tasks\DriverRestore_DailyScan
2016-02-03 14:30 - 2016-03-03 07:58 - 00000000 ____D C:\Program Files (x86)\DriverRestore
2016-02-03 14:30 - 2016-02-03 14:31 - 00001136 _____ C:\Users\Public\Desktop\DriverRestore.lnk
2016-02-03 14:30 - 2016-02-03 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverRestore
2016-02-03 14:30 - 2015-10-09 02:04 - 00020872 _____ (Phoenix Technologies) C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS
2016-02-03 14:29 - 2016-02-03 14:29 - 00000000 ____D C:\WINDOWS\system32\cibh
2016-02-03 11:53 - 2016-02-03 11:53 - 00378288 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgloga.sys
2016-02-02 19:53 - 2016-02-24 09:11 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\chrome
2016-02-02 19:53 - 2016-02-19 15:46 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-02 19:41 - 2016-03-04 20:20 - 00000302 _____ C:\WINDOWS\Tasks\System HealerStartUp.job
2016-02-02 19:41 - 2016-02-25 07:03 - 00000302 _____ C:\WINDOWS\Tasks\System HealerPeriod.job
2016-02-02 19:41 - 2016-02-02 19:41 - 00002932 _____ C:\WINDOWS\System32\Tasks\System HealerPeriod
2016-02-02 19:41 - 2016-02-02 19:41 - 00002638 _____ C:\WINDOWS\System32\Tasks\System HealerStartUp
2016-02-02 19:40 - 2016-03-03 07:53 - 00000000 ____D C:\Program Files (x86)\SystemHealer
2016-02-02 19:40 - 2016-02-02 19:46 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\System Healer
2016-02-02 19:40 - 2016-02-02 19:40 - 00003688 _____ C:\WINDOWS\System32\Tasks\System Healer Task
2016-02-02 19:40 - 2016-02-02 19:40 - 00003428 _____ C:\WINDOWS\System32\Tasks\SystemHealer Run Delay
2016-02-02 19:40 - 2016-02-02 19:40 - 00003358 _____ C:\WINDOWS\System32\Tasks\SystemHealer Monitor
2016-02-02 19:40 - 2016-02-02 19:40 - 00001124 _____ C:\Users\Public\Desktop\Launch System Healer.lnk
2016-02-02 19:40 - 2016-02-02 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer
2016-02-02 19:39 - 2016-02-03 18:15 - 00000000 ____D C:\Users\Pavilion\AppData\Local\NowUSeeItPlayer
2016-02-02 19:39 - 2016-02-02 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NowUSeeIt Player
2016-02-02 19:39 - 2016-02-02 19:39 - 00000000 ____D C:\Program Files (x86)\NowUSeeItPlayer
2016-02-02 19:38 - 2016-03-04 21:24 - 00000300 _____ C:\WINDOWS\Tasks\JumpstaOf815.job
2016-02-02 19:38 - 2016-03-04 20:49 - 00000300 _____ C:\WINDOWS\Tasks\PanoramiShoc77.job
2016-02-02 19:38 - 2016-03-04 20:24 - 00010712 _____ C:\WINDOWS\SysWOW64\VOTPrxOff.ini
2016-02-02 19:38 - 2016-03-04 20:24 - 00010712 _____ C:\WINDOWS\system32\VOTPrxOff.ini
2016-02-02 19:38 - 2016-02-02 19:38 - 00003218 _____ C:\WINDOWS\System32\Tasks\PanoramiShoc77
2016-02-02 19:38 - 2016-02-02 19:38 - 00003214 _____ C:\WINDOWS\System32\Tasks\JumpstaOf815
2016-02-02 19:38 - 2016-02-02 19:38 - 00000000 ____D C:\Users\Pavilion\AppData\Local\JumpstThun357
2016-02-02 19:38 - 2016-02-02 19:38 - 00000000 ____D C:\Users\Pavilion\AppData\Local\ElastiMotio68
2016-02-02 19:38 - 2015-08-07 15:01 - 00044136 _____ (VentureOmni Technologies) C:\WINDOWS\system32\Drivers\VOTw864.sys
2016-02-02 19:36 - 2016-03-03 07:53 - 00000000 ____D C:\Program Files (x86)\Search Web Know
2016-02-02 19:36 - 2016-03-02 22:56 - 00000000 ____D C:\ProgramData\219d5106-5a99-41fd-b942-db6b503b0178
2016-02-02 19:35 - 2016-03-02 22:17 - 00000000 ____D C:\Users\Pavilion\AppData\Local\UpdateAdmin
2016-02-02 19:35 - 2016-02-02 19:35 - 00003918 _____ C:\WINDOWS\System32\Tasks\UpdateAdmin
2016-02-02 19:35 - 2016-02-02 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UpdateAdmin
2016-01-31 18:03 - 2016-01-31 18:03 - 00000000 ____D C:\WINDOWS\system32\ise
2016-01-31 09:02 - 2016-01-31 09:02 - 00000000 ____D C:\WINDOWS\system32\voob
2016-01-31 08:06 - 2016-01-31 08:06 - 00000000 ____D C:\Program Files (x86)\regtool
2016-01-30 04:56 - 2016-01-30 04:56 - 00000000 ____D C:\WINDOWS\system32\opac
2016-01-29 18:34 - 2016-01-29 18:34 - 00000000 ____D C:\WINDOWS\system32\owa
2016-01-29 09:14 - 2016-01-29 09:14 - 00000000 ____D C:\WINDOWS\system32\lurb
2016-01-29 08:11 - 2016-01-29 08:11 - 00000000 ____D C:\WINDOWS\system32\foh
2016-01-28 10:00 - 2016-01-28 10:00 - 00000000 ____D C:\WINDOWS\system32\bolp
2016-01-28 00:13 - 2016-01-28 00:13 - 00001128 _____ C:\Users\Pavilion\Desktop\Weather Wizard.lnk
2016-01-28 00:13 - 2016-01-28 00:13 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Weather Wizard
2016-01-28 00:13 - 2016-01-28 00:13 - 00000000 ____D C:\Program Files (x86)\Weather Wizard
2016-01-28 00:05 - 2016-03-04 21:10 - 00000440 ____H C:\WINDOWS\Tasks\GFWRCXRFILHBOWQG.job
2016-01-28 00:05 - 2016-03-04 20:20 - 00000384 _____ C:\WINDOWS\Tasks\OPJRVQSN1.job
2016-01-28 00:05 - 2016-03-03 07:45 - 00000000 ____D C:\ProgramData\TomorrowGames
2016-01-28 00:05 - 2016-03-03 07:45 - 00000000 ____D C:\ProgramData\Service1104
2016-01-28 00:05 - 2016-01-28 00:05 - 00003454 _____ C:\WINDOWS\System32\Tasks\GFWRCXRFILHBOWQG
2016-01-28 00:05 - 2016-01-28 00:05 - 00002952 _____ C:\WINDOWS\System32\Tasks\OPJRVQSN1
2016-01-28 00:05 - 2016-01-28 00:05 - 00001922 _____ C:\Users\Public\Desktop\Play Games.lnk
2016-01-28 00:05 - 2016-01-28 00:05 - 00000000 ____D C:\ProgramData\19a87fa1ec024bbcbb41931263354405
2016-01-27 23:42 - 2016-01-27 23:43 - 00000000 ____D C:\Program Files (x86)\msrtn32
2016-01-27 23:28 - 2016-01-27 23:28 - 00000000 ____D C:\WINDOWS\system32\paif
2016-01-27 15:54 - 2016-01-27 15:54 - 00000000 ____D C:\WINDOWS\system32\wha
2016-01-27 14:47 - 2016-01-27 14:47 - 00000000 ___HD C:\$Windows.~WS
2016-01-27 08:42 - 2016-01-27 08:42 - 00000000 ____D C:\WINDOWS\system32\goc
2016-01-27 07:43 - 2016-03-03 13:11 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-26 23:38 - 2016-01-26 23:38 - 00001341 _____ C:\Users\Public\Desktop\Solid YouTube Downloader and Converter.lnk
2016-01-26 23:38 - 2016-01-26 23:38 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\youtube-downloader-and-converter
2016-01-26 23:38 - 2016-01-26 23:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solid YouTube Downloader and Converter
2016-01-26 23:38 - 2016-01-26 23:38 - 00000000 ____D C:\Program Files (x86)\Solid YouTube Downloader and Converter
2016-01-26 22:10 - 2016-03-03 07:45 - 00000000 ____D C:\Users\Pavilion\AppData\Local\21299
2016-01-26 21:59 - 2016-03-03 07:46 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Birds365
2016-01-26 21:59 - 2016-03-03 07:46 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Birds
2016-01-26 21:53 - 2016-03-03 07:50 - 00000000 ____D C:\Program Files\groover270120160530
2016-01-26 21:53 - 2016-01-26 21:53 - 00003422 _____ C:\WINDOWS\System32\Tasks\Hicpadf
2016-01-26 21:50 - 2016-03-02 22:56 - 00000000 ____D C:\Users\Pavilion\AppData\Local\SearchModule
2016-01-26 21:50 - 2016-03-02 22:48 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\BejmaDua
2016-01-26 21:50 - 2016-02-17 03:26 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Tempfolder
2016-01-26 21:50 - 2016-01-26 21:50 - 00003534 _____ C:\WINDOWS\System32\Tasks\SMWUpd
2016-01-26 21:50 - 2016-01-26 21:50 - 00003506 _____ C:\WINDOWS\System32\Tasks\RSPro
2016-01-26 21:47 - 2016-03-03 07:51 - 00000000 ____D C:\Program Files\shopperz260120162332
2016-01-26 21:47 - 2016-01-26 21:47 - 00034712 _____ () C:\WINDOWS\system32\Drivers\bsdriver.sys
2016-01-26 21:47 - 2016-01-26 21:47 - 00003422 _____ C:\WINDOWS\System32\Tasks\Ioagapi
2016-01-26 21:47 - 2016-01-26 21:47 - 00000000 ____D C:\Users\Pavilion\AppData\LocalLow\Company
2016-01-26 21:47 - 2016-01-26 21:47 - 00000000 ____D C:\Users\Pavilion\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
2016-01-26 21:47 - 2016-01-26 21:47 - 00000000 ____D C:\uninst
2016-01-26 21:47 - 2016-01-26 21:47 - 00000000 _____ C:\WINDOWS\SysWOW64\Number of results
2016-01-26 11:04 - 2016-01-26 11:04 - 00315312 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsdrivera.sys
2016-01-26 11:04 - 2016-01-26 11:04 - 00272304 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgidsha.sys
2016-01-26 08:45 - 2016-01-26 09:45 - 00000000 ____D C:\Program Files (x86)\Citrix
2016-01-26 08:44 - 2016-01-26 08:45 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Citrix
2016-01-26 08:28 - 2016-01-26 08:28 - 00000000 ____D C:\Program Files (x86)\taskvmx
2016-01-26 07:29 - 2016-03-04 20:21 - 00000000 ____D C:\Users\Pavilion\AppData\Local\mstrn32
2016-01-26 07:29 - 2016-03-03 07:37 - 00000000 ____D C:\Program Files (x86)\cpx
2016-01-26 07:29 - 2016-01-26 07:29 - 00000000 ____D C:\Users\Pavilion\AppData\Local\cpx
2016-01-24 20:43 - 2016-03-03 07:48 - 00000000 __SHD C:\Users\Pavilion\AppData\Local\winone
2016-01-24 20:43 - 2016-01-24 20:43 - 00000000 ___HD C:\Users\Pavilion\AppData\Local\SatakMalwareBusterSetup
2016-01-24 20:43 - 2016-01-24 20:43 - 00000000 ___HD C:\Users\Pavilion\AppData\Local\One10_PC_CleanerUn
2016-01-24 20:43 - 2016-01-24 20:43 - 00000000 ____D C:\Users\Pavilion\AppData\Local\One10_PC_Cleaner
2016-01-24 20:42 - 2016-01-24 20:42 - 00000000 ____D C:\Users\Pavilion\AppData\Local\TVTime
2016-01-24 20:41 - 2016-02-04 07:39 - 00000000 ____D C:\ProgramData\DataFile
2016-01-24 20:41 - 2016-01-27 08:41 - 00000000 ____D C:\Users\Pavilion\AppData\Local\bvxvbxxvaa
2016-01-24 20:41 - 2016-01-27 08:41 - 00000000 ____D C:\ProgramData\LrwHplZXAyh
2016-01-24 20:41 - 2016-01-24 20:42 - 00003554 _____ C:\WINDOWS\System32\Tasks\bvxvbxxvaa
2016-01-24 20:41 - 2016-01-24 20:41 - 00002631 _____ C:\Users\Public\Desktop\AllPCOptimizer.exe.lnk
2016-01-24 20:41 - 2016-01-24 20:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\All PC Optimizer
2016-01-24 20:41 - 2016-01-24 20:41 - 00000000 ____D C:\Program Files (x86)\AllPCOptimizer
2016-01-24 20:40 - 2016-01-24 20:40 - 00514079 _____ C:\Users\Pavilion\Documents\EvenBohan.pdf
2016-01-24 20:39 - 2016-03-04 20:44 - 00000372 ____H C:\WINDOWS\Tasks\YPAYFOUHKEKEJOJX.job
2016-01-24 20:39 - 2016-03-02 22:58 - 00000000 ____D C:\ProgramData\Service1291
2016-01-24 20:39 - 2016-01-24 20:39 - 00003454 _____ C:\WINDOWS\System32\Tasks\YPAYFOUHKEKEJOJX
2016-01-24 20:39 - 2016-01-24 20:39 - 00000000 ____D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
2016-01-24 20:32 - 2016-03-03 13:04 - 00000000 ____D C:\ProgramData\a24e8dd4-1935-0
2016-01-24 20:32 - 2016-03-03 13:04 - 00000000 ____D C:\ProgramData\a24e8dd4-0e61-1
2016-01-24 20:32 - 2016-03-03 07:53 - 00000000 ____D C:\Program Files (x86)\OneSystemCare
2016-01-24 20:32 - 2016-03-03 07:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\One System Care
2016-01-24 20:32 - 2016-02-25 07:02 - 00000306 _____ C:\WINDOWS\Tasks\One System CarePeriod.job
2016-01-24 20:32 - 2016-01-24 20:37 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\One System Care
2016-01-24 20:32 - 2016-01-24 20:32 - 00003692 _____ C:\WINDOWS\System32\Tasks\One System Care Task
2016-01-24 20:32 - 2016-01-24 20:32 - 00003438 _____ C:\WINDOWS\System32\Tasks\One System Care Run Delay
2016-01-24 20:32 - 2016-01-24 20:32 - 00003368 _____ C:\WINDOWS\System32\Tasks\One System Care Monitor
2016-01-24 20:32 - 2016-01-24 20:32 - 00002940 _____ C:\WINDOWS\System32\Tasks\One System CarePeriod
2016-01-24 20:32 - 2016-01-24 20:32 - 00001136 _____ C:\Users\Public\Desktop\Launch One System Care.lnk
2016-01-24 20:31 - 2016-03-03 07:45 - 00000000 ____D C:\Users\Pavilion\AppData\Local\30464E43-1453667467-4B31-385A-C80AA9974D49
2016-01-24 20:31 - 2016-01-24 20:31 - 00023280 _____ C:\WINDOWS\System32\Tasks\{7E0C0947-797E-0F09-0911-780A780E117A}
2016-01-24 20:31 - 2016-01-24 20:31 - 00000000 ____D C:\ProgramData\f3b6a8f4-3dc7-0
2016-01-24 20:31 - 2016-01-24 20:31 - 00000000 ____D C:\ProgramData\f3b6a8f4-3287-1
2016-01-24 20:30 - 2016-01-24 20:30 - 00000000 ____D C:\Program Files (x86)\30464E43-1453696244-4B31-385A-C80AA9974D49
2016-01-24 20:30 - 2016-01-24 20:29 - 00001110 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-01-24 20:29 - 2016-03-03 07:51 - 00000000 ____D C:\Program Files (x86)\30464E43-1453696161-4B31-385A-C80AA9974D49
2016-01-24 20:29 - 2016-03-03 07:48 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\NUIns
2016-01-24 20:29 - 2016-01-24 20:29 - 00001888 _____ C:\Users\Pavilion\Desktop\Note-Up.lnk
2016-01-24 20:29 - 2016-01-24 20:29 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Note-UP
2016-01-24 20:29 - 2016-01-24 20:29 - 00000000 ____D C:\Program Files (x86)\Note-up
2016-01-24 20:28 - 2016-03-04 17:21 - 00004164 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{426940F3-228F-4D30-91C2-CF7600B41B51}
2016-01-24 20:28 - 2016-03-03 07:54 - 00000000 ____D C:\Program Files (x86)\YTDownloader
2016-01-24 20:28 - 2016-03-03 07:49 - 00000000 ____D C:\Program Files\Common Files\ShopperPro3
2016-01-24 20:28 - 2016-01-29 08:18 - 00000000 ____D C:\ProgramData\ShopperPro3
2016-01-24 20:28 - 2016-01-24 20:30 - 00000000 ____D C:\Users\Pavilion\AppData\Local\BrowserHelper
2016-01-24 20:28 - 2016-01-24 20:28 - 00004472 _____ C:\WINDOWS\System32\Tasks\ShopperPro3
2016-01-24 20:28 - 2016-01-24 20:28 - 00004024 _____ C:\WINDOWS\System32\Tasks\YTDownloaderUpd
2016-01-24 20:28 - 2016-01-24 20:28 - 00003696 _____ C:\WINDOWS\System32\Tasks\YTDownloader
2016-01-24 20:28 - 2016-01-24 20:28 - 00002018 _____ C:\Users\Pavilion\Desktop\YTDownloader.lnk
2016-01-24 20:28 - 2016-01-24 20:28 - 00000000 ____D C:\Users\Public\Documents\ShopperPro3
2016-01-24 20:28 - 2016-01-24 20:28 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
2016-01-24 20:27 - 2016-03-02 22:59 - 00000000 ____D C:\Program Files (x86)\ShopperPro3
2016-01-24 20:27 - 2016-01-26 21:47 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2016-01-24 20:00 - 2016-03-02 22:14 - 00000000 ____D C:\Users\Pavilion\AppData\Local\DeskBar
2016-01-24 20:00 - 2016-02-18 12:24 - 00000025 _____ C:\WINDOWS\TEMPcoral.vbs
2016-01-24 20:00 - 2016-01-24 20:00 - 00000000 ____D C:\Program Files (x86)\dataup
2016-01-24 19:59 - 2016-03-03 07:52 - 00000000 ____D C:\Program Files (x86)\DNS Unlocker
2016-01-24 19:59 - 2016-02-17 03:24 - 00000829 _____ C:\Users\Pavilion\Desktop\Sound+.lnk
2016-01-24 19:59 - 2016-01-24 19:59 - 00026420 _____ C:\WINDOWS\System32\Tasks\DNSLAFAYETTE
2016-01-24 19:59 - 2016-01-24 19:59 - 00000978 _____ C:\Users\Pavilion\Desktop\S5mark.lnk
2016-01-24 19:59 - 2016-01-24 19:59 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\c
2016-01-24 19:59 - 2016-01-24 19:59 - 00000000 ____D C:\Program Files (x86)\S5
2016-01-24 19:58 - 2016-03-03 07:51 - 00000000 ____D C:\Program Files\Sound+
2016-01-24 19:57 - 2016-01-24 19:57 - 00000000 ____D C:\Program Files (x86)\simpleDnsio
2016-01-23 05:23 - 2016-01-23 05:23 - 00012288 _____ () C:\WINDOWS\SysFix.exe
2016-01-23 05:17 - 2016-01-23 05:17 - 00012800 _____ () C:\WINDOWS\amdave64Win.exe
2016-01-23 03:06 - 2016-01-23 03:06 - 00044032 _____ () C:\WINDOWS\winload32.exe
2016-01-23 03:04 - 2016-01-23 03:04 - 00021504 _____ () C:\WINDOWS\SysInfo.exe
2016-01-21 21:34 - 2016-03-02 21:41 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\TuneUp Software
2016-01-21 21:34 - 2016-01-21 21:34 - 00000000 ____D C:\Users\Pavilion\AppData\Local\TuneUp Software
2016-01-21 21:32 - 2016-01-21 21:34 - 00000000 ____D C:\ProgramData\TuneUp Software
2016-01-21 21:31 - 2016-01-21 21:31 - 00000013 _____ C:\Users\Pavilion\.pluto.tv
2016-01-21 21:30 - 2016-02-24 19:00 - 00000000 ____D C:\Users\Pavilion\AppData\Local\PlutoTV
2016-01-21 21:30 - 2016-02-24 19:00 - 00000000 ____D C:\Program Files (x86)\Pluto TV
2016-01-21 21:27 - 2016-01-21 21:34 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Free YouTube Downloader
2016-01-21 21:27 - 2016-01-21 21:27 - 14304128 _____ (HOW Inc. ) C:\Users\Pavilion\Downloads\FYTDSetup.exe
2016-01-21 21:27 - 2016-01-21 21:27 - 00001358 _____ C:\Users\Public\Desktop\Free YouTube Downloader.lnk
2016-01-21 21:27 - 2016-01-21 21:27 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\How Inc
2016-01-21 21:27 - 2016-01-21 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free YouTube Downloader
2016-01-21 21:27 - 2016-01-21 21:27 - 00000000 ____D C:\Program Files (x86)\Free YouTube Downloader
2016-01-21 19:26 - 2016-01-21 19:26 - 00000046 _____ C:\WINDOWS\wininit.ini
2016-01-21 16:10 - 2016-01-21 19:26 - 00000000 ____D C:\Program Files\COMODO
2016-01-21 16:10 - 2016-01-21 16:13 - 00000000 ____D C:\ProgramData\COMODO
2016-01-21 16:09 - 2016-01-24 21:12 - 00000000 ____D C:\Program Files (x86)\360
2016-01-21 16:09 - 2016-01-21 19:26 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\Nico Mak Computing
2016-01-21 16:09 - 2014-09-30 16:07 - 00019120 _____ (WinZip Computing, S.L.(WinZip Computing)) C:\WINDOWS\system32\roboot64.exe
2016-01-19 22:54 - 2016-01-19 22:54 - 00000000 ____D C:\WINDOWS\PCHEALTH
2016-01-19 22:47 - 2016-01-04 18:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-19 22:47 - 2016-01-04 18:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-19 22:47 - 2016-01-04 18:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-19 22:47 - 2016-01-04 18:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-19 22:47 - 2016-01-04 18:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-19 22:47 - 2016-01-04 18:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-19 22:47 - 2016-01-04 18:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-19 22:47 - 2016-01-04 18:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-19 22:47 - 2016-01-04 18:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-19 22:47 - 2016-01-04 18:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-19 22:47 - 2016-01-04 18:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-19 22:47 - 2016-01-04 17:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-19 22:47 - 2016-01-04 17:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-19 22:47 - 2016-01-04 17:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-19 22:47 - 2016-01-04 17:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-19 22:47 - 2016-01-04 17:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-19 22:47 - 2016-01-04 17:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-19 22:47 - 2016-01-04 17:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-19 22:47 - 2016-01-04 17:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-19 22:47 - 2016-01-04 17:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-19 22:47 - 2016-01-04 17:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-19 22:47 - 2015-12-06 20:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-01-19 22:47 - 2015-12-06 20:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-01-19 22:47 - 2015-12-06 20:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-01-19 22:47 - 2015-12-06 20:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-01-19 22:47 - 2015-12-06 20:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-01-19 22:47 - 2015-12-06 20:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-01-19 22:47 - 2015-12-06 20:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-01-19 22:47 - 2015-12-06 20:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-01-19 22:47 - 2015-12-06 20:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-01-19 22:47 - 2015-12-06 20:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-01-19 22:47 - 2015-12-06 20:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-01-19 22:47 - 2015-12-06 19:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-01-19 22:47 - 2015-12-06 19:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-01-19 22:47 - 2015-12-06 19:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-01-19 22:47 - 2015-12-06 19:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-01-19 22:47 - 2015-12-06 19:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-01-19 22:47 - 2015-12-06 19:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-01-19 22:47 - 2015-12-06 19:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-19 22:47 - 2015-12-06 19:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-01-19 22:47 - 2015-12-06 19:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-01-19 22:47 - 2015-12-06 19:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-01-19 22:47 - 2015-12-06 19:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-01-19 22:47 - 2015-12-06 19:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-01-19 22:47 - 2015-12-06 19:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-19 22:47 - 2015-12-06 19:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-01-19 22:47 - 2015-12-06 19:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-01-19 22:47 - 2015-12-06 19:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-01-19 22:47 - 2015-12-06 19:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-01-19 22:47 - 2015-11-30 23:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-01-19 22:47 - 2015-11-24 04:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-01-19 22:47 - 2015-11-24 03:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-01-19 22:47 - 2015-11-24 00:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-01-19 22:47 - 2015-11-24 00:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-01-19 22:47 - 2015-11-24 00:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-01-19 22:47 - 2015-11-23 23:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-01-19 22:47 - 2015-11-23 23:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-01-19 22:47 - 2015-11-23 23:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-01-19 22:47 - 2015-11-23 23:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-01-19 22:47 - 2015-11-23 23:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-01-19 22:47 - 2015-11-23 23:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-01-19 22:47 - 2015-11-22 02:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-19 22:47 - 2015-11-22 02:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-01-19 22:47 - 2015-11-22 02:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-01-19 22:47 - 2015-11-22 02:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-01-19 22:47 - 2015-11-22 02:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-01-19 22:47 - 2015-11-22 01:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-01-19 22:47 - 2015-11-22 01:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2016-01-19 22:47 - 2015-11-22 01:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2016-01-19 22:47 - 2015-11-22 01:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-01-19 22:47 - 2015-11-22 01:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-01-19 22:47 - 2015-11-22 01:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-01-19 22:47 - 2015-11-22 01:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-01-19 22:47 - 2015-11-22 01:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-01-19 22:47 - 2015-11-22 01:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-01-19 22:47 - 2015-11-22 01:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-01-19 22:47 - 2015-11-22 01:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-01-19 22:47 - 2015-11-22 01:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-01-19 22:47 - 2015-11-22 01:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-01-19 22:47 - 2015-11-22 01:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2016-01-19 22:47 - 2015-11-22 01:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-01-19 22:47 - 2015-11-22 01:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-01-19 22:47 - 2015-11-22 01:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-01-19 22:47 - 2015-11-22 01:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-01-19 22:47 - 2015-11-22 01:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-01-19 22:47 - 2015-11-22 01:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-01-19 22:47 - 2015-11-22 01:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-01-19 22:47 - 2015-11-22 01:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-01-19 22:47 - 2015-11-22 01:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-01-19 22:47 - 2015-11-22 01:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-01-19 22:47 - 2015-11-22 01:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-01-19 22:47 - 2015-11-22 01:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-01-19 22:47 - 2015-11-22 01:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-01-19 22:47 - 2015-11-22 01:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-01-19 22:47 - 2015-11-12 22:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-01-19 22:47 - 2015-11-12 22:42 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-01-19 22:47 - 2015-11-12 22:41 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-01-19 22:47 - 2015-11-12 22:33 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2016-01-19 22:47 - 2015-11-12 22:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-01-19 22:47 - 2015-11-12 22:18 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-01-19 22:47 - 2015-11-12 21:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-01-19 22:47 - 2015-11-12 21:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-01-19 22:47 - 2015-11-12 21:39 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-01-19 22:47 - 2015-11-12 21:29 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-01-19 22:47 - 2015-11-12 21:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-01-19 22:47 - 2015-11-05 01:13 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-01-19 22:47 - 2015-11-05 01:10 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-01-19 22:47 - 2015-11-05 00:18 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-01-19 22:46 - 2016-01-04 18:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-19 22:46 - 2016-01-04 18:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-19 22:46 - 2016-01-04 18:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-19 22:46 - 2016-01-04 18:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-19 22:46 - 2016-01-04 18:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-19 22:46 - 2016-01-04 18:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-19 22:46 - 2016-01-04 18:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-19 22:46 - 2016-01-04 18:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-19 22:46 - 2016-01-04 18:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-19 22:46 - 2016-01-04 18:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-19 22:46 - 2016-01-04 18:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-19 22:46 - 2016-01-04 18:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-19 22:46 - 2016-01-04 18:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-19 22:46 - 2016-01-04 18:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-19 22:46 - 2016-01-04 18:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-19 22:46 - 2016-01-04 18:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-19 22:46 - 2016-01-04 18:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-19 22:46 - 2016-01-04 18:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-19 22:46 - 2016-01-04 18:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-19 22:46 - 2016-01-04 18:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-19 22:46 - 2016-01-04 18:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-19 22:46 - 2016-01-04 18:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-19 22:46 - 2016-01-04 18:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-19 22:46 - 2016-01-04 18:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-19 22:46 - 2016-01-04 17:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-19 22:46 - 2016-01-04 17:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-19 22:46 - 2016-01-04 17:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-19 22:46 - 2016-01-04 17:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-19 22:46 - 2016-01-04 17:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-19 22:46 - 2016-01-04 17:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-19 22:46 - 2016-01-04 17:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-19 22:46 - 2016-01-04 17:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-19 22:46 - 2016-01-04 17:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-19 22:46 - 2016-01-04 17:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-19 22:46 - 2016-01-04 17:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-19 22:46 - 2016-01-04 17:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-19 22:46 - 2016-01-04 17:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-19 22:46 - 2016-01-04 17:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-19 22:46 - 2016-01-04 17:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-19 22:46 - 2016-01-04 17:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-19 22:46 - 2016-01-04 17:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-19 22:46 - 2016-01-04 17:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-19 22:46 - 2016-01-04 17:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-19 22:46 - 2016-01-04 17:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-19 22:46 - 2016-01-04 17:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-19 22:46 - 2016-01-04 17:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-19 22:46 - 2016-01-04 17:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-19 22:46 - 2016-01-04 17:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-19 22:46 - 2016-01-04 17:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-19 22:46 - 2016-01-04 17:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-19 22:46 - 2016-01-04 17:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-19 22:46 - 2016-01-04 17:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-19 22:46 - 2016-01-04 17:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-19 22:46 - 2016-01-04 17:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-19 22:46 - 2016-01-04 17:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-19 22:46 - 2016-01-04 17:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-19 22:46 - 2016-01-04 17:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-19 22:46 - 2016-01-04 17:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-19 22:46 - 2016-01-04 17:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-19 22:46 - 2016-01-04 17:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-19 22:46 - 2016-01-04 17:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-19 22:46 - 2016-01-04 17:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-19 22:46 - 2016-01-04 17:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-19 22:46 - 2016-01-04 17:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-19 22:46 - 2016-01-04 17:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-19 22:46 - 2016-01-04 17:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-19 22:46 - 2015-12-06 20:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-01-19 22:46 - 2015-12-06 20:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-01-19 22:46 - 2015-12-06 20:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-01-19 22:46 - 2015-12-06 20:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-01-19 22:46 - 2015-12-06 20:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-01-19 22:46 - 2015-12-06 20:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-01-19 22:46 - 2015-12-06 20:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-01-19 22:46 - 2015-12-06 20:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-01-19 22:46 - 2015-12-06 20:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-01-19 22:46 - 2015-12-06 20:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-01-19 22:46 - 2015-12-06 20:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-01-19 22:46 - 2015-12-06 20:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-01-19 22:46 - 2015-12-06 20:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-01-19 22:46 - 2015-12-06 20:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-01-19 22:46 - 2015-12-06 20:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-01-19 22:46 - 2015-12-06 20:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-01-19 22:46 - 2015-12-06 20:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-01-19 22:46 - 2015-12-06 20:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-01-19 22:46 - 2015-12-06 20:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-01-19 22:46 - 2015-12-06 20:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-01-19 22:46 - 2015-12-06 20:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2016-01-19 22:46 - 2015-12-06 20:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-01-19 22:46 - 2015-12-06 20:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-01-19 22:46 - 2015-12-06 20:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-01-19 22:46 - 2015-12-06 20:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-01-19 22:46 - 2015-12-06 19:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-01-19 22:46 - 2015-12-06 19:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-01-19 22:46 - 2015-12-06 19:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-01-19 22:46 - 2015-12-06 19:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-01-19 22:46 - 2015-12-06 19:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-01-19 22:46 - 2015-12-06 19:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-01-19 22:46 - 2015-12-06 19:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-01-19 22:46 - 2015-12-06 19:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-01-19 22:46 - 2015-12-06 19:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-01-19 22:46 - 2015-12-06 19:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-01-19 22:46 - 2015-12-06 19:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-01-19 22:46 - 2015-12-06 19:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-01-19 22:46 - 2015-12-06 19:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-01-19 22:46 - 2015-12-06 19:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-01-19 22:46 - 2015-12-06 19:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-01-19 22:46 - 2015-12-06 19:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-01-19 22:46 - 2015-11-24 02:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-01-19 22:46 - 2015-11-24 02:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-01-19 22:46 - 2015-11-24 01:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2016-01-19 22:46 - 2015-11-24 01:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-01-19 22:46 - 2015-11-24 01:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2016-01-19 22:46 - 2015-11-24 01:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2016-01-19 22:46 - 2015-11-24 01:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-01-19 22:46 - 2015-11-24 01:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-01-19 22:46 - 2015-11-24 01:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2016-01-19 22:46 - 2015-11-24 00:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-01-19 22:46 - 2015-11-24 00:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2016-01-19 22:46 - 2015-11-22 02:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-01-19 22:46 - 2015-11-22 02:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-01-19 22:46 - 2015-11-22 02:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2016-01-19 22:46 - 2015-11-22 02:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2016-01-19 22:46 - 2015-11-22 02:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-01-19 22:46 - 2015-11-22 02:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-01-19 22:46 - 2015-11-22 02:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-01-19 22:46 - 2015-11-22 02:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-01-19 22:46 - 2015-11-22 02:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-01-19 22:46 - 2015-11-22 02:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2016-01-19 22:46 - 2015-11-22 02:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-01-19 22:46 - 2015-11-22 02:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-01-19 22:46 - 2015-11-22 01:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-01-19 22:46 - 2015-11-22 01:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-01-19 22:46 - 2015-11-22 01:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-01-19 22:46 - 2015-11-22 01:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-01-19 22:46 - 2015-11-22 01:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-01-19 22:46 - 2015-11-22 01:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-01-19 22:46 - 2015-11-22 01:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2016-01-19 22:46 - 2015-11-22 01:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2016-01-19 22:46 - 2015-11-22 01:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-01-19 22:46 - 2015-11-22 01:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-01-19 22:46 - 2015-11-22 01:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-01-19 22:46 - 2015-11-22 01:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-01-19 22:46 - 2015-11-22 01:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-01-19 22:46 - 2015-11-22 01:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-01-19 22:46 - 2015-11-22 01:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-01-19 22:46 - 2015-11-22 01:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-01-19 22:46 - 2015-11-22 01:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-01-19 22:46 - 2015-11-22 01:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-19 22:46 - 2015-11-22 01:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-01-19 22:46 - 2015-11-22 01:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-01-19 22:46 - 2015-11-22 01:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-01-19 22:46 - 2015-11-22 01:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2016-01-19 22:46 - 2015-11-22 01:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-01-19 22:46 - 2015-11-22 01:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2016-01-19 22:46 - 2015-11-22 01:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-01-19 22:46 - 2015-11-22 01:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-01-19 22:46 - 2015-11-22 01:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-01-19 22:46 - 2015-11-22 01:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-01-19 22:46 - 2015-11-22 01:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-01-19 22:46 - 2015-11-22 01:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-01-19 22:46 - 2015-11-22 01:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-01-19 22:46 - 2015-11-22 01:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-01-19 22:46 - 2015-11-22 01:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2016-01-19 22:46 - 2015-11-22 01:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-01-19 22:46 - 2015-11-22 01:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-01-19 22:46 - 2015-11-22 01:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-01-19 22:46 - 2015-11-22 01:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-01-19 22:46 - 2015-11-22 01:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-01-19 22:46 - 2015-11-22 01:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-01-19 22:46 - 2015-11-22 01:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-01-19 22:46 - 2015-11-22 01:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-01-19 22:46 - 2015-11-22 01:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-01-19 22:46 - 2015-11-22 01:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-01-19 22:46 - 2015-11-22 01:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-01-19 22:46 - 2015-11-22 01:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2016-01-19 22:46 - 2015-11-22 01:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-01-19 22:46 - 2015-11-22 01:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-01-19 22:46 - 2015-11-22 01:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-19 22:46 - 2015-11-22 01:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-01-19 22:46 - 2015-11-22 01:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-01-19 22:46 - 2015-11-22 01:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-01-19 22:46 - 2015-11-22 01:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-01-19 22:46 - 2015-11-22 01:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-01-19 22:46 - 2015-11-22 01:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-01-19 22:46 - 2015-11-22 01:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-01-19 22:46 - 2015-11-22 01:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-01-19 22:46 - 2015-11-22 01:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-01-19 22:46 - 2015-11-22 01:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-01-19 22:46 - 2015-11-22 01:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-01-19 22:46 - 2015-11-22 01:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-01-19 22:46 - 2015-11-22 01:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-01-19 22:46 - 2015-11-22 01:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-01-19 22:46 - 2015-11-22 01:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-01-19 22:46 - 2015-11-22 01:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-01-19 22:46 - 2015-11-22 01:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-01-19 22:46 - 2015-11-22 01:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-01-19 22:46 - 2015-11-22 01:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-01-19 22:46 - 2015-11-22 01:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-01-19 22:46 - 2015-11-20 21:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-01-19 22:46 - 2015-11-20 21:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-01-19 22:46 - 2015-11-20 21:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-01-19 22:46 - 2015-11-12 22:55 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2016-01-19 22:46 - 2015-11-12 22:51 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2016-01-19 22:46 - 2015-11-12 22:51 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2016-01-19 22:46 - 2015-11-12 22:51 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-01-19 22:46 - 2015-11-12 22:43 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-01-19 22:46 - 2015-11-12 22:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-01-19 22:46 - 2015-11-12 22:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2016-01-19 22:46 - 2015-11-12 22:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-01-19 22:46 - 2015-11-12 22:42 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-19 22:46 - 2015-11-12 22:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-01-19 22:46 - 2015-11-12 22:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2016-01-19 22:46 - 2015-11-12 22:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-01-19 22:46 - 2015-11-12 22:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-01-19 22:46 - 2015-11-12 22:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2016-01-19 22:46 - 2015-11-12 22:21 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-01-19 22:46 - 2015-11-12 22:21 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-01-19 22:46 - 2015-11-12 22:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2016-01-19 22:46 - 2015-11-12 22:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-01-19 22:46 - 2015-11-12 22:09 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2016-01-19 22:46 - 2015-11-12 22:07 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-01-19 22:46 - 2015-11-12 22:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-01-19 22:46 - 2015-11-12 22:05 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-01-19 22:46 - 2015-11-12 22:05 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-01-19 22:46 - 2015-11-12 22:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-01-19 22:46 - 2015-11-12 22:05 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2016-01-19 22:46 - 2015-11-12 22:04 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-01-19 22:46 - 2015-11-12 22:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-01-19 22:46 - 2015-11-12 22:04 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-01-19 22:46 - 2015-11-12 22:03 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2016-01-19 22:46 - 2015-11-12 22:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-01-19 22:46 - 2015-11-12 21:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-01-19 22:46 - 2015-11-12 21:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-01-19 22:46 - 2015-11-12 21:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-01-19 22:46 - 2015-11-12 21:55 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-01-19 22:46 - 2015-11-12 21:54 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-19 22:46 - 2015-11-12 21:53 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-01-19 22:46 - 2015-11-12 21:50 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-01-19 22:46 - 2015-11-12 21:49 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-01-19 22:46 - 2015-11-12 21:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-01-19 22:46 - 2015-11-12 21:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2016-01-19 22:46 - 2015-11-12 21:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-01-19 22:46 - 2015-11-12 21:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-01-19 22:46 - 2015-11-12 21:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-01-19 22:46 - 2015-11-12 21:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-01-19 22:46 - 2015-11-12 21:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-01-19 22:46 - 2015-11-12 21:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-01-19 22:46 - 2015-11-05 04:05 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2016-01-19 22:46 - 2015-11-05 02:40 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-01-19 22:46 - 2015-11-05 02:25 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-01-19 22:46 - 2015-11-05 02:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2016-01-19 22:46 - 2015-11-05 02:08 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2016-01-19 22:46 - 2015-11-05 02:04 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-01-19 22:46 - 2015-11-05 02:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-01-19 22:46 - 2015-11-05 01:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-01-19 22:46 - 2015-11-05 01:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-01-19 22:46 - 2015-11-05 01:03 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2016-01-19 22:46 - 2015-11-05 01:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2016-01-19 22:46 - 2015-11-05 00:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-01-19 22:46 - 2015-11-05 00:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-01-19 22:46 - 2015-11-05 00:42 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-01-19 22:46 - 2015-11-05 00:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-01-19 02:18 - 2016-01-19 02:18 - 00000198 _____ C:\WINDOWS\sc.bat
2016-01-17 17:58 - 2016-01-17 17:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-01-17 01:38 - 2015-10-29 19:43 - 08629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0019.dll
2016-01-17 01:38 - 2015-10-29 19:43 - 01723392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons000d.dll
2016-01-17 01:38 - 2015-10-29 19:42 - 01723392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons000d.dll
2016-01-17 01:38 - 2015-10-29 19:37 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000d.dll
2016-01-17 01:38 - 2015-10-29 19:34 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000d.dll
2016-01-17 01:38 - 2015-10-29 19:31 - 02290688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MLS7.dll
2016-01-17 01:38 - 2015-10-29 19:28 - 02244096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MLS7.dll
2016-01-15 19:53 - 2016-01-15 19:53 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-01-15 14:54 - 2016-01-15 14:54 - 00000000 ____D C:\Users\Pavilion\AppData\Local\PeerDistRepub
2016-01-14 15:58 - 2016-01-14 15:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-01-14 15:28 - 2016-02-03 14:29 - 00000000 ____D C:\Users\DefaultAppPool
2016-01-14 15:28 - 2016-01-14 15:28 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2016-01-14 15:28 - 2016-01-14 15:28 - 00000000 _SHDL C:\Users\DefaultAppPool\My Documents
2016-01-14 15:28 - 2016-01-14 15:28 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Videos
2016-01-14 15:28 - 2016-01-14 15:28 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Pictures
2016-01-14 15:28 - 2016-01-14 15:28 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Music
2016-01-14 15:28 - 2016-01-14 13:54 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2016-01-14 15:28 - 2016-01-14 13:54 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2016-01-14 15:28 - 2016-01-14 13:54 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\Microsoft Help
2016-01-14 14:40 - 2016-01-14 14:40 - 00000000 ____D C:\Users\Pavilion\AppData\Local\NetworkTiles
2016-01-14 14:33 - 2016-01-14 14:33 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Comms
2016-01-14 14:21 - 2016-01-17 02:10 - 00000000 ____D C:\Users\Pavilion\AppData\Local\MicrosoftEdge
2016-01-14 14:14 - 2016-02-11 15:51 - 00002372 _____ C:\Users\Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-01-14 14:14 - 2016-02-11 15:51 - 00000000 ___RD C:\Users\Pavilion\OneDrive
2016-01-14 14:12 - 2016-01-14 14:12 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-01-14 14:11 - 2016-01-14 14:11 - 00000000 ____D C:\Users\Pavilion\AppData\Local\ActiveSync
2016-01-14 14:09 - 2016-01-27 07:39 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-01-14 14:09 - 2016-01-14 14:09 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Publishers
2016-01-14 14:08 - 2016-01-27 14:48 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Packages
2016-01-14 14:08 - 2016-01-14 14:08 - 00000020 ___SH C:\Users\Pavilion\ntuser.ini
2016-01-14 14:08 - 2016-01-14 14:08 - 00000000 ____D C:\Users\Pavilion\AppData\Local\TileDataLayer
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default\My Documents
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2016-01-14 14:02 - 2016-01-14 14:02 - 00000000 ____D C:\ProgramData\USOShared
2016-01-14 14:00 - 2016-03-04 19:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-14 14:00 - 2016-01-14 14:00 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-01-14 13:54 - 2016-01-14 13:54 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-14 13:54 - 2016-01-14 13:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-01-14 13:54 - 2016-01-14 13:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2016-01-14 13:54 - 2016-01-14 13:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-01-14 13:54 - 2016-01-14 13:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-01-14 13:54 - 2016-01-14 13:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2016-01-14 13:54 - 2016-01-14 13:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-01-14 13:50 - 2016-01-14 13:50 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-01-14 13:47 - 2016-03-02 11:21 - 00000000 ____D C:\Users\Pavilion
2016-01-14 13:47 - 2016-02-26 08:52 - 01009692 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 13:47 - 2016-01-14 13:47 - 00000000 _SHDL C:\Users\Pavilion\My Documents
2016-01-14 13:47 - 2016-01-14 13:47 - 00000000 _SHDL C:\Users\Pavilion\Documents\My Videos
2016-01-14 13:47 - 2016-01-14 13:47 - 00000000 _SHDL C:\Users\Pavilion\Documents\My Pictures
2016-01-14 13:47 - 2016-01-14 13:47 - 00000000 _SHDL C:\Users\Pavilion\Documents\My Music
2016-01-14 13:46 - 2016-01-14 13:46 - 00965390 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-01-14 13:43 - 2016-01-14 13:43 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2016-01-14 13:43 - 2015-10-29 23:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-01-14 13:42 - 2016-01-14 13:42 - 00000000 ____D C:\Program Files\Synaptics
2016-01-14 13:40 - 2016-01-20 09:34 - 00344360 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-14 13:39 - 2016-02-04 07:17 - 00000000 ___DC C:\WINDOWS\Panther
2016-01-14 13:34 - 2016-01-14 13:34 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-01-14 13:33 - 2016-01-14 13:54 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\Program Files\MSBuild
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-01-14 13:33 - 2016-01-14 13:33 - 00000000 ____D C:\inetpub
2016-01-14 13:32 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-01-14 13:32 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-01-14 13:32 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-01-14 13:32 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-01-14 13:32 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-01-14 13:32 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-01-14 12:12 - 2016-01-27 14:47 - 00018400 _____ C:\WINDOWS\diagwrn.xml
2016-01-14 12:12 - 2016-01-27 14:47 - 00012953 _____ C:\WINDOWS\diagerr.xml
2016-01-14 12:06 - 2016-01-14 12:06 - 00000000 ____D C:\ESD
2016-01-13 19:02 - 2016-01-27 14:46 - 07635472 _____ (Microsoft Corporation) C:\Users\Pavilion\Downloads\GetWindows10-Web_Default_Attr.exe
2016-01-12 21:05 - 2016-03-03 08:20 - 00000000 ____D C:\Users\Pavilion\AppData\Local\ElevatedDiagnostics
2016-01-12 20:31 - 2016-01-12 20:31 - 00001095 _____ C:\Users\Pavilion\Desktop\USB 2.0 PC Cam - Shortcut.lnk
2016-01-08 10:46 - 2016-01-08 10:46 - 00023472 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avguniva.sys
2016-01-07 15:03 - 2016-01-07 15:03 - 00021632 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgboota.sys
2016-01-07 01:08 - 2016-01-07 01:08 - 00195217 _____ C:\WINDOWS\keywords.txt
2016-01-06 21:56 - 2016-01-06 21:56 - 00000000 ____D C:\Users\Pavilion\AppData\Local\CEF
2016-01-06 21:54 - 2016-02-18 17:16 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-06 21:54 - 2016-01-06 21:54 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-01-05 18:40 - 2016-01-05 18:47 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\PeaZip
2015-12-24 15:16 - 2016-02-10 20:55 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-24 15:16 - 2016-02-10 20:43 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-22 20:46 - 2016-02-07 10:43 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\vlc
2015-12-22 20:46 - 2016-01-30 05:52 - 00000000 ____D C:\Users\Pavilion\AppData\Roaming\dvdcss
2015-12-17 16:08 - 2015-12-17 16:08 - 02560512 _____ (winpcoptimizerbetatwo) C:\WINDOWS\Allpcoptimizer.exe
2015-12-17 16:08 - 2015-12-17 16:08 - 00155136 _____ C:\WINDOWS\Allpcoptimizer.pdb
2015-12-17 14:58 - 2016-01-14 14:00 - 00003996 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-17 14:56 - 2015-12-17 14:56 - 06657191 _____ C:\Users\Pavilion\Documents\russyn_all.pdf
2015-12-17 14:47 - 2015-12-17 14:47 - 00000000 ____D C:\Users\Pavilion\AppData\LocalLow\Adobe
2015-12-16 11:24 - 2016-01-14 14:00 - 00003400 _____ C:\WINDOWS\System32\Tasks\{BB8307A0-7DE1-42D7-9CDE-67383EA5A013}
2015-12-16 01:14 - 2015-12-16 01:14 - 00315840 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgwfpa.sys
2015-12-14 18:22 - 2015-12-14 18:22 - 00000000 ____H C:\Users\Pavilion\Documents\Default.rdp
2015-12-11 15:04 - 2016-03-03 08:20 - 00000000 ____D C:\Users\Pavilion\AppData\Local\Diagnostics
2015-12-10 20:27 - 2015-12-10 20:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-12-09 19:58 - 2015-12-09 19:58 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2015-12-09 02:02 - 2015-11-20 10:54 - 00012288 ____N (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-12-09 02:01 - 2015-11-09 15:35 - 01155072 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmlmedia.dll
2015-12-09 02:01 - 2015-11-08 13:52 - 00968704 ____N (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.exe
2015-12-09 02:01 - 2015-11-08 13:14 - 01359360 ____N (Microsoft Corporation) C:\WINDOWS\system32\mshtmlmedia.dll
2015-12-06 02:37 - 2015-12-06 02:37 - 00012800 _____ (Microsoft) C:\WINDOWS\winupd.exe

==================== Three Months Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-04 21:15 - 2015-04-09 15:30 - 00000930 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-04 20:23 - 2015-04-09 15:30 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-04 19:06 - 2015-10-29 22:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-04 12:45 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-04 07:14 - 2015-10-29 23:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-02 22:57 - 2015-10-29 23:18 - 00686984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-03-02 22:06 - 2015-10-29 23:18 - 00535088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-03-02 22:04 - 2015-10-29 22:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-03-02 21:40 - 2015-10-29 23:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-03-01 23:46 - 2015-10-29 23:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-26 08:52 - 2015-10-29 23:21 - 00000000 ____D C:\WINDOWS\INF
2016-02-25 07:25 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-02-03 11:01 - 2015-10-29 23:26 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-02-03 11:01 - 2015-10-29 23:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2016-02-17 14:32 - 2016-03-02 20:32 - 0000144 _____ () C:\Users\Pavilion\AppData\Roaming\WB.CFG
2016-02-21 18:59 - 2016-02-21 18:59 - 0003584 _____ () C:\Users\Pavilion\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some files in TEMP:
====================
C:\Users\Pavilion\AppData\Local\Temp\avg-776f666a-bdcf-400a-a019-93186b82e534.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== BCD ================================

Windows Boot Manager
--------------------
identifier              {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  en-US
inherit                 {globalsettings}
default                 {current}
resumeobject            {afd39060-bb06-11e5-ab09-a2a72f0774ea}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Windows Boot Loader
-------------------
identifier              {385513ec-bb07-11e5-ab09-a2a72f0774ea}
device                  ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{385513ed-bb07-11e5-ab09-a2a72f0774ea}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
locale                  en-US
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  Recovery
osdevice                ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{385513ed-bb07-11e5-ab09-a2a72f0774ea}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Windows Boot Loader
-------------------
identifier              {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.exe
description             Windows 10
locale                  en-US
inherit                 {bootloadersettings}
recoverysequence        {385513ec-bb07-11e5-ab09-a2a72f0774ea}
recoveryenabled         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {afd39060-bb06-11e5-ab09-a2a72f0774ea}
nx                      OptIn
bootmenupolicy          Standard

Windows Boot Loader
-------------------
identifier              {f27094a5-df0e-11e4-bbc4-b4c894ffca1f}
device                  ramdisk=[C:]\Recovery\f27094a5-df0e-11e4-bbc4-b4c894ffca1f\Winre.wim,{f27094a6-df0e-11e4-bbc4-b4c894ffca1f}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
inherit                 {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\f27094a5-df0e-11e4-bbc4-b4c894ffca1f\Winre.wim,{f27094a6-df0e-11e4-bbc4-b4c894ffca1f}
systemroot              \windows
nx                      OptIn
winpe                   Yes

Resume from Hibernate
---------------------
identifier              {afd39060-bb06-11e5-ab09-a2a72f0774ea}
device                  partition=C:
path                    \WINDOWS\system32\winresume.exe
description             Windows Resume Application
locale                  en-US
inherit                 {resumeloadersettings}
recoverysequence        {385513ec-bb07-11e5-ab09-a2a72f0774ea}
recoveryenabled         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Resume from Hibernate
---------------------
identifier              {f27094a3-df0e-11e4-bbc4-b4c894ffca1f}
device                  partition=C:
path                    \Windows\system32\winresume.exe
description             Windows Resume Application
locale                  en-US
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Windows Memory Tester
---------------------
identifier              {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \boot\memtest.exe
description             Windows Memory Diagnostic
locale                  en-US
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS Settings
------------
identifier              {emssettings}
bootems                 No

Debugger Settings
-----------------
identifier              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

RAM Defects
-----------
identifier              {badmemory}

Global Settings
---------------
identifier              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Boot Loader Settings
--------------------
identifier              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisor Settings
-------------------
identifier              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Resume Loader Settings
----------------------
identifier              {resumeloadersettings}
inherit                 {globalsettings}

Device options
--------------
identifier              {385513ed-bb07-11e5-ab09-a2a72f0774ea}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume3
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

Device options
--------------
identifier              {f27094a6-df0e-11e4-bbc4-b4c894ffca1f}
description             Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\f27094a5-df0e-11e4-bbc4-b4c894ffca1f\boot.sdi

Device options
--------------
identifier              {f27094a7-df0e-11e4-bbc4-b4c894ffca1f}
description             Windows Setup
ramdisksdidevice        partition=C:
ramdisksdipath          \$WINDOWS.~BT\Sources\SafeOS\boot.sdi



LastRegBack: 2016-03-03 08:18

==================== End of FRST.txt ============================