Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:23-05-2016
Ran by therj (administrator) on THERJAMALUMA (24-05-2016 21:44:01)
Running from C:\Users\therj\Downloads
Loaded Profiles: therj (Available Profiles: therj)
Platform: Windows 10 Education Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
() C:\Users\therj\AppData\Local\DesignBuilder\JobServer\DBJobServer.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JamUI\Pulse.exe
(Juniper Networks, Inc.) C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
() C:\Program Files (x86)\PaperCut MF Client\pc-client.exe
(iSkySoft) C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mendeley Ltd.) C:\Program Files (x86)\Mendeley Desktop\MendeleyDesktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Mendeley Desktop\MendeleyWordPlugin.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.6965.57741.0_x64__8wekyb3d8bbwe\onenoteim.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.20961.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(DesignBuilder Software Ltd) C:\Program Files (x86)\DesignBuilder\DesignBuilder.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [5060864 2015-06-17] (Realtek semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3743648 2015-06-26] (ELAN Microelectronics Corp.)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2016-03-24] ()
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-04-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2015-05-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-04-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-04-28] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM-x32\...\Run: [JunosPulse] => C:\Program Files (x86)\Common Files\Juniper Networks\JamUI\Pulse.exe [2124328 2013-03-28] (Juniper Networks, Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [529480 2016-02-24] (Autodesk Inc.)
HKLM-x32\...\Run: [PaperCut MF Client] => C:\Program Files (x86)\PaperCut MF Client\pc-client.exe [274432 2013-05-13] ()
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2066432 2014-10-31] (iSkySoft)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe [1971872 2016-03-28] ()
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-08] (Autodesk, Inc.)
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-12] (Piriform Ltd)
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\...\Run: [**vesbwqye<*>] => "C:\Users\therj\AppData\Local\c6e5f\c7acb.lnk" <===== ATTENTION (Value Name with invalid characters)
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\...\Run: [UWBmedia] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\therj\AppData\Local\Ektion\djrcuxwg.dll
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\...\Policies\Explorer: [] 
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-02-08] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [0PerformanceMonitor] -> {3B5B973C-92A4-4855-9D3F-0F3D23332208} =>  No File
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{2d438e33-65fb-411d-938f-0b86d3e6eb23}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{4be0581e-7da6-4a69-867d-dcc3c24a096c}: [DhcpNameServer] 82.163.143.171
Tcpip\..\Interfaces\{4fb4a2f0-0d8c-4c88-8878-f6584ee3bd33}: [DhcpNameServer] 82.163.143.171
Tcpip\..\Interfaces\{5a94b0ff-a50c-44b5-912c-b991259880a7}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{5a94b0ff-a50c-44b5-912c-b991259880a7}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{9b16c5db-77cc-4282-9568-b2c8b4c98eb1}: [DhcpNameServer] 82.163.143.171

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-cd61b01b
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-cd61b01b
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKU\S-1-5-21-1293058104-563644729-2966882924-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-cd61b01b
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-cd61b01b&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-cd61b01b&q={searchTerms}
SearchScopes: HKLM -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-cd61b01b&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1293058104-563644729-2966882924-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-cd61b01b&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1293058104-563644729-2966882924-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-cd61b01b&q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-05-01] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-05-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-05-01] (Microsoft Corporation)
BHO-x32: iSkysoft iMedia Converter Deluxe 5.1.0 -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} -> C:\ProgramData\iSkysoft\Video Converter Ultimate\WSBrowserAppMgr.dll [2016-03-28] (Wondershare)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-05-01] (Microsoft Corporation)
BHO-x32: JQSIEStartDetectorImpl Class -> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} -> C:\Program Files (x86)\Deakin University\PaperCut Installer\runtime\jre\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-01] (Sun Microsystems, Inc.)
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-01] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-01] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-01] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-01] (Microsoft Corporation)
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 -  No File
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\therj\AppData\Roaming\Mozilla\Firefox\Profiles\bp2yg96e.default
FF NewTab: about:newtab
FF DefaultSearchEngine: Search Provided by Bing
FF SelectedSearchEngine: Search Provided by Bing
FF Homepage: hxxp://www.bing.com/search?FORM=INCOH1&PC=IC04&PTAG=ICO-cd61b01b
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-05-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-05-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [No File]
FF SearchPlugin: C:\Users\therj\AppData\Roaming\Mozilla\Firefox\Profiles\bp2yg96e.default\searchplugins\Search Provided by Bing.xml [2016-05-15]
FF Extension: AdBlock for YouTube™ - C:\Users\therj\AppData\Roaming\Mozilla\Firefox\Profiles\bp2yg96e.default\Extensions\jid1-q4sG8pYhq8KGHs@jetpack.xpi [2016-03-28]
FF Extension: Adblock Plus - C:\Users\therj\AppData\Roaming\Mozilla\Firefox\Profiles\bp2yg96e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-05-03]
FF Extension: MediaObjectInfo - C:\Users\therj\AppData\Roaming\Mozilla\Firefox\Profiles\bp2yg96e.default\Extensions\{EF16B77F-6CCD-16F2-DDE5-46B822B43CC1} [2016-03-25] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi
FF Extension: iSkysoft iMedia Converter Deluxe - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi [2016-05-19]

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR Profile: C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-21]
CHR Extension: (Google Docs) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-21]
CHR Extension: (Google Drive) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-21]
CHR Extension: (YouTube) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-21]
CHR Extension: (Google Sheets) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-21]
CHR Extension: (Google Docs Offline) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-21]
CHR Extension: (Chrome Web Store Payments) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-21]
CHR Extension: (Gmail) - C:\Users\therj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-21]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2912496 2016-05-01] (Microsoft Corporation)
R2 DBJobServer; C:\Users\therj\AppData\Local\DesignBuilder\JobServer\DBJobServer.exe [598528 2015-11-12] () [File not signed]
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [134888 2015-06-26] (ELAN Microelectronics Corp.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
R2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [150256 2015-06-09] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [359848 2015-09-10] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272864 2016-01-09] (Lenovo)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [31136 2015-05-29] (ELAN Microelectronic Corp.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [299280 2015-12-18] (Intel Corporation)
S3 JNPRNA; C:\Windows\system32\DRIVERS\jnprna6.sys [519544 2013-03-11] (Juniper Networks, Inc.)
S4 jnprTdi_742_34169; C:\Windows\system32\Drivers\jnprTdi_742_34169.sys [108336 2013-03-28] (Juniper Networks, Inc.)
R3 JnprVaMgr; C:\Windows\System32\drivers\jnprvamgr.sys [45352 2013-03-11] (Juniper Networks, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-24] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [194104 2015-12-31] (Intel Corporation)
R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3485696 2015-10-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-07-23] (Realtek                                            )
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [751632 2015-05-11] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3068160 2015-06-17] (Realtek Semiconductor Corp.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-24 21:44 - 2016-05-24 21:44 - 00026819 _____ C:\Users\therj\Downloads\FRST.txt
2016-05-24 21:43 - 2016-05-24 21:44 - 00000000 ____D C:\FRST
2016-05-24 21:43 - 2016-05-24 21:43 - 02383360 _____ (Farbar) C:\Users\therj\Downloads\FRST64.exe
2016-05-24 21:33 - 2016-05-24 21:33 - 00348525 _____ C:\Users\therj\Downloads\85-141-1-SM.pdf
2016-05-24 00:54 - 2016-05-24 00:54 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-05-24 00:54 - 2016-05-24 00:54 - 00000000 ___HD C:\OneDriveTemp
2016-05-23 11:47 - 2016-05-22 21:20 - 29416915 _____ C:\Users\therj\Desktop\Jamaludin, Mohammad_SRA742_compressed.pdf
2016-05-22 03:34 - 2016-05-22 03:34 - 01187641 _____ C:\Users\therj\Downloads\1-s2.0-S0378778809000504-main.pdf
2016-05-22 03:06 - 2016-05-22 03:06 - 00259583 _____ C:\Users\therj\Desktop\Investigation on indoor thermal satisfaction.pdf
2016-05-21 17:18 - 2016-05-21 17:18 - 00000000 _____ C:\Users\therj\.uc-8368da6c684e971b9bcc8c5e2eaedbbe.therj.therjamaluma.tmp
2016-05-20 23:32 - 2016-05-20 23:32 - 00512498 _____ C:\Users\therj\Downloads\4629-6703-1-PB.pdf
2016-05-19 18:01 - 2016-05-20 23:21 - 00000000 ____D C:\ProgramData\iSkysoft
2016-05-19 18:01 - 2016-05-19 18:01 - 00000000 ____D C:\Users\therj\AppData\Local\iSkysoft
2016-05-19 18:01 - 2016-05-19 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iSkysoft
2016-05-19 18:01 - 2016-05-19 18:01 - 00000000 ____D C:\ProgramData\iSkysoft iMedia Converter Deluxe
2016-05-19 18:01 - 2016-05-19 18:01 - 00000000 ____D C:\Program Files (x86)\iSkysoft
2016-05-19 18:01 - 2015-02-27 14:38 - 00721263 _____ () C:\Windows\SysWOW64\ISCM64.dll
2016-05-19 18:01 - 2015-02-27 14:38 - 00214528 _____ () C:\Windows\SysWOW64\ISCM32.dll
2016-05-19 18:00 - 2016-05-19 18:01 - 00000000 ____D C:\Users\Public\Documents\iSkysoft
2016-05-19 18:00 - 2016-05-19 18:00 - 00806240 _____ C:\Users\therj\Downloads\video-converter-ultimate-win_setup_full670.exe
2016-05-19 16:03 - 2016-05-19 16:03 - 00374613 _____ C:\Users\therj\Desktop\Premiere Dll.rar
2016-05-18 21:10 - 2016-05-18 22:57 - 00000000 ____D C:\Users\therj\Desktop\Analysis
2016-05-18 19:38 - 2016-05-18 19:38 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-05-17 21:54 - 2016-05-17 21:55 - 01016972 _____ C:\Users\therj\Downloads\0353_broch_Reflite_Malaysia_1126.pdf
2016-05-16 21:13 - 2016-05-16 21:26 - 00000000 ____D C:\Users\therj\Desktop\Temperature graph
2016-05-16 19:27 - 2016-05-24 21:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-16 03:22 - 2016-05-16 03:23 - 02014517 _____ C:\Users\therj\Downloads\59-137-1-PB.pdf
2016-05-16 03:18 - 2016-05-16 03:18 - 00002048 ____N C:\Users\therj\jogamp_exe_tst9065173612379262270.exe
2016-05-16 03:01 - 2016-05-16 03:01 - 00002017 _____ C:\Users\therj\Documents\montemp.prn
2016-05-16 03:00 - 2016-05-16 03:00 - 00000000 ____D C:\Users\therj\AppData\Local\GMap.NET
2016-05-16 02:58 - 2016-05-16 02:58 - 00000000 ____D C:\Users\therj\AppData\Roaming\Meteotest_Genossenschaft
2016-05-16 02:58 - 2016-05-16 02:58 - 00000000 ____D C:\Users\therj\AppData\Roaming\Meteotest
2016-05-16 02:58 - 2016-05-16 02:58 - 00000000 ____D C:\Users\therj\AppData\Local\Meteotest_Genossenschaft
2016-05-16 02:58 - 2016-05-16 02:58 - 00000000 ____D C:\ProgramData\Meteotest
2016-05-16 01:43 - 2016-05-16 01:43 - 00000408 _____ C:\Users\therj\AppData\Roaming\CamShapes.ini
2016-05-16 01:43 - 2016-05-16 01:43 - 00000408 _____ C:\Users\therj\AppData\Roaming\CamLayout.ini
2016-05-16 01:43 - 2016-05-16 01:43 - 00000053 _____ C:\Users\therj\AppData\Roaming\Camdata.ini
2016-05-16 01:17 - 2016-05-16 01:17 - 00002143 _____ C:\Users\Public\Desktop\meteonorm 7.lnk
2016-05-16 01:17 - 2016-05-16 01:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\meteonorm 7
2016-05-16 01:17 - 2016-05-16 01:17 - 00000000 ____D C:\Program Files (x86)\Meteotest
2016-05-16 00:59 - 2016-05-16 01:15 - 251797272 _____ (METEOTEST Genossenschaft) C:\Users\therj\Downloads\meteonorm7.1.8_installer (1).exe
2016-05-15 02:47 - 2016-05-20 23:47 - 00000075 _____ C:\Users\therj\AppData\Roaming\WB.CFG
2016-05-15 02:22 - 2016-05-15 02:22 - 191678352 _____ C:\Users\therj\Documents\ezvid_1003b01.exe
2016-05-15 02:03 - 2016-05-15 02:22 - 00000000 ____D C:\Program Files (x86)\ezvid
2016-05-15 02:03 - 2016-05-15 02:03 - 00089777 _____ C:\Windows\unins000.dat
2016-05-15 02:03 - 2016-05-15 02:03 - 00001098 _____ C:\Users\Public\Desktop\ezvid.lnk
2016-05-15 02:03 - 2016-05-15 02:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ezvid
2016-05-15 02:03 - 2016-05-15 01:54 - 00753847 _____ C:\Windows\unins000.exe
2016-05-15 02:03 - 2015-03-10 19:29 - 00462584 _____ (Bytescout) C:\Windows\SysWOW64\BytescoutScreenCapturing.dll
2016-05-15 02:03 - 2015-03-10 19:29 - 00360184 _____ (Bytescout) C:\Windows\SysWOW64\BytescoutScreenCapturingFilter.dll
2016-05-15 02:03 - 2015-03-10 19:29 - 00196344 _____ (Bytescout) C:\Windows\SysWOW64\BytescoutVideoMixerFilter.dll
2016-05-15 02:03 - 2013-04-07 17:09 - 00216064 _____ ( ) C:\Windows\SysWOW64\Lagarith.dll
2016-05-15 02:03 - 2013-04-07 17:09 - 00148992 _____ ( ) C:\Windows\system32\Lagarith.dll
2016-05-15 01:54 - 2016-05-15 01:54 - 01002112 _____ (Ezvid, inc. ) C:\Users\therj\Downloads\ezvid1.003b04.exe
2016-05-15 01:53 - 2016-05-15 01:53 - 00004536 _____ C:\Users\therj\AppData\Roaming\CamStudio.cfg
2016-05-15 01:51 - 2016-05-15 01:51 - 00000000 ____D C:\Users\therj\Documents\My CamStudio Videos
2016-05-15 01:50 - 2016-05-15 01:52 - 00000000 ____D C:\Users\therj\Documents\My CamStudio Temp Files
2016-05-15 01:49 - 2016-05-15 01:49 - 00000096 _____ C:\Users\therj\AppData\Roaming\version2.xml
2016-05-15 01:48 - 2016-05-15 01:53 - 00000000 ____D C:\Program Files\CamStudio 2.7
2016-05-15 01:47 - 2016-05-24 20:47 - 00000296 _____ C:\Windows\Tasks\{676C695A-249A-CA53-4581-07913CB1F55A}.job
2016-05-15 01:47 - 2016-05-21 17:18 - 00000258 __RSH C:\ProgramData\ntuser.pol
2016-05-15 01:47 - 2016-05-15 02:47 - 00000000 ____D C:\Users\therj\AppData\Local\{A80B9E57-8CA3-F2EF-E13B-D707C5532B9F}
2016-05-15 01:47 - 2016-05-15 01:47 - 00002836 _____ C:\Windows\System32\Tasks\{676C695A-249A-CA53-4581-07913CB1F55A}
2016-05-15 01:03 - 2016-05-15 02:50 - 00005120 _____ C:\Users\therj\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-05-15 01:03 - 2016-05-15 01:03 - 00000000 ____D C:\Users\therj\AppData\Local\ezvid,_inc
2016-05-15 01:00 - 2016-05-15 21:47 - 00000000 ____D C:\Users\therj\Desktop\Perspectives
2016-05-15 00:59 - 2016-05-15 01:00 - 65867679 _____ C:\Users\therj\Downloads\Gill 2013, Urban Perspectives.mov
2016-05-15 00:40 - 2016-05-15 02:24 - 00000000 ____D C:\Users\therj\Documents\ezvid
2016-05-14 23:46 - 2016-05-19 19:38 - 00000000 ____D C:\Users\therj\Desktop\Video
2016-05-14 23:36 - 2016-05-14 23:38 - 58502128 _____ C:\Users\therj\Downloads\Eslah & Riahi 2013, urban perspectives.wmv
2016-05-14 20:42 - 2016-05-19 01:05 - 204173990 _____ C:\Users\therj\Desktop\Board 2-Recovered.psd
2016-05-14 14:09 - 2016-05-24 20:19 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-14 14:08 - 2016-05-14 14:08 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-05-14 14:08 - 2016-05-14 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-14 14:08 - 2016-05-14 14:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-14 14:08 - 2016-05-14 14:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-14 14:08 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-14 14:08 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-14 14:08 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-14 14:06 - 2016-05-14 14:08 - 22851472 _____ (Malwarebytes ) C:\Users\therj\Downloads\mbam-setup-2.2.1.1043.exe
2016-05-13 22:19 - 2016-05-13 22:23 - 111588675 _____ C:\Users\therj\Downloads\Nur et al 2013, SRA742_MELBOURNE JEWEL_2013.mov
2016-05-13 22:02 - 2016-05-21 17:19 - 00000000 ____D C:\Users\therj\AppData\Roaming\af384
2016-05-13 22:02 - 2016-05-21 17:16 - 00000000 ____D C:\Users\therj\AppData\Local\c6e5f
2016-05-12 21:33 - 2016-05-15 21:36 - 00000000 ____D C:\Users\therj\Desktop\Photoshop Images
2016-05-12 03:18 - 2016-05-12 03:18 - 00120937 _____ C:\Users\therj\Downloads\ThahirahJamaludinMadhihahHusnaMohammad.pdf
2016-05-12 00:45 - 2016-04-23 14:28 - 16984576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-05-12 00:45 - 2016-04-23 14:26 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2016-05-12 00:45 - 2016-04-23 14:25 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2016-05-12 00:45 - 2016-04-23 14:22 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2016-05-12 00:45 - 2016-04-23 14:19 - 01056256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-05-12 00:45 - 2016-04-23 14:19 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-05-12 00:45 - 2016-04-23 14:18 - 00349696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2016-05-12 00:45 - 2016-04-23 14:16 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-05-12 00:45 - 2016-04-23 14:13 - 07200256 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-05-12 00:45 - 2016-04-23 14:09 - 02582016 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-05-12 00:45 - 2016-04-23 14:08 - 02061824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-05-12 00:45 - 2016-04-23 14:07 - 05205504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-05-12 00:44 - 2016-04-30 16:31 - 03591168 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-05-12 00:44 - 2016-04-23 16:12 - 01401024 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-05-12 00:44 - 2016-04-23 16:12 - 01184960 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-05-12 00:44 - 2016-04-23 16:12 - 00713920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-05-12 00:44 - 2016-04-23 16:12 - 00190144 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-05-12 00:44 - 2016-04-23 16:12 - 00046784 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-05-12 00:44 - 2016-04-23 15:28 - 01542816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-12 00:44 - 2016-04-23 15:24 - 07474528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-12 00:44 - 2016-04-23 15:24 - 01819208 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-12 00:44 - 2016-04-23 15:10 - 03673424 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-12 00:44 - 2016-04-23 15:10 - 02919832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-12 00:44 - 2016-04-23 15:09 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-05-12 00:44 - 2016-04-23 15:09 - 21123320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-05-12 00:44 - 2016-04-23 15:09 - 05240960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2016-05-12 00:44 - 2016-04-23 15:09 - 04074160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-05-12 00:44 - 2016-04-23 15:08 - 06605504 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2016-05-12 00:44 - 2016-04-23 15:08 - 04515256 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-05-12 00:44 - 2016-04-23 15:01 - 01996640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-12 00:44 - 2016-04-23 14:39 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\MapsCSP.dll
2016-05-12 00:44 - 2016-04-23 14:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mapsupdatetask.dll
2016-05-12 00:44 - 2016-04-23 14:31 - 13018112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-05-12 00:44 - 2016-04-23 14:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\MosStorage.dll
2016-05-12 00:44 - 2016-04-23 14:30 - 22379008 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-05-12 00:44 - 2016-04-23 14:30 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\MapsBtSvc.dll
2016-05-12 00:44 - 2016-04-23 14:29 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\moshost.dll
2016-05-12 00:44 - 2016-04-23 14:26 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-05-12 00:44 - 2016-04-23 14:23 - 11545088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-05-12 00:44 - 2016-04-23 14:22 - 09918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-05-12 00:44 - 2016-04-23 14:20 - 19344384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-12 00:44 - 2016-04-23 14:20 - 18676224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-05-12 00:44 - 2016-04-23 14:20 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-05-12 00:44 - 2016-04-23 14:19 - 07977472 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-05-12 00:44 - 2016-04-23 14:19 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-12 00:44 - 2016-04-23 14:19 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2016-05-12 00:44 - 2016-04-23 14:18 - 24604672 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-12 00:44 - 2016-04-23 14:18 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-05-12 00:44 - 2016-04-23 14:18 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-05-12 00:44 - 2016-04-23 14:18 - 00870400 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2016-05-12 00:44 - 2016-04-23 14:16 - 01319424 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-05-12 00:44 - 2016-04-23 14:15 - 00792064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-12 00:44 - 2016-04-23 14:15 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-05-12 00:44 - 2016-04-23 14:15 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2016-05-12 00:44 - 2016-04-23 14:14 - 13383168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-12 00:44 - 2016-04-23 14:14 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-05-12 00:44 - 2016-04-23 14:13 - 06295552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-05-12 00:44 - 2016-04-23 14:10 - 12125696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-12 00:44 - 2016-04-23 14:09 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-12 00:44 - 2016-04-23 14:08 - 05324288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-05-12 00:44 - 2016-04-23 14:06 - 06974464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-05-12 00:44 - 2016-04-23 14:05 - 05502976 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-05-12 00:44 - 2016-04-23 14:05 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-05-12 00:44 - 2016-04-23 14:05 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-05-12 00:44 - 2016-04-23 14:05 - 01946112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-05-12 00:44 - 2016-04-23 14:04 - 04759040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-05-12 00:44 - 2016-04-23 14:03 - 05660160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-05-12 00:44 - 2016-04-23 14:03 - 04894208 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-12 00:44 - 2016-04-23 14:03 - 02280960 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-12 00:44 - 2016-04-23 14:03 - 02000896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2016-05-12 00:44 - 2016-04-23 14:02 - 07832576 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-05-12 00:44 - 2016-04-23 14:02 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2016-05-12 00:44 - 2016-04-23 14:00 - 00984576 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2016-05-12 00:43 - 2016-05-06 14:53 - 00095072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdport.sys
2016-05-12 00:43 - 2016-05-06 14:05 - 00241664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptngc.dll
2016-05-12 00:43 - 2016-05-06 14:03 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2016-05-12 00:43 - 2016-05-06 13:53 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnr.dll
2016-05-12 00:43 - 2016-05-06 13:49 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2016-05-12 00:43 - 2016-05-06 13:44 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2016-05-12 00:43 - 2016-05-06 13:43 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\cryptngc.dll
2016-05-12 00:43 - 2016-05-06 13:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll
2016-05-12 00:43 - 2016-04-30 16:42 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-05-12 00:43 - 2016-04-23 16:12 - 00514752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-05-12 00:43 - 2016-04-23 16:12 - 00294592 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-05-12 00:43 - 2016-04-23 16:12 - 00092352 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-05-12 00:43 - 2016-04-23 15:28 - 01557768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-12 00:43 - 2016-04-23 15:26 - 00707608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-12 00:43 - 2016-04-23 15:24 - 01997328 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-12 00:43 - 2016-04-23 15:24 - 00754664 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2016-05-12 00:43 - 2016-04-23 15:24 - 00638816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-05-12 00:43 - 2016-04-23 15:24 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2016-05-12 00:43 - 2016-04-23 15:24 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-05-12 00:43 - 2016-04-23 15:22 - 01161120 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-12 00:43 - 2016-04-23 15:18 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-05-12 00:43 - 2016-04-23 15:13 - 00502104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-05-12 00:43 - 2016-04-23 15:13 - 00306832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2016-05-12 00:43 - 2016-04-23 15:13 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-05-12 00:43 - 2016-04-23 15:12 - 00925064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-05-12 00:43 - 2016-04-23 15:12 - 00451928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2016-05-12 00:43 - 2016-04-23 15:12 - 00413536 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-05-12 00:43 - 2016-04-23 15:11 - 01092464 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-05-12 00:43 - 2016-04-23 15:11 - 00696672 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-05-12 00:43 - 2016-04-23 15:11 - 00498960 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-05-12 00:43 - 2016-04-23 15:11 - 00390496 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2016-05-12 00:43 - 2016-04-23 15:11 - 00131424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ufxsynopsys.sys
2016-05-12 00:43 - 2016-04-23 15:11 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-05-12 00:43 - 2016-04-23 15:10 - 00330072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-05-12 00:43 - 2016-04-23 15:09 - 00569744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-05-12 00:43 - 2016-04-23 15:09 - 00565600 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-05-12 00:43 - 2016-04-23 15:09 - 00465760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-05-12 00:43 - 2016-04-23 15:09 - 00303216 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-05-12 00:43 - 2016-04-23 15:09 - 00255168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-05-12 00:43 - 2016-04-23 15:08 - 00725776 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-05-12 00:43 - 2016-04-23 15:07 - 01848072 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-05-12 00:43 - 2016-04-23 15:07 - 01536088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-05-12 00:43 - 2016-04-23 15:07 - 00204048 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-05-12 00:43 - 2016-04-23 15:07 - 00183904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-05-12 00:43 - 2016-04-23 15:06 - 00291360 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-05-12 00:43 - 2016-04-23 15:02 - 00188256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2016-05-12 00:43 - 2016-04-23 15:01 - 00650304 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-05-12 00:43 - 2016-04-23 15:01 - 00619296 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-12 00:43 - 2016-04-23 15:01 - 00577368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-05-12 00:43 - 2016-04-23 15:01 - 00522176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-05-12 00:43 - 2016-04-23 15:01 - 00513368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-12 00:43 - 2016-04-23 15:01 - 00393568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-12 00:43 - 2016-04-23 15:01 - 00217440 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 01776768 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 01594920 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 01522152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 01399224 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 01372304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 01337240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 00550656 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 00453472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2016-05-12 00:43 - 2016-04-23 15:00 - 00058208 _____ (Microsoft Corporation) C:\Windows\system32\dwminit.dll
2016-05-12 00:43 - 2016-04-23 14:56 - 00534872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-05-12 00:43 - 2016-04-23 14:35 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\MosHostClient.dll
2016-05-12 00:43 - 2016-04-23 14:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbser.sys
2016-05-12 00:43 - 2016-04-23 14:34 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2016-05-12 00:43 - 2016-04-23 14:34 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-05-12 00:43 - 2016-04-23 14:33 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2016-05-12 00:43 - 2016-04-23 14:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-05-12 00:43 - 2016-04-23 14:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmCx.sys
2016-05-12 00:43 - 2016-04-23 14:33 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\ByteCodeGenerator.exe
2016-05-12 00:43 - 2016-04-23 14:32 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\wificonnapi.dll
2016-05-12 00:43 - 2016-04-23 14:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-12 00:43 - 2016-04-23 14:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2016-05-12 00:43 - 2016-04-23 14:30 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2016-05-12 00:43 - 2016-04-23 14:29 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2016-05-12 00:43 - 2016-04-23 14:29 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2016-05-12 00:43 - 2016-04-23 14:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filecrypt.sys
2016-05-12 00:43 - 2016-04-23 14:29 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-05-12 00:43 - 2016-04-23 14:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2016-05-12 00:43 - 2016-04-23 14:29 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ByteCodeGenerator.exe
2016-05-12 00:43 - 2016-04-23 14:29 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-05-12 00:43 - 2016-04-23 14:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2016-05-12 00:43 - 2016-04-23 14:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-05-12 00:43 - 2016-04-23 14:28 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-05-12 00:43 - 2016-04-23 14:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-05-12 00:43 - 2016-04-23 14:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2016-05-12 00:43 - 2016-04-23 14:27 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-05-12 00:43 - 2016-04-23 14:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2016-05-12 00:43 - 2016-04-23 14:26 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-05-12 00:43 - 2016-04-23 14:25 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\PhoneProviders.dll
2016-05-12 00:43 - 2016-04-23 14:25 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2016-05-12 00:43 - 2016-04-23 14:25 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-05-12 00:43 - 2016-04-23 14:25 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2016-05-12 00:43 - 2016-04-23 14:24 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll
2016-05-12 00:43 - 2016-04-23 14:23 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-05-12 00:43 - 2016-04-23 14:23 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-05-12 00:43 - 2016-04-23 14:23 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\BrowserSettingSync.dll
2016-05-12 00:43 - 2016-04-23 14:23 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-05-12 00:43 - 2016-04-23 14:22 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-05-12 00:43 - 2016-04-23 14:21 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-12 00:43 - 2016-04-23 14:21 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2016-05-12 00:43 - 2016-04-23 14:20 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-05-12 00:43 - 2016-04-23 14:20 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-05-12 00:43 - 2016-04-23 14:20 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2016-05-12 00:43 - 2016-04-23 14:20 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-05-12 00:43 - 2016-04-23 14:20 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2016-05-12 00:43 - 2016-04-23 14:19 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2016-05-12 00:43 - 2016-04-23 14:19 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BrowserSettingSync.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00988672 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00954368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-05-12 00:43 - 2016-04-23 14:18 - 00804352 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-05-12 00:43 - 2016-04-23 14:18 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-05-12 00:43 - 2016-04-23 14:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-05-12 00:43 - 2016-04-23 14:17 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-05-12 00:43 - 2016-04-23 14:17 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-05-12 00:43 - 2016-04-23 14:17 - 00388608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-12 00:43 - 2016-04-23 14:17 - 00337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2016-05-12 00:43 - 2016-04-23 14:16 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-05-12 00:43 - 2016-04-23 14:15 - 01073152 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2016-05-12 00:43 - 2016-04-23 14:15 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2016-05-12 00:43 - 2016-04-23 14:15 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-05-12 00:43 - 2016-04-23 14:15 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-12 00:43 - 2016-04-23 14:14 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-05-12 00:43 - 2016-04-23 14:14 - 00821760 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2016-05-12 00:43 - 2016-04-23 14:14 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-12 00:43 - 2016-04-23 14:14 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-12 00:43 - 2016-04-23 14:14 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2016-05-12 00:43 - 2016-04-23 14:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-05-12 00:43 - 2016-04-23 14:13 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-05-12 00:43 - 2016-04-23 14:13 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2016-05-12 00:43 - 2016-04-23 14:13 - 00434688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-05-12 00:43 - 2016-04-23 14:12 - 00667648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2016-05-12 00:43 - 2016-04-23 14:10 - 00639488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2016-05-12 00:43 - 2016-04-23 14:07 - 02598912 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2016-05-12 00:43 - 2016-04-23 14:07 - 01500160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-12 00:43 - 2016-04-23 14:07 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-12 00:43 - 2016-04-23 14:05 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-05-12 00:43 - 2016-04-23 14:05 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-05-12 00:43 - 2016-04-23 14:05 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-05-12 00:43 - 2016-04-23 14:05 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-05-12 00:43 - 2016-04-23 14:04 - 01731072 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-12 00:43 - 2016-04-23 14:03 - 02193408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-05-12 00:43 - 2016-04-23 14:03 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2016-05-12 00:43 - 2016-04-23 14:03 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-05-12 00:43 - 2016-04-23 14:01 - 04775424 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-05-12 00:43 - 2016-04-23 14:00 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-05-12 00:43 - 2016-04-23 13:45 - 00461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2016-05-12 00:43 - 2016-04-23 12:10 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-05-12 00:43 - 2016-04-23 12:10 - 00002186 _____ C:\Windows\system32\AppxProvisioning.xml
2016-05-12 00:43 - 2016-04-19 08:30 - 00002186 _____ C:\Windows\SysWOW64\AppxProvisioning.xml
2016-05-12 00:16 - 2016-05-24 05:08 - 00000000 ____D C:\Users\therj\Desktop\Excel thermal comfort data
2016-05-10 14:47 - 2016-05-10 14:47 - 00000251 _____ C:\Users\therj\Downloads\template-IP.csv
2016-05-09 21:39 - 2016-05-09 22:12 - 251797272 _____ (METEOTEST Genossenschaft) C:\Users\therj\Downloads\meteonorm7.1.8_installer.exe
2016-05-09 17:24 - 2016-05-09 17:24 - 00130048 _____ C:\Users\therj\Downloads\PSYCH-v10.xls
2016-05-09 02:31 - 2016-05-09 02:31 - 00000000 ___HD C:\Users\therj\AppData\Local\SysHashTable
2016-05-08 21:27 - 2016-05-08 21:27 - 00016054 ____H C:\Users\therj\Desktop\~WRL0141.tmp
2016-05-07 21:32 - 2016-05-07 21:32 - 01563681 _____ C:\Users\therj\Downloads\MYS_Kuala.Lumpur.486470_IWEC.epw
2016-05-07 21:30 - 2016-05-10 19:55 - 00000000 ____D C:\Program Files\Climate6.0
2016-05-07 21:30 - 2016-05-07 21:30 - 00001772 _____ C:\Users\Public\Desktop\Climate Consultant 6.0.lnk
2016-05-07 21:30 - 2016-05-07 21:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Climate Consultant 6.0
2016-05-07 20:57 - 2016-05-07 21:21 - 43071988 _____ ( ) C:\Users\therj\Downloads\Climate60b8.exe
2016-05-06 21:42 - 2016-05-06 21:42 - 00227398 _____ C:\Users\therj\Downloads\Actual_usage_conditions_and_energy_consu (2).pdf
2016-05-06 21:35 - 2016-05-06 21:36 - 00263688 _____ C:\Windows\ntbtlog.txt
2016-05-06 01:30 - 2016-05-06 01:30 - 00001068 _____ C:\Users\therj\Downloads\railroad-brush.abr.zip
2016-05-06 00:57 - 2016-05-18 22:37 - 00000000 ____D C:\Users\therj\Desktop\Urban Perspective Assignment 2
2016-05-05 22:18 - 2016-05-05 22:18 - 00000000 ____D C:\Users\therj\AppData\LocalLow\Google
2016-05-05 22:17 - 2016-05-05 22:17 - 00987728 _____ (Google Inc.) C:\Users\therj\Downloads\GoogleEarthSetup.exe
2016-05-05 22:17 - 2016-05-05 22:17 - 00002233 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-05-05 21:56 - 2016-05-05 21:56 - 00003374 _____ C:\Users\therj\Downloads\Dotted-and-Dashed-Brushes.zip
2016-05-05 20:54 - 2016-05-05 20:54 - 00000000 ____D C:\Users\therj\AppData\Local\IsolatedStorage
2016-05-05 20:16 - 2016-03-24 16:22 - 469706519 _____ C:\Users\therj\Documents\nvivo11.1.1.zip
2016-05-04 06:34 - 2016-05-04 06:35 - 13010893 _____ C:\Users\therj\Downloads\808369177-MIT.pdf
2016-05-04 05:59 - 2016-05-24 17:04 - 00004160 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{47D4E53B-CDE1-4F52-9F2D-49E07683491B}
2016-05-04 05:34 - 2016-05-04 05:34 - 00227398 _____ C:\Users\therj\Downloads\Actual_usage_conditions_and_energy_consu (1).pdf
2016-05-04 00:45 - 2016-05-04 00:45 - 00227398 _____ C:\Users\therj\Downloads\Actual_usage_conditions_and_energy_consu.pdf
2016-05-04 00:30 - 2016-05-16 00:05 - 00000000 ____D C:\Users\therj\Desktop\Designbuilder ESO
2016-05-02 23:36 - 2016-05-02 23:42 - 04304896 _____ C:\Users\therj\Downloads\ResultsViewerInstall-1.0.540.msi
2016-04-30 21:53 - 2016-04-30 21:53 - 00000209 _____ C:\Users\therj\Downloads\Citation.enw
2016-04-30 14:57 - 2016-04-30 14:57 - 00416256 _____ C:\Users\therj\Downloads\u-value_calculator_spreadsheet_v1.1_-_free_lite_version.xls
2016-04-29 23:22 - 2016-04-29 23:22 - 00136707 _____ C:\Users\therj\Downloads\D--internet-myiemorgmy-iemms-assets-doc-alldoc-document-6841_Concrete Codes of Practice.pdf
2016-04-29 22:43 - 2016-04-29 22:43 - 00318675 _____ C:\Users\therj\Downloads\200583084452_886.pdf
2016-04-29 19:36 - 2016-04-29 19:36 - 00000000 ____D C:\Program Files\Adware-Removal-Tool
2016-04-26 01:09 - 2016-04-26 01:16 - 00000000 ____D C:\Users\therj\AppData\Roaming\hairlines
2016-04-25 17:20 - 2016-04-25 17:31 - 11073366 _____ C:\Users\therj\Downloads\26_141210_1354305430_4_bseep_passive_design_for_ee_bulding_by_michael_ching__031014.ppsx
2016-04-24 01:06 - 2016-04-24 01:20 - 00000000 ____D C:\Users\therj\AppData\Roaming\guiros
2016-04-24 00:51 - 2016-04-24 00:53 - 00000000 ____D C:\Users\therj\AppData\Roaming\murre

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-24 21:26 - 2016-03-24 18:56 - 00000000 ____D C:\Users\therj\Documents\DesignBuilder Data
2016-05-24 21:25 - 2016-03-24 18:56 - 00000000 ____D C:\Users\therj\AppData\Local\DesignBuilder
2016-05-24 21:25 - 2016-03-24 18:56 - 00000000 ____D C:\ProgramData\DesignBuilder
2016-05-24 21:04 - 2016-03-24 01:53 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-24 17:06 - 2015-10-30 17:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-05-24 17:06 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\AppReadiness
2016-05-24 04:19 - 2016-04-08 03:07 - 00000000 ____D C:\Users\therj\Desktop\Modelling Datas
2016-05-24 01:00 - 2016-03-24 01:27 - 00881036 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-24 01:00 - 2015-10-30 17:21 - 00000000 ____D C:\Windows\INF
2016-05-24 00:54 - 2016-04-10 21:09 - 00003806 _____ C:\Windows\System32\Tasks\AutoKMS
2016-05-24 00:54 - 2016-03-24 01:53 - 00000928 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-24 00:54 - 2016-03-24 01:52 - 00000000 __SHD C:\Users\therj\IntelGraphicsProfiles
2016-05-24 00:54 - 2016-03-24 01:31 - 00000000 ___RD C:\Users\therj\OneDrive
2016-05-24 00:53 - 2016-03-24 01:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-24 00:53 - 2016-03-24 01:33 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-24 00:53 - 2016-02-13 23:14 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-24 00:53 - 2015-10-30 16:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-05-24 00:45 - 2016-03-24 20:02 - 00000000 ____D C:\Users\therj\AppData\Local\CrashDumps
2016-05-23 02:49 - 2015-10-30 17:24 - 00000000 ___SD C:\Windows\Downloaded Program Files
2016-05-22 17:38 - 2016-03-25 18:35 - 00000000 ____D C:\Users\therj\AppData\Roaming\vlc
2016-05-22 00:31 - 2016-03-26 21:52 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-21 18:26 - 2016-04-21 01:01 - 00290304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\subinacl.exe
2016-05-21 17:22 - 2015-10-30 17:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-05-21 17:21 - 2016-03-24 16:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-05-21 17:18 - 2016-03-24 01:27 - 00000000 ____D C:\Users\therj
2016-05-21 17:16 - 2016-03-28 22:27 - 00000000 ____D C:\Users\therj\AppData\LocalLow\Company
2016-05-21 17:16 - 2016-03-25 18:35 - 00000000 ____D C:\Users\therj\AppData\Local\Ektion
2016-05-18 23:18 - 2016-03-24 01:28 - 00000000 ____D C:\Users\therj\AppData\Local\Packages
2016-05-18 21:46 - 2016-03-24 01:31 - 00002363 _____ C:\Users\therj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-18 19:38 - 2016-03-24 23:10 - 00000000 ____D C:\Users\therj\AppData\Roaming\Apple Computer
2016-05-18 02:21 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\LiveKernelReports
2016-05-16 04:36 - 2016-03-24 02:08 - 00000000 ____D C:\Users\therj\Desktop\Thesis
2016-05-15 01:47 - 2015-10-30 17:24 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-05-15 01:47 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-05-14 23:21 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\rescache
2016-05-14 14:38 - 2016-02-13 23:20 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-14 14:12 - 2016-02-13 23:03 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-14 14:12 - 2015-10-30 17:24 - 00015703 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-05-14 14:12 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\system32\oobe
2016-05-14 14:12 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-14 14:12 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\Provisioning
2016-05-14 14:12 - 2015-10-30 17:24 - 00000000 ____D C:\Windows\bcastdvr
2016-05-14 14:10 - 2015-10-30 17:24 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-05-14 14:10 - 2015-10-30 16:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2016-05-14 12:46 - 2015-10-30 17:11 - 00000000 ____D C:\Windows\CbsTemp
2016-05-13 22:05 - 2016-03-24 01:55 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-13 22:05 - 2016-03-24 01:55 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-13 21:47 - 2016-03-25 18:36 - 00000000 ____D C:\Users\therj\AppData\Local\Amgworks
2016-05-12 21:26 - 2016-03-24 01:29 - 00000000 ____D C:\Users\therj\AppData\Roaming\Adobe
2016-05-12 17:42 - 2016-03-24 16:21 - 00000000 ____D C:\Windows\system32\MRT
2016-05-12 17:33 - 2016-03-24 16:21 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-12 05:57 - 2016-03-24 01:58 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-12 05:57 - 2016-03-24 01:58 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-12 03:20 - 2016-03-26 21:52 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-11 11:59 - 2016-03-24 01:53 - 00003990 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 11:59 - 2016-03-24 01:53 - 00003758 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 02:29 - 2016-03-24 02:08 - 00000000 ____D C:\Users\therj\Desktop\Urban Perspective
2016-05-11 01:54 - 2016-04-19 23:19 - 00000000 ____D C:\Users\therj\Desktop\Print
2016-05-10 21:19 - 2016-03-24 16:10 - 00000000 ____D C:\Users\therj\AppData\Local\Microsoft Help
2016-05-06 21:35 - 2016-04-21 22:09 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2016-05-05 22:10 - 2016-03-24 01:53 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-02 23:52 - 2016-03-27 21:46 - 00000000 ____D C:\Users\therj\AppData\Local\DesignBuilder_Software_Lt
2016-05-02 23:45 - 2016-03-27 22:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DesignBuilder
2016-05-02 23:45 - 2016-03-24 18:56 - 00000000 ____D C:\Program Files (x86)\DesignBuilder
2016-05-02 13:24 - 2016-03-24 15:52 - 00000000 ____D C:\Users\therj\AppData\Local\ElevatedDiagnostics
2016-04-25 20:46 - 2016-03-24 02:08 - 00000000 ____D C:\Users\therj\Desktop\Thesis Journals

==================== Files in the root of some directories =======

2016-03-28 21:44 - 2016-03-28 21:44 - 0003244 _____ () C:\Program Files (x86)\COPYRIGHT
2016-03-28 21:44 - 2016-03-28 21:44 - 0000040 _____ () C:\Program Files (x86)\LICENSE
2016-03-28 21:44 - 2016-03-28 21:44 - 0000046 _____ () C:\Program Files (x86)\README.txt
2016-03-28 21:44 - 2016-03-28 21:44 - 0000526 _____ () C:\Program Files (x86)\release
2016-03-28 21:44 - 2016-03-28 21:44 - 0110114 _____ () C:\Program Files (x86)\THIRDPARTYLICENSEREADME-JAVAFX.txt
2016-03-28 21:44 - 2016-03-28 21:44 - 0177094 _____ () C:\Program Files (x86)\THIRDPARTYLICENSEREADME.txt
2016-03-28 21:44 - 2016-03-28 21:44 - 0000955 _____ () C:\Program Files (x86)\Welcome.html
2014-06-20 17:44 - 2014-06-20 17:44 - 0000234 _____ () C:\Users\therj\AppData\Roaming\1.png
2013-10-02 12:55 - 2013-10-02 12:55 - 0001562 _____ () C:\Users\therj\AppData\Roaming\28.svg
2016-04-01 08:13 - 2016-04-01 08:13 - 0025213 _____ () C:\Users\therj\AppData\Roaming\9.png
2016-04-06 04:08 - 2016-04-06 04:08 - 0001939 _____ () C:\Users\therj\AppData\Roaming\AddictSentinelVialPhyllo
2013-10-02 12:55 - 2013-10-02 12:55 - 0004922 _____ () C:\Users\therj\AppData\Roaming\align.fo
2016-04-15 05:37 - 2016-04-15 05:37 - 0209554 _____ () C:\Users\therj\AppData\Roaming\archive_inactive_hovered.png
2013-10-02 12:54 - 2013-10-02 12:54 - 0000093 _____ () C:\Users\therj\AppData\Roaming\Atikokan
2005-10-22 09:00 - 2005-10-22 09:00 - 0001628 _____ () C:\Users\therj\AppData\Roaming\BacksetBibliopole.q
2013-10-02 12:54 - 2013-10-02 12:54 - 0000844 _____ () C:\Users\therj\AppData\Roaming\Bahia_Banderas
1987-01-21 10:00 - 1987-01-21 10:00 - 0215586 _____ () C:\Users\therj\AppData\Roaming\BuyBrassiere.qzt
2010-07-20 07:16 - 2010-07-20 07:16 - 0004878 _____ () C:\Users\therj\AppData\Roaming\b_dk.jpg
2016-05-16 01:43 - 2016-05-16 01:43 - 0000053 _____ () C:\Users\therj\AppData\Roaming\Camdata.ini
2016-05-16 01:43 - 2016-05-16 01:43 - 0000408 _____ () C:\Users\therj\AppData\Roaming\CamLayout.ini
2016-05-16 01:43 - 2016-05-16 01:43 - 0000408 _____ () C:\Users\therj\AppData\Roaming\CamShapes.ini
2016-05-15 01:53 - 2016-05-15 01:53 - 0004536 _____ () C:\Users\therj\AppData\Roaming\CamStudio.cfg
2016-04-12 19:21 - 2016-04-12 19:21 - 0209477 _____ () C:\Users\therj\AppData\Roaming\chapter.gif
2009-06-11 07:06 - 2009-06-11 07:06 - 0005059 _____ () C:\Users\therj\AppData\Roaming\circleround_videoinset.png
2016-03-30 08:44 - 2016-03-30 08:44 - 0001885 _____ () C:\Users\therj\AppData\Roaming\ClairobscureMagnet
2015-05-18 10:49 - 2015-05-18 10:49 - 0000517 _____ () C:\Users\therj\AppData\Roaming\console.log
2013-10-02 12:56 - 2013-10-02 12:56 - 0000926 _____ () C:\Users\therj\AppData\Roaming\crop.marks.xml
2016-04-04 19:02 - 2016-04-04 19:02 - 0002065 _____ () C:\Users\therj\AppData\Roaming\DiastemaMultimediaAuditorship
2006-07-09 09:00 - 2006-07-09 09:00 - 0001567 _____ () C:\Users\therj\AppData\Roaming\Dicentra.9uj
2014-05-08 15:44 - 2014-05-08 15:44 - 0003114 _____ () C:\Users\therj\AppData\Roaming\ETHK-B5-V
2016-04-17 10:51 - 2016-04-17 10:51 - 0001969 _____ () C:\Users\therj\AppData\Roaming\ExudateAfterglow
2010-04-18 09:00 - 2010-04-18 09:00 - 0001452 _____ () C:\Users\therj\AppData\Roaming\Eyebright.HvS
2014-05-08 14:05 - 2014-05-08 14:05 - 0000046 _____ () C:\Users\therj\AppData\Roaming\g1_960 x 640 px 144 ppi.IMZ
2013-10-02 12:59 - 2013-10-02 12:59 - 0001728 _____ () C:\Users\therj\AppData\Roaming\glib.txt
2016-03-25 06:02 - 2016-03-25 06:02 - 0209028 _____ () C:\Users\therj\AppData\Roaming\history_report_yellow.png
2016-04-01 08:13 - 2016-04-01 08:13 - 0025133 _____ () C:\Users\therj\AppData\Roaming\Hojo-EUC-H
2013-10-02 12:56 - 2013-10-02 12:56 - 0001253 _____ () C:\Users\therj\AppData\Roaming\informaltable.properties.xml
1999-06-03 09:00 - 1999-06-03 09:00 - 0215629 _____ () C:\Users\therj\AppData\Roaming\licentiousness.xrb
2016-03-28 06:26 - 2016-03-28 06:26 - 0001996 _____ () C:\Users\therj\AppData\Roaming\LimerickIndigotinPiet
2013-10-02 12:56 - 2013-10-02 12:56 - 0001349 _____ () C:\Users\therj\AppData\Roaming\make.graphic.viewport.xml
2016-04-04 19:02 - 2016-04-04 19:02 - 0050444 _____ () C:\Users\therj\AppData\Roaming\man.charmap.uri.xml
2013-10-02 12:56 - 2013-10-02 12:56 - 0001097 _____ () C:\Users\therj\AppData\Roaming\man.table.footnotes.divider.xml
2010-04-14 09:00 - 2010-04-14 09:00 - 0054199 _____ () C:\Users\therj\AppData\Roaming\Marcella.S
1994-02-20 10:00 - 1994-02-20 10:00 - 0220082 _____ () C:\Users\therj\AppData\Roaming\Myeloblast.g
2016-04-01 08:13 - 2016-04-01 08:13 - 0001378 _____ () C:\Users\therj\AppData\Roaming\NeuroblastMaltCavetto
2014-05-08 14:05 - 2014-05-08 14:05 - 0000294 _____ () C:\Users\therj\AppData\Roaming\Neutral Density.blw
2016-03-24 02:21 - 2016-03-24 02:21 - 0001986 _____ () C:\Users\therj\AppData\Roaming\NitrileDuarchyPoiSonship
2013-10-02 12:56 - 2013-10-02 12:56 - 0000900 _____ () C:\Users\therj\AppData\Roaming\no.prev.image.xml
2016-04-17 10:51 - 2016-04-17 10:51 - 0209700 _____ () C:\Users\therj\AppData\Roaming\oobe_launcher.zdct
2016-04-12 07:14 - 2016-04-12 07:14 - 0002390 _____ () C:\Users\therj\AppData\Roaming\OsseletStopoffSecrecy
2013-04-03 09:00 - 2013-04-03 09:00 - 0219389 _____ () C:\Users\therj\AppData\Roaming\Overthrow.T
2016-04-15 05:37 - 2016-04-15 05:37 - 0002116 _____ () C:\Users\therj\AppData\Roaming\ParadoxologyMonkHerbal
2014-04-22 09:00 - 2014-04-22 09:00 - 0002105 _____ () C:\Users\therj\AppData\Roaming\Parleyvoo.y
2014-05-08 14:05 - 2014-05-08 14:05 - 0000336 _____ () C:\Users\therj\AppData\Roaming\PMBlendingProgress.exv
2014-05-08 15:44 - 2014-05-08 15:44 - 0000972 _____ () C:\Users\therj\AppData\Roaming\pol.fca
2014-02-11 10:00 - 2014-02-11 10:00 - 0001899 _____ () C:\Users\therj\AppData\Roaming\PsychopathologyErrantry
2013-10-02 12:55 - 2013-10-02 12:55 - 0003767 _____ () C:\Users\therj\AppData\Roaming\ptc.xsl
2013-10-02 12:55 - 2013-10-02 12:55 - 0000236 _____ () C:\Users\therj\AppData\Roaming\rc-b-r-15-1body-2menu-3menu.png
2016-03-28 06:26 - 2016-03-28 06:26 - 0209115 _____ () C:\Users\therj\AppData\Roaming\rc-b-r-5-1header-2tab-selected-3tab-selected.png
2014-05-08 14:05 - 2014-05-08 14:05 - 0000524 _____ () C:\Users\therj\AppData\Roaming\red 485 bl 1.ADO
2016-04-04 03:43 - 2016-04-04 03:43 - 0209453 _____ () C:\Users\therj\AppData\Roaming\REDIST.TXT
1992-02-03 10:00 - 1992-02-03 10:00 - 0049885 _____ () C:\Users\therj\AppData\Roaming\Regatta.n
2013-10-02 12:56 - 2013-10-02 12:56 - 0000933 _____ () C:\Users\therj\AppData\Roaming\region.before.extent.xml
2016-03-25 06:02 - 2016-03-25 06:02 - 0001632 _____ () C:\Users\therj\AppData\Roaming\RemudaSextoletHoldupAerodyne
2016-04-05 08:32 - 2016-04-05 08:32 - 0050366 _____ () C:\Users\therj\AppData\Roaming\SampleUnmanagedApp2.cpp
2016-03-26 17:31 - 2016-03-26 17:31 - 0209181 _____ () C:\Users\therj\AppData\Roaming\section.level1.properties.xml
2016-04-17 04:06 - 2016-04-17 04:06 - 0002056 _____ () C:\Users\therj\AppData\Roaming\ShagreenOxytocinKnurSourdine
2016-03-30 08:44 - 2016-03-30 08:44 - 0050242 _____ () C:\Users\therj\AppData\Roaming\Skybox.material
2016-04-09 21:52 - 2016-04-09 21:52 - 0001601 _____ () C:\Users\therj\AppData\Roaming\SquamaGlucoprotein
2016-03-24 02:21 - 2016-03-24 02:21 - 0049919 _____ () C:\Users\therj\AppData\Roaming\switch.ico
2016-04-17 04:06 - 2016-04-17 04:06 - 0050431 _____ () C:\Users\therj\AppData\Roaming\Sydney
2016-04-12 07:14 - 2016-04-12 07:14 - 0050253 _____ () C:\Users\therj\AppData\Roaming\system_information.png
2016-04-12 19:21 - 2016-04-12 19:21 - 0002093 _____ () C:\Users\therj\AppData\Roaming\TerraceSawwortSouthernwood
2013-10-02 12:56 - 2013-10-02 12:56 - 0001017 _____ () C:\Users\therj\AppData\Roaming\toc.blank.image.xml
2016-04-04 03:43 - 2016-04-04 03:43 - 0002188 _____ () C:\Users\therj\AppData\Roaming\TomalleyGnashPatron
2013-10-02 12:55 - 2013-10-02 12:55 - 0002780 _____ () C:\Users\therj\AppData\Roaming\transparency.svg
2016-05-15 01:49 - 2016-05-15 01:49 - 0000096 _____ () C:\Users\therj\AppData\Roaming\version2.xml
2016-03-26 17:31 - 2016-03-26 17:31 - 0002348 _____ () C:\Users\therj\AppData\Roaming\VertebraSquiredom
2016-04-05 08:32 - 2016-04-05 08:32 - 0001959 _____ () C:\Users\therj\AppData\Roaming\VibrancyThalassemia
2016-04-09 21:52 - 2016-04-09 21:52 - 0334725 _____ () C:\Users\therj\AppData\Roaming\Warm Gray 11 bl 2.ADO
2016-05-15 02:47 - 2016-05-20 23:47 - 0000075 _____ () C:\Users\therj\AppData\Roaming\WB.CFG
2002-06-13 09:00 - 2002-06-13 09:00 - 0001874 _____ () C:\Users\therj\AppData\Roaming\WoolOverlook.REX
2016-05-15 01:03 - 2016-05-15 02:50 - 0005120 _____ () C:\Users\therj\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-03-24 01:38 - 2016-03-24 01:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-03-24 21:59 - 2016-03-24 21:59 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Files to move or delete:
====================
C:\Users\therj\jogamp_exe_tst9065173612379262270.exe
C:\Windows\Tasks\{676C695A-249A-CA53-4581-07913CB1F55A}.job


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-05-21 23:53

==================== End of FRST.txt ============================