Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:24-05-2016 01
Ran by nikon (administrator) on 2B (25-05-2016 16:12:37)
Running from C:\Users\nikon\Downloads
Loaded Profiles: nikon (Available Profiles: nikon)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
() C:\Program Files\Join Air\AssistantServices.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(PowerISO Computing, Inc.) C:\Program Files\PowerISO\PWRISOVM.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Setup\avgsetupx.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Windows\Temp\AvgSetup\6db5a175-148b-47cc-b740-d15434ee16a0\install\av\avgmfapx.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1565992 2009-09-17] (Synaptics Incorporated)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [200704 2007-01-20] (PowerISO Computing, Inc.)
HKLM\...\Run: [Nikon Message Center 2] => C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [619008 2010-05-25] (Nikon Corporation)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [ArcSoft Connection Service] => C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [UIExec] => C:\Program Files\Join Air\UIExec.exe [132096 2009-10-10] ()
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [186640 2016-04-22] (AVG Technologies CZ, s.r.o.)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\Run: [GoogleDriveSync] => "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\Run: [AVG-Secure-Search-Update_0913b] => C:\Users\nikon\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid bad78f280fc447d08aafd15434ee16a0-e1addccfa1b19d3e8519e54add6ccd2446201b0a --CMPID 0913b
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\Run: [{65A9E976-6D7B-47DE-BC45-67FA44D3F254}] => powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\BQrzIMbRx').CIWPHJXAZTNUMZV)));
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\MountPoints2: G - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\MountPoints2: H - H:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\MountPoints2: I - I:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\MountPoints2: {3209c9d3-5ee5-11e2-ac61-001e4c40b41e} - H:\windows\Install.exe
HKU\S-1-5-21-27391591-736041179-2425490622-1000\...\MountPoints2: {7d2404e7-cf00-11e5-8818-001d720aff53} - H:\LaunchU3.exe -a
AppInit_DLLs: c:\progra~2\browse~2\261562~1.220\{c16c1~1\browse~1.dll => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} =>  No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2015-05-16]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\Users\nikon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Decupare ecran și Lansator OneNote 2007.lnk [2012-11-03]
ShortcutTarget: Decupare ecran și Lansator OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{2853C317-A26F-4909-AF58-FAA599098F8B}: [DhcpNameServer] 195.191.124.253 8.8.8.8
Tcpip\..\Interfaces\{72601792-1717-4A0A-B2EA-6BCDC7EED5C5}: [DhcpNameServer] 192.168.43.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://cool-tvlive.net/terra
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://cool-tvlive.net/terra
HKU\S-1-5-21-27391591-736041179-2425490622-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://cool-tvlive.net/terra
HKU\S-1-5-21-27391591-736041179-2425490622-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://cool-tvlive.net/terra
HKU\S-1-5-21-27391591-736041179-2425490622-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://cool-tvlive.net/terra
HKU\S-1-5-21-27391591-736041179-2425490622-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=20B9001E4C40B41E&affID=124033&tsp=4988
HKU\S-1-5-21-27391591-736041179-2425490622-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://cool-tvlive.net/terra
SearchScopes: HKLM -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.toolksearchbook.info/?l=1&q={searchTerms}&pid=945&r=2014/01/19&hid=2947519474016363976&lg=EN&cc=RO&unqvl=46
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-27391591-736041179-2425490622-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-27391591-736041179-2425490622-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119828&tt=190313_wo1&babsrc=SP_ss_obla&mntrId=20B9001E4C40B41E
SearchScopes: HKU\S-1-5-21-27391591-736041179-2425490622-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKU\S-1-5-21-27391591-736041179-2425490622-1000 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.toolksearchbook.info/?l=1&q={searchTerms}&pid=945&r=2014/01/19&hid=2947519474016363976&lg=EN&cc=RO&unqvl=46
BHO: DefaultTab Browser Helper -> {7F6AFBF1-E065-4627-A2FD-810366367D01} -> C:\Windows\system32\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\DefaultTabBHO.dll [2015-06-23] (Search Results LLC.)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-01-06] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-01-06] (Google Inc.)
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-24] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-24] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-09-26] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-27391591-736041179-2425490622-1000: @citrixonline.com/appdetectorplugin -> C:\Users\nikon\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2013-09-19] (Citrix Online)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxp://start.moodle.ro/"
CHR Profile: C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bejeweled) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2014-07-06]
CHR Extension: (Google Docs) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Disc Google) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-05]
CHR Extension: (YouTube) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-12]
CHR Extension: (Google Search) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
CHR Extension: (Box) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejnkaeblpdcamcioiiabclakabcbjmbl [2015-06-22]
CHR Extension: (Marlies Dekkers) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepnljgdbelppefncogilfbjikmnbhjm [2014-07-06]
CHR Extension: (Documente Google Offline) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-22]
CHR Extension: (AdBlock) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-05-23]
CHR Extension: (Autodesk Homestyler) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2014-07-06]
CHR Extension: (WordPress.com) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\khjnjifipfkgglficmipimgjpbmlbemd [2014-07-06]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-06]
CHR Extension: (Google Play Books) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmimngoggfoobjdlefbcabngfnmieonb [2016-04-22]
CHR Extension: (Plăți prin Magazinul web Chrome) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Gmail) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-22]
CHR Profile: C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Docs) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-01]
CHR Extension: (Disc Google) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-01]
CHR Extension: (YouTube) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-01]
CHR Extension: (căutare Google) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-01]
CHR Extension: (Gmail) - C:\Users\nikon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-01]
CHR HKU\S-1-5-21-27391591-736041179-2425490622-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [889104 2016-04-22] (AVG Technologies CZ, s.r.o.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [28552 2016-04-26] (Hewlett-Packard Company)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 UI Assistant Service; C:\Program Files\Join Air\AssistantServices.exe [246272 2009-10-10] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 DefaultTabUpdate; "C:\Users\nikon\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [31644 2007-01-20] (PowerISO Computing, Inc.) [File not signed]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-25 16:12 - 2016-05-25 16:14 - 00015998 _____ C:\Users\nikon\Downloads\FRST.txt
2016-05-25 16:12 - 2016-05-25 16:12 - 01733632 _____ (Farbar) C:\Users\nikon\Downloads\FRST.exe
2016-05-25 16:12 - 2016-05-25 16:12 - 00000000 ____D C:\FRST
2016-05-25 16:00 - 2016-05-25 16:00 - 00001074 _____ C:\Users\Public\Desktop\PlayerLiteHJ.lnk
2016-05-25 16:00 - 2016-05-25 16:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayerLiteHJ
2016-05-25 16:00 - 2016-05-25 16:00 - 00000000 ____D C:\Program Files\H.264 & JPEG PlayLite
2016-05-25 15:52 - 2016-05-25 15:52 - 00703763 _____ C:\Users\nikon\Desktop\adev.pdf
2016-05-25 15:43 - 2016-05-25 15:43 - 00000832 _____ C:\Users\Public\Desktop\AVG.lnk
2016-05-25 15:43 - 2016-05-25 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-05-25 15:40 - 2016-05-25 15:43 - 00000000 ____D C:\ProgramData\Avg
2016-05-25 15:39 - 2016-05-25 16:04 - 00000000 ____D C:\Users\nikon\AppData\Local\AvgSetupLog
2016-05-25 15:39 - 2016-05-25 15:39 - 02939088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\nikon\Downloads\AVG_Protection_1516.exe
2016-05-25 15:36 - 2016-05-25 15:45 - 00000000 ____D C:\Users\nikon\AppData\Roaming\Solvusoft
2016-05-25 15:36 - 2016-05-25 15:36 - 03901072 _____ (solvusoft Corporation ) C:\Users\nikon\Downloads\WinThruster_2016_Setup.exe
2016-05-25 15:04 - 2015-11-25 13:01 - 00019576 _____ (solvusoft) C:\Windows\system32\roboot.exe
2016-05-25 14:59 - 2016-05-25 14:59 - 00000000 ____D C:\Users\nikon\Downloads\DLL-Files Fixer v3.1.81.2919
2016-05-25 14:58 - 2016-05-25 15:01 - 00000000 ____D C:\Users\nikon\AppData\LocalLow\BitTorrent
2016-05-25 14:56 - 2016-05-25 15:22 - 00000000 ____D C:\Users\nikon\AppData\Roaming\BitTorrent
2016-05-25 14:55 - 2016-05-25 14:56 - 01972232 _____ (BitTorrent Inc.) C:\Users\nikon\Downloads\BitTorrent.exe
2016-05-25 14:53 - 2016-05-25 14:53 - 00007333 _____ C:\Users\nikon\Downloads\[SceneFZ.net]DLL-Files.Fixer.v3.1.81.2919.and.Serial-NoGrp.torrent
2016-05-25 14:49 - 2016-05-25 14:49 - 00015360 _____ C:\Windows\system32\AVC_AX_742_JPEG.dll
2016-05-25 14:48 - 2016-05-25 14:48 - 05444000 _____ (Dll-Files.com ) C:\Users\nikon\Downloads\dffsetup-avc_ax_742_jpeg.exe
2016-05-25 14:10 - 2016-05-25 14:10 - 00000000 ____D C:\ProgramData\dllescort
2016-05-25 14:07 - 2016-05-25 14:08 - 09459242 _____ C:\Users\nikon\Downloads\wetransfer-9d1d80.zip
2016-05-25 10:36 - 2016-05-25 10:36 - 00000000 ____D C:\Users\nikon\AppData\Roaming\MPC-HC
2016-05-25 10:35 - 2016-05-25 10:35 - 00001817 _____ C:\Users\nikon\Desktop\MPC-HC.lnk
2016-05-25 10:35 - 2016-05-25 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2016-05-25 10:35 - 2016-05-25 10:35 - 00000000 ____D C:\Program Files\MPC-HC
2016-05-24 15:44 - 2016-03-18 01:30 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-24 15:44 - 2016-03-18 01:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-05-24 15:44 - 2016-03-18 01:26 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-24 15:44 - 2016-03-18 01:26 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 01:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 00:36 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-24 15:44 - 2016-03-18 00:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 00:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 00:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-24 15:44 - 2016-03-18 00:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-24 15:38 - 2016-03-06 21:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-05-24 15:38 - 2016-03-06 21:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-05-24 15:32 - 2016-05-24 15:32 - 00001020 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-05-23 14:01 - 2016-05-23 14:01 - 03051190 _____ C:\Users\nikon\Desktop\20160501T142524-CAM 9.bmp
2016-05-23 14:00 - 2016-05-23 14:00 - 03051190 _____ C:\Users\nikon\Desktop\20160501T142523-CAM 9.bmp
2016-05-23 10:02 - 2016-04-09 09:59 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-23 10:02 - 2016-04-09 09:59 - 00218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-23 10:02 - 2016-04-09 09:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-23 10:02 - 2016-02-05 21:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-05-23 10:02 - 2016-02-05 21:44 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-05-23 10:02 - 2016-02-05 21:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-05-23 10:02 - 2016-02-05 20:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-05-23 10:02 - 2016-02-05 20:43 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-05-23 10:00 - 2016-04-09 09:54 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-23 10:00 - 2016-02-09 12:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-05-23 10:00 - 2016-02-09 12:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-05-23 10:00 - 2016-02-09 12:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-05-23 10:00 - 2016-02-09 12:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-05-23 10:00 - 2016-02-09 12:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-05-23 09:59 - 2016-04-14 16:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-23 09:59 - 2016-04-09 08:40 - 02397696 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-23 09:59 - 2016-04-09 07:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-23 09:59 - 2016-04-06 13:36 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-23 09:58 - 2016-04-23 19:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-23 09:58 - 2016-04-23 07:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-23 09:58 - 2016-04-23 07:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-23 09:58 - 2016-04-23 07:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-23 09:58 - 2016-04-23 07:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-23 09:58 - 2016-04-23 07:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-23 09:58 - 2016-04-23 07:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-23 09:58 - 2016-04-23 07:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-23 09:58 - 2016-04-23 07:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-23 09:58 - 2016-04-23 07:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-23 09:58 - 2016-04-23 07:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-23 09:58 - 2016-04-23 07:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-23 09:58 - 2016-04-23 06:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-23 09:58 - 2016-04-23 06:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-23 09:58 - 2016-04-23 06:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-23 09:58 - 2016-04-23 06:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-23 09:58 - 2016-04-23 06:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-23 09:58 - 2016-04-23 06:53 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-23 09:58 - 2016-04-23 06:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-23 09:58 - 2016-04-23 06:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-23 09:58 - 2016-04-23 06:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-23 09:58 - 2016-04-23 06:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-23 09:58 - 2016-04-23 06:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-23 09:58 - 2016-04-23 06:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-23 09:58 - 2016-04-23 06:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-23 09:58 - 2016-04-23 06:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-23 09:58 - 2016-04-23 06:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-23 09:58 - 2016-04-23 06:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-23 09:58 - 2016-04-23 06:31 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-23 09:58 - 2016-04-23 06:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-23 09:58 - 2016-04-23 06:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-23 09:58 - 2016-04-23 06:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-23 09:58 - 2016-04-23 06:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-23 09:58 - 2016-04-23 06:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-23 09:58 - 2016-04-23 06:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-23 09:58 - 2016-04-09 09:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-23 09:57 - 2016-04-09 09:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-05-23 09:57 - 2016-04-09 09:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-23 09:57 - 2016-04-09 09:59 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-23 09:57 - 2016-04-09 09:59 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-23 09:57 - 2016-04-09 09:57 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-23 09:57 - 2016-04-09 09:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-23 09:57 - 2016-04-09 08:42 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-23 09:57 - 2016-04-09 08:42 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-23 09:57 - 2016-04-09 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-23 09:57 - 2016-04-09 08:42 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-23 09:57 - 2016-04-09 08:42 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-23 09:57 - 2016-04-09 08:40 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-23 09:57 - 2016-04-09 08:38 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-23 09:57 - 2016-04-09 08:38 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-23 09:57 - 2016-04-09 08:38 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-23 09:57 - 2016-04-09 08:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-23 09:57 - 2016-04-09 08:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-23 09:57 - 2016-04-09 08:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-23 09:57 - 2016-04-09 08:37 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-19 15:02 - 2016-02-12 21:39 - 02956288 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-05-19 15:02 - 2016-02-12 21:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-05-19 15:02 - 2016-02-12 21:26 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-05-19 15:02 - 2016-02-12 21:07 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-05-19 15:02 - 2016-02-12 21:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-05-19 15:02 - 2016-02-12 21:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-05-19 15:02 - 2016-02-12 21:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-05-19 15:02 - 2016-02-12 21:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-05-19 15:02 - 2016-02-12 21:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-05-19 15:02 - 2016-02-12 21:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-05-19 15:02 - 2016-02-12 21:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-05-19 15:02 - 2016-02-04 21:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-05-19 15:02 - 2016-02-03 20:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-05-19 15:01 - 2016-03-16 02:53 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-05-19 15:01 - 2016-03-16 02:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-05-19 15:01 - 2016-02-09 12:50 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-05-19 15:01 - 2016-02-03 21:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-05-19 15:01 - 2016-02-03 21:49 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-05-19 15:01 - 2016-02-03 21:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-05-12 10:42 - 2016-05-12 10:42 - 00687104 _____ C:\Users\nikon\Downloads\Registrul national al unitatilor de invatamant     preuniversitar acreditate_ 1 aprilie 2016.xls
2016-05-12 10:19 - 2016-05-12 10:19 - 00596992 _____ C:\Users\nikon\Downloads\REGISTRUL NATIONAL AL UNITATILOR DE INVATAMANT  PREUNIVERSITAR  PARTICULAR AUTORIZATE_1 aprilie 2016.xls
2016-05-05 15:57 - 2016-05-05 15:57 - 00000000 ____D C:\Users\nikon\Desktop\PNL
2016-05-05 15:55 - 2016-05-05 15:56 - 33540095 _____ C:\Users\nikon\Downloads\PNL.rar
2016-05-05 10:00 - 2016-05-18 09:26 - 00000000 ____D C:\Users\nikon\Desktop\Dosar Duduianu
2016-04-26 13:35 - 2016-04-26 13:35 - 00001357 _____ C:\Users\nikon\Desktop\Portable Archive Player - Shortcut.lnk
2016-04-25 15:56 - 2016-04-25 15:56 - 00000000 ____D C:\Users\nikon\AppData\Roaming\Thinstall
2016-04-25 15:56 - 2016-04-25 15:56 - 00000000 ____D C:\Users\nikon\AppData\Local\Thinstall
2016-04-25 15:54 - 2016-04-25 15:54 - 00000000 ____D C:\Genetec

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-05-25 16:10 - 2012-10-19 10:20 - 00000000 ____D C:\ProgramData\MFAData
2016-05-25 16:07 - 2009-07-14 07:34 - 00019520 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-25 16:07 - 2009-07-14 07:34 - 00019520 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-25 15:59 - 2012-10-19 10:08 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-25 15:58 - 2009-07-14 07:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-25 15:46 - 2014-11-15 15:41 - 00000000 __SHD C:\Users\nikon\AppData\LocalLow\EmieBrowserModeList
2016-05-25 15:46 - 2014-11-15 11:34 - 00000000 __SHD C:\Users\nikon\AppData\Local\EmieBrowserModeList
2016-05-25 15:46 - 2014-07-06 12:39 - 00000000 __SHD C:\Users\nikon\AppData\LocalLow\EmieUserList
2016-05-25 15:46 - 2014-07-06 12:39 - 00000000 __SHD C:\Users\nikon\AppData\LocalLow\EmieSiteList
2016-05-25 15:46 - 2014-04-24 06:38 - 00000000 __SHD C:\Users\nikon\AppData\Local\EmieUserList
2016-05-25 15:46 - 2014-04-24 06:38 - 00000000 __SHD C:\Users\nikon\AppData\Local\EmieSiteList
2016-05-25 15:45 - 2012-10-19 10:08 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-25 15:43 - 2012-10-19 10:23 - 00000000 ____D C:\Program Files\AVG
2016-05-25 15:39 - 2014-11-29 11:19 - 00000000 ____D C:\Users\nikon\AppData\Local\Avg
2016-05-25 15:33 - 2012-12-15 20:37 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-25 15:22 - 2016-03-22 10:29 - 00000662 _____ C:\Windows\Tasks\hpwebreg_CN15B3965J05HX.job
2016-05-25 15:19 - 2012-11-08 01:12 - 00000000 ____D C:\Program Files\Unlocker
2016-05-25 14:57 - 2014-05-16 16:33 - 00002673 _____ C:\Users\nikon\Desktop\BitTorrent.lnk
2016-05-25 14:57 - 2014-05-16 16:33 - 00002673 _____ C:\Users\nikon\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2016-05-25 14:48 - 2013-08-28 11:44 - 00000000 ____D C:\ProgramData\TEMP
2016-05-25 14:11 - 2009-07-14 05:37 - 00000000 ____D C:\Windows\inf
2016-05-25 14:05 - 2013-01-15 15:36 - 00000000 ____D C:\Users\nikon\AppData\Roaming\vlc
2016-05-25 10:33 - 2012-12-15 20:37 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-05-25 10:33 - 2012-12-15 20:37 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-05-24 15:47 - 2014-07-06 12:48 - 00002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-24 15:32 - 2013-09-04 09:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-05-24 04:15 - 2016-03-23 11:17 - 00000000 ____D C:\Windows\rescache
2016-05-24 03:45 - 2012-10-19 09:33 - 00726444 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-24 03:37 - 2009-07-14 07:33 - 00301416 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-24 03:35 - 2009-07-14 10:49 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-24 03:18 - 2013-08-02 14:57 - 00000000 ____D C:\Windows\system32\MRT
2016-05-24 03:02 - 2012-10-23 19:42 - 136686448 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-20 03:19 - 2016-03-22 10:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-05-20 03:02 - 2016-03-22 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-05-05 08:47 - 2016-01-29 15:42 - 00002589 _____ C:\Users\Public\Desktop\SuperPlay.lnk
2016-05-05 08:47 - 2016-01-29 15:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperPlay
2016-05-05 08:47 - 2016-01-29 15:42 - 00000000 ____D C:\Program Files\SuperPlay

==================== Files in the root of some directories =======

2012-10-20 21:19 - 2012-10-20 21:19 - 0000268 ___RH () C:\Users\nikon\AppData\Roaming\Basics
2012-10-20 21:19 - 2012-10-20 21:19 - 0000268 ___RH () C:\Users\nikon\AppData\Roaming\Bass
2012-10-20 21:19 - 2012-10-20 21:19 - 0000268 ___RH () C:\Users\nikon\AppData\Roaming\Bass Amp
2013-08-18 10:27 - 2013-08-18 10:27 - 0007606 _____ () C:\Users\nikon\AppData\Local\Resmon.ResmonCfg
2012-10-20 21:19 - 2012-10-20 21:19 - 0000268 ___RH () C:\ProgramData\BookService
2012-10-20 21:19 - 2012-10-20 21:19 - 0000268 ___RH () C:\ProgramData\Booms
2012-10-20 21:19 - 2012-10-20 21:19 - 0000268 ___RH () C:\ProgramData\Breath Pad
2012-10-20 21:19 - 2012-10-20 21:19 - 0000012 ___RH () C:\ProgramData\Chorus
2012-10-20 21:19 - 2012-10-20 21:19 - 0000012 ___RH () C:\ProgramData\Classical
2012-10-20 21:19 - 2012-10-20 21:19 - 0000012 ___RH () C:\ProgramData\Clips
2012-10-20 21:19 - 2012-10-20 21:19 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2012-10-20 21:19 - 2012-11-26 17:48 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2012-10-20 21:19 - 2012-10-20 21:19 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT

Some files in TEMP:
====================
C:\Users\nikon\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\nikon\AppData\Local\Temp\_isE612.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-05-18 00:03

==================== End of FRST.txt ============================