Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-10-2017 01
Ran by Salinas (administrator) on SALINAS-PC (20-10-2017 12:41:43)
Running from C:\Users\Salinas\Downloads\IExplore Fix Tools
Loaded Profiles: Salinas (Available Profiles: Salinas & Dora & Lily & June & Guest)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2012\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2012\avgcsrvx.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files\ASUS\AXSP\1.01.02\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\AAHM\1.00.22\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\AsusFanControlService\1.04.11\AsusFanControlService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe
(RealNetworks, Inc.) C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
() C:\Program Files\ASUS\AI Suite III\EZ Update\EzUpdt.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\AI Suite III\AISuite3.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr32.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe
(ASUSTek Computer Inc.) C:\Program Files\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(Bluebeam Software, Inc.) C:\Program Files\Common Files\Bluebeam Software\Bluebeam Revu\Brewery\V45\Printer Support\BBPrint.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\Real\RealDownloader\downloader2.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Akamai Technologies, Inc.) C:\Users\Salinas\AppData\Local\Akamai\netsession_win.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
(Akamai Technologies, Inc.) C:\Users\Salinas\AppData\Local\Akamai\netsession_win.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files\ASUS\AI Suite III\AsusMiniBar.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google) C:\Users\Salinas\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Panda Security, S.L.) C:\ProgramData\Panda Security\Panda Devices Agent\Downloads\022e19a3d22e56df9a3ab1de9d06e98d\PSEvents.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [487992 2009-11-29] (Conexant Systems, Inc.)
HKLM\...\Run: [UpdateP2GShortCut] => C:\Program Files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM\...\Run: [AVG_TRAY] => C:\Program Files\AVG\AVG2012\avgtray.exe [2598912 2015-05-19] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [748256 2014-02-15] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6336216 2013-10-22] (Realtek Semiconductor)
HKLM\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220944 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [BbInstallUser] => C:\Program Files\Bluebeam Software\Bluebeam Revu\Pushbutton PDF\Bluebeam Admin User.exe [48696 2014-10-13] (Bluebeam Software, Inc.)
HKLM\...\Run: [BbPrintMonitor] => C:\Program Files\Common Files\Bluebeam Software\Bluebeam Revu\Brewery\V45\Printer Support\BBPrint.exe [174136 2014-10-13] (Bluebeam Software, Inc.)
HKLM\...\Run: [PSUAMain] => C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe [141760 2017-02-22] (Panda Security, S.L.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [353104 2017-10-03] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\program files\real\RealDownloader\downloader2.exe [1259704 2017-08-17] ()
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [1053144 2017-06-06] (DivX, LLC)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKU\S-1-5-21-3647659584-1139991080-2781195243-1004\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [25621648 2017-10-09] (Google)
HKU\S-1-5-21-3647659584-1139991080-2781195243-1004\...\Run: [Akamai NetSession Interface] => C:\Users\Salinas\AppData\Local\Akamai\netsession_win.exe [4490200 2017-09-08] (Akamai Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2017-10-03]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Lily & June\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Media Center.lnk [2016-08-20]
ShortcutTarget: Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart
GroupPolicy\User: Restriction ? <==== ATTENTION
GroupPolicyUsers\S-1-5-21-3647659584-1139991080-2781195243-1009\User: Restriction <==== ATTENTION
GroupPolicyScripts: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{251E7E4F-F4EF-4ABA-B168-49D35761F3E2}: [DhcpNameServer] 192.168.15.1
Tcpip\..\Interfaces\{9FE451F2-E491-4EB9-804E-02314BB47131}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AADC50FD-5860-4E37-A20C-17EFE3A00665}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3647659584-1139991080-2781195243-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3647659584-1139991080-2781195243-1004\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKU\S-1-5-21-3647659584-1139991080-2781195243-1004 -> {06715F47-5B94-4C8D-A58A-B28A37B33167} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3647659584-1139991080-2781195243-1004 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\program files\real\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2017-08-17] (RealDownloader)
BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files\AVG\AVG2012\avgdtiex.dll [2015-05-19] (AVG Technologies CZ, s.r.o.)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: GuardId.MSIEBrowser.BHO -> {5b0a01d2-b8a0-4e56-9e6b-cba0ef4b4eb5} -> C:\windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14] (Microsoft Corp.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-18] (Oracle Corporation)
BHO: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-18] (Oracle Corporation)
BHO: Windows Live Toolbar Helper -> {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -> C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06] (Microsoft Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKU\S-1-5-21-3647659584-1139991080-2781195243-1004 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} hxxp://service.futuremark.com/virtualmark/tc/FMSI.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll [2015-05-19] (AVG Technologies CZ, s.r.o.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{3f963a5b-e555-4543-90e2-c3908898db71}] - C:\Program Files\AVG\AVG10\Firefox
FF Extension: (AVG Safe Search) - C:\Program Files\AVG\AVG10\Firefox [2012-02-08] [not signed]
FF HKLM\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files\AVG\AVG2012\Firefox4
FF Extension: (No Name) - C:\Program Files\AVG\AVG2012\Firefox4 [2016-03-21] [not signed]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2016-03-23] [not signed]
FF HKLM\...\Firefox\Extensions: [{F53C93F1-07D5-430c-86D4-C9531B27DFAF}] - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack
FF Extension: (No Name) - C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack [2016-03-21] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-26] ()
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2017-06-06] (DivX, LLC)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.9.106 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2017-10-03] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.669 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2011-11-07] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.669 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2011-11-07] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.9.106 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2017-10-03] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3647659584-1139991080-2781195243-1004: @talk.google.com/GoogleTalkPlugin -> C:\Users\Salinas\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3647659584-1139991080-2781195243-1004: @talk.google.com/O1DPlugin -> C:\Users\Salinas\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-3647659584-1139991080-2781195243-1004: @tools.google.com/Google Update;version=3 -> C:\Users\Salinas\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-13] (Google Inc.)
FF Plugin HKU\S-1-5-21-3647659584-1139991080-2781195243-1004: @tools.google.com/Google Update;version=9 -> C:\Users\Salinas\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-13] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Salinas\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Salinas\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://sherwinplant/Pages/Default.aspx
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default [2017-10-20]
CHR Extension: (Floorplanner) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2016-03-20]
CHR Extension: (Google Drive) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-20]
CHR Extension: (Viewpath PM - Chrome App) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bikncjafaobiilchkoilemchpaflapdh [2016-03-20]
CHR Extension: (Google News) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\dllkocilcinkggkchnjgegijklcililc [2016-03-20]
CHR Extension: (Adobe Acrobat) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-08-23]
CHR Extension: (Gmail Offline) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2016-03-20]
CHR Extension: (Google Play Music) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2017-08-23]
CHR Extension: (Pandora) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl [2016-03-20]
CHR Extension: (Google Finance) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcgckldmmjdbpdejkclmfnnnehhocbfp [2016-03-20]
CHR Extension: (Full Screen Weather) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg [2016-03-20]
CHR Extension: (Google Docs Offline) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-21]
CHR Extension: (Lumosity) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gialammfkebjplhnjjpjgnahaiibennd [2016-03-20]
CHR Extension: (Resume (CV) Maker) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpbnepipgmcpkdglgbcfmcecaoflaemc [2016-03-20]
CHR Extension: (CircuitLab) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\haghanbgfkfpmepoohpigmglbfejljoj [2016-03-20]
CHR Extension: (Google Photos) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcglmfcclpfgljeaiahehebeoaiicbko [2016-12-10]
CHR Extension: (KanbanFlow) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhhlbmjihokflibmbfmldajolmkaemhi [2016-03-20]
CHR Extension: (feedly) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2016-08-27]
CHR Extension: (Kindle Cloud Reader) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd [2016-06-30]
CHR Extension: (Darkness - Beautiful Dark Themes) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\imilbobhamcfahccagbncamhpnbkaenm [2017-08-23]
CHR Extension: (Dropbox) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2016-03-20]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2016-03-20]
CHR Extension: (Google Voice (by Google)) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnhkahnjcbndmmehfkdnkjomaanaooo [2016-03-20]
CHR Extension: (EasyHome Homestyler) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2017-08-23]
CHR Extension: (Google Hangouts) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2017-08-23]
CHR Extension: (WorkFlowy) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\koegeopamaoljbmhnfjbclbocehhgmkm [2017-08-23]
CHR Extension: (Google Play) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2016-03-20]
CHR Extension: (Business Process Simulator) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lagcfcefblfnmjkkkdekiidfefhgodmk [2016-12-10]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-04-04]
CHR Extension: (Google Keep Chrome Extension) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2017-08-23]
CHR Extension: (Google Hangouts) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-08-23]
CHR Extension: (Lumosity Break) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfladdiadejinmdmnmcfciecomjdfii [2017-08-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2016-03-20]
CHR Extension: (TaxACT Online) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefjllcahghenlfbmkhhkaneanoeffgb [2016-03-20]
CHR Extension: (Chrome Media Router) - C:\Users\Salinas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-23]
CHR HKLM\...\Chrome\Extension: [bhfhojbhbnajajgihpicejdalbjlpcep] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [hikeppggmbhdgodhakicedaejpleoigm] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-11-07]
CHR HKLM\...\Chrome\Extension: [nogdfjjfhknacchjpiccacoimeelkajb] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3647659584-1139991080-2781195243-1004\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome.6EXKOS27AITQKVMEMDKRKTL5AA - C:\Users\Dora\AppData\Local\Google\Chrome\Application\chrome.exe
StartMenuInternet: Google Chrome.Dora - C:\Users\Dora\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [276992 2014-02-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 asComSvc; C:\Program Files\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2014-01-28] ()
R2 asHmComSvc; C:\Program Files\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-01-28] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files\ASUS\AsusFanControlService\1.04.11\AsusFanControlService.exe [384312 2014-02-11] (ASUSTeK Computer Inc.)
S2 AVGIDSAgent; C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [5176832 2015-05-19] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [935184 2016-12-06] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [198616 2015-05-19] (AVG Technologies CZ, s.r.o.)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
R2 NanoServiceMain; C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe [110384 2017-02-14] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
R2 PSUAService; C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe [47096 2017-04-25] (Panda Security, S.L.)
R2 RealPlayerUpdateSvc; C:\program files\real\UpdateService\RealPlayerUpdateSvc.exe [37104 2017-08-17] (RealNetworks, Inc.)
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [989912 2017-10-03] (RealNetworks, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiChargerPlus; C:\windows\System32\drivers\AiChargerPlus.sys [13952 2013-01-28] (ASUSTek Computer Inc.)
R3 AlertDrv; C:\windows\System32\drivers\alertdrv.sys [4211 2008-03-21] (Windows (R) 2000 DDK provider) [File not signed]
S3 amdhub30; C:\windows\System32\DRIVERS\amdhub30.sys [85312 2013-05-27] (Advanced Micro Devices, INC.)
S3 amdxhc; C:\windows\System32\DRIVERS\amdxhc.sys [178496 2013-05-27] (Advanced Micro Devices, INC.)
R0 amd_sata; C:\windows\System32\DRIVERS\amd_sata.sys [71400 2013-11-05] (Advanced Micro Devices)
R0 amd_xata; C:\windows\System32\DRIVERS\amd_xata.sys [35560 2013-11-05] (Advanced Micro Devices)
R1 AsIO; C:\windows\System32\drivers\AsIO.sys [14720 2014-01-28] ()
R3 asmthub3; C:\windows\System32\DRIVERS\asmthub3.sys [110808 2015-01-05] (ASMedia Technology Inc)
R3 asmtxhci; C:\windows\System32\DRIVERS\asmtxhci.sys [343768 2015-01-05] (ASMedia Technology Inc)
R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11832 2012-09-14] ()
R3 ASUSFILTER; C:\windows\System32\drivers\ASUSFILTER.sys [37448 2011-09-20] (MCCI Corporation)
R3 AVGIDSDriver; C:\windows\System32\DRIVERS\avgidsdriverx.sys [142600 2015-05-19] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\windows\System32\DRIVERS\avgidsfilterx.sys [26504 2015-05-19] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHX; C:\windows\System32\DRIVERS\avgidshx.sys [25352 2015-05-19] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSShim; C:\windows\System32\DRIVERS\avgidsshimx.sys [19976 2015-05-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx86; C:\windows\System32\DRIVERS\avgldx86.sys [250632 2015-05-19] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx86; C:\windows\System32\DRIVERS\avgmfx86.sys [42760 2015-11-18] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\windows\System32\DRIVERS\avgrkx86.sys [34184 2015-05-19] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\windows\System32\DRIVERS\avgtdix.sys [302472 2015-05-19] (AVG Technologies CZ, s.r.o.)
S3 JmUsbCcgp; C:\windows\System32\DRIVERS\jmccgp.sys [15216 2009-12-03] (JMicron Technology Corp.)
S3 JmUsbVideo; C:\windows\System32\Drivers\jmcam.sys [46320 2009-12-03] (JMicron Technology Corp.)
S3 JmUsbVideo2; C:\windows\System32\Drivers\jmcam_lo.sys [24048 2009-12-03] (JMicron Technology Corp.)
R0 mv91xx; C:\windows\System32\DRIVERS\mv91xx.sys [258088 2009-12-25] (Marvell Semiconductor, Inc.)
R1 NNSALPC; C:\windows\System32\DRIVERS\NNSAlpc.sys [98624 2017-02-08] (Panda Security, S.L.)
R1 NNSHTTP; C:\windows\System32\DRIVERS\NNSHttp.sys [210984 2016-06-29] (Panda Security, S.L.)
R1 NNSHTTPS; C:\windows\System32\DRIVERS\NNSHttps.sys [119760 2017-02-08] (Panda Security, S.L.)
R1 NNSIDS; C:\windows\System32\DRIVERS\NNSIds.sys [134368 2016-06-29] (Panda Security, S.L.)
R1 NNSNAHSL; C:\windows\System32\DRIVERS\NNSNAHSL.sys [67352 2016-06-30] (Panda Security, S.L.)
R1 NNSPICC; C:\windows\System32\DRIVERS\NNSPicc.sys [114536 2016-06-29] (Panda Security, S.L.)
R1 NNSPIHSW; C:\windows\System32\DRIVERS\NNSPihsw.sys [75048 2017-02-08] (Panda Security, S.L.)
R1 NNSPOP3; C:\windows\System32\DRIVERS\NNSPop3.sys [129224 2016-06-29] (Panda Security, S.L.)
R1 NNSPROT; C:\windows\System32\DRIVERS\NNSProt.sys [315904 2016-06-29] (Panda Security, S.L.)
R1 NNSPRV; C:\windows\System32\DRIVERS\NNSPrv.sys [232536 2017-02-08] (Panda Security, S.L.)
R1 NNSSMTP; C:\windows\System32\DRIVERS\NNSSmtp.sys [116224 2016-06-29] (Panda Security, S.L.)
R1 NNSSTRM; C:\windows\System32\DRIVERS\NNSStrm.sys [261064 2016-07-01] (Panda Security, S.L.)
R1 NNSTLSC; C:\windows\System32\DRIVERS\NNSTlsc.sys [109904 2016-06-29] (Panda Security, S.L.)
R2 NPF; C:\windows\System32\drivers\npf.sys [50704 2009-10-20] (CACE Technologies, Inc.)
S3 pneteth; C:\windows\System32\DRIVERS\pneteth.sys [13440 2011-11-25] (June Fabrics Technology Inc.)
R2 PSINAflt; C:\windows\System32\DRIVERS\PSINAflt.sys [152336 2017-02-12] (Panda Security, S.L.)
R2 PSINFile; C:\windows\System32\DRIVERS\PSINFile.sys [112400 2017-02-12] (Panda Security, S.L.)
R1 PSINKNC; C:\windows\System32\DRIVERS\psinknc.sys [175888 2017-02-20] (Panda Security, S.L.)
R2 PSINProc; C:\windows\System32\DRIVERS\PSINProc.sys [121616 2017-02-12] (Panda Security, S.L.)
R2 PSINProt; C:\windows\System32\DRIVERS\PSINProt.sys [132880 2017-02-12] (Panda Security, S.L.)
R2 PSINReg; C:\windows\System32\DRIVERS\PSINReg.sys [107792 2017-02-12] (Panda Security, S.L.)
U3 PSKMAD; C:\windows\System32\DRIVERS\PSKMAD.sys [58288 2016-08-08] (Panda Security, S.L.)
S3 wdmirror; C:\windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Windows (R) Codename Longhorn DDK provider)
S3 wsvd; C:\windows\System32\DRIVERS\wsvd.sys [81704 2009-07-21] (CyberLink)
S3 ACPIVPC; system32\DRIVERS\AcpiVpc.sys [X]
S3 amdiox86; system32\DRIVERS\amdiox86.sys [X]
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-13] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 catchme; \??\C:\Users\Salinas\AppData\Local\Temp\catchme.sys [X]
S3 cpuz136; \??\C:\windows\TEMP\cpuz136\cpuz136_x32.sys [X]
S3 easytether; system32\DRIVERS\easytthr.sys [X]
S3 GPUZ; \??\C:\windows\TEMP\GPUZ.sys [X]
S3 L1C; system32\DRIVERS\L1C62x86.sys [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-20 12:29 - 2016-08-08 04:00 - 000058288 _____ (Panda Security, S.L.) C:\windows\system32\Drivers\PSKMAD.sys
2017-10-20 12:22 - 2017-10-20 12:23 - 000227912 _____ C:\TDSSKiller.3.1.0.15_20.10.2017_12.22.09_log.txt
2017-10-20 12:17 - 2017-10-20 12:17 - 000005582 _____ C:\Users\Salinas\Desktop\JRT.txt
2017-10-20 11:59 - 2017-10-20 12:27 - 000000000 ____D C:\AdwCleaner
2017-10-20 11:09 - 2011-06-26 01:45 - 000256000 _____ C:\windows\PEV.exe
2017-10-20 11:09 - 2010-11-07 12:20 - 000208896 _____ C:\windows\MBR.exe
2017-10-20 11:09 - 2009-04-19 23:56 - 000060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2017-10-20 11:09 - 2000-08-30 19:00 - 000518144 _____ (SteelWerX) C:\windows\SWREG.exe
2017-10-20 11:09 - 2000-08-30 19:00 - 000406528 _____ (SteelWerX) C:\windows\SWSC.exe
2017-10-20 11:09 - 2000-08-30 19:00 - 000098816 _____ C:\windows\sed.exe
2017-10-20 11:09 - 2000-08-30 19:00 - 000080412 _____ C:\windows\grep.exe
2017-10-20 11:09 - 2000-08-30 19:00 - 000068096 _____ C:\windows\zip.exe
2017-10-20 11:08 - 2017-10-20 11:50 - 000000000 ____D C:\Qoobox
2017-10-20 11:07 - 2017-10-20 11:48 - 000000000 ____D C:\windows\erdnt
2017-10-20 10:56 - 2017-10-20 12:31 - 000000000 ____D C:\Users\Salinas\Downloads\IExplore Fix Tools
2017-10-20 10:43 - 2017-10-20 12:41 - 000000000 ____D C:\FRST
2017-10-18 13:25 - 2017-10-18 13:25 - 000000000 ____D C:\Program Files\Common Files\Java
2017-10-16 08:19 - 2017-10-16 08:19 - 124059592 ____C (Microsoft Corporation) C:\windows\system32\MRT-KB890830.exe
2017-10-16 08:15 - 2017-09-08 18:47 - 000347344 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2017-10-16 08:15 - 2017-09-07 14:27 - 002724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2017-10-16 08:15 - 2017-09-07 14:26 - 000004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2017-10-16 08:15 - 2017-09-07 14:11 - 000062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2017-10-16 08:15 - 2017-09-07 14:10 - 000499200 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2017-10-16 08:15 - 2017-09-07 14:10 - 000341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2017-10-16 08:15 - 2017-09-07 14:10 - 000047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2017-10-16 08:15 - 2017-09-07 14:09 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2017-10-16 08:15 - 2017-09-07 14:04 - 020267008 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2017-10-16 08:15 - 2017-09-07 14:03 - 002292736 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2017-10-16 08:15 - 2017-09-07 14:03 - 000047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2017-10-16 08:15 - 2017-09-07 14:02 - 000030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2017-10-16 08:15 - 2017-09-07 13:59 - 000476160 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2017-10-16 08:15 - 2017-09-07 13:58 - 000663040 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2017-10-16 08:15 - 2017-09-07 13:58 - 000620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2017-10-16 08:15 - 2017-09-07 13:58 - 000115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2017-10-16 08:15 - 2017-09-07 13:58 - 000104960 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2017-10-16 08:15 - 2017-09-07 13:52 - 000667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2017-10-16 08:15 - 2017-09-07 13:49 - 000416256 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2017-10-16 08:15 - 2017-09-07 13:44 - 000073216 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2017-10-16 08:15 - 2017-09-07 13:44 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2017-10-16 08:15 - 2017-09-07 13:43 - 000091136 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2017-10-16 08:15 - 2017-09-07 13:40 - 000168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2017-10-16 08:15 - 2017-09-07 13:39 - 000076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2017-10-16 08:15 - 2017-09-07 13:37 - 000279040 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2017-10-16 08:15 - 2017-09-07 13:29 - 004547072 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2017-10-16 08:15 - 2017-09-07 13:29 - 000230400 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2017-10-16 08:15 - 2017-09-07 13:26 - 000694784 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2017-10-16 08:15 - 2017-09-07 13:26 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2017-10-16 08:15 - 2017-09-07 13:25 - 002058752 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2017-10-16 08:15 - 2017-09-07 13:25 - 001155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2017-10-16 08:15 - 2017-09-07 13:17 - 013677568 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2017-10-16 08:15 - 2017-09-07 13:01 - 002767872 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2017-10-16 08:15 - 2017-09-07 12:57 - 001316864 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2017-10-16 08:15 - 2017-09-07 12:57 - 000710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2017-10-16 08:15 - 2017-07-01 08:05 - 000310272 _____ (Microsoft Corporation) C:\windows\system32\msrd2x40.dll
2017-10-16 08:14 - 2017-09-13 10:13 - 004001512 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2017-10-16 08:14 - 2017-09-13 10:13 - 003945704 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2017-10-16 08:14 - 2017-09-13 10:13 - 000137960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2017-10-16 08:14 - 2017-09-13 10:13 - 000067304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2017-10-16 08:14 - 2017-09-13 10:10 - 001310528 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000830464 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000828928 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000428032 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000392704 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000083968 _____ (Microsoft Corporation) C:\windows\system32\wlanhlp.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000080896 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2017-10-16 08:14 - 2017-09-13 10:09 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 001062912 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2017-10-16 08:14 - 2017-09-13 10:08 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2017-10-16 08:14 - 2017-09-13 09:53 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2017-10-16 08:14 - 2017-09-13 09:50 - 000097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2017-10-16 08:14 - 2017-09-13 09:50 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2017-10-16 08:14 - 2017-09-13 09:50 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2017-10-16 08:14 - 2017-09-13 09:50 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2017-10-16 08:14 - 2017-09-13 09:50 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2017-10-16 08:14 - 2017-09-13 09:48 - 000262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2017-10-16 08:14 - 2017-09-13 09:46 - 000226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2017-10-16 08:14 - 2017-09-13 09:46 - 000124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2017-10-16 08:14 - 2017-09-13 09:46 - 000098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2017-10-16 08:14 - 2017-09-13 09:46 - 000069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2017-10-16 08:14 - 2017-09-13 09:46 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2017-10-16 08:14 - 2017-09-13 09:46 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2017-10-16 08:14 - 2017-09-08 10:14 - 001213672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2017-10-16 08:14 - 2017-09-08 10:10 - 001549824 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2017-10-16 08:14 - 2017-09-08 10:10 - 001363968 _____ (Microsoft Corporation) C:\windows\system32\Query.dll
2017-10-16 08:14 - 2017-09-08 10:10 - 000109568 _____ (Microsoft Corporation) C:\windows\system32\t2embed.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 001400320 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000666624 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000337408 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000306688 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000197120 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000104448 _____ (Microsoft Corporation) C:\windows\system32\mssitlb.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000059392 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll
2017-10-16 08:14 - 2017-09-08 10:09 - 000034816 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll
2017-10-16 08:14 - 2017-09-08 10:00 - 000427520 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2017-10-16 08:14 - 2017-09-08 10:00 - 000164352 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2017-10-16 08:14 - 2017-09-08 09:59 - 000086528 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe
2017-10-16 08:14 - 2017-09-08 09:50 - 002402304 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2017-10-16 08:14 - 2017-09-08 09:20 - 000640512 _____ (Microsoft Corporation) C:\windows\system32\mswstr10.dll
2017-10-16 08:14 - 2017-09-08 09:20 - 000345088 _____ (Microsoft Corporation) C:\windows\system32\msexcl40.dll
2017-10-16 08:14 - 2017-09-08 09:20 - 000008704 _____ (Microsoft Corporation) C:\windows\system32\msjint40.dll
2017-10-16 08:14 - 2017-09-07 13:36 - 000130048 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2017-10-16 08:14 - 2017-09-07 10:12 - 002755072 _____ (Microsoft Corporation) C:\windows\system32\themeui.dll
2017-10-16 08:14 - 2017-09-07 09:48 - 000313856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2017-10-16 08:14 - 2017-09-07 09:48 - 000312320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2017-10-16 08:14 - 2017-09-07 09:48 - 000115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2017-10-16 08:14 - 2017-08-19 10:10 - 003209216 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2017-10-16 08:14 - 2017-08-19 10:10 - 000180224 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2017-10-16 08:14 - 2017-08-16 10:10 - 000629760 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2017-10-16 08:14 - 2017-08-15 10:10 - 012880896 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2017-10-16 08:14 - 2017-08-15 10:10 - 001499648 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2017-10-16 08:14 - 2017-08-14 12:35 - 002150912 _____ (Microsoft Corporation) C:\windows\system32\mmcndmgr.dll
2017-10-16 08:14 - 2017-08-14 12:35 - 000827904 _____ (Microsoft Corporation) C:\windows\system32\rdpcore.dll
2017-10-16 08:14 - 2017-08-14 12:35 - 000303104 _____ (Microsoft Corporation) C:\windows\system32\mmcbase.dll
2017-10-16 08:14 - 2017-08-14 12:35 - 000172544 _____ (Microsoft Corporation) C:\windows\system32\cic.dll
2017-10-16 08:14 - 2017-08-14 12:35 - 000128512 _____ (Microsoft Corporation) C:\windows\system32\mmcshext.dll
2017-10-16 08:14 - 2017-08-14 12:35 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\icaapi.dll
2017-10-16 08:14 - 2017-08-13 16:35 - 000031744 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2017-10-16 08:14 - 2017-08-13 16:30 - 001401344 _____ (Microsoft Corporation) C:\windows\system32\mmc.exe
2017-10-16 08:14 - 2017-08-11 01:19 - 001417728 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000781824 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000497664 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000377344 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000299008 _____ (Microsoft Corporation) C:\windows\system32\ntprint.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000126464 _____ (Microsoft Corporation) C:\windows\system32\inetpp.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\oleres.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000019968 _____ (Microsoft Corporation) C:\windows\system32\nsisvc.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000016384 _____ (Microsoft Corporation) C:\windows\system32\winnsi.dll
2017-10-16 08:14 - 2017-08-11 01:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-16 08:14 - 2017-08-11 01:09 - 000061952 _____ (Microsoft Corporation) C:\windows\system32\ntprint.exe
2017-10-16 08:14 - 2017-08-11 01:09 - 000039424 _____ (Microsoft Corporation) C:\windows\system32\wpnpinst.exe
2017-10-16 08:14 - 2017-08-11 01:09 - 000018944 _____ (Microsoft Corporation) C:\windows\system32\inetppui.dll
2017-10-16 08:14 - 2017-08-11 01:03 - 000026624 _____ (Microsoft Corporation) C:\windows\system32\netbtugc.exe
2017-10-16 08:14 - 2017-08-11 00:58 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2017-10-16 08:14 - 2017-08-11 00:55 - 000188928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys
2017-10-16 08:14 - 2017-08-11 00:55 - 000017920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nsiproxy.sys
2017-10-16 08:14 - 2017-07-29 09:50 - 000074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2017-10-16 08:14 - 2017-07-21 09:26 - 000518144 _____ C:\windows\system32\msjetoledb40.dll
2017-10-16 08:14 - 2017-07-21 09:26 - 000290816 _____ (Microsoft Corporation) C:\windows\system32\msjtes40.dll
2017-10-16 08:14 - 2017-07-14 10:10 - 000382976 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2017-10-16 08:14 - 2017-07-14 09:50 - 000054272 _____ (Microsoft Corporation) C:\windows\system32\wermgr.exe
2017-10-16 08:14 - 2017-07-14 09:50 - 000028672 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll
2017-10-16 08:14 - 2017-07-08 10:19 - 000250600 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2017-10-16 08:14 - 2017-07-07 10:15 - 000296680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\volmgrx.sys
2017-10-16 08:14 - 2017-07-07 10:10 - 000973312 _____ (Microsoft Corporation) C:\windows\system32\DXPTaskRingtone.dll
2017-10-16 08:14 - 2017-07-05 23:44 - 000094208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys
2017-10-16 08:14 - 2017-07-01 08:05 - 001311744 _____ (Microsoft Corporation) C:\windows\system32\msjet40.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000866816 _____ (Microsoft Corporation) C:\windows\system32\mswdat10.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000616448 _____ (Microsoft Corporation) C:\windows\system32\msrepl40.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000475648 _____ (Microsoft Corporation) C:\windows\system32\msxbde40.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000375808 _____ (Microsoft Corporation) C:\windows\system32\mspbde40.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000343552 _____ (Microsoft Corporation) C:\windows\system32\msrd3x40.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000240640 _____ (Microsoft Corporation) C:\windows\system32\msltus40.dll
2017-10-16 08:14 - 2017-07-01 08:05 - 000083968 _____ (Microsoft Corporation) C:\windows\system32\msjter40.dll
2017-10-16 08:14 - 2017-06-15 15:18 - 000514048 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2017-10-16 08:14 - 2017-06-12 17:29 - 001227264 _____ (Microsoft Corporation) C:\windows\system32\wdc.dll
2017-10-16 08:14 - 2017-06-12 17:29 - 000444928 _____ (Microsoft Corporation) C:\windows\system32\wvc.dll
2017-10-16 08:14 - 2017-06-12 17:29 - 000390144 _____ (Microsoft Corporation) C:\windows\system32\sysmon.ocx
2017-10-16 08:14 - 2017-06-12 17:28 - 000047104 _____ (Microsoft Corporation) C:\windows\system32\pdhui.dll
2017-10-16 08:14 - 2017-06-12 17:06 - 000303616 _____ (Microsoft Corporation) C:\windows\system32\msinfo32.exe
2017-10-16 08:14 - 2017-06-12 17:06 - 000157184 _____ (Microsoft Corporation) C:\windows\system32\perfmon.exe
2017-10-16 08:14 - 2017-06-12 17:06 - 000103424 _____ (Microsoft Corporation) C:\windows\system32\resmon.exe
2017-10-16 08:14 - 2017-05-29 23:39 - 001309928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2017-10-16 08:14 - 2017-05-29 23:39 - 000240872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2017-10-16 08:14 - 2017-05-29 23:39 - 000187624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2017-10-16 08:14 - 2017-05-16 10:16 - 000730856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2017-10-16 08:14 - 2017-05-16 10:16 - 000218856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgmms1.sys
2017-10-16 08:14 - 2017-05-16 10:12 - 000107520 _____ (Microsoft Corporation) C:\windows\system32\cdd.dll
2017-10-16 08:13 - 2017-09-13 10:09 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2017-10-16 08:13 - 2017-09-13 10:08 - 000006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2017-10-16 08:13 - 2017-09-13 09:46 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2017-10-16 08:13 - 2017-09-08 09:59 - 000009728 _____ (Microsoft Corporation) C:\windows\system32\msshooks.dll
2017-10-16 08:13 - 2017-08-19 10:10 - 000103424 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2017-10-16 08:13 - 2017-08-19 10:10 - 000002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2017-10-16 08:13 - 2017-08-19 09:57 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2017-10-16 08:13 - 2017-08-19 09:57 - 000023040 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2017-10-16 08:13 - 2017-08-11 01:19 - 000008704 _____ (Microsoft Corporation) C:\windows\system32\nsi.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:19 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 01:01 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\comcat.dll
2017-10-16 08:13 - 2017-08-11 00:55 - 000006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 00:55 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 00:55 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-16 08:13 - 2017-08-11 00:55 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-16 08:13 - 2017-07-21 09:26 - 000409600 _____ (Microsoft Corporation) C:\windows\system32\msexch40.dll
2017-10-16 08:13 - 2017-07-21 09:26 - 000282624 _____ (Microsoft Corporation) C:\windows\system32\mstext40.dll
2017-10-16 08:13 - 2017-05-20 23:06 - 000002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2017-10-04 14:11 - 2017-10-04 14:11 - 000003513 _____ C:\Users\Salinas\AppData\LocalLow\lpm.dat
2017-10-04 14:11 - 2017-10-04 14:11 - 000000000 ____D C:\Users\Salinas\AppData\Local\DivX
2017-10-04 13:57 - 2017-10-04 13:57 - 000001036 _____ C:\Users\Public\Desktop\DivX Player.lnk
2017-10-04 13:56 - 2017-10-04 13:56 - 000001061 _____ C:\Users\Public\Desktop\DivX Converter.lnk
2017-10-03 15:22 - 2017-10-03 15:22 - 000000000 ____D C:\Users\Salinas\AppData\Roaming\Mozilla
2017-10-03 14:43 - 2017-10-03 14:43 - 000001178 _____ C:\Users\Public\Desktop\RealPlayer (RealTimes).lnk
2017-10-03 14:43 - 2017-10-03 14:43 - 000000000 ____D C:\Users\Salinas\AppData\Roaming\RealNetworks
2017-10-03 14:43 - 2017-10-03 14:43 - 000000000 ____D C:\ProgramData\RealNetworks
2017-10-03 14:42 - 2017-10-03 14:42 - 000207696 _____ (RealNetworks, Inc.) C:\windows\system32\rmoc3260.dll
2017-10-03 14:42 - 2017-10-03 14:42 - 000000000 ____D C:\Program Files\Common Files\xing shared
2017-10-03 14:41 - 2017-10-03 14:41 - 000285520 _____ (Progressive Networks) C:\windows\system32\pncrt.dll
2017-09-29 09:55 - 2017-10-16 23:25 - 000000000 ____D C:\Users\Dora\Documents\PTO
2017-09-29 09:50 - 2017-10-12 08:48 - 000000000 ____D C:\Users\Dora\Documents\EE Wedding

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-20 12:33 - 2010-06-13 22:51 - 000000000 ____D C:\Users\Salinas\AppData\Local\Deployment
2017-10-20 12:31 - 2012-10-14 09:23 - 000000000 ___RD C:\Users\Salinas\Google Drive
2017-10-20 12:29 - 2009-07-13 23:53 - 000000006 ____H C:\windows\Tasks\SA.DAT
2017-10-20 12:28 - 2016-03-20 22:56 - 000065536 _____ C:\windows\system32\spu_storage.bin
2017-10-20 12:27 - 2009-07-13 23:34 - 000029296 _____ C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-10-20 12:27 - 2009-07-13 23:34 - 000029296 _____ C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-10-20 11:50 - 2017-05-02 12:43 - 000000000 ____D C:\Users\TEMP
2017-10-20 11:50 - 2010-06-13 22:51 - 000000000 ____D C:\Users\Salinas\AppData\Local\Apps\2.0
2017-10-20 11:43 - 2009-07-13 21:04 - 000000215 _____ C:\windows\system.ini
2017-10-20 11:30 - 2010-06-13 21:58 - 000000000 ____D C:\Users\Salinas
2017-10-18 14:17 - 2016-03-23 21:00 - 000000000 ____D C:\Users\Salinas\Documents\Insurance
2017-10-18 13:36 - 2016-03-21 23:22 - 000000000 ____D C:\ProgramData\Oracle
2017-10-18 13:26 - 2016-03-21 23:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-10-18 13:26 - 2010-06-18 21:04 - 000000000 ____D C:\Program Files\Java
2017-10-18 13:23 - 2016-03-21 23:21 - 000095808 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2017-10-18 11:23 - 2009-07-13 21:37 - 000000000 ____D C:\windows\rescache
2017-10-18 07:10 - 2010-03-27 22:55 - 000787060 _____ C:\windows\system32\PerfStringBackup.INI
2017-10-18 07:10 - 2009-07-13 21:37 - 000000000 ____D C:\windows\inf
2017-10-18 07:03 - 2009-07-13 23:33 - 000479496 _____ C:\windows\system32\FNTCACHE.DAT
2017-10-16 23:25 - 2016-03-22 19:45 - 000000000 ____D C:\ProgramData\CanonIJPLM
2017-10-16 20:49 - 2016-03-23 22:26 - 000000000 ___RD C:\Users\Dora\Google Drive
2017-10-16 20:39 - 2012-10-14 09:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-10-16 08:33 - 2016-07-05 22:34 - 000000000 ____D C:\windows\system32\MRT
2017-10-16 08:18 - 2010-07-15 08:22 - 124059592 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2017-10-13 14:46 - 2017-05-13 07:54 - 000000000 ____D C:\Users\Salinas\Documents\Ingleside ISD
2017-10-11 08:58 - 2011-02-05 16:05 - 000000000 ____D C:\ProgramData\DivX
2017-10-10 09:48 - 2013-02-05 17:32 - 000115264 _____ C:\Users\Dora\AppData\Roaming\GDIPFONTCACHEV1.DAT
2017-10-10 08:42 - 2016-03-23 21:00 - 000000000 ____D C:\Users\Salinas\Documents\CARS
2017-10-04 17:24 - 2011-02-08 10:30 - 000000000 ____D C:\Users\Dora\AppData\Roaming\DivX
2017-10-04 13:58 - 2011-04-19 22:02 - 000001593 _____ C:\Users\Salinas\Desktop\DivX Movies.lnk
2017-10-04 13:58 - 2011-02-05 16:14 - 000000000 ____D C:\Program Files\DivX
2017-10-04 13:57 - 2013-02-14 23:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2017-10-04 13:57 - 2011-02-05 16:23 - 000000000 ____D C:\Program Files\Common Files\DivX Shared
2017-10-04 13:56 - 2011-02-05 16:24 - 000000000 ____D C:\Users\Salinas\AppData\Roaming\DivX
2017-10-04 13:54 - 2016-03-21 00:07 - 000000000 ____D C:\ProgramData\Package Cache
2017-10-03 15:22 - 2010-06-13 22:53 - 000000000 ____D C:\Users\Salinas\AppData\Local\Google
2017-10-03 14:44 - 2010-06-29 10:04 - 000000000 ____D C:\Users\Salinas\AppData\Roaming\Real
2017-10-03 14:43 - 2016-06-28 22:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2017-10-03 14:43 - 2010-06-29 10:04 - 000000000 ____D C:\ProgramData\Real
2017-10-03 14:43 - 2010-06-29 10:04 - 000000000 ____D C:\Program Files\Real
2017-10-03 14:40 - 2016-09-27 17:46 - 000512336 _____ (Microsoft Corporation) C:\windows\system32\msvcp71.dll
2017-10-03 14:40 - 2010-03-27 23:24 - 000360784 _____ (Microsoft Corporation) C:\windows\system32\msvcr71.dll
2017-09-30 20:03 - 2011-01-20 22:52 - 000242176 ___SH C:\Users\Salinas\Thumbs.db
2017-09-29 10:01 - 2016-06-07 20:10 - 000000000 ____D C:\Users\Dora\Documents\Daily Summer Routine
2017-09-29 10:00 - 2011-09-08 18:00 - 000000000 ___RD C:\Users\Dora\Documents\Scanned Documents
2017-09-29 08:37 - 2010-06-14 09:02 - 000002365 _____ C:\Users\Dora\Desktop\Google Chrome.lnk
2017-09-29 08:37 - 2010-06-14 09:01 - 000002373 _____ C:\Users\Dora\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-28 14:17 - 2009-07-13 23:52 - 000000000 ____D C:\windows\system32\FxsTmp
2017-09-27 14:23 - 2017-01-18 22:31 - 000000000 ____D C:\Users\Salinas\Documents\Taxes 2016
2017-09-27 13:16 - 2017-02-19 21:19 - 000000000 ____D C:\Users\Salinas\Documents\Ingleside OLOA KoC BBQ Area
2017-09-27 11:00 - 2016-03-23 21:00 - 000000000 ____D C:\Users\Salinas\Documents\Jobs
2017-09-25 23:12 - 2010-06-13 21:59 - 000001080 _____ C:\Users\Salinas\Desktop\Cyberlink Power2Go.lnk
2017-09-25 13:54 - 2011-11-13 11:49 - 000000000 ____D C:\Users\Salinas\AppData\Local\Akamai
2017-09-20 20:09 - 2016-03-23 21:00 - 000000000 ____D C:\Users\Salinas\Documents\House
2017-09-20 11:32 - 2010-06-14 08:57 - 000115264 _____ C:\Users\Dora\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories =======

2011-02-23 20:12 - 2017-07-02 16:11 - 000011264 _____ () C:\Users\Salinas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-06-14 20:35 - 2016-06-14 20:35 - 000026900 _____ () C:\Users\Salinas\AppData\Local\dt.dat
2010-06-13 23:19 - 2010-06-13 23:21 - 000007609 _____ () C:\Users\Salinas\AppData\Local\resmon.resmoncfg
2016-03-20 23:07 - 2016-03-20 23:07 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2010-06-16 12:56 - 2010-06-16 12:56 - 000000056 ____H () C:\ProgramData\ezsidmv.dat

Files to move or delete:
====================
C:\Users\Salinas\DivXInstaller.exe


==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-10-10 00:53

==================== End of FRST.txt ============================