Redirected in another tab to porn when adding media to my Ancestry.com

Last night while uploading a picture to a family member's profile on Ancestry.com, a new tab opened and loud, raunchy porn started playing on the screen. I closed the tab and went back to adding photos and it happened every time. I added a picture to Facebook (that is my only social media account - no twitter, Instagram, etc) and no porn tab popped up.

I did catch a link in the address bar right before it connects to porn: avledn.in/tr?id=e78803b727655a39eeaf85a30ebd152565c5522e.p

Any assistance would be greatly appreciated.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-04-2015 01

Ran by rac1 (administrator) on RAC on 01-05-2015 17:32:32

Running from C:\Users\rac1\Desktop

Loaded Profiles: rac1 (Available profiles: rac1)

Platform: Microsoft Windows 8.1 with Bing (X86) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe

(ASUS Cloud Corporation) C:\Program Files\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe

(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe

(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe

(Intel® Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe

(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLoader.exe

(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPHelper.exe

(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe

(Intel Corporation) C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe

(ASUS Cloud Corporation) C:\Program Files\ASUS\WebStorage\2.1.2.301\AsusWSPanel.exe

(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPCenter.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\Evernote.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteTray.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteClipper.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\mspaint.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\mspaint.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcfgex.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ASUSPRP] => C:\Program Files\ASUS\APRP\APRP.EXE [1080992 2014-05-12] (ASUSTek Computer Inc.)

HKLM\...\Run: [WebStorage] => C:\Program Files\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()

HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [73216 2014-06-24] (Intel Corporation)

HKLM\...\Run: [RtkNGUI] => C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [4618240 2014-05-30] (Realtek Semiconductor)

HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)

Startup: C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-04-24]

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

ShellIconOverlayIdentifiers: [!AsusWSShellExt_BN] -> {CC5FC992-B0AA-47CD-9DC2-83445083CBB9} => C:\Program Files\Common Files\AWS\2.1.2.301\ASUSWSShellExt.dll [2013-06-25] (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: [!AsusWSShellExt_ON] -> {618A47A2-528B-4D9A-AFC8-97D3233511E3} => C:\Program Files\Common Files\AWS\2.1.2.301\ASUSWSShellExt.dll [2013-06-25] (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: [!AsusWSShellExt_UN] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files\Common Files\AWS\2.1.2.301\ASUSWSShellExt.dll [2013-06-25] (ASUS Cloud Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2869257287-45743448-2494180453-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus13.msn.com/?pc=ASJB

HKU\S-1-5-21-2869257287-45743448-2494180453-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com/?pc=ASJB

SearchScopes: HKU\S-1-5-21-2869257287-45743448-2494180453-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...q={searchTerms}

SearchScopes: HKU\S-1-5-21-2869257287-45743448-2494180453-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/...q={searchTerms}

BHO: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files\Evernote\Evernote\EvernoteIE.dll [2015-04-02] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

Tcpip\Parameters: [DhcpNameServer] 75.75.76.76 75.75.75.75

FireFox:

========

FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2013-07-12] (Intel Corporation)

FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2013-07-12] (Intel Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-22] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-22] (Google Inc.)

Chrome:

=======

CHR HomePage: Default ->

CHR StartupUrls: Default -> "hxxp://blekkosearch.mystart.com/blekko_soc/?source=f06b8e24&toolbarid=blekkotb_sa5&u=3C6238E274137E0137E3BA501327DC7D&tbp=homepage&v=1_2", "hxxp://mysearch.avg.com?cid={5698C450-2FEC-4F6B-8FB0-CBA5797661BB}&mid=2b344f55fcd247d19951c1319443f6de-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=AVG&coid=avgtbavg&pr=fr&d=2013-09-09 17:31:30&v=17.0.1.4&pid=safeguard&sg=&sap=hp&cmpid=0913a"

CHR Profile: C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-22]

CHR Extension: (Google Docs) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-22]

CHR Extension: (Google Drive) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-22]

CHR Extension: (YouTube) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-22]

CHR Extension: (Add to Amazon Wish List) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2015-04-22]

CHR Extension: (Google Search) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-22]

CHR Extension: (Google Sheets) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-22]

CHR Extension: (Bookmark Manager) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]

CHR Extension: (Ancestry Family Search Extension) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\iahjgikepkkgkinlhipagkkdgfbobphh [2015-04-22]

CHR Extension: (Evernote Web) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2015-04-22]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-22]

CHR Extension: (Google Wallet) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-22]

CHR Extension: (Evernote Web Clipper) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-04-22]

CHR Extension: (Gmail) - C:\Users\rac1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-22]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AsHidService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [103224 2013-09-09] (ASUSTek Computer Inc.)

R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [115512 2014-03-26] (ASUSTek Computer Inc.)

R2 Asus WebStorage Windows Service; C:\Program Files\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [File not signed]

R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2011-11-21] (ASUS)

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)

S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [1677016 2014-09-02] (Broadcom Corporation.)

S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279000 2014-06-13] (Intel Corporation)

R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [75264 2014-06-24] (Intel Corporation)

R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [89088 2014-06-24] (Intel Corporation)

R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [82432 2014-06-24] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [277976 2014-06-13] (Intel Corporation)

R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [586752 2013-07-01] (Intel® Corporation) [File not signed]

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [637912 2013-07-01] (Intel® Corporation)

R2 jhi_service; C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe [168216 2014-01-15] (Intel Corporation)

S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [105472 2013-08-21] (Microsoft Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [288128 2014-09-21] (Microsoft Corporation)

S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22192 2014-09-21] (Microsoft Corporation)

S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1210368 2014-04-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS)

R3 AsusHID; C:\Windows\System32\drivers\AsusHID.sys [69400 2014-07-08] (ASUS Corporation)

R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [17720 2013-07-02] (ASUSTek Computer Inc.)

S0 Avgbootx; C:\Windows\System32\DRIVERS\avgbootx.sys [19104 2015-03-27] (AVG Technologies CZ, s.r.o.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [226784 2015-04-09] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [166880 2015-03-11] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimw8x.sys [29664 2015-03-11] (AVG Technologies CZ, s.r.o.)

R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [206816 2015-04-15] (AVG Technologies CZ, s.r.o.)

R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [269792 2015-03-11] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [110048 2015-04-03] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)

R1 Avgwfpx; C:\Windows\system32\DRIVERS\avgwfpx.sys [219616 2015-04-07] (AVG Technologies CZ, s.r.o.)

S3 AX88772; C:\Windows\system32\DRIVERS\ax88772.sys [97896 2013-07-18] (ASIX Electronics Corp.)

R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation)

R3 BcmGnssBus; C:\Windows\System32\drivers\BcmGnssBus.sys [98888 2014-03-04] (Broadcom Corporation)

R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [307928 2014-09-02] (Broadcom Corp)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [186880 2014-03-18] (Microsoft Corporation)

R3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [24064 2013-08-22] (Microsoft Corporation)

S3 btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [145112 2014-09-02] (Broadcom Corporation.)

R3 BtwSerialBus; C:\Windows\system32\DRIVERS\BtwSerialBus.sys [132312 2014-09-02] (Broadcom Corporation.)

R3 camera; C:\Windows\system32\DRIVERS\camera.sys [460800 2014-07-06] (Intel Corporation)

R3 CM3218x; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)

R3 CPLMACPI; C:\Windows\system32\DRIVERS\CPLMACPI.sys [16488 2013-09-07] (Capella Microsystems, Inc.)

R3 DptfDevDBPT; C:\Windows\system32\DRIVERS\DptfDevPower.sys [17408 2014-06-24] (Intel Corporation)

R3 DptfDevDisplay; C:\Windows\system32\DRIVERS\DptfDevDisplay.sys [19968 2014-06-24] (Intel Corporation)

R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [28160 2014-06-24] (Intel Corporation)

R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [72704 2014-06-24] (Intel Corporation)

R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [174080 2014-06-24] (Intel Corporation)

R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [23552 2014-05-15] (Intel Corporation)

R3 GpioVirtual; C:\Windows\System32\drivers\iaiogpiovirtual.sys [16896 2014-03-21] (Intel Corporation)

R3 HIDSwitch; C:\Windows\System32\drivers\AsHIDSwitch.sys [17720 2013-10-07] (ASUS)

R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [62464 2014-05-15] (Intel Corporation)

R3 iaiouart; C:\Windows\System32\drivers\iaiouart.sys [87552 2014-03-21] (Intel Corporation)

S0 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [489832 2013-12-15] (Intel Corporation)

S3 intaud_WaveExtensible; C:\Windows\system32\drivers\intelaud.sys [32152 2014-05-06] (Intel Corporation)

R3 IntelSST; C:\Windows\system32\drivers\isstrtc.sys [260608 2014-06-27] (Intel® Corporation)

R3 INVN_MotionApps; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)

R3 iwdbus; C:\Windows\System32\drivers\iwdbus.sys [23448 2014-05-06] (Intel Corporation)

R0 MBI; C:\Windows\System32\drivers\MBI.sys [21968 2014-03-15] (Intel Corporation)

R3 MT9M114; C:\Windows\System32\drivers\MT9M114.sys [40960 2014-07-06] (Intel Corporation)

S3 NETwNs32; C:\Windows\system32\DRIVERS\Netwsn00.sys [10372096 2013-06-18] (Intel Corporation)

R3 PMIC; C:\Windows\System32\drivers\PMIC.sys [66560 2014-07-01] (Intel Corporation)

R3 rtii2sac; C:\Windows\system32\DRIVERS\rtii2sac.sys [183000 2014-06-02] (Realtek Semiconductor Corp.)

R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)

R3 TXEI; C:\Windows\System32\drivers\TXEI.sys [75792 2014-01-09] (Intel Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [84800 2014-09-21] (Microsoft Corporation)

R0 Wof; C:\Windows\system32\Drivers\Wof.sys [138584 2014-05-13] (Microsoft Corporation)

R3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)

U0 msahci; system32\drivers\msahci.sys

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-01 17:32 - 2015-05-01 17:33 - 00018911 _____ () C:\Users\rac1\Desktop\FRST.txt

2015-05-01 17:31 - 2015-05-01 17:32 - 00000000 ____D () C:\FRST

2015-05-01 17:22 - 2015-05-01 17:22 - 01140736 _____ (Farbar) C:\Users\rac1\Desktop\FRST.exe

2015-05-01 05:00 - 2015-05-01 05:00 - 00000000 ____D () C:\Users\rac1\AppData\Roaming\AVG2015

2015-05-01 04:59 - 2015-05-01 04:59 - 00000953 _____ () C:\Users\Public\Desktop\AVG 2015.lnk

2015-05-01 04:59 - 2015-05-01 04:59 - 00000000 ____D () C:\Users\rac1\AppData\Roaming\TuneUp Software

2015-05-01 04:59 - 2015-05-01 04:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2015-05-01 04:58 - 2015-05-01 04:59 - 00000000 ____D () C:\ProgramData\AVG2015

2015-05-01 04:58 - 2015-05-01 04:58 - 00000000 ___HD () C:\$AVG

2015-05-01 04:58 - 2015-05-01 04:58 - 00000000 ____D () C:\Program Files\AVG

2015-05-01 04:55 - 2015-05-01 05:41 - 00000000 ____D () C:\ProgramData\MFAData

2015-05-01 04:55 - 2015-05-01 05:06 - 00000000 ____D () C:\Users\rac1\AppData\Local\Avg2015

2015-05-01 04:55 - 2015-05-01 04:55 - 00000000 ____D () C:\Users\rac1\AppData\Local\MFAData

2015-05-01 04:54 - 2015-05-01 04:54 - 04818760 _____ (AVG Technologies) C:\Users\rac1\Downloads\avg_free_stb_all_5863p1_177.exe

2015-04-26 18:42 - 2015-04-26 18:42 - 00063488 _____ () C:\Users\rac1\Downloads\ProQuest Title List.xls

2015-04-25 16:06 - 2015-04-25 16:06 - 01641984 _____ (Zhorn Software) C:\Users\rac1\Downloads\stickies_setup_8.0c.exe

2015-04-24 17:14 - 2015-04-24 17:14 - 00000000 __SHD () C:\Users\rac1\AppData\Local\EmieBrowserModeList

2015-04-24 15:57 - 2015-04-24 15:57 - 00002511 _____ () C:\Users\Public\Desktop\Evernote.lnk

2015-04-24 15:57 - 2015-04-24 15:57 - 00000000 ____D () C:\Users\rac1\AppData\Local\Evernote

2015-04-24 15:57 - 2015-04-24 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote

2015-04-24 15:57 - 2015-04-24 15:57 - 00000000 ____D () C:\Program Files\Evernote

2015-04-24 15:56 - 2015-04-24 15:56 - 100060680 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\rac1\Downloads\Evernote_5.8.5.7193.exe

2015-04-23 20:17 - 2015-05-01 04:47 - 00497664 ___SH () C:\Users\rac1\Desktop\Thumbs.db

2015-04-22 23:04 - 2015-04-13 19:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-04-22 23:04 - 2015-04-13 19:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-04-22 23:00 - 2015-04-22 23:08 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-22 23:00 - 2015-04-22 23:00 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-22 23:00 - 2015-04-22 23:00 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-22 16:54 - 2015-05-01 16:38 - 00838144 ___SH () C:\Users\rac1\Downloads\Thumbs.db

2015-04-22 15:17 - 2015-05-01 01:24 - 00002151 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-04-22 15:17 - 2015-04-22 15:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-04-22 15:16 - 2015-05-01 17:21 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-22 15:16 - 2015-05-01 15:21 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-22 15:16 - 2015-04-22 15:17 - 00000000 ____D () C:\Users\rac1\AppData\Local\Google

2015-04-22 15:16 - 2015-04-22 15:16 - 00000000 ____D () C:\Program Files\Google

2015-04-22 15:15 - 2015-04-22 15:15 - 00000000 ____D () C:\Users\rac1\AppData\Local\Deployment

2015-04-22 15:15 - 2015-04-22 15:15 - 00000000 ____D () C:\Users\rac1\AppData\Local\Apps\2.0

2015-04-22 15:12 - 2015-04-22 15:12 - 00000000 ____D () C:\Users\rac1\AppData\Roaming\Macromedia

2015-04-22 15:07 - 2015-04-22 15:07 - 00000000 __SHD () C:\Users\rac1\AppData\Local\EmieUserList

2015-04-22 15:07 - 2015-04-22 15:07 - 00000000 __SHD () C:\Users\rac1\AppData\Local\EmieSiteList

2015-04-22 15:05 - 2015-04-22 15:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2015-04-22 05:19 - 2014-04-13 22:37 - 00865280 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-04-22 05:14 - 2015-04-22 05:16 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-22 05:14 - 2015-04-01 11:22 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-21 19:22 - 2015-02-05 21:08 - 01943040 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-04-21 19:22 - 2015-01-29 14:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-04-21 19:22 - 2014-12-11 21:34 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-04-21 19:22 - 2014-12-05 22:36 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2015-04-21 19:22 - 2014-12-05 21:28 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-04-21 19:22 - 2014-10-28 21:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2015-04-21 19:22 - 2014-06-09 18:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2015-04-21 19:22 - 2014-03-13 02:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe

2015-04-21 19:21 - 2015-03-12 23:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-21 19:21 - 2015-03-12 23:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-21 19:21 - 2015-03-12 23:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-21 19:21 - 2015-03-12 23:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-04-21 19:21 - 2015-03-12 22:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-04-21 19:21 - 2015-03-12 22:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-21 19:21 - 2015-03-12 22:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-21 19:21 - 2015-03-12 22:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-21 19:21 - 2015-03-12 22:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-21 19:21 - 2015-03-12 22:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-21 19:21 - 2015-03-12 22:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-21 19:21 - 2015-03-12 22:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-21 19:21 - 2015-02-20 20:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-21 19:21 - 2015-02-20 20:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-04-21 19:21 - 2015-02-20 19:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-21 19:21 - 2015-02-19 22:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-21 19:21 - 2015-02-19 21:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-04-21 19:21 - 2015-02-19 21:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-21 19:21 - 2015-01-11 21:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-21 19:21 - 2015-01-11 21:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-21 19:21 - 2014-11-21 22:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-21 19:21 - 2014-10-30 23:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2015-04-21 19:21 - 2014-10-30 23:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-04-21 19:21 - 2014-10-30 23:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2015-04-21 19:21 - 2014-10-30 23:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2015-04-21 19:21 - 2014-10-30 23:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-04-21 19:21 - 2014-10-30 23:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-04-21 19:21 - 2014-10-30 23:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-21 19:21 - 2014-10-30 23:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-21 19:21 - 2014-10-30 23:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-21 19:21 - 2014-10-30 23:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-21 19:21 - 2014-10-30 23:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2015-04-21 19:21 - 2014-10-30 23:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-21 19:21 - 2014-10-30 23:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll

2015-04-21 19:21 - 2014-10-30 23:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-21 19:21 - 2014-10-30 23:12 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-21 19:21 - 2014-10-30 23:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-21 19:21 - 2014-10-30 23:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2015-04-21 19:21 - 2014-10-30 22:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-21 19:21 - 2014-10-30 22:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2015-04-21 19:21 - 2014-10-30 22:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2015-04-21 19:21 - 2014-10-30 22:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2015-04-21 19:21 - 2014-10-30 22:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-21 19:21 - 2014-10-30 22:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-04-21 19:21 - 2014-10-30 22:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2015-04-21 19:21 - 2014-10-30 22:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2015-04-21 19:21 - 2014-10-30 22:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2015-04-21 19:21 - 2014-02-06 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-21 19:21 - 2014-02-06 06:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-21 19:18 - 2014-12-11 20:46 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys

2015-04-21 19:18 - 2014-08-14 19:35 - 00122688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys

2015-04-21 19:18 - 2014-07-29 21:57 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll

2015-04-21 19:18 - 2014-07-29 01:06 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll

2015-04-21 19:18 - 2014-05-01 01:31 - 02366976 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2015-04-21 19:13 - 2015-01-30 19:20 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2015-04-21 19:13 - 2014-09-03 20:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2015-04-21 19:13 - 2014-06-19 20:36 - 00805136 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-04-21 19:11 - 2014-12-08 23:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-04-21 19:11 - 2014-09-21 22:40 - 00219968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2015-04-21 19:11 - 2014-09-21 22:40 - 00084800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2015-04-21 19:11 - 2014-09-21 22:39 - 00029688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2015-04-21 19:11 - 2014-09-02 18:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll

2015-04-21 19:11 - 2014-08-06 19:36 - 01090280 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-21 19:10 - 2014-12-08 15:46 - 00485544 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-04-21 19:10 - 2014-12-08 15:46 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-04-21 19:10 - 2014-12-08 15:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2015-04-21 19:10 - 2014-12-08 15:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll

2015-04-21 19:10 - 2014-12-08 15:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe

2015-04-21 19:10 - 2014-12-05 21:23 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2015-04-21 19:10 - 2014-10-28 23:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2015-04-21 19:10 - 2014-10-28 23:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe

2015-04-21 19:10 - 2014-10-28 23:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-04-21 19:10 - 2014-10-28 23:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-04-21 19:10 - 2014-10-28 23:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-04-21 19:10 - 2014-10-28 23:07 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2015-04-21 19:10 - 2014-10-28 21:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll

2015-04-21 19:10 - 2014-10-28 20:49 - 00694272 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-04-21 19:10 - 2014-04-29 23:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-04-21 19:10 - 2014-04-29 23:43 - 01046016 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-04-21 19:08 - 2014-05-03 00:57 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2015-04-21 19:08 - 2014-05-03 00:46 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll

2015-04-21 19:08 - 2014-05-03 00:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll

2015-04-21 19:08 - 2014-05-03 00:37 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll

2015-04-21 19:08 - 2014-05-02 19:26 - 00050745 _____ () C:\Windows\system32\srms.dat

2015-04-21 19:08 - 2014-05-01 04:24 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2015-04-21 19:08 - 2014-04-30 01:32 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys

2015-04-21 19:08 - 2014-04-30 01:29 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-04-21 19:08 - 2014-04-30 01:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys

2015-04-21 19:08 - 2014-04-30 00:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe

2015-04-21 19:08 - 2014-04-29 23:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll

2015-04-21 19:08 - 2014-04-29 23:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2015-04-21 19:08 - 2014-04-29 23:46 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2015-04-21 19:08 - 2014-04-29 23:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll

2015-04-21 19:08 - 2014-04-29 23:38 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2015-04-21 19:08 - 2014-04-29 23:25 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2015-04-21 19:08 - 2014-04-29 23:15 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2015-04-21 19:08 - 2014-04-28 18:40 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2015-04-21 19:08 - 2014-04-26 16:14 - 02144984 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2015-04-21 19:08 - 2014-04-14 04:08 - 01797896 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2015-04-21 19:08 - 2014-04-14 01:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\d3d8thk.dll

2015-04-21 19:08 - 2014-04-09 01:20 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2015-04-21 19:07 - 2015-03-23 17:45 - 05782848 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-21 19:07 - 2015-03-23 17:45 - 01468920 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-21 19:07 - 2015-03-23 17:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll

2015-04-21 19:07 - 2015-03-19 23:25 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll

2015-04-21 19:07 - 2015-03-19 22:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe

2015-04-21 19:07 - 2015-03-19 22:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2015-04-21 19:07 - 2015-03-14 04:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-04-21 19:07 - 2014-10-28 21:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe

2015-04-21 19:07 - 2014-10-28 21:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe

2015-04-21 19:07 - 2014-10-28 21:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe

2015-04-21 19:07 - 2014-10-28 21:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe

2015-04-21 19:03 - 2014-03-19 21:31 - 01037504 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-21 19:03 - 2014-03-19 21:09 - 01679704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2015-04-21 19:03 - 2014-03-19 19:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll

2015-04-21 19:03 - 2014-03-19 19:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll

2015-04-21 19:03 - 2014-03-11 10:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll

2015-04-21 19:03 - 2014-03-08 08:00 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll

2015-04-21 19:03 - 2014-03-08 07:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-04-21 19:03 - 2014-03-08 03:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll

2015-04-21 19:03 - 2014-03-08 02:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll

2015-04-21 19:03 - 2014-03-08 01:42 - 01131520 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2015-04-21 19:03 - 2014-03-08 01:16 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll

2015-04-21 19:03 - 2014-03-06 07:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll

2015-04-21 19:03 - 2014-03-06 04:23 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys

2015-04-21 19:03 - 2014-03-06 02:06 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll

2015-04-21 19:03 - 2014-03-04 07:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll

2015-04-21 19:03 - 2014-03-04 02:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll

2015-04-21 19:02 - 2014-03-19 01:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe

2015-04-21 19:02 - 2014-03-19 01:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll

2015-04-21 19:02 - 2014-03-08 07:45 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys

2015-04-21 19:02 - 2014-03-08 04:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll

2015-04-21 19:02 - 2014-03-08 03:40 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll

2015-04-21 19:02 - 2014-03-08 02:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2015-04-21 19:02 - 2014-03-08 02:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2015-04-21 19:02 - 2014-03-08 01:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2015-04-21 19:02 - 2014-03-06 07:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll

2015-04-21 19:02 - 2014-03-06 06:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-04-21 19:02 - 2014-03-06 04:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2015-04-21 19:02 - 2014-03-06 04:24 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys

2015-04-21 19:02 - 2014-03-06 04:24 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys

2015-04-21 19:02 - 2014-03-06 04:20 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-04-21 19:02 - 2014-03-06 04:20 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2015-04-21 19:02 - 2014-03-06 04:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll

2015-04-21 19:02 - 2014-03-06 03:47 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll

2015-04-21 19:02 - 2014-03-06 03:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2015-04-21 19:02 - 2014-03-06 03:25 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\WSDScDrv.dll

2015-04-21 19:02 - 2014-03-06 03:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll

2015-04-21 19:02 - 2014-03-06 02:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll

2015-04-21 19:02 - 2014-03-06 02:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2015-04-21 19:02 - 2014-03-06 02:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll

2015-04-21 19:02 - 2014-03-06 02:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll

2015-04-21 19:02 - 2014-03-06 01:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll

2015-04-21 19:02 - 2014-03-06 01:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll

2015-04-21 19:02 - 2014-03-04 02:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2015-04-21 19:02 - 2014-03-04 02:42 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2015-04-21 19:02 - 2014-03-04 02:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll

2015-04-21 19:02 - 2014-03-04 02:30 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll

2015-04-21 19:02 - 2014-03-04 02:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll

2015-04-21 19:02 - 2014-03-04 01:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll

2015-04-21 19:02 - 2014-03-04 01:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll

2015-04-21 19:02 - 2013-12-23 19:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll

2015-04-21 18:58 - 2014-09-10 02:18 - 00333632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2015-04-21 18:58 - 2014-09-07 22:33 - 01858368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2015-04-21 18:58 - 2014-09-07 22:33 - 00286528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2015-04-21 18:58 - 2014-09-07 18:07 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml

2015-04-21 18:58 - 2014-09-04 18:29 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2015-04-21 18:58 - 2014-09-04 18:20 - 00839168 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2015-04-21 18:58 - 2014-09-03 22:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2015-04-21 18:58 - 2014-09-03 20:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll

2015-04-21 18:58 - 2014-09-03 20:11 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll

2015-04-21 18:58 - 2014-08-30 19:00 - 00120640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2015-04-21 18:58 - 2014-08-30 16:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll

2015-04-21 18:58 - 2014-08-30 16:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2015-04-21 18:58 - 2014-08-27 20:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2015-04-21 18:58 - 2014-08-23 01:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2015-04-21 18:58 - 2014-08-23 00:47 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2015-04-21 18:58 - 2014-08-01 20:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2015-04-21 18:58 - 2014-07-24 05:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll

2015-04-21 18:58 - 2014-07-24 04:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll

2015-04-21 18:58 - 2014-07-24 03:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll

2015-04-21 18:57 - 2015-03-22 18:44 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-21 18:57 - 2015-03-22 18:07 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-21 18:57 - 2015-03-22 18:07 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-21 18:57 - 2015-03-22 18:07 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-21 18:57 - 2015-03-22 18:07 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-21 18:57 - 2015-03-22 18:07 - 00330752 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-21 18:57 - 2015-03-22 18:07 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-21 18:57 - 2015-02-24 04:20 - 00738112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-21 18:57 - 2015-02-12 13:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-04-21 18:57 - 2014-12-02 19:09 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-21 18:56 - 2014-08-01 20:15 - 00976384 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-04-21 18:56 - 2014-06-06 08:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2015-04-21 18:55 - 2014-11-09 19:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-21 18:55 - 2014-06-12 20:10 - 01326936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-04-21 18:55 - 2014-06-12 20:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2015-04-21 18:55 - 2014-05-19 01:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe

2015-04-21 18:55 - 2014-05-19 01:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2015-04-21 18:55 - 2014-03-06 07:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2015-04-21 18:55 - 2014-03-06 06:43 - 00321880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2015-04-21 18:55 - 2014-03-06 06:34 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2015-04-21 18:55 - 2014-03-06 04:20 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2015-04-21 18:54 - 2015-02-25 19:27 - 03543552 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-04-21 18:54 - 2015-02-19 22:20 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-04-21 18:54 - 2015-02-19 22:15 - 00035840 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-04-21 18:54 - 2015-01-27 21:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-04-21 18:54 - 2015-01-15 18:37 - 00478776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-04-21 18:54 - 2015-01-15 18:37 - 00148288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-21 18:54 - 2014-12-08 23:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-04-21 18:54 - 2014-10-28 22:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-21 18:54 - 2014-10-28 22:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-21 18:54 - 2014-10-28 22:04 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-04-21 18:54 - 2014-10-28 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-04-21 18:54 - 2014-10-28 22:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-04-21 18:54 - 2014-10-28 21:03 - 01117696 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-21 18:54 - 2014-10-23 01:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-04-21 18:54 - 2014-09-27 01:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2015-04-21 18:54 - 2014-09-26 23:12 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2015-04-21 18:54 - 2014-09-03 20:00 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2015-04-21 18:54 - 2014-08-23 03:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2015-04-21 18:54 - 2014-08-23 01:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2015-04-21 18:54 - 2014-08-23 01:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-21 18:54 - 2014-08-23 00:02 - 00612352 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2015-04-21 18:54 - 2014-08-15 23:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2015-04-21 18:54 - 2014-08-15 23:08 - 00863528 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-21 18:54 - 2014-08-15 20:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2015-04-21 18:54 - 2014-08-15 20:39 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2015-04-21 18:54 - 2014-08-15 20:35 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2015-04-21 18:54 - 2014-08-15 20:31 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2015-04-21 18:54 - 2014-08-15 20:30 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2015-04-21 18:54 - 2014-08-15 20:29 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2015-04-21 18:54 - 2014-08-15 20:23 - 00808448 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2015-04-21 18:54 - 2014-08-15 20:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2015-04-21 18:54 - 2014-08-15 20:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-04-21 18:54 - 2014-08-15 20:15 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2015-04-21 18:54 - 2014-08-15 20:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2015-04-21 18:54 - 2014-08-15 20:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2015-04-21 18:54 - 2014-08-15 20:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2015-04-21 18:54 - 2014-08-15 20:11 - 03985408 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2015-04-21 18:54 - 2014-08-15 20:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-04-21 18:54 - 2014-08-15 20:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2015-04-21 18:54 - 2014-08-15 20:05 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2015-04-21 18:54 - 2014-07-24 09:48 - 00376128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2015-04-21 18:54 - 2014-07-24 06:43 - 01016320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2015-04-21 18:54 - 2014-07-24 06:42 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys

2015-04-21 18:54 - 2014-07-24 05:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2015-04-21 18:54 - 2014-06-16 18:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2015-04-21 18:54 - 2014-06-05 09:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2015-04-21 18:54 - 2014-06-01 21:06 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll

2015-04-21 18:54 - 2014-06-01 21:06 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2015-04-21 18:54 - 2014-05-31 04:32 - 00382296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2015-04-21 18:54 - 2014-05-31 04:32 - 00338264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2015-04-21 18:54 - 2014-05-31 04:32 - 00072536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2015-04-21 18:54 - 2014-05-31 04:32 - 00023384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2015-04-21 18:54 - 2014-05-31 01:33 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2015-04-21 18:54 - 2014-05-31 01:30 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2015-04-21 18:54 - 2014-05-31 01:29 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2015-04-21 18:54 - 2014-05-30 23:33 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2015-04-21 18:54 - 2014-05-30 23:33 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2015-04-21 18:54 - 2014-05-30 23:33 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2015-04-21 18:54 - 2014-05-29 23:05 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-04-21 18:54 - 2014-05-27 05:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll

2015-04-21 18:54 - 2014-05-17 00:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2015-04-21 18:54 - 2014-05-13 01:21 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe

2015-04-21 18:54 - 2014-05-08 00:37 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-04-21 18:54 - 2014-04-11 01:13 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe

2015-04-21 18:54 - 2014-04-08 14:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\system32\mrt_map.dll

2015-04-21 18:54 - 2014-04-08 14:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\system32\mrt100.dll

2015-04-21 18:54 - 2014-03-06 04:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll

2015-04-21 18:54 - 2014-01-27 14:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-04-21 18:53 - 2015-03-12 22:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2015-04-21 18:53 - 2015-03-05 22:33 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-21 18:53 - 2015-01-23 22:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-04-21 18:53 - 2015-01-23 20:48 - 02975744 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-04-21 18:53 - 2014-12-19 01:46 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-04-21 18:53 - 2014-10-30 19:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-04-21 18:53 - 2014-10-28 23:10 - 00022848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-04-21 18:53 - 2014-10-28 21:54 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll

2015-04-21 18:53 - 2014-10-17 02:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-04-21 18:53 - 2014-10-12 22:47 - 00199488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2015-04-21 18:53 - 2014-10-12 22:47 - 00131392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2015-04-21 18:53 - 2014-10-12 22:47 - 00076096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2015-04-21 18:53 - 2014-10-12 22:47 - 00036160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2015-04-21 18:53 - 2014-10-12 22:37 - 00108864 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-04-21 18:53 - 2014-10-12 04:58 - 00047424 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2015-04-21 18:53 - 2014-10-10 20:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-04-21 18:53 - 2014-10-08 02:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-04-21 18:53 - 2014-10-08 02:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-04-21 18:53 - 2014-10-08 01:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-04-21 18:53 - 2014-04-18 09:43 - 00031064 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2015-04-21 18:53 - 2014-04-18 04:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll

2015-04-21 18:53 - 2014-04-14 04:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2015-04-21 18:53 - 2014-04-11 04:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2015-04-21 18:53 - 2014-04-11 00:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2015-04-21 18:53 - 2014-04-10 23:27 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll

2015-04-21 18:53 - 2014-04-10 23:02 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll

2015-04-21 18:53 - 2014-04-09 06:47 - 00294744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2015-04-21 18:53 - 2014-04-09 01:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2015-04-21 18:53 - 2014-04-08 23:22 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2015-04-21 18:53 - 2014-04-07 19:47 - 00502104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2015-04-21 18:53 - 2014-04-06 11:27 - 00311128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2015-04-21 18:53 - 2014-04-06 11:27 - 00240472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2015-04-21 18:53 - 2014-04-06 11:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2015-04-21 18:53 - 2014-04-06 11:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll

2015-04-21 18:53 - 2014-04-06 11:18 - 00271192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys

2015-04-21 18:53 - 2014-04-06 11:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2015-04-21 18:53 - 2014-04-06 11:16 - 01159520 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2015-04-21 18:53 - 2014-04-06 11:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-04-21 18:53 - 2014-04-06 11:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2015-04-21 18:53 - 2014-04-06 11:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-04-21 18:53 - 2014-04-06 11:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2015-04-21 18:53 - 2014-04-06 08:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-21 18:53 - 2014-04-06 08:00 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-21 18:53 - 2014-04-06 07:47 - 00264704 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2015-04-21 18:53 - 2014-04-06 07:40 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-21 18:53 - 2014-04-06 06:58 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll

2015-04-21 18:53 - 2014-04-06 06:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2015-04-21 18:53 - 2014-04-06 05:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2015-04-21 18:53 - 2014-04-03 00:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-04-21 18:53 - 2014-04-03 00:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll

2015-04-21 18:53 - 2014-04-02 22:44 - 01210368 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2015-04-21 18:53 - 2014-04-02 22:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll

2015-04-21 18:53 - 2014-04-01 01:09 - 00333656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2015-04-21 18:53 - 2014-03-30 19:26 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2015-04-21 18:53 - 2014-03-30 19:13 - 00667136 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2015-04-21 18:53 - 2014-03-30 18:37 - 01167360 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2015-04-21 18:53 - 2014-03-30 18:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2015-04-21 18:53 - 2014-03-28 05:04 - 00328984 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2015-04-21 18:53 - 2014-03-27 01:21 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2015-04-21 18:53 - 2014-03-27 00:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll

2015-04-21 18:53 - 2014-03-27 00:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll

2015-04-21 18:53 - 2014-03-26 23:22 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll

2015-04-21 18:53 - 2014-03-26 23:03 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2015-04-21 18:53 - 2014-03-26 22:59 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe

2015-04-21 18:53 - 2014-03-24 18:57 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-04-21 18:53 - 2014-03-19 21:20 - 00229344 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe

2015-04-21 18:53 - 2014-03-19 03:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll

2015-04-21 18:53 - 2014-03-19 03:09 - 00375296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2015-04-21 18:53 - 2014-03-19 01:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2015-04-21 18:53 - 2014-03-19 00:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2015-04-21 18:53 - 2014-03-19 00:47 - 01309184 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2015-04-21 18:53 - 2014-03-19 00:23 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll

2015-04-21 18:53 - 2014-03-18 03:22 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2015-04-21 18:53 - 2014-03-18 00:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2015-04-21 18:53 - 2014-03-17 00:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2015-04-21 18:53 - 2014-03-16 22:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2015-04-21 18:53 - 2014-03-14 02:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2015-04-21 18:53 - 2014-03-06 06:37 - 00264536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2015-04-21 18:52 - 2015-03-04 06:05 - 00279360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys

2015-04-21 18:52 - 2015-03-03 22:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-21 18:52 - 2014-10-18 04:49 - 00048496 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-21 18:52 - 2014-10-18 03:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-21 18:52 - 2014-10-18 03:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-21 18:52 - 2014-10-18 02:29 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll

2015-04-21 18:52 - 2014-10-18 02:16 - 02946560 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-21 18:52 - 2014-10-18 02:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-21 18:52 - 2014-10-18 02:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-21 18:52 - 2014-10-18 02:12 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2015-04-21 18:52 - 2014-10-18 02:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-21 18:52 - 2014-10-18 02:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-21 18:52 - 2014-10-18 02:08 - 01653248 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-21 18:52 - 2014-07-23 23:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll

2015-04-21 18:52 - 2014-07-15 13:07 - 02257584 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe

2015-04-21 18:52 - 2014-07-15 04:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2015-04-21 18:52 - 2014-07-15 03:55 - 02045440 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll

2015-04-21 18:52 - 2014-07-11 23:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2015-04-21 18:52 - 2014-05-30 22:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2015-04-21 18:52 - 2014-05-01 07:00 - 00046512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2015-04-21 18:47 - 2014-10-31 19:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2015-04-21 17:02 - 2015-03-03 09:16 - 00246920 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-04-21 16:29 - 2015-04-21 16:29 - 00000000 ____D () C:\Users\rac1\AppData\Roaming\WebStorage

2015-04-21 16:24 - 2015-04-21 16:24 - 00001444 _____ () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-04-21 16:24 - 2015-04-21 16:24 - 00000190 _____ () C:\Windows\FixPatch.log

2015-04-21 16:24 - 2015-04-21 16:24 - 00000000 ____D () C:\Users\rac1\AppData\Roaming\Adobe

2015-04-21 16:23 - 2015-04-22 22:51 - 00000000 ____D () C:\Users\rac1

2015-04-21 16:23 - 2015-04-21 16:23 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2015-04-21 16:23 - 2015-04-21 16:23 - 00000020 ___SH () C:\Users\rac1\ntuser.ini

2015-04-21 16:23 - 2015-04-21 16:23 - 00000000 ____D () C:\Users\rac1\AppData\Local\VirtualStore

2015-04-21 16:23 - 2014-05-13 00:36 - 00000000 ___RD () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-04-21 16:23 - 2014-03-18 03:45 - 00000000 ___RD () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-04-21 16:23 - 2014-03-18 03:39 - 00000369 _____ () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2015-04-21 16:23 - 2014-03-18 03:39 - 00000369 _____ () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2015-04-21 16:23 - 2013-08-22 04:17 - 00000000 ___RD () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-04-21 16:23 - 2013-08-22 04:17 - 00000000 ____D () C:\Users\rac1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-04-15 13:05 - 2015-04-15 13:05 - 00206816 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys

2015-04-09 14:12 - 2015-04-09 14:12 - 00226784 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys

2015-04-07 12:45 - 2015-04-07 12:45 - 00219616 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgwfpx.sys

2015-04-03 09:37 - 2015-04-03 09:37 - 00110048 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx86.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-01 17:29 - 2014-09-02 10:05 - 01487872 _____ () C:\Windows\WindowsUpdate.log

2015-05-01 17:22 - 2014-05-13 00:16 - 00184584 _____ () C:\Windows\system32\prfh0404.dat

2015-05-01 17:22 - 2014-05-13 00:16 - 00057518 _____ () C:\Windows\system32\prfc0404.dat

2015-05-01 17:22 - 2014-05-13 00:09 - 00446228 _____ () C:\Windows\system32\prfh0804.dat

2015-05-01 17:22 - 2014-05-13 00:09 - 00136514 _____ () C:\Windows\system32\prfc0804.dat

2015-05-01 17:22 - 2014-03-18 03:40 - 03587496 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-01 17:02 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\sru

2015-05-01 07:04 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\Microsoft.NET

2015-05-01 05:48 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\AppReadiness

2015-05-01 05:02 - 2013-08-22 02:13 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2015-05-01 04:59 - 2013-08-22 04:17 - 00000000 ___HD () C:\Windows\ELAMBKUP

2015-04-25 04:42 - 2013-08-22 04:05 - 00000000 ____D () C:\Windows\CbsTemp

2015-04-24 06:36 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\rescache

2015-04-23 05:24 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\AppCompat

2015-04-22 23:04 - 2013-08-22 03:23 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-22 23:03 - 2014-03-18 03:32 - 00003926 _____ () C:\Windows\PFRO.log

2015-04-22 23:03 - 2013-08-22 03:23 - 00018245 _____ () C:\Windows\setupact.log

2015-04-22 23:03 - 2013-08-22 03:22 - 00335400 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-04-22 23:02 - 2013-08-22 02:13 - 00262144 ___SH () C:\Windows\system32\config\BBI

2015-04-22 23:01 - 2014-05-13 00:16 - 00000000 ____D () C:\Windows\system32\Drivers\zh-HK

2015-04-22 23:01 - 2014-05-13 00:09 - 00000000 ____D () C:\Windows\system32\Drivers\zh-CN

2015-04-22 23:01 - 2014-05-12 23:56 - 00000000 ____D () C:\Windows\system32\Drivers\fr-FR

2015-04-22 23:01 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\zh-HK

2015-04-22 23:01 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\zh-CN

2015-04-22 23:01 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\fr-FR

2015-04-22 23:00 - 2014-03-18 03:27 - 00000000 ____D () C:\Program Files\Windows Journal

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ___RD () C:\Windows\ToastData

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\WinStore

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\zh-TW

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\MediaViewer

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\FileManager

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\Camera

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Program Files\Windows Defender

2015-04-22 23:00 - 2013-08-22 04:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2015-04-22 15:07 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-22 07:23 - 2013-08-22 04:17 - 00000000 ____D () C:\Windows\system32\Recovery

2015-04-22 07:23 - 2013-08-22 02:21 - 00000000 ___RD () C:\Users\Public

2015-04-22 07:22 - 2014-05-13 00:37 - 00000000 ____D () C:\Windows\Panther

2015-04-22 07:22 - 2013-08-22 02:21 - 00000000 __RHD () C:\Users\Default

2015-04-21 16:24 - 2014-05-12 23:26 - 00000000 ____D () C:\Windows\Log

==================== Files in the root of some directories =======

2014-05-12 23:46 - 2012-07-30 02:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd

2014-05-12 23:46 - 2009-07-22 06:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe

2014-05-12 23:46 - 2012-09-07 07:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Files to move or delete:

====================

C:\ProgramData\SetStretch.exe

C:\ProgramData\SetStretch.VBS

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-05-01 05:47

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-04-2015 01

Ran by rac1 at 2015-05-01 17:34:01

Running from C:\Users\rac1\Desktop

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2869257287-45743448-2494180453-500 - Administrator - Disabled)

Guest (S-1-5-21-2869257287-45743448-2494180453-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2869257287-45743448-2494180453-1003 - Limited - Enabled)

rac1 (S-1-5-21-2869257287-45743448-2494180453-1001 - Administrator - Enabled) => C:\Users\rac1

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ASUS Live Update (HKLM\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.9 - ASUS)

ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.4 - ASUS)

ASUS Smart Gesture (HKLM\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.18 - ASUS)

ATK Package (HKLM\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0035 - ASUS)

AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5941 - AVG Technologies)

AVG 2015 (Version: 15.0.4339 - AVG Technologies) Hidden

AVG 2015 (Version: 15.0.5941 - AVG Technologies) Hidden

Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.93.103.2 - Broadcom Corporation)

Broadcom Location Sensor (HKLM\...\{9449330B-9044-4C83-B88D-7E70B729ACA3}) (Version: 20.19.7896.18 - Broadcom Corporation)

Evernote v. 5.8.5 (HKLM\...\{5EDC25EC-D966-11E4-9E5C-00163E98E7D6}) (Version: 5.8.5.7193 - Evernote Corp.)

Google Chrome (HKLM\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

Intel® Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)

Intel® Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)

Microsoft Office (HKLM\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Preview Redistributable (x86) - 12.0.20617 (HKLM\...\{1f407217-9aec-4146-8504-e64ac959c534}) (Version: 12.0.20617.1 - Microsoft Corporation)

Realtek I2S Audio (HKLM\...\{89A448AA-3301-46AA-AFC3-34F2D7C670E8}) (Version: 6.2.9600.4118 - Realtek Semiconductor Corp.)

Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

WebStorage (HKLM\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)

Windows Driver Package - ASUS (AsusHID) Mouse (05/21/2014 3.0.0.31) (HKLM\...\05BD5A4CB35BD866F3029A2788DDC174A24862FC) (Version: 05/21/2014 3.0.0.31 - ASUS)

WinFlash (HKLM\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 02:13 - 2013-08-22 02:13 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {51DE80A8-B1D5-4E16-B22B-03E62DB3A105} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-23] (Microsoft Corporation)

Task: {5CF47998-7AFC-400D-9D62-D87673F3849A} - System32\Tasks\Update Checker => C:\Program Files\ASUS\ASUS Live Update\UpdateChecker.exe [2014-04-11] ()

Task: {7062B94F-CC83-40AE-881B-BDECF0946DD9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-22] (Google Inc.)

Task: {808F4F19-3BD6-455B-8EA9-21872DDBA1D1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-01] (Microsoft Corporation)

Task: {8DE31C99-422D-4A71-9D92-BEE9D0E11161} - System32\Tasks\ASUS Patch for Touch Panel => C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe [2013-01-09] (ASUSTek Computer INC.)

Task: {9705C059-BA85-4368-9CF5-97CE074FBF94} - System32\Tasks\ASUS Live Update2 => C:\Program Files [2015-05-01] ()

Task: {AFF8A56B-70B7-473E-B666-E9AD162FB9AB} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-23] (Microsoft Corporation)

Task: {B40C9A07-A3AA-4EAD-BA93-060D045BA0EB} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-23] (Microsoft Corporation)

Task: {BD0E108B-C08C-43C1-BF3F-60EF3D8DE03D} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)

Task: {C0595B5F-6100-4C32-B4ED-0B25ECAAC35D} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLauncher.exe [2014-07-08] (AsusTek)

Task: {D496A7BC-9FDD-484E-AAE3-6B0D6C86BFBD} - System32\Tasks\ASUS Live Update1 => C:\Program Files [2015-05-01] ()

Task: {DC58CFF6-1FEA-48F1-BFCA-04501747C40B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-04-22] (Google Inc.)

Task: {E68E268C-D916-4D9C-8C5C-62ABEB528BED} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-23] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-04-02 12:58 - 2015-04-02 12:58 - 21121032 _____ () C:\Program Files\Evernote\Evernote\libcef.dll

2015-04-02 12:58 - 2015-04-02 12:58 - 00212488 _____ () C:\Program Files\Evernote\Evernote\websockets.dll

2015-04-02 12:58 - 2015-04-02 12:58 - 00439304 _____ () C:\Program Files\Evernote\Evernote\libxml2.dll

2015-04-02 12:58 - 2015-04-02 12:58 - 00321032 _____ () C:\Program Files\Evernote\Evernote\libtidy.dll

2015-04-02 12:57 - 2015-04-02 12:57 - 00988696 _____ () C:\Program Files\Evernote\Evernote\avcodec-54.dll

2015-04-02 12:58 - 2015-04-02 12:58 - 00138776 _____ () C:\Program Files\Evernote\Evernote\avutil-51.dll

2015-04-02 12:58 - 2015-04-02 12:58 - 00195096 _____ () C:\Program Files\Evernote\Evernote\avformat-54.dll

2015-04-22 15:16 - 2015-04-13 17:55 - 01252680 _____ () C:\Program Files\Google\Chrome\Application\42.0.2311.90\libglesv2.dll

2015-04-22 15:16 - 2015-04-13 17:55 - 00080712 _____ () C:\Program Files\Google\Chrome\Application\42.0.2311.90\libegl.dll

2015-04-22 15:16 - 2015-04-13 17:55 - 14980424 _____ () C:\Program Files\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2869257287-45743448-2494180453-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg

DNS Servers: 75.75.76.76 - 75.75.75.75

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{B76F32B6-CCD4-4817-94AB-08D912B17F97}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

FirewallRules: [{76C153AC-FCD9-48EC-AC97-44A9157BA8EA}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe

FirewallRules: [{F44CD270-0075-43D6-9FB7-509D47091E9F}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe

FirewallRules: [{6BB26468-5337-4CB9-8EFC-6ED45742A1B5}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe

FirewallRules: [{069C5D8F-68EC-4AA7-89DD-96A00E7B735D}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe

FirewallRules: [{4A0E6DA1-35AB-4D98-B5FB-09AF90A47FA8}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe

FirewallRules: [{30276D2E-3A71-49CC-AFF8-65B59AFC332B}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe

FirewallRules: [{B05423EB-1371-46B6-83B3-BFFEAE7E9FAC}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe

FirewallRules: [{273AA9F2-4B25-4E53-A762-5949BE476936}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (05/01/2015 07:04:45 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".