[doctordotcalm]

I'm infected by an ie redirect your-home-page.net and can't get rid of it despite farbar and numerous other scans.  Can anyone help?  I've tried most of the removal instructions on the web

Thanks

[Advertisements]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

I need to see both logs generated by Farber scan and we will start from there. If you have any other logs from tools that you ran post them also and post them now.

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zep516]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

I need to see both logs generated by Farber scan and we will start from there. If you have any other logs from tools that you ran post them also and post them now.

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[doctordotcalm]

I hope you received the files in the last post

[zep516]

I have no files specifically FRST.txt and additions.txt are the 2 log files I'd like to have now, can you run FRST and post those 2 logs, just paste them right into the forum.

Thanks
Joe

[doctordotcalm]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:11-08-2015 02
Ran by poppag (administrator) on POPPAG-PC (11-08-2015 16:31:47)
Running from C:\Users\poppag\Downloads
Loaded Profiles: poppag (Available Profiles: poppag)
Platform: Windows 10 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
() C:\Program Files (x86)\Photodex\ProShow Producer\scsiaccess.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Windows\System32\sihost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Users\poppag\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\memdefrag.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Microsoft Corporation) C:\Windows\System32\fontdrvhost.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\ApplicationFrameHost.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\taskhostw.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Farbar) C:\Users\poppag\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-07-08] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-06-29] (Apple Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944648 2015-07-15] (Synaptics Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2010-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [821144 2010-10-25] (Adobe Systems Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4939288 2015-07-27] (Emsisoft Ltd)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [OneDrive] => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\OneDrive.exe [402632 2015-07-27] (Microsoft Corporation)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2015-08-03] (Glarysoft Ltd)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [BitTorrent] => C:\Users\poppag\AppData\Roaming\BitTorrent\BitTorrent.exe [1695080 2015-07-26] (BitTorrent Inc.)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [Google Update] => C:\Users\poppag\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-06-13] (Google Inc.)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8418584 2015-07-17] (Piriform Ltd)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [Glary Memory Optimizer] => C:\Program Files (x86)\Glary Utilities 5\memdefrag.exe [122656 2015-08-03] (Glarysoft Ltd)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-04-30] (TomTom)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7780120 2015-01-22] (SUPERAntiSpyware)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Run: [CloudSystemBooster] => C:\Program Files (x86)\Anvisoft\Cloud System Booster\CloudSystemBooster.exe [527544 2014-05-29] (Anvisoft)
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\RunOnce: [Uninstall C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5860.0512_2\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5860.0512_2\amd64"
HKU\S-1-5-18\...\Run: [Itibiti.exe] => C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2015-06-02]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-07-27] (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft...=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = about:blank
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKLM - TextAloud Toolbar - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - C:\Program Files (x86)\TextAloud\TAForIE64.dll [2015-01-05] (NextUp.com)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-06-02] (LastPass)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-16] (Google Inc.)
Toolbar: HKLM-x32 - TextAloud Toolbar - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - C:\Program Files (x86)\TextAloud\TAForIE.dll [2015-01-05] (NextUp.com)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-06-02] (LastPass)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-10-25] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-16] (Google Inc.)
Toolbar: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> No Name - {FCC3F67B-23A9-47F5-813E-2F46A749472C} - No File
Toolbar: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Toolbar: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-16] (Google Inc.)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{158115b5-f52c-4410-8c29-67ab01b7bc6f}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{c5f4e54e-bfbe-4d3c-b231-a266689ea267}: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-06-02] (LastPass)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-17] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-17] (Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-06-02] (LastPass)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @photodex.com/PhotodexPresenter -> C:\Program Files (x86)\Photodex Presenter\npPxPlay.dll [2015-06-02] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-2317217915-3030507882-558724183-1000: @tools.google.com/Google Update;version=3 -> C:\Users\poppag\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-2317217915-3030507882-558724183-1000: @tools.google.com/Google Update;version=9 -> C:\Users\poppag\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2015-06-03]
FF HKU\.DEFAULT\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Ninja Loader\FireFox

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-13]
CHR Extension: (Google Docs) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-13]
CHR Extension: (Google Drive) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-13]
CHR Extension: (YouTube) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-13]
CHR Extension: (Google Cast) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2015-06-13]
CHR Extension: (Google Search) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-13]
CHR Extension: (Google Sheets) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-13]
CHR Extension: (Google Wallet) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-13]
CHR Extension: (Gmail) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-13]
CHR Extension: (No Name) - C:\Users\poppag\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh [2015-06-22]
CHR HKLM-x32\...\Chrome\Extension: [cmlhbjpgeogifjnmlajdaealbdlfonah] - https://clients2.goo...ice/update2/crx
StartMenuInternet: Google Chrome - chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com)
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [5525328 2015-07-27] (Emsisoft Ltd)
S3 AJRouter; C:\Windows\System32\AJRouter.dll [23040 2015-07-10] (Microsoft Corporation)
R2 AnviCsbSvc; C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe [42680 2014-05-29] (Anvisoft)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R3 ClipSVC; C:\Windows\System32\ClipSVC.dll [658568 2015-07-19] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-07-22] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-07-21] (Microsoft Corporation)
S3 DcpSvc; C:\Windows\system32\dcpsvc.dll [196096 2015-07-10] (Microsoft Corporation)
S3 DevQueryBroker; C:\Windows\system32\DevQueryBroker.dll [33280 2015-07-10] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
S2 dmwappushservice; C:\Windows\system32\dmwappushsvc.dll [63488 2015-07-10] (Microsoft Corporation)
S2 DoSvc; C:\Windows\system32\dosvc.dll [1169408 2015-07-17] (Microsoft Corporation)
R3 DsSvc; C:\Windows\System32\DsSvc.dll [143872 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-07-23] (Microsoft Corporation)
R3 lfsvc; C:\Windows\System32\lfsvc.dll [27136 2015-07-10] (Microsoft Corporation)
R3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [186368 2015-07-10] (Microsoft Corporation)
S3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [268800 2015-07-10] (Microsoft Corporation)
S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [512000 2015-07-10] (Microsoft Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U2 OneSyncSvc_Session2; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U2 OneSyncSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session2; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-07-29] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-02-28] (Riverbed Technology, Inc.)
R2 ScsiAccess; C:\Program Files (x86)\Photodex\ProShow Producer\ScsiAccess.exe [186760 2015-06-02] ()
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-07-17] (Microsoft Corporation)
S3 SensorService; C:\Windows\system32\SensorService.dll [229376 2015-07-29] (Microsoft Corporation)
S3 SmsRouter; C:\Windows\system32\SmsRouterSvc.dll [583680 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-15] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
R2 tiledatamodelsvc; C:\Windows\system32\tileobjserver.dll [503808 2015-07-29] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-07-23] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-07-23] (Microsoft Corporation)
R3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session2; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-07-29] (Microsoft Corporation)
R3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session2; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session2; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 UserManager; C:\Windows\System32\usermgr.dll [717312 2015-07-10] (Microsoft Corporation)
S3 UsoSvc; C:\Windows\system32\usocore.dll [343040 2015-07-23] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WpnService; C:\Windows\system32\WpnService.dll [49152 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [32256 2015-07-10] (Microsoft Corporation)
S3 CapImg; C:\Windows\System32\drivers\capimg.sys [116736 2015-07-10] (Microsoft Corporation)
S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [39264 2015-07-10] (Microsoft Corporation)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
R1 epp64; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp64.sys [138504 2015-08-07] (Emsisoft GmbH)
S3 fcvsc; C:\Windows\System32\drivers\fcvsc.sys [31232 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2015-06-02] (Glarysoft Ltd)
S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [50016 2015-07-10] (Microsoft Corporation)
R3 i8042HDR; C:\Windows\system32\DRIVERS\i8042HDR.sys [15920 2009-08-15] (Windows ® Codename Longhorn DDK provider)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [104800 2015-07-10] (LSI Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-11] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S0 megasas; C:\Windows\System32\drivers\megasas.sys [59744 2015-07-10] (Avago Technologies)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [48128 2015-07-10] (Microsoft Corporation)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
S3 netvsc; C:\Windows\System32\drivers\netvsc.sys [94720 2015-07-10] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58208 2015-07-10] (LSI Corporation)
S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [58720 2015-07-10] (Avago Technologies)
S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [934752 2015-07-17] (Microsoft Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-22] (Synaptics Incorporated)
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
S0 storufs; C:\Windows\System32\drivers\storufs.sys [40288 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2015-06-01] (Windows ® Win 7 DDK provider)
S3 TrojanKillerDriver; C:\Windows\System32\DRIVERS\gtkdrv.sys [16640 2013-10-11] (Windows ® Win 7 DDK provider)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-07-17] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [245088 2015-07-10] (Microsoft Corporation)
S3 UfxChipidea; C:\Windows\System32\drivers\UfxChipidea.sys [94048 2015-07-10] (Microsoft Corporation)
S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [127840 2015-07-10] (Microsoft Corporation)
S3 UrsChipidea; C:\Windows\System32\drivers\urschipidea.sys [28512 2015-07-10] (Microsoft Corporation)
S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [57696 2015-07-10] (Microsoft Corporation)
S3 UrsSynopsys; C:\Windows\System32\drivers\urssynopsys.sys [27488 2015-07-10] (Microsoft Corporation)
S3 vhf; C:\Windows\System32\drivers\vhf.sys [31744 2015-07-10] (Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [685056 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
U3 idsvc; no ImagePath
S1 livzvpht; \??\C:\WINDOWS\system32\drivers\livzvpht.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: dosvc -> C:\Windows\system32\dosvc.dll (Microsoft Corporation)
NETSVC: DcpSvc -> C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: NetSetupSvc -> C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice -> C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc -> C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc -> C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: RetailDemo -> C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVCx32: NetSetupSvc -> C:\Windows\SysWOW64\NetSetupSvc.dll ==> No File
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> No File

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-11 16:30 - 2015-08-11 16:31 - 02172928 _____ (Farbar) C:\Users\poppag\Downloads\FRST64 (1).exe
2015-08-11 15:32 - 2015-08-11 15:32 - 00016148 _____ C:\WINDOWS\system32\POPPAG-PC_poppag_HistoryPrediction.bin
2015-08-11 12:50 - 2015-08-11 12:54 - 00000000 ____D C:\NPE
2015-08-11 12:47 - 2015-08-11 13:25 - 00000000 ____D C:\Users\poppag\AppData\Local\NPE
2015-08-11 12:47 - 2015-08-11 12:47 - 00111288 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SMR501.SYS.bak
2015-08-11 12:47 - 2015-08-11 12:47 - 00000000 ____D C:\ProgramData\Norton
2015-08-11 12:46 - 2015-08-11 12:46 - 03088296 _____ (Symantec Corporation) C:\Users\poppag\Downloads\NPE.exe
2015-08-11 12:31 - 2015-08-11 12:31 - 00058688 _____ C:\Users\poppag\Downloads\UnHookLib.dll
2015-08-11 12:12 - 2015-08-11 12:12 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\48230029.sys
2015-08-11 12:06 - 2015-08-11 12:07 - 00000000 ____D C:\Users\poppag\Downloads\Malwarebytes Anti-Malware Premium 2.0.2.1012 Final + Keys [ATOM]
2015-08-11 11:24 - 2015-08-11 11:57 - 00000000 ____D C:\Users\poppag\AppData\Local\TextCrawler
2015-08-11 11:24 - 2015-08-11 11:24 - 00000000 ____D C:\Users\poppag\AppData\Roaming\IsolatedStorage
2015-08-11 11:24 - 2015-08-11 11:24 - 00000000 ____D C:\ProgramData\IsolatedStorage
2015-08-11 11:23 - 2015-08-11 11:23 - 05161408 _____ (DigitalVolcano Software Ltd) C:\Users\poppag\Downloads\TextCrawlerPro_setup.exe
2015-08-11 11:23 - 2015-08-11 11:23 - 00001157 _____ C:\Users\Public\Desktop\TextCrawler Pro.lnk
2015-08-11 11:23 - 2015-08-11 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TextCrawler Pro
2015-08-11 11:23 - 2015-08-11 11:23 - 00000000 ____D C:\Program Files (x86)\TextCrawler Pro
2015-08-11 11:14 - 2015-08-11 11:17 - 00000000 ____D C:\Program Files (x86)\Windows Grep
2015-08-11 11:14 - 2015-08-11 11:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Grep
2015-08-11 11:13 - 2015-08-11 11:13 - 00742893 _____ ( ) C:\Users\poppag\Downloads\WindowsGrep23.exe
2015-08-11 10:47 - 2015-08-11 10:47 - 00000000 ____D C:\Users\poppag\AppData\Local\SlimWare Utilities Inc
2015-08-11 10:46 - 2015-08-11 10:46 - 00000000 ____D C:\Users\poppag\AppData\Local\Anvisoft
2015-08-11 10:42 - 2015-08-11 15:22 - 00000000 ____D C:\Program Files (x86)\SlimCleaner
2015-08-11 10:42 - 2015-08-11 10:57 - 00002483 _____ C:\Users\Public\Desktop\SlimCleaner.lnk
2015-08-11 10:42 - 2015-08-11 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner
2015-08-11 10:42 - 2015-08-11 10:42 - 00003126 _____ C:\WINDOWS\System32\Tasks\SlimCleaner Run
2015-08-11 10:41 - 2015-08-11 10:41 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2015-08-11 10:25 - 2015-08-11 10:41 - 01038656 _____ (SlimWare Utilities, Inc.) C:\Users\poppag\Downloads\SlimCleaner-setup.exe
2015-08-11 10:02 - 2015-08-11 10:02 - 00001356 _____ C:\Users\Public\Desktop\Cloud System Booster.lnk
2015-08-11 09:50 - 2015-08-11 09:54 - 16048725 _____ C:\Users\poppag\Downloads\Cloud System Booster 3.3.16 PRO.rar
2015-08-11 09:40 - 2015-08-11 10:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
2015-08-11 09:40 - 2015-08-11 10:02 - 00000000 ____D C:\Program Files (x86)\Anvisoft
2015-08-11 09:37 - 2015-08-11 09:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-08-10 19:09 - 2015-08-10 19:09 - 00000000 ____D C:\Program Files (x86)\Portable
2015-08-10 18:14 - 2015-08-10 18:14 - 00753184 _____ C:\Users\poppag\Downloads\Adware-Removal-Tool-v3.9.1.exe
2015-08-10 18:14 - 2015-08-10 18:14 - 00000000 ____D C:\Program Files\Adware-Removal-Tool
2015-08-10 17:41 - 2015-08-10 18:11 - 00000000 ____D C:\ProgramData\RogueKiller
2015-08-10 17:41 - 2015-08-10 17:41 - 22653000 _____ C:\Users\poppag\Downloads\RogueKillerX64.exe
2015-08-10 17:41 - 2015-08-10 17:41 - 00037624 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-08-10 16:31 - 2015-08-11 16:32 - 00033006 _____ C:\Users\poppag\Downloads\FRST.txt
2015-08-10 16:31 - 2015-08-11 16:31 - 00000000 ____D C:\FRST
2015-08-10 16:31 - 2015-08-10 16:31 - 02171392 _____ (Farbar) C:\Users\poppag\Downloads\FRST64.exe
2015-08-10 16:17 - 2015-08-10 16:17 - 00000396 _____ C:\EamClean.log
2015-08-10 16:14 - 2015-08-10 16:14 - 00000000 ____D C:\ProgramData\Emsisoft
2015-08-10 16:06 - 2015-08-10 16:06 - 00001171 _____ C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
2015-08-10 16:06 - 2015-08-10 16:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-08-10 16:05 - 2015-08-11 16:09 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware
2015-08-10 12:32 - 2015-08-10 12:44 - 71516398 _____ C:\Users\poppag\Downloads\GridinSoft Trojan Killer 2.2.7.2 + Patch 2.x.x (32-64bit.) MrSzzS.rar
2015-08-10 12:07 - 2015-08-11 13:20 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2015-08-10 12:07 - 2015-08-10 12:07 - 00001860 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2015-08-10 12:07 - 2015-08-10 12:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-08-10 12:03 - 2015-08-10 12:11 - 00000000 ____D C:\Users\poppag\Downloads\SUPERAntiSpyware Pro 6.0.1170 + Crack + LifeTime Key [KaranPC]
2015-08-10 11:53 - 2015-08-10 11:53 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\poppag\Desktop\tdsskiller.exe
2015-08-10 11:25 - 2015-08-10 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Trojan Killer
2015-08-10 11:25 - 2015-08-10 11:25 - 00000000 ____D C:\ProgramData\GridinSoft
2015-08-10 11:24 - 2015-08-11 13:17 - 00000000 ____D C:\Program Files\GridinSoft Trojan Killer
2015-08-10 11:18 - 2015-08-10 11:18 - 00000000 ____D C:\SUPERDelete
2015-08-09 19:14 - 2015-08-11 11:14 - 00000532 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 243df5bf-9429-49e3-85bf-b337bf8886e2.job
2015-08-09 19:14 - 2015-08-11 02:00 - 00000532 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task e03be48a-8148-4f27-b669-f3ea8c080fa9.job
2015-08-09 19:14 - 2015-08-09 19:14 - 00003762 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task e03be48a-8148-4f27-b669-f3ea8c080fa9
2015-08-09 19:14 - 2015-08-09 19:14 - 00003680 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 243df5bf-9429-49e3-85bf-b337bf8886e2
2015-08-09 19:14 - 2015-08-09 19:14 - 00000000 ____D C:\Users\poppag\AppData\Roaming\SUPERAntiSpyware.com
2015-08-09 19:13 - 2015-08-09 19:13 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2015-08-09 19:00 - 2015-08-09 19:00 - 01677922 _____ C:\Users\poppag\Downloads\Spyhunter.keygen.zip
2015-08-09 16:13 - 2015-08-09 16:13 - 00000000 _____ C:\autoexec.bat
2015-08-08 13:41 - 2015-08-08 13:41 - 00001160 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2015-08-07 19:41 - 2015-08-10 14:51 - 00002409 _____ C:\WINDOWS\setupact.log
2015-08-07 19:41 - 2015-08-07 19:41 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-08-07 15:59 - 2015-08-09 17:07 - 00000000 ____D C:\ProgramData\MSNetCore
2015-08-07 15:56 - 2015-08-07 15:56 - 00000000 ____D C:\Program Files (x86)\1045E420-1438977382-DF11-BACB-00266C69E639
2015-08-07 15:54 - 2015-08-11 13:18 - 00000332 _____ C:\WINDOWS\Tasks\XBAJTK.job
2015-08-07 15:54 - 2015-08-07 15:54 - 00002652 _____ C:\WINDOWS\System32\Tasks\XBAJTK
2015-08-07 15:53 - 2015-08-09 16:36 - 00001655 _____ C:\MS Visual Fox Pro.lnk
2015-08-07 13:50 - 2015-08-11 12:49 - 00029244 _____ C:\WINDOWS\PFRO.log
2015-08-07 10:53 - 2015-08-07 10:53 - 00000023 _____ C:\WINDOWS\SysWOW64\syssshow100.dll
2015-08-07 10:46 - 2015-08-11 13:17 - 00000000 ____D C:\Program Files (x86)\BlazeVideo
2015-08-07 10:46 - 2015-08-07 10:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlazeVideo
2015-08-07 10:46 - 2015-08-07 10:46 - 00000000 ____D C:\ProgramData\BlazeVideo
2015-08-06 19:05 - 2015-08-10 17:30 - 00000000 ____D C:\AdwCleaner
2015-08-06 18:53 - 2015-08-06 18:53 - 00001133 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2015-08-06 18:53 - 2015-08-06 18:53 - 00000000 ____D C:\Users\poppag\AppData\Local\VS Revo Group
2015-08-06 18:53 - 2015-08-06 18:53 - 00000000 ____D C:\ProgramData\VS Revo Group
2015-08-06 18:53 - 2015-08-06 18:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-08-06 18:53 - 2015-08-06 18:53 - 00000000 ____D C:\Program Files\VS Revo Group
2015-08-06 18:53 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2015-08-06 18:47 - 2015-08-06 18:47 - 00017271 _____ C:\Users\poppag\Downloads\RevoUninstallerProv3.1.22014Full - ThePirateBay.TO.torrent
2015-08-06 16:06 - 2015-08-11 16:20 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-06 16:01 - 2015-08-06 16:01 - 00245671 _____ C:\Users\poppag\Desktop\Safe H2 Service.fs
2015-08-06 14:50 - 2015-08-10 18:14 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
2015-08-06 14:50 - 2015-08-06 14:50 - 00000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2015-08-06 12:39 - 2015-07-30 02:24 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-06 12:39 - 2015-07-30 02:22 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-06 12:39 - 2015-07-30 02:21 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-06 12:39 - 2015-07-30 02:17 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-06 12:39 - 2015-07-30 02:17 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-06 12:39 - 2015-07-30 02:16 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-06 12:39 - 2015-07-30 02:09 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-06 12:39 - 2015-07-30 02:06 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-06 12:39 - 2015-07-30 02:05 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 12:39 - 2015-07-30 02:05 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-08-06 12:39 - 2015-07-30 02:04 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-06 12:39 - 2015-07-30 02:03 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-06 12:39 - 2015-07-30 02:03 - 01983328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-06 12:39 - 2015-07-30 01:30 - 22319520 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-06 12:39 - 2015-07-30 00:29 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-06 12:39 - 2015-07-30 00:26 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-08-06 12:39 - 2015-07-30 00:26 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-08-06 12:39 - 2015-07-30 00:25 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-08-06 12:39 - 2015-07-30 00:25 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-08-06 12:39 - 2015-07-30 00:24 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-06 12:39 - 2015-07-30 00:21 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-06 12:39 - 2015-07-30 00:17 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-06 12:39 - 2015-07-30 00:12 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-08-06 12:39 - 2015-07-30 00:07 - 20854776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-06 12:39 - 2015-07-29 23:56 - 16707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-06 12:39 - 2015-07-29 23:54 - 24591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-06 12:39 - 2015-07-29 23:54 - 02415616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-06 12:39 - 2015-07-29 23:53 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-06 12:39 - 2015-07-29 23:52 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-06 12:39 - 2015-07-29 23:52 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-06 12:39 - 2015-07-29 23:49 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-06 12:39 - 2015-07-29 23:49 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-06 12:39 - 2015-07-29 23:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-06 12:39 - 2015-07-29 23:44 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-06 12:39 - 2015-07-29 23:42 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-06 12:39 - 2015-07-29 23:42 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-08-06 12:39 - 2015-07-29 23:41 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-06 12:39 - 2015-07-29 23:41 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-06 12:39 - 2015-07-29 23:40 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-06 12:39 - 2015-07-29 23:40 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-08-06 12:39 - 2015-07-29 23:38 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-06 12:39 - 2015-07-29 23:32 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-06 12:39 - 2015-07-29 23:32 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-06 12:39 - 2015-07-29 23:29 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-08-06 12:39 - 2015-07-29 23:23 - 13024256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-06 12:39 - 2015-07-29 23:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-08-06 12:39 - 2015-07-29 23:14 - 19333632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-06 12:39 - 2015-07-29 23:12 - 01914880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-06 12:39 - 2015-07-29 23:11 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-08-06 12:39 - 2015-07-29 23:10 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-08-06 12:39 - 2015-07-29 23:06 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-08-06 12:39 - 2015-07-29 23:04 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-08-06 12:39 - 2015-07-29 23:04 - 00495616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-08-06 12:39 - 2015-07-29 23:04 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-08-06 12:39 - 2015-07-29 22:58 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-08-06 12:38 - 2015-07-30 02:23 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-08-06 12:38 - 2015-07-30 02:17 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-06 12:38 - 2015-07-30 02:16 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-06 12:38 - 2015-07-30 02:15 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-08-06 12:38 - 2015-07-30 02:14 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-08-06 12:38 - 2015-07-30 01:24 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-06 12:38 - 2015-07-30 00:42 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-06 12:38 - 2015-07-30 00:24 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-08-06 12:38 - 2015-07-30 00:24 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-08-06 12:38 - 2015-07-30 00:24 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-08-06 12:38 - 2015-07-30 00:22 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-08-06 12:38 - 2015-07-30 00:22 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-08-06 12:38 - 2015-07-30 00:12 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-08-06 12:38 - 2015-07-30 00:09 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-06 12:38 - 2015-07-30 00:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-08-06 12:38 - 2015-07-30 00:08 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-06 12:38 - 2015-07-30 00:08 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-06 12:38 - 2015-07-30 00:02 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-06 12:38 - 2015-07-29 23:59 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-08-06 12:38 - 2015-07-29 23:53 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-06 12:38 - 2015-07-29 23:53 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-06 12:38 - 2015-07-29 23:52 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-06 12:38 - 2015-07-29 23:49 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 12:38 - 2015-07-29 23:46 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-08-06 12:38 - 2015-07-29 23:46 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-06 12:38 - 2015-07-29 23:46 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-08-06 12:38 - 2015-07-29 23:45 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-06 12:38 - 2015-07-29 23:45 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-08-06 12:38 - 2015-07-29 23:44 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-06 12:38 - 2015-07-29 23:44 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-08-06 12:38 - 2015-07-29 23:44 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-06 12:38 - 2015-07-29 23:44 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-06 12:38 - 2015-07-29 23:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-06 12:38 - 2015-07-29 23:41 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-06 12:38 - 2015-07-29 23:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-08-06 12:38 - 2015-07-29 23:34 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-08-06 12:38 - 2015-07-29 23:13 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-08-06 12:38 - 2015-07-29 23:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-08-06 12:38 - 2015-07-29 23:10 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 12:38 - 2015-07-29 23:07 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2015-08-06 12:38 - 2015-07-29 23:06 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-08-06 12:38 - 2015-07-29 23:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2015-08-06 12:38 - 2015-07-29 23:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll
2015-08-06 12:38 - 2015-07-29 22:59 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-08-06 12:38 - 2015-07-29 22:58 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-08-06 11:37 - 2015-08-06 11:37 - 00001071 _____ C:\Users\poppag\Desktop\Focusky.lnk
2015-08-06 11:37 - 2015-08-06 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusky
2015-08-06 11:35 - 2015-08-06 11:37 - 00000000 ____D C:\Program Files (x86)\Focusky
2015-08-06 11:28 - 2015-08-06 11:34 - 142325152 _____ (Focusky Solution ) C:\Users\poppag\Downloads\focusky_setup.exe
2015-08-05 12:02 - 2015-08-05 12:02 - 00000000 ____D C:\Users\poppag\AppData\Roaming\WinBatch
2015-08-05 12:02 - 2015-08-05 12:02 - 00000000 ____D C:\sll0v150
2015-08-03 17:31 - 2015-08-03 17:31 - 00100575 _____ C:\Users\poppag\Downloads\ie68047_created.svg
2015-07-31 16:14 - 2015-07-31 16:14 - 00000000 ____D C:\Program Files\Yamicsoft
2015-07-31 16:12 - 2015-08-05 10:45 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Yamicsoft
2015-07-30 17:00 - 2015-08-11 13:17 - 00000000 ____D C:\Program Files (x86)\Games
2015-07-29 17:49 - 2015-07-29 17:49 - 00000874 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-07-29 12:36 - 2015-07-29 12:36 - 00002126 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-07-29 12:36 - 2015-07-29 12:36 - 00002124 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-07-29 12:36 - 2015-07-29 12:36 - 00002114 _____ C:\Users\Public\Desktop\Google Docs.lnk
2015-07-29 12:36 - 2015-07-29 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-07-29 12:22 - 2015-07-29 12:26 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Google
2015-07-28 19:43 - 2015-07-28 19:43 - 01048312 _____ C:\Users\poppag\Downloads\Attachments_2015728 (1).zip
2015-07-28 17:26 - 2015-07-28 17:26 - 00410436 _____ C:\Users\poppag\Downloads\Attachments_2015728.zip
2015-07-28 13:06 - 2015-07-26 01:16 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-07-28 13:06 - 2015-07-26 01:16 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-07-28 13:06 - 2015-07-26 01:15 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-07-28 13:06 - 2015-07-26 01:14 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-07-28 13:06 - 2015-07-26 01:14 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-07-28 13:06 - 2015-07-26 01:13 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-07-28 13:06 - 2015-07-26 01:06 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-07-28 13:06 - 2015-07-26 00:28 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-07-28 13:06 - 2015-07-26 00:28 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-07-28 13:06 - 2015-07-25 23:49 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-28 13:06 - 2015-07-25 23:40 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-07-28 13:06 - 2015-07-25 23:39 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-07-28 13:06 - 2015-07-25 23:38 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-07-28 13:06 - 2015-07-25 23:30 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-07-28 13:06 - 2015-07-23 23:30 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-07-28 13:06 - 2015-07-23 22:46 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-07-28 13:06 - 2015-07-23 22:46 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-07-28 13:06 - 2015-07-23 22:40 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-07-28 13:06 - 2015-07-23 22:39 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-07-28 13:06 - 2015-07-23 22:25 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-07-28 13:06 - 2015-07-23 22:24 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-07-28 13:06 - 2015-07-23 22:24 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-07-28 13:05 - 2015-07-25 23:49 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-07-28 13:05 - 2015-07-25 23:47 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-07-28 13:05 - 2015-07-25 23:40 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-07-28 13:05 - 2015-07-25 23:39 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-07-28 13:05 - 2015-07-25 23:35 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-07-28 13:05 - 2015-07-25 23:34 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-07-28 13:05 - 2015-07-25 23:30 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-07-28 13:05 - 2015-07-25 23:29 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2015-07-28 13:05 - 2015-07-23 23:31 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-07-28 13:05 - 2015-07-23 23:18 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-07-28 13:05 - 2015-07-23 23:17 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-07-28 13:05 - 2015-07-23 23:17 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-07-28 13:05 - 2015-07-23 23:17 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-07-28 13:05 - 2015-07-23 23:12 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-07-28 13:05 - 2015-07-23 23:11 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-07-28 13:05 - 2015-07-23 22:55 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-07-28 13:05 - 2015-07-23 22:52 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-07-28 13:05 - 2015-07-23 22:46 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-07-28 13:05 - 2015-07-23 22:44 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-07-28 13:05 - 2015-07-23 22:34 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-07-28 13:05 - 2015-07-23 22:30 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-07-28 13:05 - 2015-07-23 22:29 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-07-28 13:05 - 2015-07-23 22:24 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-07-28 13:05 - 2015-07-23 22:24 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-07-28 13:05 - 2015-07-23 22:24 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-07-28 12:42 - 2015-07-28 13:01 - 00000000 ____D C:\Users\poppag\AppData\Roaming\iMazing
2015-07-28 12:42 - 2015-07-28 12:42 - 00000000 ____D C:\Users\poppag\AppData\Local\DigiDNA
2015-07-28 12:42 - 2015-07-28 12:42 - 00000000 ____D C:\ProgramData\DigiDNA
2015-07-28 12:33 - 2015-07-28 12:39 - 15457798 _____ C:\Users\poppag\Downloads\k40yb.DigiDNA.iMazing.1.1.6.rar
2015-07-27 18:40 - 2015-07-27 18:42 - 00000022 _____ C:\Users\poppag\Downloads\Windows_10_Manager_0.1.6_Beta.zip
2015-07-27 13:33 - 2015-07-27 13:33 - 00001977 _____ C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Gaosuo.lnk
2015-07-27 13:33 - 2015-07-27 13:33 - 00001971 _____ C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\videos.lnk
2015-07-27 13:33 - 2015-07-27 13:33 - 00001953 _____ C:\Users\poppag\Desktop\Gaosuo.lnk
2015-07-27 13:33 - 2015-07-27 13:33 - 00001947 _____ C:\Users\poppag\Desktop\videos.lnk
2015-07-27 13:33 - 2015-07-27 13:33 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gaosuo
2015-07-27 13:32 - 2015-07-27 13:33 - 00000000 ____D C:\Program Files (x86)\Gaosuo
2015-07-27 13:32 - 2015-07-27 13:32 - 00000000 ____D C:\WINDOWS\Gaosuo
2015-07-27 13:23 - 2015-07-27 13:23 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Friendly Cactus
2015-07-26 20:00 - 2015-07-26 20:11 - 00000000 ____D C:\Users\poppag\AppData\Roaming\IQS
2015-07-26 19:54 - 2015-08-06 15:03 - 00000000 ____D C:\Users\poppag\AppData\Local\Deployment
2015-07-26 19:54 - 2015-07-26 19:54 - 00000000 ____D C:\Users\poppag\AppData\Local\Apps\2.0
2015-07-26 18:47 - 2015-07-26 18:47 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Mad Head Games
2015-07-26 18:46 - 2015-07-26 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beyond - Light Advent Collector's Edition
2015-07-26 15:36 - 2015-07-26 15:36 - 00000000 ____D C:\Users\poppag\AppData\Local\MetaGeek, LLC
2015-07-26 13:42 - 2015-07-26 15:46 - 00000000 ____D C:\Users\poppag\AppData\Local\MetaGeek,_LLC
2015-07-26 13:42 - 2015-07-26 13:42 - 00000037 ___SH C:\Users\poppag\AppData\Local\70149b02515b3bb20dd492.47983420
2015-07-26 13:38 - 2015-08-05 18:42 - 00000000 ____D C:\Program Files (x86)\MetaGeek
2015-07-26 13:21 - 2015-07-26 13:21 - 11000652 _____ C:\Users\poppag\Downloads\WiHack-v2.4-.3.zip
2015-07-26 13:04 - 2015-07-26 13:04 - 00000030 _____ C:\Users\poppag\Downloads\ProfessionalWifiCracker-Ultimate2014 - ThePirateBay.TO.torrent
2015-07-25 15:14 - 2015-07-22 01:22 - 02462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-07-25 15:14 - 2015-07-22 01:19 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-07-25 15:14 - 2015-07-22 01:18 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-07-25 15:14 - 2015-07-22 01:15 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-07-25 15:14 - 2015-07-22 01:02 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-07-25 15:14 - 2015-07-22 00:13 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-07-25 15:14 - 2015-07-22 00:13 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-07-25 15:14 - 2015-07-22 00:02 - 02150696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-07-25 15:14 - 2015-07-22 00:00 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-07-25 15:14 - 2015-07-22 00:00 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-07-25 15:14 - 2015-07-22 00:00 - 00643616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-07-25 15:14 - 2015-07-22 00:00 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-07-25 15:14 - 2015-07-21 23:53 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-07-25 15:14 - 2015-07-21 23:52 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-07-25 15:14 - 2015-07-21 23:21 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-07-25 15:14 - 2015-07-21 23:13 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-07-25 15:14 - 2015-07-21 22:50 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-07-24 12:51 - 2015-07-24 12:51 - 02575872 _____ (ACCA software S.p.A.) C:\WINDOWS\ACCA_PreviewHandler.dll
2015-07-24 12:47 - 2007-04-11 10:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capicom.DLL
2015-07-24 12:43 - 2015-07-24 12:43 - 09391096 _____ (ACCA software S.p.A.) C:\Users\poppag\Downloads\Edificius_v600o_EN.exe
2015-07-24 12:38 - 2015-07-22 01:15 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-07-24 12:38 - 2015-07-22 00:02 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-07-24 12:38 - 2015-07-22 00:00 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2015-07-24 12:38 - 2015-07-21 23:59 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-07-24 12:38 - 2015-07-21 23:55 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-07-24 12:38 - 2015-07-21 23:55 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-07-24 12:38 - 2015-07-21 23:55 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-07-24 12:38 - 2015-07-21 23:54 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-07-24 12:38 - 2015-07-21 23:52 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-07-24 12:38 - 2015-07-21 23:51 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-07-24 12:38 - 2015-07-21 23:49 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-07-24 12:38 - 2015-07-21 23:48 - 03589632 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-07-24 12:38 - 2015-07-21 23:48 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-07-24 12:38 - 2015-07-21 23:46 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-07-24 12:38 - 2015-07-21 23:13 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-07-24 12:38 - 2015-07-21 23:11 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-07-24 12:38 - 2015-07-21 23:10 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-07-24 12:38 - 2015-07-21 23:09 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-07-24 12:38 - 2015-07-21 23:07 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-07-24 12:38 - 2015-07-21 23:07 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-07-24 12:38 - 2015-07-21 23:05 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-07-24 12:38 - 2015-07-21 23:04 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-07-24 12:38 - 2015-07-21 23:03 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-07-23 14:48 - 2015-07-23 14:50 - 00000000 ____D C:\Users\poppag\Documents\Sound recordings
2015-07-23 13:55 - 2015-07-23 13:55 - 06947302 _____ C:\Users\poppag\samurai.ct7Project
2015-07-23 10:14 - 2015-07-23 10:14 - 00000000 ____D C:\Users\poppag\AppData\Roaming\com.wonderidea.focusky
2015-07-22 15:42 - 2015-07-22 15:42 - 00098788 _____ C:\Users\poppag\Downloads\Sheep.hani
2015-07-22 09:30 - 2015-07-19 00:04 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-07-22 09:30 - 2015-07-18 23:54 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-07-22 09:30 - 2015-07-18 23:23 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-07-22 09:30 - 2015-07-18 23:18 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-07-22 09:30 - 2015-07-18 23:12 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-07-22 09:30 - 2015-07-18 23:12 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-07-22 09:30 - 2015-07-18 23:02 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-07-22 09:30 - 2015-07-18 22:39 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-07-21 10:43 - 2015-07-18 04:48 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-07-21 10:43 - 2015-07-18 04:47 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2015-07-21 10:43 - 2015-07-18 04:22 - 00539216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-07-21 10:43 - 2015-07-18 03:48 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-07-21 10:43 - 2015-07-18 03:43 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2015-07-21 10:43 - 2015-07-18 03:39 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-07-21 10:43 - 2015-07-18 03:37 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2015-07-21 10:43 - 2015-07-18 03:29 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-07-21 10:43 - 2015-07-18 03:28 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2015-07-21 10:43 - 2015-07-18 03:28 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-07-21 10:43 - 2015-07-18 03:26 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2015-07-21 10:43 - 2015-07-18 01:18 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-07-21 10:43 - 2015-07-18 01:17 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-07-21 10:43 - 2015-07-18 01:15 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-07-21 10:43 - 2015-07-18 01:02 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-07-21 10:43 - 2015-07-18 00:54 - 00606392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-07-21 10:43 - 2015-07-18 00:13 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-07-21 10:43 - 2015-07-18 00:09 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-07-21 10:43 - 2015-07-18 00:06 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-07-21 10:43 - 2015-07-18 00:01 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-07-21 10:43 - 2015-07-17 23:59 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-07-21 10:43 - 2015-07-17 23:59 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-07-21 10:43 - 2015-07-17 23:57 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-07-21 10:43 - 2015-07-17 23:52 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-07-21 10:43 - 2015-07-17 23:50 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-07-21 10:43 - 2015-07-17 23:50 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-07-21 10:43 - 2015-07-17 23:49 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-07-21 10:43 - 2015-07-17 23:49 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-07-21 10:43 - 2015-07-17 23:49 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-07-21 10:43 - 2015-07-17 23:48 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-07-21 10:43 - 2015-07-17 23:48 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-07-21 10:43 - 2015-07-17 23:47 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-07-21 10:43 - 2015-07-17 00:23 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2015-07-21 10:43 - 2015-07-17 00:17 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-07-21 10:43 - 2015-07-17 00:13 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-07-21 10:43 - 2015-07-17 00:12 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-07-21 10:43 - 2015-07-17 00:07 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-07-21 10:43 - 2015-07-16 23:39 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-07-21 10:43 - 2015-07-16 23:05 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-07-21 10:43 - 2015-07-16 22:48 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-07-21 10:43 - 2015-07-16 22:39 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-07-21 10:43 - 2015-07-16 22:39 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-07-21 10:43 - 2015-07-16 22:36 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-07-21 10:43 - 2015-07-16 22:34 - 01601024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-07-21 10:43 - 2015-07-16 22:33 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-07-21 10:43 - 2015-07-16 22:33 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-07-21 10:43 - 2015-07-16 22:32 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-07-21 10:43 - 2015-07-16 22:31 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-07-21 10:43 - 2015-07-16 22:26 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-07-21 10:43 - 2015-07-16 22:26 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-07-21 10:43 - 2015-07-16 22:24 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-07-21 10:43 - 2015-07-16 22:21 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-07-21 10:43 - 2015-07-16 22:19 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-07-21 10:43 - 2015-07-16 22:19 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-07-21 10:43 - 2015-07-16 22:19 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-07-21 10:43 - 2015-07-16 22:18 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-07-21 10:43 - 2015-07-16 22:16 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2015-07-21 10:43 - 2015-07-16 22:05 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-07-21 10:43 - 2015-07-16 22:05 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-07-21 10:43 - 2015-07-16 22:00 - 01161728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-07-21 10:43 - 2015-07-16 21:56 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-07-21 10:43 - 2015-07-16 21:53 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-07-21 10:43 - 2015-07-16 21:51 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-07-21 10:43 - 2015-07-16 21:50 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-07-21 10:43 - 2015-07-16 21:46 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-07-21 10:43 - 2015-07-16 21:44 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-07-20 19:31 - 2015-07-20 19:32 - 00000000 ____D C:\Users\poppag\Desktop\Graphics
2015-07-20 19:29 - 2015-08-03 17:57 - 00000000 ____D C:\Users\poppag\Desktop\Recent Files
2015-07-20 19:27 - 2015-08-11 12:16 - 00000000 ____D C:\Users\poppag\Desktop\Utilities
2015-07-20 19:25 - 2015-07-20 19:25 - 00003260 _____ C:\WINDOWS\System32\Tasks\{01F14956-5EF2-470B-869E-5B4526D24703}
2015-07-20 17:15 - 2015-07-28 09:54 - 00000000 ____D C:\Program Files\Checker
2015-07-20 17:15 - 2015-07-20 17:15 - 00000000 ____D C:\Program Files (x86)\1045E420-1437426923-DF11-BACB-00266C69E639
2015-07-19 12:09 - 2015-07-19 12:09 - 05678024 _____ C:\Users\poppag\default.ct7Project
2015-07-19 10:41 - 2015-07-19 10:41 - 00847401 _____ C:\Users\poppag\Downloads\Forest.hani
2015-07-19 10:25 - 2015-07-22 15:40 - 00000021 _____ C:\Users\poppag\AppData\Local\Apps\T4.txt
2015-07-19 10:23 - 2015-07-17 21:25 - 00046592 _____ (BsB) C:\Users\poppag\Downloads\Hippo Keygen.exe
2015-07-19 10:22 - 2015-07-17 21:25 - 00046592 _____ (BsB) C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hippo Keygen.exe
2015-07-19 10:20 - 2015-07-19 10:25 - 00000000 ____D C:\Users\poppag\AppData\Local\Hippo Studios
2015-07-19 09:43 - 2015-07-19 09:45 - 08338753 _____ C:\Users\poppag\Downloads\Hippo_Animator_4.4.5674.rar
2015-07-17 23:47 - 2015-08-11 13:34 - 00000000 ___DC C:\WINDOWS\Panther
2015-07-17 23:42 - 2015-07-17 23:42 - 00000000 ____D C:\Windows.old
2015-07-17 23:35 - 2015-07-17 23:35 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-07-17 23:35 - 2015-07-17 23:35 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-07-17 23:35 - 2015-07-17 23:35 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2015-07-17 23:32 - 2015-07-17 23:32 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-07-17 23:29 - 2015-07-17 23:29 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-07-17 23:29 - 2015-07-17 23:29 - 00000000 ____D C:\Program Files\MSBuild
2015-07-17 23:29 - 2015-07-17 23:29 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-07-17 23:29 - 2015-07-17 20:08 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-07-17 23:28 - 2015-06-17 22:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-07-17 23:28 - 2015-06-17 22:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-17 23:28 - 2015-06-17 22:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-07-17 23:28 - 2015-05-30 01:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-07-17 23:28 - 2015-05-30 01:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-07-17 23:28 - 2015-05-30 01:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-07-17 22:35 - 2015-07-16 01:11 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-07-17 22:35 - 2015-07-16 00:55 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-07-17 22:35 - 2015-07-15 23:48 - 12502016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-07-17 22:35 - 2015-07-15 23:22 - 11260928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-07-17 22:35 - 2015-07-14 22:41 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-07-17 22:35 - 2015-07-14 22:10 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-07-17 22:35 - 2015-07-14 21:35 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-07-17 22:35 - 2015-07-14 21:34 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-07-17 22:34 - 2015-07-16 01:39 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-07-17 22:34 - 2015-07-16 00:09 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-07-17 22:34 - 2015-07-16 00:04 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-07-17 22:34 - 2015-07-16 00:03 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-07-17 22:34 - 2015-07-16 00:01 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-07-17 22:34 - 2015-07-15 23:54 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-07-17 22:34 - 2015-07-15 23:47 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2015-07-17 22:34 - 2015-07-15 23:45 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-07-17 22:34 - 2015-07-15 23:44 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-07-17 22:34 - 2015-07-15 23:43 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-07-17 22:34 - 2015-07-15 23:41 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-07-17 22:34 - 2015-07-15 23:40 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-07-17 22:34 - 2015-07-15 23:36 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-07-17 22:34 - 2015-07-15 23:35 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-07-17 22:34 - 2015-07-15 23:33 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-07-17 22:34 - 2015-07-15 23:32 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-07-17 22:34 - 2015-07-15 23:29 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-07-17 22:34 - 2015-07-15 23:27 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-07-17 22:34 - 2015-07-15 23:19 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-07-17 22:34 - 2015-07-14 23:21 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-07-17 22:34 - 2015-07-14 22:49 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-07-17 22:34 - 2015-07-14 22:49 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-07-17 22:34 - 2015-07-14 22:22 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-07-17 22:34 - 2015-07-14 22:16 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-07-17 22:34 - 2015-07-14 22:04 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-07-17 22:34 - 2015-07-14 21:59 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-07-17 22:34 - 2015-07-14 21:57 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-07-17 22:34 - 2015-07-14 21:47 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-07-17 22:34 - 2015-07-14 21:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-07-17 22:34 - 2015-07-14 21:41 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-07-17 22:34 - 2015-07-14 21:37 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-07-17 22:34 - 2015-07-14 21:34 - 01680896 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-07-17 22:34 - 2015-07-14 21:27 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-07-17 20:48 - 2015-07-17 20:48 - 00000000 ____D C:\WINDOWS\Sun
2015-07-17 20:48 - 2015-07-17 20:48 - 00000000 ____D C:\ProgramData\Sun
2015-07-17 20:48 - 2015-07-17 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-07-17 20:48 - 2015-07-17 20:47 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-07-17 20:47 - 2015-07-17 20:48 - 00000000 ____D C:\ProgramData\Oracle
2015-07-17 20:47 - 2015-07-17 20:47 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-17 20:42 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-07-17 20:42 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-07-17 20:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2015-07-17 20:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2015-07-17 20:42 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-07-17 20:42 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-07-17 20:42 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2015-07-17 20:42 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2015-07-17 20:42 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2015-07-17 20:42 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2015-07-17 20:42 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2015-07-17 20:42 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2015-07-17 20:42 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2015-07-17 20:42 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2015-07-17 20:42 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2015-07-17 20:42 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2015-07-17 20:42 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2015-07-17 20:42 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2015-07-17 20:42 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2015-07-17 20:42 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2015-07-17 20:42 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2015-07-17 20:42 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2015-07-17 20:42 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2015-07-17 20:42 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2015-07-17 20:42 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2015-07-17 20:42 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2015-07-17 20:42 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2015-07-17 20:42 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2015-07-17 20:42 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2015-07-17 20:42 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2015-07-17 20:42 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2015-07-17 20:42 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2015-07-17 20:42 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2015-07-17 20:42 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2015-07-17 20:42 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2015-07-17 20:42 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2015-07-17 20:42 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2015-07-17 20:42 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2015-07-17 20:42 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2015-07-17 20:42 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2015-07-17 20:42 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2015-07-17 20:42 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2015-07-17 20:42 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2015-07-17 20:42 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2015-07-17 20:42 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2015-07-17 20:42 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2015-07-17 20:42 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2015-07-17 20:42 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2015-07-17 20:42 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2015-07-17 20:42 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2015-07-17 20:42 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2015-07-17 20:42 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2015-07-17 20:42 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2015-07-17 20:42 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2015-07-17 20:42 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2015-07-17 20:42 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2015-07-17 20:42 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2015-07-17 20:42 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2015-07-17 20:42 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2015-07-17 20:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2015-07-17 20:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2015-07-17 20:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2015-07-17 20:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2015-07-17 20:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2015-07-17 20:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2015-07-17 20:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2015-07-17 20:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2015-07-17 20:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2015-07-17 20:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2015-07-17 20:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2015-07-17 20:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2015-07-17 20:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2015-07-17 20:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2015-07-17 20:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2015-07-17 20:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2015-07-17 20:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2015-07-17 20:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2015-07-17 20:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2015-07-17 20:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2015-07-17 20:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2015-07-17 20:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2015-07-17 20:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2015-07-17 20:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2015-07-17 20:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2015-07-17 20:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2015-07-17 20:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2015-07-17 20:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2015-07-17 20:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2015-07-17 20:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2015-07-17 20:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2015-07-17 20:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2015-07-17 20:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2015-07-17 20:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2015-07-17 20:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2015-07-17 20:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2015-07-17 20:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2015-07-17 20:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2015-07-17 20:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2015-07-17 20:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2015-07-17 20:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2015-07-17 20:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2015-07-17 20:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2015-07-17 20:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2015-07-17 20:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2015-07-17 20:41 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2015-07-17 20:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2015-07-17 20:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2015-07-17 20:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2015-07-17 20:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2015-07-17 20:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2015-07-17 20:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2015-07-17 20:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2015-07-17 20:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2015-07-17 20:41 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-07-17 20:41 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-07-17 20:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2015-07-17 20:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2015-07-17 20:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2015-07-17 20:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2015-07-17 20:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2015-07-17 20:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2015-07-17 20:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2015-07-17 20:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2015-07-17 20:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2015-07-17 20:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2015-07-17 20:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2015-07-17 20:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2015-07-17 20:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2015-07-17 20:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2015-07-17 20:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2015-07-17 20:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2015-07-17 20:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2015-07-17 20:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2015-07-17 20:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2015-07-17 20:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2015-07-17 20:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2015-07-17 20:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2015-07-17 20:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2015-07-17 20:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2015-07-17 20:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2015-07-17 20:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2015-07-17 20:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2015-07-17 20:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2015-07-17 20:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2015-07-17 20:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2015-07-17 20:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2015-07-17 20:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2015-07-17 20:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2015-07-17 20:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2015-07-17 20:38 - 2015-07-17 20:42 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2015-07-17 20:38 - 2015-07-17 20:40 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
2015-07-17 20:26 - 2015-07-17 20:26 - 00000020 ___SH C:\Users\poppag\ntuser.ini
2015-07-17 20:24 - 2015-07-17 20:24 - 00000000 __SHD C:\Recovery
2015-07-17 20:06 - 2015-07-17 20:06 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-07-17 20:06 - 2015-07-17 20:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-07-17 20:06 - 2015-07-17 20:06 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-07-17 20:06 - 2015-07-17 20:06 - 00000000 ____D C:\Users\Default\3D Objects
2015-07-17 20:06 - 2015-07-17 20:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-07-17 20:06 - 2015-07-17 20:06 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-07-17 19:59 - 2015-07-17 20:08 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-07-17 19:59 - 2015-07-17 19:59 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-07-17 19:56 - 2015-08-11 13:34 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-17 19:56 - 2015-08-07 13:59 - 00000000 ____D C:\Users\poppag
2015-07-17 19:56 - 2015-07-17 19:58 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-17 19:56 - 2015-07-17 19:58 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-17 19:56 - 2015-07-10 07:04 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-07-17 19:56 - 2015-07-10 07:04 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-17 19:53 - 2015-07-10 06:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-07-17 19:52 - 2015-07-17 19:52 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-07-17 19:52 - 2015-07-17 19:52 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-07-17 19:51 - 2015-07-17 19:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-07-17 19:51 - 2015-07-17 19:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-07-17 19:51 - 2015-07-17 19:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-07-17 19:51 - 2015-07-17 19:51 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-07-17 19:51 - 2015-07-17 19:51 - 00000000 ____D C:\Program Files\Synaptics
2015-07-17 19:51 - 2015-07-17 19:51 - 00000000 ____D C:\Program Files\Realtek
2015-07-17 19:49 - 2015-07-17 19:50 - 00038294 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-07-17 18:36 - 2015-07-17 18:36 - 00000000 ____D C:\ProgramData\Reprise
2015-07-17 18:35 - 2015-07-17 18:35 - 00000000 ____D C:\ProgramData\SketchUp
2015-07-17 17:47 - 2015-07-17 17:47 - 04770942 _____ C:\Users\poppag\Downloads\attachments_2015_07_17.zip
2015-07-17 16:29 - 2015-07-17 16:29 - 00000000 ____D C:\Users\poppag\Documents\Viewbuild
2015-07-15 17:10 - 2015-07-15 17:10 - 00764616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2015-07-15 17:10 - 2015-07-15 17:10 - 00613576 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2015-07-15 17:10 - 2015-07-15 17:10 - 00419528 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2015-07-15 17:10 - 2015-07-15 17:10 - 00269000 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2015-07-15 17:10 - 2015-07-15 17:10 - 00255176 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo29.dll
2015-07-15 17:10 - 2015-07-15 17:10 - 00042696 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2015-07-15 17:10 - 2015-07-15 17:10 - 00042184 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2015-07-14 19:40 - 2015-07-14 19:40 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Synaptics
2015-07-14 17:34 - 2015-07-14 17:34 - 21646088 _____ (Hewlett-Packard Company ) C:\Users\poppag\Downloads\sp39403.exe
2015-07-14 17:08 - 2015-07-14 17:09 - 76326632 _____ (Hewlett-Packard Company ) C:\Users\poppag\Downloads\sp54972.exe
2015-07-14 10:13 - 2015-07-15 09:20 - 00000000 ____D C:\Users\poppag\AppData\Local\MicrosoftEdge
2015-07-14 07:58 - 2015-07-14 07:58 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2015-07-14 04:29 - 2015-07-22 10:00 - 01804696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2015-07-14 04:29 - 2015-07-22 10:00 - 00042696 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2015-07-13 15:37 - 2015-07-13 15:38 - 34226736 _____ (Cisco Systems, Inc.) C:\Users\poppag\Downloads\nmsetup (1).exe
2015-07-12 16:25 - 2015-07-12 16:25 - 00000000 ____D C:\Users\poppag\Documents\TomTom
2015-07-12 16:25 - 2015-07-12 16:25 - 00000000 ____D C:\Users\poppag\AppData\Roaming\TomTom
2015-07-12 16:25 - 2015-07-12 16:25 - 00000000 ____D C:\Users\poppag\AppData\Local\TomTom
2015-07-12 16:25 - 2015-07-12 16:25 - 00000000 ____D C:\ProgramData\TomTom
2015-07-12 16:24 - 2015-07-17 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2015-07-12 16:24 - 2015-07-12 16:24 - 00000000 ____D C:\Program Files (x86)\TomTom HOME 2
2015-07-12 16:23 - 2015-07-12 16:23 - 00000000 ____D C:\Program Files (x86)\TomTom International B.V

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-11 16:21 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-11 15:59 - 2015-06-25 12:02 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-11 15:37 - 2015-06-13 18:26 - 00000932 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000UA.job
2015-08-11 15:36 - 2015-06-01 17:04 - 00004156 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7BF4FE33-08B0-4225-83EC-7677A32BB4D8}
2015-08-11 15:21 - 2015-06-01 17:37 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-11 14:59 - 2015-06-25 12:02 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-11 14:58 - 2015-07-10 06:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-11 13:34 - 2015-06-01 18:58 - 00000000 ____D C:\Users\poppag\AppData\Local\CrashDumps
2015-08-11 13:26 - 2015-06-02 17:04 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2015-08-11 13:22 - 2015-06-01 17:06 - 00000000 ____D C:\Users\poppag\AppData\Local\ActiveSync
2015-08-11 13:18 - 2015-07-10 08:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-11 13:17 - 2015-07-10 05:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-08-11 12:49 - 2015-06-01 17:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-11 12:48 - 2015-06-01 17:43 - 00000000 ____D C:\Users\poppag\AppData\Roaming\BitTorrent
2015-08-11 12:21 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-11 12:14 - 2015-06-01 17:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-11 09:36 - 2015-06-01 19:44 - 00000000 ____D C:\Program Files\7-Zip
2015-08-10 19:37 - 2015-06-13 18:26 - 00000880 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000Core.job
2015-08-10 14:55 - 2015-06-01 16:30 - 00875126 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-10 13:03 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-08-10 09:15 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SchCache
2015-08-09 09:53 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-08-08 13:41 - 2015-06-02 17:04 - 00003386 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2015-08-08 13:41 - 2015-06-02 17:04 - 00003032 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2015-08-08 13:41 - 2015-06-02 17:04 - 00001172 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-08-08 09:42 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-07 14:15 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\rescache
2015-08-07 13:53 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-07 13:50 - 2015-07-10 08:20 - 00361888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-07 13:49 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-08-06 14:45 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-06 12:33 - 2015-06-13 18:28 - 00002591 _____ C:\Users\poppag\Desktop\Google Chrome.lnk
2015-08-05 10:54 - 2015-07-10 05:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-05 10:54 - 2015-06-13 18:28 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-05 10:54 - 2015-06-02 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2015-08-05 10:54 - 2015-06-01 18:33 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-08-05 10:46 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\registration
2015-08-05 10:44 - 2015-06-01 16:50 - 00000000 ____D C:\Users\poppag\AppData\Local\Packages
2015-08-03 17:57 - 2015-06-04 12:58 - 00000000 ____D C:\ProgramData\A-PDF
2015-08-03 17:34 - 2015-06-01 19:27 - 00000000 ____D C:\Users\poppag\Documents\TTSSketchMaker
2015-07-31 08:12 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-07-31 08:12 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-07-31 08:12 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-07-31 08:12 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-07-31 08:12 - 2015-07-10 05:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-07-31 08:12 - 2015-07-10 05:05 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-07-30 17:01 - 2015-07-11 17:40 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Eipix
2015-07-30 09:54 - 2015-06-13 18:25 - 00000000 ____D C:\Users\poppag\AppData\Local\Google
2015-07-29 17:55 - 2015-06-25 12:03 - 00000000 ____D C:\Program Files\Recuva
2015-07-29 17:49 - 2015-06-26 13:13 - 00000000 ____D C:\Program Files\CCleaner
2015-07-29 17:49 - 2015-06-01 17:40 - 00001099 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-07-29 17:49 - 2015-06-01 17:40 - 00001087 _____ C:\Users\Public\Desktop\Audacity.lnk
2015-07-29 17:48 - 2015-06-01 17:40 - 00000000 ____D C:\Program Files (x86)\Audacity
2015-07-29 12:36 - 2015-06-25 12:02 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-27 10:27 - 2015-06-01 16:53 - 00002388 _____ C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-07-27 10:27 - 2015-06-01 16:53 - 00000000 ___RD C:\Users\poppag\OneDrive
2015-07-23 13:50 - 2015-06-03 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrazyTalk7
2015-07-22 17:49 - 2015-06-04 10:04 - 00000000 ____D C:\Users\poppag\AppData\Local\Microsoft Help
2015-07-22 13:08 - 2015-06-13 12:05 - 00000000 ____D C:\Users\poppag\3D Objects
2015-07-22 09:10 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-07-19 11:57 - 2015-06-14 20:00 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Apple Computer
2015-07-18 10:42 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-07-17 23:47 - 2015-07-10 07:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-07-17 20:29 - 2015-07-10 07:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-07-17 20:23 - 2015-06-01 16:20 - 00057153 _____ C:\WINDOWS\diagwrn.xml
2015-07-17 20:23 - 2015-06-01 16:20 - 00057153 _____ C:\WINDOWS\diagerr.xml
2015-07-17 20:19 - 2015-06-01 16:27 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-07-17 20:17 - 2015-07-10 07:04 - 00000000 __RSD C:\WINDOWS\Media
2015-07-17 20:16 - 2015-07-10 07:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-07-17 20:08 - 2015-07-10 09:14 - 00000000 ____D C:\WINDOWS\ShellNew
2015-07-17 20:08 - 2015-07-10 07:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-17 20:08 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-07-17 20:08 - 2015-07-10 05:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-07-17 20:08 - 2015-07-08 19:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-07-17 20:08 - 2015-07-08 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-07-17 20:08 - 2015-07-08 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-17 20:08 - 2015-06-28 12:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2015-07-17 20:08 - 2015-06-26 13:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-07-17 20:08 - 2015-06-25 12:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2015-07-17 20:08 - 2015-06-24 19:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel PaintShop Pro X7
2015-07-17 20:08 - 2015-06-13 18:26 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromecast
2015-07-17 20:08 - 2015-06-12 16:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Logo Creator v6.8
2015-07-17 20:08 - 2015-06-11 17:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2015-07-17 20:08 - 2015-06-04 13:02 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cartoon Effect Creator
2015-07-17 20:08 - 2015-06-04 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip Builder
2015-07-17 20:08 - 2015-06-04 12:37 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IntoCartoon Pro 3.1
2015-07-17 20:08 - 2015-06-04 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-07-17 20:08 - 2015-06-04 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-07-17 20:08 - 2015-06-03 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\plasq
2015-07-17 20:08 - 2015-06-03 17:19 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-07-17 20:08 - 2015-06-03 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
2015-07-17 20:08 - 2015-06-02 13:39 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MagicISO
2015-07-17 20:08 - 2015-06-02 12:35 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
2015-07-17 20:08 - 2015-06-02 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2015-07-17 20:08 - 2015-06-02 12:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProShow Producer
2015-07-17 20:08 - 2015-06-01 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TextAloud
2015-07-17 20:06 - 2015-07-10 07:04 - 00000000 __RSD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-07-17 20:06 - 2015-07-10 07:04 - 00000000 __RSD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-07-17 20:06 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-17 20:06 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-17 20:06 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-17 20:06 - 2015-07-10 07:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-17 20:06 - 2015-07-10 05:05 - 00000000 __RHD C:\Users\Default
2015-07-17 20:06 - 2015-06-30 03:46 - 00000000 ____D C:\Users\Default.migrated
2015-07-17 20:01 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-07-17 20:01 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-07-17 20:00 - 2015-07-10 09:19 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\IME
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\schemas
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\Resources
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-07-17 20:00 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\IME
2015-07-17 20:00 - 2015-06-03 18:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AKVIS
2015-07-17 20:00 - 2015-06-02 16:53 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2015-07-17 20:00 - 2015-05-23 09:06 - 00000000 ___RD C:\WINDOWS\PrintDialog3D
2015-07-17 20:00 - 2009-07-14 03:45 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-07-17 19:59 - 2015-07-10 07:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-07-17 19:59 - 2015-07-10 07:04 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-17 19:59 - 2015-07-10 07:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-07-17 19:08 - 2015-07-10 09:39 - 00000000 ___HD C:\$Windows.~BT
2015-07-15 19:32 - 2015-06-13 18:26 - 00004050 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000UA
2015-07-15 19:32 - 2015-06-13 18:26 - 00003674 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000Core
2015-07-15 14:54 - 2015-06-25 12:02 - 00003984 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-15 14:54 - 2015-06-25 12:02 - 00003752 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 10:32 - 2015-06-04 10:04 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 10:24 - 2015-06-03 18:20 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-14 19:37 - 2015-07-10 07:06 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-07-14 19:37 - 2015-07-10 07:06 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-12 16:25 - 2015-06-02 12:01 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Mozilla
2015-07-12 16:22 - 2015-06-03 19:47 - 00000000 ____D C:\Users\poppag\AppData\Local\Downloaded Installations

==================== Files in the root of some directories =======

2015-06-02 12:36 - 2015-06-02 12:41 - 16258616 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2015-07-26 13:42 - 2015-07-26 13:42 - 0000037 ___SH () C:\Users\poppag\AppData\Local\70149b02515b3bb20dd492.47983420
2015-06-04 15:50 - 2015-06-04 15:50 - 0000064 _____ () C:\Users\poppag\AppData\Local\9adbd540af5db8a3a88d88596ed0cb73
2015-07-17 19:52 - 2015-07-17 19:52 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-06-03 17:55 - 2015-06-03 17:55 - 0000004 _RSHT () C:\ProgramData\sysqcl1129139270.dat

Files to move or delete:
====================
C:\ProgramData\sysqcl1129139270.dat


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-05 11:07

==================== End of log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:11-08-2015 02
Ran by poppag (2015-08-11 16:34:01)
Running from C:\Users\poppag\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2317217915-3030507882-558724183-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2317217915-3030507882-558724183-503 - Limited - Disabled)
Guest (S-1-5-21-2317217915-3030507882-558724183-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2317217915-3030507882-558724183-1002 - Limited - Enabled)
poppag (S-1-5-21-2317217915-3030507882-558724183-1000 - Administrator - Enabled) => C:\Users\poppag

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 15.05 beta x64 (HKLM\...\7-Zip) (Version: - )
7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.0.0 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated)
AKVIS Coloriage (HKLM\...\{4833435D-7A4D-4D15-86F4-51C2D15549CF}) (Version: 9.5.1062.10402 - AKVIS)
AKVIS Coloriage Plugin (HKLM-x32\...\AKVIS Coloriage_is1) (Version: - )
Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
BitTorrent (HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\BitTorrent) (Version: 7.9.3.40761 - BitTorrent Inc.)
BlazeVideo SmartShow 2.0.2.0 (HKLM-x32\...\BlazeVideo SmartShow_is1) (Version: 2.0.2.0 - BlazeVideo)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cartoon Effect Creator (HKLM-x32\...\{B5432F4D-CB93-472A-A361-F813801FF141}) (Version: 1.0.0 - Cartoon Effect Creator)
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
ChromecastApp (HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.1383.0 - Google Inc.)
Cloud System Booster (HKLM-x32\...\Cloud System Booster) (Version: 3.3 - Anvisoft)
Comic Life (HKLM-x32\...\{6A1F0A1A-474C-4151-8534-5F61832D88CD}) (Version: 1.3.6 - plasq)
Corel PaintShop Pro X7 (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.0.0.199 - Corel Corporation)
CrazyTalk v7.32 PRO (HKLM-x32\...\{27C4EA98-84A3-4CDF-A436-F984A0283357}) (Version: 7.32.3114.1 - Reallusion Inc.)
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 10.0 - Emsisoft Ltd.)
Flip Builder (HKLM-x32\...\Flip Builder_is1) (Version: - Flip Builder)
Focusky 2.6.0 (HKLM-x32\...\Focusky_is1) (Version: 2.6.0 - Focusky Solution)
Gaosuo (HKLM-x32\...\Gaosuo2.0) (Version: 2.0 - Gaosuo)
Glary Utilities PRO 5.31 (HKLM-x32\...\Glary Utilities 5) (Version: 5.31.0.51 - Glarysoft Ltd)
Google Chrome (HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)
Google Drive (HKLM-x32\...\{6EA8B94E-D869-4D96-88DF-5E1ECE1D6876}) (Version: 1.23.9648.8824 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
GooReader PRO (HKLM-x32\...\{F4B5F459-15B3-4A59-A2EC-2E88820AC9AB}) (Version: 6.3.1 - GooReader)
GSafe (HKLM-x32\...\GSafe) (Version: 2.0.0 - GENCO LABS LLC)
ICA (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IPM_PSP_COM64 (Version: 17.0.0.199 - Corel Corporation) Hidden
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden
iTunes (HKLM\...\{4046F74A-28F8-48C6-A5D3-2AFC472574C1}) (Version: 12.2.0.145 - Apple Inc.)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
Magic ISO Maker v5.5 (build 0272) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0272)) (Version: - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Photodex Presenter (HKLM-x32\...\Photodex Presenter) (Version: - Photodex Corporation)
ProShow Producer (HKLM-x32\...\ProShow Producer) (Version: - Photodex Corporation)
PSPPContent (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
PSPPro64 (Version: 17.0.0.199 - Corel Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Real Desktop Pool 1.0 (HKLM-x32\...\Real Desktop Pool) (Version: 1.0 - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
Sea of Lies Tide of Treachery Collectors 1.00 (HKLM-x32\...\Sea of Lies Tide of Treachery Collectors 1.00) (Version: 1.00 - Games)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Setup (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
SlimCleaner (HKLM-x32\...\{6B8D6199-EE44-4FD7-813A-6D8C62C9B384}) (Version: 4.0.30878 - SlimWare Utilities, Inc.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.10.0 - Synaptics Incorporated)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43879 - TeamViewer)
TextAloud 3.0 (HKLM-x32\...\TextAloud3_is1) (Version: 3.0 - NextUp.com)
TextCrawler Pro 3.0.5 (HKLM-x32\...\TextCrawler Pro) (Version: 3.0.5 - DigitalVolcano Software Ltd)
The Logo Creator v6.8 (HKLM-x32\...\{A30C1462-DE8B-1814-4D94-938CEA53F4E4}) (Version: 6.8 - Laughingbird Software)
TomTom HOME (HKLM-x32\...\{0E09BE17-EDEA-42CA-8974-42A587F51510}) (Version: 2.9.8 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Trojan Killer (HKLM-x32\...\GridinSoft Trojan Killer) (Version: 2.1.9.4 - Gridinsoft LLC)
TTS Sketch Maker v1.0 (HKLM-x32\...\SketchMaker) (Version: 1.0.0 - UNKNOWN)
TTS Sketch Maker v1.0 (x32 Version: 1.0.0 - UNKNOWN) Hidden
Windows Grep 2.3 (HKLM-x32\...\Windows Grep_is1) (Version: - )
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\poppag\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{E11054A5-EE73-4928-A39A-2C4986E7138F}\InprocServer32 -> C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\poppag\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2317217915-3030507882-558724183-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\poppag\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00EEBA9C-F9EF-4272-B793-C830FBADD359} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\Windows\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation)
Task: {0445827B-6AB7-464B-96BD-FF1582EBC888} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => C:\WINDOWS\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {094FD898-0332-4E29-AA15-E5E5EFEDDE7D} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {0BF87784-C04B-425F-BE5D-8927885E3699} - \ProPCCleaner_Start -> No File <==== ATTENTION
Task: {0CCA7916-2916-4F12-BD32-1E3BE31E1269} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\Windows\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation)
Task: {1641F54C-1E57-4902-AB65-EE2B65E5629D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {19865544-CE08-40BE-8B8C-87C47681433D} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {1D3D099E-EE1E-4907-8BA2-BA8F12D11AA6} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\Windows\System32\LocationNotificationWindows.exe [2015-07-10] (Microsoft Corporation)
Task: {23E48B97-D27C-4CCD-9CC7-5ED99632C642} - System32\Tasks\{01F14956-5EF2-470B-869E-5B4526D24703} => pcalua.exe -a C:\Users\poppag\AppData\Roaming\VOPackage\Uninstall.exe
Task: {2C97A00A-1C5C-4318-B5CC-8A1A126B77F9} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
Task: {3101E228-F2EC-47D5-95F9-5C814C337F77} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {3658A493-8590-45BD-BF7B-22C5D097CF23} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3A78DEA6-0143-47F0-81AC-5A831E7EC728} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_RebootDisplay => C:\windows\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {3D37AD79-7832-461E-9942-CD73A5531F6E} - \TidyNetwork Update -> No File <==== ATTENTION
Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW
Task: {41160EA0-208B-4C3E-B4DB-805BBABC6B93} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\Windows\system32\dmclient.exe [2015-07-10] (Microsoft Corporation)
Task: {434E433B-E453-4F65-AB7E-966089392304} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {43C83335-996D-4AF9-965F-2C12ABA320FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
Task: {4454A8D0-2E4E-4A02-BF67-48DF6A7BFAB4} - System32\Tasks\Microsoft\Windows\Maps\MapsUpdateTask
Task: {475AEC44-2E74-406B-99B7-1459D74399A7} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2015-08-03] (Glarysoft Ltd)
Task: {4E9D5D88-6203-4E05-979C-131ECE360821} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {4FEAFA95-B207-418E-B4F5-81CDDCF5BAFA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {56D38698-0486-4075-A510-C9ECB538AA78} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {5E5515C1-7D87-4904-B9CE-FD29EB2ADB72} - System32\Tasks\Microsoft\Windows\Sysmain\ResPriStaticDbSync
Task: {6095FC09-FE39-42A4-BE63-E82B757947AF} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {6568C3EC-1BAC-43E7-A729-E248F3923993} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_WnfDisplay => C:\windows\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {6601302D-623A-49FA-B333-D72B850A1BB0} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {6607300F-A9DD-450C-A7F6-F4CB5A248C55} - System32\Tasks\XBAJTK => Rundll32.exe "C:\WINDOWS\SysWOW64\kbdnkoe.dll",ofmgh
Task: {676D7F6F-5F78-4CA4-A30C-EFFB1B29FCBE} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2015-08-03] (Glarysoft Ltd)
Task: {680E74AD-6A5D-4339-97A5-CC68FFF9F652} - \ProPCCleaner_Popup -> No File <==== ATTENTION
Task: {682C7EAC-335C-4656-8DC3-20A11FD473E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-25] (Google Inc.)
Task: {686AF7C7-9865-478D-B413-BB9A7D96D64D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Update_Interval => C:\WINDOWS\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {6A10A336-EE86-4643-82D6-820C98F6939E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {6A9651DD-66BD-41F3-9688-73D8BE9F2DAD} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\HypervisorFlightingTask
Task: {6B9D768E-422F-4D1A-A271-B1439C20FBE1} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {6E030240-0135-4718-BFAE-99B71A069182} - System32\Tasks\{F0E995F4-2D23-4FCC-B70A-F808518F93A5} => pcalua.exe -a C:\Users\poppag\AppData\Local\ArcadeTwist\uninstaller.exe
Task: {70A1E538-609A-4FCA-A7B2-6F4743CD9110} - \Bidaily Synchronize Task[3c32] -> No File <==== ATTENTION
Task: {711EE2F9-A611-4773-AF8E-D4B278A6718D} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
Task: {73551810-E5F4-433E-9494-0D00B55C855E} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask
Task: {744C9FEA-08B7-43E1-A729-0F94647D655C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {77D29258-0230-488D-A970-0B8B587A1749} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {78B77FA3-9D97-441D-97B6-68CEA40B4F74} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance
Task: {7A003965-A297-4DC6-B15B-852D798391E0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\Windows\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {7E0F2EA7-141E-4952-8727-35AB2CBC2134} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000Core => C:\Users\poppag\AppData\Local\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {82B68E5D-FE3D-468C-868E-C10A19D8DE0F} - \SpeechRuntimeTask -> No File <==== ATTENTION
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => C:\windows\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {88730611-7AFB-40C6-8E48-76EFA3719A03} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {8A1CECD8-DE92-4BE6-8B9A-6898A76CD281} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {8A3DDA78-0419-45FB-A132-6C7AB0E3AFE9} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {8C1CFD19-5B45-4C55-B6BE-6B57DF008DC7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {8DF84CB3-D8E0-4307-A35B-CA74E21786DB} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\Windows\system32\ClipUp.exe [2015-07-14] (Microsoft Corporation)
Task: {9166961F-BC64-428F-9C3B-753DD1303AAC} - System32\Tasks\SlimCleaner Run => C:\Program Files (x86)\SlimCleaner\SlimCleaner.exe [2013-07-10] (SlimWare Utilities, Inc.)
Task: {97B43328-A689-4B88-9787-F05CE029F1EF} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_WnfDisplay => C:\windows\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {9C851581-E5E8-4590-9E3A-AE598FB5981D} - System32\Tasks\SUPERAntiSpyware Scheduled Task 243df5bf-9429-49e3-85bf-b337bf8886e2 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)
Task: {A1B1447F-A2CD-48A8-A2F4-8D5B531CAC95} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {A364E297-00AD-490D-900E-22AC34598C71} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => C:\Windows\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {A4335502-C651-4E1D-AE0D-0279C52E4F0D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000UA => C:\Users\poppag\AppData\Local\Google\Update\GoogleUpdate.exe [2015-06-13] (Google Inc.)
Task: {A5B6CD85-1B57-49B9-BA80-5D5D65F02826} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager
Task: {A6B623BE-3E7B-4A7B-97E2-8FBD71B9CFA7} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {AC29E64E-3271-47BA-B8F1-914523CF379B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Automatic App Update
Task: {B4AC9434-4060-491F-A0C2-D0CA422961BE} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {B9B36D41-C776-424E-9A13-5387E17A2CEB} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask => C:\Windows\System32\WiFiTask.exe [2015-07-10] (Microsoft Corporation)
Task: {C1E73681-F70E-4474-998E-B0F60189727D} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {C2162702-FFEB-48C0-AA5F-2DA3A8887D61} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Installation
Task: {C56AFFD3-06B8-4A16-AF7E-F7A6EB3FAE9E} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr
Task: {C5EE2EA2-5312-4D1F-B9D0-41B18DF31B78} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {C7A236B2-12E1-46DC-9501-3B1B0209CC09} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\Windows\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation)
Task: {D2401052-A382-42DE-9C79-D1CF3563F654} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
Task: {D3E642A3-50E6-4E5A-B572-0DE38BC515FB} - System32\Tasks\SUPERAntiSpyware Scheduled Task e03be48a-8148-4f27-b669-f3ea8c080fa9 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)
Task: {DAF2BAE3-1C5B-4CB5-9F62-0911C031A15A} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\Windows\system32\disksnapshot.exe [2015-07-10] (Microsoft Corporation)
Task: {E4653F28-C58D-4AAB-9067-FDC674C8E859} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {E95F46C0-8DFF-4B1E-9333-EA488CC9B25D} - \LaunchPreSignup -> No File <==== ATTENTION
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => C:\windows\system32\MusNotification.exe [2015-07-16] (Microsoft Corporation)
Task: {F44F9629-9B43-4F2C-9058-CE35BA40F4FD} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {FA6347E4-6466-4628-A190-5CAECDF7924C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-25] (Google Inc.)
Task: {FF2CDA06-EC5E-4EFE-BE7A-C63BE6F110D6} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FFB684AB-C3C7-49F1-AAAA-8970380D64C4} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {FFF292D6-3252-444F-99D1-380FEDCEE638} - \ArcadeTwist Support -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => 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
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000Core.job => C:\Users\poppag\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2317217915-3030507882-558724183-1000UA.job => C:\Users\poppag\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 243df5bf-9429-49e3-85bf-b337bf8886e2.job => 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
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task e03be48a-8148-4f27-b669-f3ea8c080fa9.job => 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
Task: C:\WINDOWS\Tasks\XBAJTK.job => 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

==================== Loaded Modules (Whitelisted) ==============

2015-07-17 22:34 - 2015-07-14 22:04 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-07-17 23:35 - 2015-07-17 23:35 - 00403968 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-06-02 12:01 - 2015-06-02 12:01 - 00186760 _____ () C:\Program Files (x86)\Photodex\ProShow Producer\ScsiAccess.exe
2015-08-06 12:39 - 2015-07-30 02:05 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 12:39 - 2015-07-30 02:05 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 15:23 - 2010-10-20 15:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2015-07-10 06:59 - 2015-07-10 06:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 06:59 - 2015-07-10 06:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-06-26 13:11 - 2015-06-26 13:11 - 00039192 ____R () C:\Program Files\CCleaner\branding.dll
2015-08-06 12:39 - 2015-08-01 21:37 - 06569472 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 07:00 - 2015-07-10 09:14 - 00471040 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-06 12:39 - 2015-08-01 21:34 - 01806848 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-06 12:39 - 2015-08-01 21:35 - 02274816 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 07:00 - 2015-07-10 09:14 - 00210432 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-08-06 11:56 - 2015-08-06 12:05 - 00007168 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-08-06 11:56 - 2015-08-06 12:05 - 11284480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-07-10 09:17 - 2015-07-10 09:17 - 07897088 _____ () C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\SharedLibrary.dll
2014-05-29 02:47 - 2014-05-29 02:47 - 00018616 _____ () C:\Program Files (x86)\Anvisoft\Cloud System Booster\Public.dll
2013-11-27 05:33 - 2013-11-27 05:33 - 00156344 _____ () C:\Program Files (x86)\Anvisoft\Cloud System Booster\ui.dll
2013-11-27 05:33 - 2013-11-27 05:33 - 00090808 _____ () C:\Program Files (x86)\Anvisoft\Cloud System Booster\libglognc.dll
2014-05-29 02:47 - 2014-05-29 02:47 - 00028856 _____ () C:\Program Files (x86)\Anvisoft\Cloud System Booster\extentions\TestExtention.dll
2015-08-03 03:03 - 2015-08-03 03:03 - 00080160 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 15:45 - 2010-10-20 15:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\combatpcviruses.com -> hxxp://www.combatpcviruses.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\poppag\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\...\StartupApproved\Run: => "BitTorrent"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [UDP Query User{0AF4C6D7-7F2E-40B1-B2D7-F0393CA2D173}C:\program files (x86)\winpcap\rpcapd.exe] => (Block) C:\program files (x86)\winpcap\rpcapd.exe
FirewallRules: [TCP Query User{1989A757-32D9-4454-8730-0A785D91688E}C:\program files (x86)\winpcap\rpcapd.exe] => (Block) C:\program files (x86)\winpcap\rpcapd.exe
FirewallRules: [{FDED7275-7517-4EF5-B4A8-3336F4F9D373}] => (Allow) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe
FirewallRules: [{E473A78C-DDC0-4845-86DB-B0FB84C4EC2D}] => (Allow) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe
FirewallRules: [{F8CB9DA3-1659-4D1A-BA62-BB4C096863DB}] => (Allow) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe
FirewallRules: [{961D206A-0D42-4FD0-AC18-731DE9577F6A}] => (Allow) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe
FirewallRules: [{6E830CB9-AA68-46E8-98C1-57AE52B8415A}] => (Allow) C:\Program Files (x86)\Photodex\ProShow Producer\proshow.exe
FirewallRules: [{FCF67DE3-43E2-4522-BA65-F2F83311E13F}] => (Allow) C:\Program Files (x86)\Photodex\ProShow Producer\proshow.exe
FirewallRules: [{D007E421-FA59-4AC9-8F13-A2929F7CFBA7}] => (Allow) C:\Program Files (x86)\Photodex\ProShow Producer\proshow.exe
FirewallRules: [{617187F1-00A2-4F38-A0BE-ED43E767A6F2}] => (Allow) C:\Program Files (x86)\Photodex\ProShow Producer\proshow.exe
FirewallRules: [{0A47F631-1B78-41A5-B933-9458E44CF35D}] => (Allow) C:\Users\poppag\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{762FD1CA-394B-4616-A579-CD55B0326A4F}] => (Allow) C:\Users\poppag\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [TCP Query User{46E4B791-DA9D-4E65-A5FA-1C5256ACD2D6}C:\users\poppag\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\poppag\appdata\local\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{36DBE6B4-9F33-4ABB-BCCB-ECCE180283F8}C:\users\poppag\appdata\local\google\chrome\application\chrome.exe] => (Allow) C:\users\poppag\appdata\local\google\chrome\application\chrome.exe
FirewallRules: [{BAF48359-2597-48AA-B339-4DEEEA57341C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{80604BD0-F577-4D77-8262-4D8EA32643A5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7890CB88-6954-4AFC-8307-5CC08DA5EFD9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{74E91C5B-49A7-43D9-B157-CBB0C19F3C21}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2241CB14-114E-4158-997B-A685D21FA059}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{5424CF0A-6B7A-41FE-BAA5-82FA46DF3CB8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{2702A889-B4BD-4A41-A0F0-0D28F075FDB6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9243BFC2-6E30-4CD8-B817-FFE5A0010549}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{AE054CD6-D1BD-44E4-B5D3-1B3601B81321}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{7FDFFEC5-0759-492A-9955-5B4CCE4D57DC}] => (Allow) C:\Program Files (x86)\BlazeVideo\SmartShow\Blazevideo SmartShow.exe
FirewallRules: [{9C96E0B6-7E8E-414B-BFA8-EB9B4C187936}] => (Allow) C:\Program Files (x86)\BlazeVideo\SmartShow\Blazevideo SmartShow.exe
FirewallRules: [{FF156A42-E940-4228-BF50-D4FEB91DB8C2}] => (Allow) C:\Program Files (x86)\BlazeVideo\SmartShow\Blazevideo SmartShow.exe
FirewallRules: [{097156E5-FB70-4058-96A8-EA8A18E272F0}] => (Allow) C:\Program Files (x86)\BlazeVideo\SmartShow\Blazevideo SmartShow.exe
FirewallRules: [{2E4ABEE3-E04D-47A7-939C-382A0102E7FE}] => (Allow) C:\Program Files (x86)\Microsoft.NET\v2.0.507279\msbuild.exe
FirewallRules: [{C7ABAEFE-7C25-4125-BE53-AA7447AEE4C5}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{C972AA1D-4FD0-4332-B8C1-4823628B5F77}] => (Allow) C:\Windows\SysWOW64\rundll32.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/11/2015 01:24:38 PM) (Source: ESENT) (EventID: 489) (User: )
Description: SettingSyncHost (4792) An attempt to open the file "C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Error: (08/11/2015 01:24:28 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SettingSyncHost (4792) {4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: Database recovery/restore failed with unexpected error -1216.

Error: (08/11/2015 01:24:24 PM) (Source: ESENT) (EventID: 494) (User: )
Description: SettingSyncHost (4792) {4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: Database recovery failed with error -1216 because it encountered references to a database, 'C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb', which is no longer present. The database was not brought to a Clean Shutdown state before it was removed (or possibly moved or renamed). The database engine will not permit recovery to complete for this instance until the missing database is re-instated. If the database is truly no longer available and no longer required, procedures for recovering from this error are available in the Microsoft Knowledge Base or by following the "more information" link at the bottom of this message.

Error: (08/11/2015 01:24:22 PM) (Source: ESENT) (EventID: 490) (User: )
Description: SettingSyncHost (4792) {4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: An attempt to open the file "C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Error: (08/11/2015 01:24:11 PM) (Source: ESENT) (EventID: 490) (User: )
Description: SettingSyncHost (4792) {4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: An attempt to open the file "C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Error: (08/11/2015 01:23:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: POPPAG-PC)
Description: Package Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy+CortanaUI was terminated because it took too long to suspend.

Error: (08/11/2015 01:16:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: POPPAG-PC)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (08/11/2015 01:02:19 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (4764) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.

Error: (08/11/2015 01:02:19 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (4764) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8).

Error: (08/11/2015 01:02:11 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Users\poppag\Downloads\NPE.exe /POSTADVSCAN /SERVICEPOSTADVSCAN; Description = Norton_Power_Eraser_20150811130208613; Error = 0x80070514).


System errors:
=============
Error: (08/11/2015 03:40:16 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.

Error: (08/11/2015 03:40:16 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.

Error: (08/11/2015 03:40:16 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.

Error: (08/11/2015 03:40:16 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.

Error: (08/11/2015 03:40:16 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.

Error: (08/11/2015 03:40:16 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 252.

Error: (08/11/2015 01:18:23 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.

Error: (08/11/2015 01:18:14 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.

Error: (08/11/2015 01:16:54 PM) (Source: DCOM) (EventID: 10010) (User: POPPAG-PC)
Description: App.AppXw3qcpc7p849541dp39vvqd01bn7z9ybh.mca

Error: (08/11/2015 01:16:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The User Data Access_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.


Microsoft Office:
=========================
Error: (08/11/2015 01:24:38 PM) (Source: ESENT) (EventID: 489) (User: )
Description: SettingSyncHost4792C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process.

Error: (08/11/2015 01:24:28 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SettingSyncHost4792{4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: -1216

Error: (08/11/2015 01:24:24 PM) (Source: ESENT) (EventID: 494) (User: )
Description: SettingSyncHost4792{4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: -1216C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb

Error: (08/11/2015 01:24:22 PM) (Source: ESENT) (EventID: 490) (User: )
Description: SettingSyncHost4792{4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process.

Error: (08/11/2015 01:24:11 PM) (Source: ESENT) (EventID: 490) (User: )
Description: SettingSyncHost4792{4C14ECD8-9B1B-46A8-8808-F7F42F31E2A0}: C:\Users\poppag\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process.

Error: (08/11/2015 01:23:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: POPPAG-PC)
Description: Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy+CortanaUI

Error: (08/11/2015 01:16:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: POPPAG-PC)
Description: Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App-2144927141

Error: (08/11/2015 01:02:19 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost4764-1032

Error: (08/11/2015 01:02:19 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost4764C:\WINDOWS\system32\edbtmp.log-1032 (0xfffffbf8)5 (0x00000005)Access is denied.

Error: (08/11/2015 01:02:11 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Users\poppag\Downloads\NPE.exe /POSTADVSCAN /SERVICEPOSTADVSCANNorton_Power_Eraser_201508111302086130x80070514


CodeIntegrity:
===================================
Date: 2015-08-11 10:19:35.900
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:35.601
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:34.021
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:33.683
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:28.643
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:27.520
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:27.488
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:27.456
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:27.422
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.

Date: 2015-08-11 10:19:27.354
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Store signing level requirements.


==================== Memory info ===========================

Processor: Pentium® Dual-Core CPU T4400 @ 2.20GHz
Percentage of memory in use: 66%
Total physical RAM: 2939.98 MB
Available physical RAM: 972.78 MB
Total Virtual: 5883.98 MB
Available Virtual: 3464.29 MB

==================== Drives ================================

Drive c: (TI105487W0B) (Fixed) (Total:286.56 GB) (Free:225.66 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 483E95B7)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=286.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=489 MB) - (Type=27)
Partition 4: (Not Active) - (Size=9.1 GB) - (Type=17)

==================== End of log ============================

[doctordotcalm]

Hope you can see the file paste in the last post

[zep516]

Thank you,

I can see the log reports and you have a few issues,

Re-install Chrome

Unless you did this yourself, malware has changed your Chrome version into the Development Build. Among other things this allows malware to install any extension it wants. We need to resolve this.

1. If you have bookmarks, let's save them by exporting them - Export Bookmarks
2. Then I need you to go Google Sync and sign into your account
3. Scroll down until you see the "Stop and Clear" button and click on the button. At the prompt click on "Ok"
4. Now we need to uninstall chrome via control panel .
Note: When asked about user data or settings you must remove this also so please check the box.
5. Restart the computer and reinstall chrome, You can download The latest version from here - Google Chrome
6. Import your bookmarks back into Chrome
7. Sign back in to your Chrome browser so that your bookmarks sync with your online account.

I need time to look over log reports 1 hour approx. To sort out problems and create a fix for you.

[doctordotcalm]

I don't use Chrome. I'm using Internet Explorer

[zep516]

Good.

You do have installed in you uninstall programs list,

I would uninstall it

Start > Control panel > Programs an features. In the list find the program listed below and uninstall it.

Google Chrome

I'll be back with as soon as possible.

Thanks
Joe

[doctordotcalm]

I did the uninstall on Crome

[zep516]

I have also noticed in your log file you are using BittorrentP2P program. We at Geeks to go ! Recommend removing these type of programs, they are a known cause of Malware infections. When you use file sharing programs like this you can never be sure of the file content and you are put at a much greater risk for infection.

 
Next
Download the enclosed  fixlist.txt   4.09KB   259 downloads file. Save it in the location FRST is {Your downloads folder.} Then Run FRST and click on the Fix button. Wait until finished.
The tool will make a log in the same location FRST is {Your Downloads folder}, (Fixlog.txt). Please post it to your reply.

Thanks
Joe

[doctordotcalm]

Here is the result. Note that Windows updated itself on the reboot and the virus is still present.
Fix result of Farbar Recovery Scan Tool (x64) Version:11-08-2015 02
Ran by poppag (2015-08-11 18:53:15) Run:1
Running from C:\Users\poppag\Downloads
Loaded Profiles: poppag (Available Profiles: poppag)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = about:blank
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> No Name - {FCC3F67B-23A9-47F5-813E-2F46A749472C} - No File
Toolbar: HKU\S-1-5-21-2317217915-3030507882-558724183-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
U3 idsvc; no ImagePath
S1 livzvpht; \??\C:\WINDOWS\system32\drivers\livzvpht.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
NETSVCx32: NetSetupSvc -> C:\Windows\SysWOW64\NetSetupSvc.dll ==> No File
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> No File
2015-07-31 16:14 - 2015-07-31 16:14 - 00000000 ____D C:\Program Files\Yamicsoft
2015-07-31 16:12 - 2015-08-05 10:45 - 00000000 ____D C:\Users\poppag\AppData\Roaming\Yamicsoft
2015-08-11 12:48 - 2015-06-01 17:43 - 00000000 ____D C:\Users\poppag\AppData\Roaming\BitTorrent
C:\ProgramData\sysqcl1129139270.dat
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden
Task: {0BF87784-C04B-425F-BE5D-8927885E3699} - \ProPCCleaner_Start -> No File <==== ATTENTION
Task: {3D37AD79-7832-461E-9942-CD73A5531F6E} - \TidyNetwork Update -> No File <==== ATTENTION
Task: {680E74AD-6A5D-4339-97A5-CC68FFF9F652} - \ProPCCleaner_Popup -> No File <==== ATTENTION
Task: {70A1E538-609A-4FCA-A7B2-6F4743CD9110} - \Bidaily Synchronize Task[3c32] -> No File <==== ATTENTION
Task: {82B68E5D-FE3D-468C-868E-C10A19D8DE0F} - \SpeechRuntimeTask -> No File <==== ATTENTION
Task: {E95F46C0-8DFF-4B1E-9333-EA488CC9B25D} - \LaunchPreSignup -> No File <==== ATTENTION
Task: {FFF292D6-3252-444F-99D1-380FEDCEE638} - \ArcadeTwist Support -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset catalog
CMD: ipconfig /flushdns
RemoveProxy:
hosts:
Emptytemp:






*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\TaskbarNoNotification => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\HideSCAHealth => value removed successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-2317217915-3030507882-558724183-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Local Page => value removed successfully
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Local Page => value removed successfully
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Software\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => key removed successfully
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => key not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-2317217915-3030507882-558724183-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => key removed successfully
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => key not found.
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FCC3F67B-23A9-47F5-813E-2F46A749472C} => value removed successfully
HKCR\CLSID\{FCC3F67B-23A9-47F5-813E-2F46A749472C} => key not found.
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value removed successfully
HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => key not found.
idsvc => service removed successfully
livzvpht => service removed successfully
wfpcapture => service removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs NetSetupSvc => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs UserManager => removed successfully
C:\Program Files\Yamicsoft => moved successfully.
C:\Users\poppag\AppData\Roaming\Yamicsoft => moved successfully.
C:\Users\poppag\AppData\Roaming\BitTorrent => moved successfully.
C:\ProgramData\sysqcl1129139270.dat => moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{730E03E4-350E-48E5-9D3E-4329903D454D}\\SystemComponent => value removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0BF87784-C04B-425F-BE5D-8927885E3699}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BF87784-C04B-425F-BE5D-8927885E3699}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProPCCleaner_Start => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D37AD79-7832-461E-9942-CD73A5531F6E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D37AD79-7832-461E-9942-CD73A5531F6E}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TidyNetwork Update => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{680E74AD-6A5D-4339-97A5-CC68FFF9F652}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{680E74AD-6A5D-4339-97A5-CC68FFF9F652}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProPCCleaner_Popup => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{70A1E538-609A-4FCA-A7B2-6F4743CD9110}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70A1E538-609A-4FCA-A7B2-6F4743CD9110}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[3c32] => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{82B68E5D-FE3D-468C-868E-C10A19D8DE0F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{82B68E5D-FE3D-468C-868E-C10A19D8DE0F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpeechRuntimeTask" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E95F46C0-8DFF-4B1E-9333-EA488CC9B25D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E95F46C0-8DFF-4B1E-9333-EA488CC9B25D}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchPreSignup => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FFF292D6-3252-444F-99D1-380FEDCEE638}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FFF292D6-3252-444F-99D1-380FEDCEE638}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ArcadeTwist Support => key not found.
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS removed successfully.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\UserManager" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\StateRepository" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc" => key removed successfully
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\UserManager" => key removed successfully

========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.8.10240 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

{377FBA1C-51CC-4B87-9067-C21C20AB1CF5} canceled.
{741060BC-C973-40C7-9980-9DF55F41648E} canceled.
{40CF3038-9FDD-42E6-8B5B-764240A34B86} canceled.
{F3BFCD76-3183-47D5-B627-C980B317DF67} canceled.
{C62A6446-7EC0-47B8-B996-4CA73FA764D7} canceled.
{52DB9E46-92CA-4A0D-BEF5-59B8057A3454} canceled.
{7E10CF6A-BA46-45DD-881E-3B21F22EC197} canceled.
{0D25711C-CB05-427E-AEA7-231E909D63B7} canceled.
{ABF46E28-5AED-4CB2-BBC9-2C376CBACCE3} canceled.
{47FB3B0E-4552-4A8A-9A88-D9850151876D} canceled.
{5541C2FB-9A13-4401-BB16-78496A39D7B5} canceled.
{C4D8CC81-593D-4136-BCD9-1EAA75DE7334} canceled.
{16AB462B-6D44-4212-A974-262912A88B7E} canceled.
{46D615CA-2471-4ADD-A932-1A7F2A13F704} canceled.
{0B94AEDD-25F9-496E-98B9-725508ADEC52} canceled.
{2D806348-E5E1-49F1-84F3-85C5FCA22DD8} canceled.
{2290967C-CD0F-41B0-A704-F6CACE6071E4} canceled.
{E9DC85F5-E411-4C85-8634-C1FFDD58E0A4} canceled.
{A915E30D-6873-4FE7-97F9-2A99DCEE3F64} canceled.
{AE41F8FF-B0E6-4490-90B6-AAE80DACBC3A} canceled.
{4B84B233-89DB-463C-9CD5-B32691ADB0C4} canceled.
{1C5F94DF-DAAA-4F3C-9E85-9CE15B1FE2B3} canceled.
{D5606FC5-39EC-4AD7-A1E3-98D69744A336} canceled.
{D9331C5F-2CF3-43CE-A8A0-4356C2B2C351} canceled.
{FE5C67D8-0B59-47C7-BC54-3C91A0AE88CB} canceled.
{191F2934-289E-48E7-824F-634061E0BEEB} canceled.
{82EAA161-DCE4-49E6-92AD-1E07D5A747CB} canceled.
{6DC62302-E44E-44D8-9055-7E63F82CAA01} canceled.
{FAD8BBD6-3AFE-4E79-A5F5-D4C49D784D79} canceled.
{5E5EC026-E01D-4E44-818C-339459130BD3} canceled.
{E3A376EC-9D86-4514-813C-ABC698523F98} canceled.
{84577DF7-2E0A-4BDD-A50E-5FB500C118D9} canceled.
{EF5FF854-8BB8-43A5-A622-495F7EAF9EBB} canceled.
{DEFA328A-08A6-4C70-AAF1-D56E4C86BE2C} canceled.
{21255F8C-29BF-48A4-BD60-753CC98E1D41} canceled.
{7F0EE79B-297A-471C-A2BB-E8942DE4BCA3} canceled.
{97C11750-45F6-4256-BBFF-471B40A1065C} canceled.
{2F787D0A-4D44-40F7-9329-7FF7BC542C76} canceled.
{CC6C224E-5583-45DA-9F38-AB2F80E33CFF} canceled.
{5A451008-2080-44D8-BDB8-51716F82D969} canceled.
{4F15F392-19E2-4C12-B8BC-B1884D7AFED2} canceled.
{F85500DE-08B4-4920-B687-08FB1D0C6576} canceled.
{C1FB7F33-577D-435D-B964-9E005DE81F09} canceled.
{84D02A9B-49B5-4A06-BFE9-2A29003F0A60} canceled.
{BA14CFC3-926F-4655-A714-DBE81805F674} canceled.
{CBDA77F1-FD54-4799-8C3D-8FE9F169C92F} canceled.
{909996CD-5AF3-407E-8484-A63E6B02E0E0} canceled.
{B59AA431-1FA3-4703-B81F-F8D2FF653C08} canceled.
{D08AA1EE-CAD3-4F8E-AE79-88394203EAA5} canceled.
{8A15E198-21F0-4683-BC04-A6F5BDCF60E9} canceled.
{5576C2F9-6081-4EA3-9CC5-B0409F6235AC} canceled.
{6DA8ED72-D892-4403-9C2E-C84F690CFA1A} canceled.
{998D8BAD-7244-496D-B2BC-2FE5B5B8A940} canceled.
{07A4ADC4-57B0-4C71-AD3C-2BB333BA9BC3} canceled.
{C2EDEBC7-9BDF-4169-B808-84FA0D1AB10A} canceled.
{B551AAA0-97DB-42D3-AA73-42F9DA9669B8} canceled.
{730697BE-CE67-401E-80C3-FCEE064A1F09} canceled.
{5C65957D-B467-4BFD-987C-84DE231335E7} canceled.
58 out of 58 jobs canceled.

========= End of CMD: =========


========= netsh winsock reset catalog =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========


========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-2317217915-3030507882-558724183-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


========= End of RemoveProxy: =========

Hosts restored successfully.
EmptyTemp: => 56.9 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 18:55:08 ====

[zep516]

Please go back in the programs uninstall list where you removed Chrome and look for this program;

Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc)

If you see it please remove it.

Let me know.

[doctordotcalm]

I used revo uninstaller to remove because it generally does a more thorough job, Rebooted, still infected.

[zep516]

Next

Please download Junkware Removal Tool to your Desktop.

Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.