This topic is locked
Hey.
I'm fairly computer savvy but I downloaded something from a torrent site obvously, and have something on my machine I can't get off. It usually effects browsers. URL:Mal. I'ts been bugging me for about 2 weeks. Please, Help!!
I've scanned with malware bytes and everything.
Here's the logs requested. I appreciate any help received here.
Thanks.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-08-2015
Ran by Kent (administrator) on KENT-PC (18-08-2015 17:23:22)
Running from C:\Users\Kent\Downloads
Loaded Profiles: Kent (Available Profiles: Kent)
Platform: Windows 10 Pro (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Users\Kent\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(iSkySoft) C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-06] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-08-08] (Avast Software s.r.o.)
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2066432 2014-10-31] (iSkySoft)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2895552 2015-07-23] (Valve Corporation)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4471536 2015-05-21] (Disc Soft Ltd)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53661824 2015-07-28] (Skype Technologies S.A.)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\Run: [OneDrive] => C:\Users\Kent\AppData\Local\Microsoft\OneDrive\OneDrive.exe [402632 2015-08-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-30] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: iSkysoft Video Converter Ultimate 5.1.0 -> {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} -> C:\PROGRA~3\iSkysoft\VIDEOC~1\WSBROW~1.DLL No File
Handler: WSISVCUchrome - {78A543EB-3A61-4ED3 - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{36a417f5-8da9-4bec-9dcb-cc0ad1598145}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{53f9e9ac-bf8f-4b89-804f-081d57dc0745}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-22] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-30]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\ProgramData\iSkysoft\Video Converter Ultimate\[email protected]
Chrome:
=======
CHR Profile: C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-10]
CHR Extension: (Google Docs) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-10]
CHR Extension: (Google Drive) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-10]
CHR Extension: (YouTube) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-08-10]
CHR Extension: (Google Search) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-10]
CHR Extension: (Avast SafePrice) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-10]
CHR Extension: (Google Sheets) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-10]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-10]
CHR Extension: (Blue Space Sunset Chrome Theme) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndfdjfoclbidmgpmbelcieibgjjfdog [2015-08-11]
CHR Extension: (Gmail) - C:\Users\Kent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-10]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-04-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-30]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-30] (Avast Software s.r.o.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-13] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-13] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272560 2015-05-21] (Disc Soft Ltd)
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242880 2015-07-02] (Foxit Software Inc.)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-13] (Microsoft Corporation)
R3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-25] (Electronic Arts)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-08-13] (Microsoft Corporation)
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-13] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-18] (TeamViewer GmbH)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-13] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-13] (Microsoft Corporation)
S3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-08-13] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-30] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-30] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-30] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-30] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-08-08] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-30] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-30] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-06-02] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [43664 2015-08-01] ()
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-13] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
U5 vwifimp; C:\Windows\System32\Drivers\vwifimp.sys [39936 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> No File
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-08-18 17:23 - 2015-08-18 17:23 - 02173440 _____ (Farbar) C:\Users\Kent\Downloads\FRST64.exe
2015-08-18 17:23 - 2015-08-18 17:23 - 00000000 ____D C:\FRST
2015-08-18 17:22 - 2015-08-18 17:23 - 00021331 _____ C:\Users\Kent\Downloads\FRST.txt
2015-08-18 17:15 - 2015-08-18 17:15 - 00016148 _____ C:\WINDOWS\system32\KENT-PC_Kent_HistoryPrediction.bin
2015-08-16 17:49 - 2015-08-16 17:49 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2015-08-16 17:49 - 2015-08-16 17:49 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2015-08-15 10:56 - 2015-08-15 16:35 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Audacity
2015-08-15 10:56 - 2015-08-15 10:56 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-08-15 10:56 - 2015-08-15 10:56 - 00001076 _____ C:\Users\Public\Desktop\Audacity.lnk
2015-08-15 10:55 - 2015-08-15 10:56 - 00000000 ____D C:\Program Files (x86)\Audacity
2015-08-15 10:55 - 2015-08-15 10:55 - 25186399 _____ (Audacity Team ) C:\Users\Kent\Downloads\audacity-win-2.1.1.exe
2015-08-15 07:57 - 2015-08-12 03:57 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-15 07:57 - 2015-08-12 03:22 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-13 21:14 - 2015-08-13 21:14 - 00000059 _____ C:\Users\Kent\Documents\brother hunter stake.txt
2015-08-13 20:31 - 2015-08-13 20:31 - 00000059 _____ C:\Users\Kent\Documents\new.txt
2015-08-13 12:30 - 2015-08-13 12:30 - 00001424 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2015-08-13 12:30 - 2015-08-13 12:30 - 00000000 ____D C:\Users\Public\Foxit Software
2015-08-13 12:30 - 2015-08-13 12:30 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Foxit Software
2015-08-13 12:30 - 2015-08-13 12:30 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2015-08-13 12:27 - 2015-08-13 12:29 - 43812432 _____ (Foxit Software Inc. ) C:\Users\Kent\Downloads\FoxitReader720.0722_prom_enu_Setup.exe
2015-08-13 09:05 - 2015-08-13 09:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-13 07:43 - 2015-08-13 09:35 - 00000000 ____D C:\Users\Kent\AppData\Local\MicrosoftEdge
2015-08-13 07:40 - 2015-08-13 07:40 - 00000000 ____D C:\Users\Kent\AppData\Local\PeerDistRepub
2015-08-13 07:21 - 2015-08-13 07:22 - 00002331 _____ C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-13 07:21 - 2015-08-13 07:21 - 00000000 ____D C:\ProgramData\ATI
2015-08-13 07:19 - 2015-08-13 07:19 - 00000000 ____D C:\Users\Kent\AppData\Local\Publishers
2015-08-13 07:17 - 2015-08-13 07:19 - 00000000 ____D C:\Users\Kent\AppData\Local\Comms
2015-08-13 07:17 - 2015-08-13 07:17 - 00000020 ___SH C:\Users\Kent\ntuser.ini
2015-08-13 07:17 - 2015-08-13 07:17 - 00000000 ____D C:\Users\Kent\AppData\Local\TileDataLayer
2015-08-13 01:02 - 2015-08-13 07:17 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-13 00:58 - 2015-08-13 00:59 - 00000000 ____D C:\Windows.old
2015-08-13 00:57 - 2015-08-13 00:57 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 21874176 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 18805248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 16709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 13025792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 08613200 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02462648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02415104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01983840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01916416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-08-13 00:57 - 2015-08-13 00:57 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01169408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01135312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01085776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01043872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 01025840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-08-13 00:57 - 2015-08-13 00:57 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00991584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-08-13 00:57 - 2015-08-13 00:57 - 00966424 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00934752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00841728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00808856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00705520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00695136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00644128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00632168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00630160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00607008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00601344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efscore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00583128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00527952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00521568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00521216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00518144 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-13 00:57 - 2015-08-13 00:57 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00505344 _____ C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00425824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00412672 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00403968 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00325984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00290768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00290312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00247808 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00237392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00208736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00200528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00102752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00097128 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00061280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-08-13 00:57 - 2015-08-13 00:57 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VoiceActivationManager.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00032768 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-08-13 00:57 - 2015-08-13 00:57 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-13 00:52 - 2015-08-13 00:52 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-08-13 00:51 - 2015-08-13 00:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-13 00:51 - 2015-08-13 00:51 - 00000000 ____D C:\Program Files\MSBuild
2015-08-13 00:51 - 2015-08-13 00:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-13 00:51 - 2015-08-13 00:51 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-13 00:50 - 2015-06-17 21:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-13 00:50 - 2015-06-17 21:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 00:50 - 2015-06-17 21:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-13 00:50 - 2015-05-30 00:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-13 00:50 - 2015-05-30 00:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-13 00:50 - 2015-05-30 00:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-12 22:28 - 2015-08-12 22:28 - 00000000 __SHD C:\Recovery
2015-08-12 22:25 - 2015-08-12 22:25 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-12 22:22 - 2015-08-12 22:49 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-12 22:14 - 2015-08-12 22:14 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-12 22:10 - 2015-08-12 22:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-08-12 22:09 - 2015-08-17 21:49 - 00000000 ____D C:\Users\Kent
2015-08-12 22:09 - 2015-08-13 07:17 - 00000000 ___RD C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-12 22:09 - 2015-07-10 06:04 - 00000000 __RSD C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-12 22:09 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-12 22:09 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-12 22:09 - 2015-07-10 06:04 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-12 22:08 - 2015-08-17 17:32 - 00968010 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-12 22:08 - 2015-08-12 22:08 - 00925184 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-08-12 22:07 - 2015-08-12 22:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-08-12 22:07 - 2015-08-12 22:07 - 00000000 ____D C:\ProgramData\AMD
2015-08-12 22:07 - 2015-08-12 22:07 - 00000000 ____D C:\Program Files\ATI Technologies
2015-08-12 22:06 - 2015-08-12 22:11 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-12 22:06 - 2015-08-12 22:07 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-08-12 22:06 - 2015-07-10 05:59 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-08-12 22:05 - 2015-08-12 22:05 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-08-12 22:05 - 2015-08-12 22:05 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-08-12 22:05 - 2015-08-12 22:05 - 00000000 ____D C:\Program Files\AMD
2015-08-12 22:05 - 2015-08-12 22:05 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2015-08-12 22:04 - 2015-08-12 22:04 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-08-12 22:04 - 2015-08-12 22:04 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-08-12 22:04 - 2015-08-12 22:04 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-08-12 22:04 - 2015-08-12 22:04 - 00000000 ____D C:\Program Files\Realtek
2015-08-12 22:03 - 2015-08-12 22:04 - 00032131 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-08-12 22:02 - 2015-08-12 22:16 - 00002758 _____ C:\WINDOWS\PFRO.log
2015-08-12 21:36 - 2015-08-12 22:26 - 00006646 _____ C:\WINDOWS\comsetup.log
2015-08-12 17:41 - 2015-08-12 17:41 - 00000000 ____D C:\Users\Kent\AppData\Roaming\ImgBurn
2015-08-12 17:35 - 2015-08-12 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2015-08-12 17:35 - 2015-08-12 17:35 - 00001889 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2015-08-12 17:35 - 2015-08-12 17:35 - 00001877 _____ C:\Users\Public\Desktop\ImgBurn.lnk
2015-08-12 17:35 - 2015-08-12 17:35 - 00000000 ____D C:\Program Files (x86)\ImgBurn
2015-08-12 17:34 - 2015-08-12 17:34 - 03469871 _____ (LIGHTNING UK!) C:\Users\Kent\Downloads\SetupImgBurn_2.5.8.0.exe
2015-08-11 20:54 - 2015-08-11 20:54 - 00000000 ___HD C:\$Windows.~WS
2015-08-10 19:37 - 2015-08-18 09:43 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Skype
2015-08-10 19:37 - 2015-08-12 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-10 19:37 - 2015-08-10 19:37 - 00002713 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-10 19:37 - 2015-08-10 19:37 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-10 19:37 - 2015-08-10 19:37 - 00000000 ____D C:\Users\Kent\AppData\Local\Skype
2015-08-10 19:37 - 2015-08-10 19:37 - 00000000 ____D C:\ProgramData\Skype
2015-08-10 19:36 - 2015-08-10 19:36 - 40665216 _____ (Skype Technologies S.A.) C:\Users\Kent\Downloads\SkypeSetupFull.exe
2015-08-10 09:31 - 2015-08-12 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-10 09:15 - 2015-08-12 22:11 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2015-08-09 21:02 - 2015-08-09 21:02 - 00001280 _____ C:\Users\Kent\Desktop\Revo Uninstaller.lnk
2015-08-09 21:02 - 2015-08-09 21:02 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-08-08 21:14 - 2015-04-30 12:45 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-08-08 20:39 - 2015-08-08 21:12 - 00000000 ____D C:\Users\Kent\AppData\Local\Birds
2015-08-08 20:39 - 2015-08-08 21:12 - 00000000 ____D C:\Program Files (x86)\WinRarPasswordRemoverSetup
2015-08-08 20:39 - 2015-08-08 21:12 - 00000000 ____D C:\Program Files (x86)\WinRarPassword Remover
2015-08-08 20:36 - 2015-08-08 20:36 - 01677329 _____ C:\Users\Kent\Downloads\Unconfirmed 856195.crdownload
2015-08-07 15:45 - 2015-08-07 15:45 - 00047834 _____ C:\Users\Kent\Downloads\White.Collar.Seasons.1.5.COMPLETE.torrent
2015-08-06 13:07 - 2013-01-22 15:50 - 455722525 _____ C:\Users\Kent\Desktop\english.pak.original
2015-08-05 13:50 - 2015-08-08 21:12 - 00000000 ____D C:\SoftPlan13-1
2015-08-05 13:30 - 2006-01-26 13:43 - 00077836 _____ C:\Users\Kent\Documents\Sample Floor Plan.spv
2015-08-05 13:30 - 2006-01-26 13:43 - 00047918 _____ C:\Users\Kent\Documents\Sample Elevation.spv
2015-08-05 13:29 - 2015-08-12 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftPlan 13
2015-08-05 13:29 - 2015-08-08 21:12 - 00000000 ____D C:\SoftPlan13
2015-08-05 12:22 - 2015-08-05 12:22 - 00000000 ____D C:\Program Files (x86)\Disc Soft
2015-08-05 12:18 - 2015-08-08 21:12 - 00000000 ____D C:\Program Files (x86)\WinCDEmu
2015-08-04 11:16 - 2015-08-04 11:16 - 00002056 _____ C:\Users\Kent\Desktop\Google Sheets.lnk
2015-08-01 19:56 - 2015-08-01 20:15 - 00000000 ____D C:\ProgramData\HitmanPro
2015-08-01 19:56 - 2015-08-01 19:56 - 00043664 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2015-08-01 19:51 - 2015-08-01 19:53 - 11032736 _____ (SurfRight B.V.) C:\Users\Kent\Downloads\HitmanPro_x64.exe
2015-07-31 11:39 - 2015-07-31 11:39 - 00000270 _____ C:\Users\Kent\Documents\my website.txt
2015-07-31 04:04 - 2015-08-12 21:39 - 01534637 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-07-30 19:33 - 2015-07-31 16:04 - 00000270 _____ C:\Users\Kent\Documents\index.html
2015-07-30 18:42 - 2015-07-30 18:42 - 00001204 _____ C:\Users\Kent\Desktop\JRT.txt
2015-07-30 18:36 - 2015-07-30 18:37 - 01798176 _____ (Malwarebytes Corporation) C:\Users\Kent\Downloads\JRT.exe
2015-07-30 18:35 - 2015-07-30 18:35 - 00000000 ____D C:\AdwCleaner
2015-07-30 18:34 - 2015-07-30 18:34 - 02248704 _____ C:\Users\Kent\Downloads\adwcleaner_4.208.exe
2015-07-30 18:26 - 2015-08-12 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-07-30 18:26 - 2015-08-09 14:30 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-07-30 18:26 - 2015-07-30 18:26 - 00001114 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-07-30 18:26 - 2015-07-30 18:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-30 18:26 - 2015-07-30 18:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-07-30 18:26 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-07-30 18:26 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-07-30 18:26 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-07-29 13:15 - 2015-07-29 13:24 - 00000000 ____D C:\Program Files\Microsoft Office
2015-07-29 13:15 - 2015-07-29 13:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-29 13:15 - 2015-07-29 13:15 - 00000000 ____D C:\Users\Kent\AppData\Local\Microsoft Help
2015-07-28 19:36 - 2015-07-28 19:36 - 00000000 ____H C:\Users\Kent\Documents\Default.rdp
2015-07-28 15:02 - 2015-07-28 15:02 - 00000000 ____D C:\Users\Kent\AppData\Roaming\PotPlayerMini64
2015-07-28 15:01 - 2015-08-12 22:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2015-07-28 15:01 - 2015-07-28 15:01 - 00000765 _____ C:\Users\Kent\Desktop\Daum Potplayer-64 Bits.lnk
2015-07-28 15:01 - 2015-07-28 15:01 - 00000000 ____D C:\Program Files\DAUM
2015-07-28 14:58 - 2015-07-28 15:00 - 19323720 _____ (Daum Kakao) C:\Users\Kent\Downloads\PotPlayerSetup64.exe
2015-07-28 14:17 - 2015-07-28 14:17 - 00000000 ____D C:\Users\Kent\Documents\iSkysoft Video Converter Ultimate
2015-07-28 14:17 - 2015-07-28 14:17 - 00000000 ____D C:\Users\Kent\AppData\Roaming\iSkysoft Video Converter Ultimate
2015-07-28 14:17 - 2015-07-28 14:17 - 00000000 ____D C:\Users\Kent\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2015-07-28 14:16 - 2015-07-28 14:20 - 00000000 ____D C:\ProgramData\iSkysoft Video Converter Ultimate
2015-07-28 14:16 - 2015-07-28 14:17 - 00000000 ____D C:\ProgramData\iSkysoft
2015-07-28 14:16 - 2015-07-28 14:16 - 00000000 ____D C:\Users\Kent\AppData\Local\iSkysoft
2015-07-28 14:15 - 2015-07-28 14:16 - 00000000 ____D C:\Users\Public\Documents\iSkysoft
2015-07-28 11:45 - 2015-07-28 11:45 - 00000000 ____D C:\Program Files (x86)\57918194-6e9a-45b5-a335-2cf468d11cab
2015-07-28 11:44 - 2015-07-28 11:44 - 00000000 ____D C:\ProgramData\Standard
2015-07-28 11:43 - 2015-07-28 11:43 - 31157397 _____ C:\Users\Kent\Downloads\STANDARD_Codecs_v272 (1).exe
2015-07-28 11:42 - 2015-07-28 11:42 - 31157397 _____ C:\Users\Kent\Downloads\Unconfirmed 530878.crdownload
2015-07-28 11:41 - 2015-07-28 11:42 - 31157397 _____ C:\Users\Kent\Downloads\STANDARD_Codecs_v272.exe
2015-07-28 11:32 - 2015-07-28 11:32 - 00000000 ____D C:\Users\Kent\AppData\Local\GWX
2015-07-27 16:49 - 2015-08-10 09:26 - 00000000 ____D C:\Users\Kent\AppData\Roaming\uTorrent
2015-07-27 16:49 - 2015-07-27 16:49 - 00002642 _____ C:\Users\Kent\Desktop\µTorrent.lnk
2015-07-27 16:48 - 2015-07-27 16:48 - 01996896 _____ (BitTorrent Inc.) C:\Users\Kent\Downloads\uTorrent.exe
2015-07-27 16:48 - 2015-07-27 16:48 - 00000218 _____ C:\Users\Kent\AppData\Local\recently-used.xbel
2015-07-26 08:48 - 2015-05-25 08:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-07-26 03:58 - 2015-08-12 21:15 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-26 03:58 - 2015-08-12 21:09 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-07-25 11:19 - 2015-07-09 10:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi(60).dll
2015-07-25 11:19 - 2015-03-13 20:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-07-25 10:57 - 2015-03-31 22:45 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp(32).dll
2015-07-25 10:56 - 2014-10-30 22:23 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-07-25 10:44 - 2014-10-28 23:00 - 00544408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi(37).dll
2015-07-25 10:43 - 2014-10-28 23:10 - 01816008 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd(50).dll
2015-07-25 10:42 - 2014-10-28 19:52 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi(51).dll
2015-07-25 10:41 - 2014-10-28 22:55 - 00359496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta(57).dll
2015-07-25 10:41 - 2014-10-28 20:54 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2015-07-25 10:41 - 2014-10-28 20:27 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs(26).dll
2015-07-25 10:41 - 2014-10-28 20:21 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm(43).dll
2015-07-25 10:41 - 2014-10-28 20:20 - 00517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn(55).dll
2015-07-25 10:40 - 2014-10-28 20:28 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet(30).dll
2015-07-25 10:39 - 2014-10-28 23:09 - 00145144 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet(28).dll
2015-07-25 10:39 - 2014-10-28 22:51 - 00159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI(39).DLL
2015-07-25 10:39 - 2014-10-28 20:18 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess(33).dll
2015-07-25 10:39 - 2014-10-28 20:14 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT(38).DLL
2015-07-25 10:38 - 2014-10-28 23:04 - 00153336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt(27).dll
2015-07-25 10:37 - 2014-10-28 23:09 - 00277368 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof(46).dll
2015-07-25 10:37 - 2014-10-28 23:09 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeyboardFilterSvc.dll
2015-07-25 10:37 - 2014-10-28 23:04 - 00122912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsp(31).dll
2015-07-25 10:37 - 2014-10-28 23:04 - 00086744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli(58).dll
2015-07-25 10:37 - 2014-10-28 20:28 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\samcli(47).dll
2015-07-25 10:36 - 2014-10-28 23:04 - 00080056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32(42).dll
2015-07-25 10:36 - 2014-10-28 23:04 - 00044368 _____ (Microsoft Corporation) C:\WINDOWS\system32\netutils(44).dll
2015-07-25 10:36 - 2014-10-28 22:55 - 00064040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wtsapi32(59).dll
2015-07-25 10:36 - 2014-10-28 20:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib(48).dll
2015-07-25 10:35 - 2014-10-28 23:09 - 00041280 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeyboardFilterCore.dll
2015-07-25 10:35 - 2014-10-28 23:09 - 00033064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore(40).dll
2015-07-25 10:35 - 2014-10-28 23:04 - 00025352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsrole(36).dll
2015-07-25 10:35 - 2014-10-28 22:51 - 00033032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi(56).dll
2015-07-25 10:35 - 2014-10-28 22:18 - 00034112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KeyboardFilterCore.dll
2015-07-25 10:35 - 2014-10-28 20:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2015-07-25 10:35 - 2014-10-28 20:29 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32(49).dll
2015-07-25 10:34 - 2014-10-28 21:41 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy(45).dll
2015-07-25 10:34 - 2014-10-28 20:29 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6(35).dll
2015-07-25 10:34 - 2014-10-28 20:28 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc(34).dll
2015-07-25 10:33 - 2014-10-28 18:16 - 00002412 _____ C:\WINDOWS\system32\KeyboardFilterShim.sdb
2015-07-25 10:12 - 2015-06-15 16:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy(25).dll
2015-07-25 10:10 - 2015-02-07 18:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR(41).dll
2015-07-24 13:11 - 2015-07-27 17:45 - 00000000 ____D C:\Users\Kent\Documents\Visual Studio 2015
2015-07-24 13:09 - 2015-07-24 13:09 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2015-07-24 12:37 - 2015-07-24 12:37 - 00000000 ____D C:\ProgramData\Microsoft DNX
2015-07-24 12:34 - 2015-07-24 12:34 - 00000000 ____D C:\Program Files\IIS Express
2015-07-24 12:34 - 2015-07-24 12:34 - 00000000 ____D C:\Program Files (x86)\IIS Express
2015-07-24 12:33 - 2015-08-12 22:11 - 00000000 ____D C:\Program Files\IIS
2015-07-24 12:33 - 2015-07-24 12:33 - 00000000 ____D C:\Program Files (x86)\IIS
2015-07-24 12:29 - 2015-08-12 22:15 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2015-07-24 12:29 - 2015-08-11 20:42 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2015-07-24 12:29 - 2015-07-24 13:10 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2015-07-24 12:27 - 2015-08-12 22:15 - 00000000 ____D C:\WINDOWS\system32\1033
2015-07-24 12:27 - 2015-08-11 20:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-07-24 12:27 - 2015-08-10 08:02 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2015-07-24 12:27 - 2015-07-24 12:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2015-07-24 12:22 - 2015-06-04 08:28 - 00062304 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:28 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00064352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-07-24 12:22 - 2015-06-04 08:26 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-07-24 12:21 - 2015-07-24 16:45 - 00000000 ____D C:\ProgramData\VsTelemetry
2015-07-24 12:05 - 2015-07-24 12:05 - 00000000 ____D C:\Users\Kent\Tracing
2015-07-24 11:55 - 2015-08-12 22:15 - 00000000 ____D C:\WINDOWS\en
2015-07-24 11:54 - 2015-08-12 22:15 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-07-24 11:54 - 2015-08-11 20:41 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-07-24 11:54 - 2015-07-24 11:54 - 00002502 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-07-24 11:54 - 2015-07-24 11:54 - 00001474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-07-24 11:54 - 2015-07-24 11:54 - 00001390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-07-24 11:54 - 2015-07-24 11:54 - 00001321 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-07-24 11:54 - 2015-07-24 11:54 - 00000000 ____D C:\Program Files\Windows Live
2015-07-24 11:54 - 2015-07-24 11:54 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-07-24 11:53 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-07-24 11:53 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-07-24 11:53 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-07-24 11:53 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-07-24 11:53 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-07-24 11:53 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-07-24 11:53 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-07-24 11:53 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-07-24 11:52 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-07-24 11:52 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-07-24 11:52 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-07-24 11:52 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-07-24 11:51 - 2015-08-13 07:22 - 00000000 ___RD C:\Users\Kent\OneDrive
2015-07-24 11:51 - 2015-07-24 11:51 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-07-24 11:50 - 2015-07-24 12:01 - 00000000 ____D C:\Users\Kent\AppData\Local\Windows Live
2015-07-24 09:35 - 2015-07-24 09:35 - 00000000 ____D C:\Users\Kent\AppData\Local\CEF
2015-07-23 21:04 - 2015-08-16 17:49 - 00002115 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-07-23 21:04 - 2015-08-16 17:49 - 00002113 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-07-23 21:04 - 2015-08-16 17:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-08-18 16:49 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-18 16:48 - 2015-04-30 10:33 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-18 16:19 - 2015-07-10 07:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-18 10:30 - 2015-05-01 09:35 - 00000000 ____D C:\ProgramData\Origin
2015-08-18 09:42 - 2015-04-30 10:33 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-18 05:57 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-17 17:27 - 2015-07-10 07:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-17 17:26 - 2015-07-10 04:05 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-08-15 08:10 - 2015-07-10 05:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-14 03:31 - 2015-07-10 07:20 - 00371872 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-14 03:11 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\appcompat
2015-08-13 15:52 - 2015-07-10 07:20 - 00013807 _____ C:\WINDOWS\setupact.log
2015-08-13 09:07 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-13 07:37 - 2015-02-03 02:48 - 00000000 ____D C:\Users\Kent\AppData\Local\Packages
2015-08-13 07:18 - 2015-07-10 06:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-08-13 07:18 - 2015-07-10 06:04 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-13 07:18 - 2015-07-10 06:04 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-08-13 07:18 - 2015-07-10 06:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-13 01:01 - 2015-07-10 06:04 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-13 00:58 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-08-13 00:58 - 2015-07-10 04:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-08-13 00:58 - 2015-07-10 04:05 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-08-12 22:28 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\Registration
2015-08-12 22:27 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\rescache
2015-08-12 22:27 - 2015-04-30 08:15 - 00022863 _____ C:\WINDOWS\diagwrn.xml
2015-08-12 22:27 - 2015-04-30 08:15 - 00022863 _____ C:\WINDOWS\diagerr.xml
2015-08-12 22:25 - 2015-04-30 08:24 - 00003708 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3162048605-551255332-2824141052-1001
2015-08-12 22:24 - 2015-05-06 14:32 - 00003996 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-08-12 22:24 - 2015-05-01 14:12 - 00002896 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-08-12 22:24 - 2015-04-30 12:45 - 00004292 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-08-12 22:24 - 2015-04-30 10:33 - 00004004 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-12 22:24 - 2015-04-30 10:33 - 00003768 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-12 22:23 - 2015-07-10 06:04 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-12 22:15 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-08-12 22:15 - 2015-07-10 04:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-12 22:15 - 2015-06-03 11:18 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Control Center
2015-08-12 22:15 - 2015-06-03 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-08-12 22:15 - 2015-06-02 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-08-12 22:15 - 2015-05-26 14:55 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-08-12 22:15 - 2015-05-22 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uplink
2015-08-12 22:15 - 2015-05-17 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-08-12 22:15 - 2015-05-14 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-08-12 22:15 - 2015-05-14 09:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-08-12 22:15 - 2015-05-13 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale 2014
2015-08-12 22:15 - 2015-05-12 20:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cities Skylines
2015-08-12 22:15 - 2015-05-08 12:31 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-12 22:15 - 2015-05-08 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-12 22:15 - 2015-05-04 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit
2015-08-12 22:15 - 2015-05-01 11:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deluge
2015-08-12 22:15 - 2015-05-01 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-08-12 22:15 - 2015-04-30 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-08-12 22:15 - 2015-04-30 12:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-08-12 22:15 - 2015-04-30 08:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-12 22:15 - 2015-04-30 08:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2015-08-12 22:14 - 2015-07-10 06:05 - 00004362 _____ C:\WINDOWS\DtcInstall.log
2015-08-12 22:14 - 2013-08-22 08:36 - 00000000 ____D C:\Users\Default.migrated
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\zh-HK
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\uk-UA
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\tr-TR
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\th-TH
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sr-Latn-RS
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sl-SI
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sk-SK
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ro-RO
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\hr-HR
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\he-IL
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\bg-BG
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\SysWOW64\ar-SA
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\uk-UA
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\th-TH
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\sl-SI
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\sk-SK
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\ro-RO
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\hr-HR
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\he-IL
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-08-12 22:12 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-08-12 22:12 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-08-12 22:12 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-08-12 22:11 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\bg-BG
2015-08-12 22:11 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\ar-SA
2015-08-12 22:11 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\InputMethod
2015-08-12 22:11 - 2015-07-10 06:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-12 22:11 - 2015-05-07 11:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2015-08-12 22:11 - 2015-04-30 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
2015-08-12 22:11 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-08-12 22:11 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-08-12 22:10 - 2015-07-10 06:04 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-12 22:10 - 2015-05-11 20:49 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-12 22:08 - 2015-07-10 04:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-12 22:05 - 2015-02-03 23:29 - 00000000 ____D C:\AMD
2015-08-12 22:02 - 2015-07-10 04:05 - 00000000 __RHD C:\Users\Default
2015-08-12 21:35 - 2015-07-10 08:39 - 00000000 ___HD C:\$Windows.~BT
2015-08-10 09:31 - 2015-04-30 10:33 - 00000000 ____D C:\Users\Kent\AppData\Local\Google
2015-08-10 09:31 - 2015-04-30 10:33 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-10 09:26 - 2015-06-02 09:44 - 00000000 ____D C:\Users\Kent\AppData\Roaming\DAEMON Tools Lite
2015-08-10 09:26 - 2015-04-30 08:36 - 00000000 ____D C:\Program Files (x86)\Steam
2015-08-10 09:16 - 2015-05-22 11:24 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-09 08:12 - 2015-05-01 09:37 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-08-08 21:15 - 2015-04-30 12:45 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
2015-08-08 21:15 - 2015-04-30 12:45 - 00001938 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-08-08 21:12 - 2015-06-02 09:44 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2015-08-08 21:07 - 2015-05-22 11:24 - 00000000 ____D C:\ProgramData\Oracle
2015-08-08 10:38 - 2015-07-10 06:06 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-08-08 10:38 - 2015-07-10 06:06 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-30 16:55 - 2015-05-09 08:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagicISO
2015-07-29 19:12 - 2015-04-30 11:22 - 00000840 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notion.lnk
2015-07-29 19:12 - 2015-04-30 11:22 - 00000000 ____D C:\Program Files\Notion 5
2015-07-29 13:46 - 2015-05-07 20:07 - 00000000 ____D C:\Program Files (x86)\The Sims 4
2015-07-28 20:15 - 2015-04-30 08:45 - 00001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-07-28 20:15 - 2015-04-30 08:45 - 00001043 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-07-28 20:15 - 2015-04-30 08:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-07-28 11:42 - 2015-04-30 08:35 - 00000000 __SHD C:\Users\Kent\AppData\Local\EmieUserList
2015-07-28 11:42 - 2015-04-30 08:35 - 00000000 __SHD C:\Users\Kent\AppData\Local\EmieSiteList
2015-07-27 16:48 - 2015-05-01 11:11 - 00000000 ____D C:\Users\Kent\AppData\Roaming\deluge
2015-07-26 06:31 - 2013-08-22 10:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-07-25 11:11 - 2015-05-01 09:35 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-23 12:37 - 2015-05-01 09:36 - 00000000 ____D C:\Users\Kent\AppData\Roaming\Origin
2015-07-22 20:42 - 2015-05-06 14:31 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories =======
2015-07-27 16:48 - 2015-07-27 16:48 - 0000218 _____ () C:\Users\Kent\AppData\Local\recently-used.xbel
2015-08-12 22:05 - 2015-08-12 22:05 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-08-13 07:40
==================== End of log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:17-08-2015
Ran by Kent (2015-08-18 17:24:15)
Running from C:\Users\Kent\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3162048605-551255332-2824141052-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3162048605-551255332-2824141052-503 - Limited - Disabled)
Guest (S-1-5-21-3162048605-551255332-2824141052-501 - Limited - Disabled)
Kent (S-1-5-21-3162048605-551255332-2824141052-1001 - Administrator - Enabled) => C:\Users\Kent
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\uTorrent) (Version: 3.4.3.40760 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Cities Skylines (HKLM-x32\...\Cities Skylines_is1) (Version: - )
CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\CopyTrans Suite) (Version: 4.002 - WindSolutions)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.0.0.0054 - Disc Soft Ltd)
Deluge 1.3.11 (HKLM-x32\...\Deluge) (Version: - )
DriverToolkit version 8.4.0.0 (HKLM-x32\...\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1) (Version: 8.4.0.0 - Megaify Software)
Finale 2014d (HKLM-x32\...\Finale 2014) (Version: 2014.4.5030.0 - MakeMusic)
Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 3.6.122.702 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.2.0.722 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)
Google Drive (HKLM-x32\...\{12ADFB82-D5A3-43E4-B2F4-FCD9B690315B}) (Version: 1.24.9931.5480 - Google, Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)
IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments)
Native Instruments Finale GPO (HKLM-x32\...\Native Instruments Finale GPO) (Version: - )
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.0.409 - Native Instruments)
Notion 5 (64-bit) (HKLM\...\Notion 5-64) (Version: - Notion Music, Inc.)
Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)
Potplayer-64 Bits (HKLM\...\PotPlayer64) (Version: - Daum Kakao Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43879 - TeamViewer)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
Uplink (HKLM-x32\...\Uplink) (Version: - )
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3162048605-551255332-2824141052-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Kent\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
13-08-2015 09:07:17 Scheduled Checkpoint
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00EEBA9C-F9EF-4272-B793-C830FBADD359} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\Windows\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation)
Task: {09A95299-5DC5-4888-889A-E6E4C7A47E86} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {0CCA7916-2916-4F12-BD32-1E3BE31E1269} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\Windows\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation)
Task: {17F05593-2C0A-4320-972D-C1244047CE0E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-12] (Microsoft Corporation)
Task: {19865544-CE08-40BE-8B8C-87C47681433D} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {2B9F83F7-2CB4-497B-B64D-BCD7788A771A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-30] (Google Inc.)
Task: {2D2C7D9F-9198-465D-9C32-B0EC473C6B28} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-08-08] (Avast Software s.r.o.)
Task: {32993CAD-D3FA-4451-ACD2-F48FC6460797} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {3B5A8364-B637-4C59-8D59-6646F1F1457B} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW
Task: {41160EA0-208B-4C3E-B4DB-805BBABC6B93} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\Windows\system32\dmclient.exe [2015-07-10] (Microsoft Corporation)
Task: {519E4BAB-ABE7-499B-9157-6CAD7BA39823} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {61A3F2C5-5806-4E4C-9B5A-9EE71F35F9C9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-30] (Google Inc.)
Task: {64EE6B77-8EF7-4C29-B783-7AC860202FFE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {71847A84-BF68-4EEB-AB60-69ABBAE941BC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {73551810-E5F4-433E-9494-0D00B55C855E} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask
Task: {78B77FA3-9D97-441D-97B6-68CEA40B4F74} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance
Task: {7D9432BC-C5A6-4557-82BB-2C61BB137BF5} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {8916EBF1-1EEA-48E0-84F0-63FB7A06AE56} - System32\Tasks\Microsoft\Windows\RetailDemo\CleanupOfflineContent
Task: {8DF84CB3-D8E0-4307-A35B-CA74E21786DB} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\Windows\system32\ClipUp.exe [2015-08-13] (Microsoft Corporation)
Task: {997B2335-C174-4F37-BB74-D4BFA0983AF0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A5B6CD85-1B57-49B9-BA80-5D5D65F02826} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager
Task: {B9776333-A8D1-452A-828E-3C343E1A013E} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2015-07-10] (Microsoft Corporation)
Task: {C182B998-0CE8-4FDF-8CCF-880029B983C6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C56AFFD3-06B8-4A16-AF7E-F7A6EB3FAE9E} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr
Task: {C5EE2EA2-5312-4D1F-B9D0-41B18DF31B78} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\Windows\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {C7A236B2-12E1-46DC-9501-3B1B0209CC09} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\Windows\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation)
Task: {D371468F-0C88-43E7-A996-A785A0CA6CAC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D9A8D207-8A19-48E9-9B1E-41F9915368FF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {DD031D7D-77D2-47B3-90AC-7A421ED26A4C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {F589F170-73FB-4A1C-8A44-B7F362182E09} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {F8FF6B68-CB5A-44A4-BF35-79665D9E42F8} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2015-08-13 00:57 - 2015-08-13 00:57 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-07-15 21:39 - 2015-07-15 21:39 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00403968 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-07-10 05:59 - 2015-07-10 05:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 00642048 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
2015-07-10 05:59 - 2015-07-10 05:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 06:00 - 2015-07-10 08:14 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 01806848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-13 00:57 - 2015-08-13 00:57 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 06:00 - 2015-07-10 08:14 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-07-15 21:38 - 2015-07-15 21:38 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2015-08-15 06:10 - 2015-08-15 06:10 - 00007168 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-08-15 06:10 - 2015-08-15 06:10 - 11284480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.803.16240.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-07-10 08:17 - 2015-07-10 08:17 - 07897088 _____ () C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\SharedLibrary.dll
2015-04-30 12:45 - 2015-04-30 12:45 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-30 12:45 - 2015-04-30 12:45 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-08-17 16:04 - 2015-08-17 16:04 - 02961920 _____ () C:\Program Files\AVAST Software\Avast\defs\15081702\algo.dll
2015-08-18 13:10 - 2015-08-18 13:10 - 02961920 _____ () C:\Program Files\AVAST Software\Avast\defs\15081800\algo.dll
2015-04-30 12:45 - 2015-04-30 12:45 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-07-28 14:16 - 2014-10-31 16:40 - 01498112 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
2015-07-28 14:16 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2015-05-01 09:36 - 2015-07-25 11:11 - 00228352 _____ () C:\Program Files (x86)\Origin\mediaservice\wmfengine.dll
2015-08-12 22:49 - 2015-08-07 19:13 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.155\libglesv2.dll
2015-08-12 22:49 - 2015-08-07 19:13 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.155\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kent\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\Run32: => "DelaypluginInstall"
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\StartupApproved\StartupFolder: => "MagicDisc.lnk"
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_42F0617E37346AAF8CEEF514D5477874"
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-3162048605-551255332-2824141052-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [UDP Query User{FA2C662F-0432-48EC-AF07-FD0B2578F8E9}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{B6D51BC4-6539-47B1-AA3F-9545F9D0EFCF}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{7F57A42B-D01C-464E-96ED-188118980CA9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{A19B65BE-737D-4757-8BEC-C01EA7FDB46C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{10DD0468-CC19-4B1B-A2CD-24BBB67D5EF6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{40D2A1F4-AA40-4986-BB03-D5D64241B7BC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F2D983BC-6285-465A-848D-724EB81BBE81}] => (Allow) C:\Users\Kent\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D736E62A-F993-434D-A783-39F8DF065C88}] => (Allow) C:\Users\Kent\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{52822A53-FD30-4F96-B5E6-F9F3802AE46E}] => (Allow) C:\Users\Kent\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1E685087-6B27-4B5F-9559-7AD6CFDBC12A}] => (Allow) C:\Users\Kent\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2EBCD545-81B8-4A64-A638-4022867F7AFB}] => (Allow) C:\Users\Kent\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{94648BAD-16D5-405E-9E34-4FC82FE373B5}] => (Allow) C:\Users\Kent\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{6FE89633-B85B-411A-924A-67945421D358}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{A843D844-B3BF-4AFA-9ED4-01796AF98A71}] => (Allow) LPort=1900
FirewallRules: [{03432CD7-3677-4451-BFAF-3BA54544D755}] => (Allow) LPort=2869
FirewallRules: [{C39306C4-B09B-4383-AFC7-068D7DE3B098}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D5C09D51-B0F9-41FA-B077-E3FB527BFD9D}] => (Allow) C:\Users\Kent\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [UDP Query User{4FF8EA9B-6151-49D6-80D9-B2A47E6CB731}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [TCP Query User{F6862CD8-2577-4995-9E92-0D5AD99D9D31}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [{D8670277-DCBC-46A0-946E-3ACD387E881D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{AE01A362-B8F8-48A9-839B-7F93C309208B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{97A7AF67-D7DE-4F91-8293-9FD25AB26B50}] => (Allow) C:\Program Files (x86)\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{93D8621F-2993-430D-826F-156BFB85F9C6}] => (Allow) C:\Program Files (x86)\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{5C9DC6BB-2E63-4F12-8C7F-0D4C8E60C6B0}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{A31F1501-21E7-41A2-9550-4181BE095806}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0D5A58DD-FF34-4388-855A-B1C80249112F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{ACEA8185-E4AB-4641-B2CB-96E45F643F84}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{965078A0-18B3-4E2E-92E3-B077FE670E21}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4626829D-EFA5-45AA-840F-BB814024D107}] => (Block) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [{870C3DE0-3597-4513-8D0A-3A691DF503E3}] => (Block) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [UDP Query User{E8DF8BF0-BB94-4FFA-88FE-34D171CB314A}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [TCP Query User{500B6C58-0F27-4DF5-B297-49283E418A65}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [{65469709-B32A-44E3-ACF4-D81FACF0019F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{53359D10-DF59-4D6A-9012-300942895B67}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{EAE6C389-FEF1-4DE6-9665-ADCE067DC769}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{43F0B89D-286B-43AA-95E5-8FDD7AD32E57}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B1F658CF-C2D9-472A-8FB2-ADC40C74D659}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/18/2015 06:01:25 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: kent-pc)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (08/17/2015 09:49:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: kent-pc)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 18
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 17
System errors:
=============
Error: (08/18/2015 10:00:55 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}
Error: (08/18/2015 06:01:35 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5
Error: (08/18/2015 06:01:25 AM) (Source: DCOM) (EventID: 10010) (User: kent-pc)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca
Error: (08/18/2015 06:01:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Sync Host_Session2 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Error: (08/17/2015 09:49:33 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5
Error: (08/17/2015 09:49:20 PM) (Source: DCOM) (EventID: 10010) (User: kent-pc)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca
Error: (08/17/2015 09:49:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Error: (08/17/2015 05:37:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable
Error: (08/17/2015 05:37:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable
Error: (08/17/2015 05:37:23 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable
Microsoft Office:
=========================
Error: (08/18/2015 06:01:25 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: kent-pc)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141
Error: (08/17/2015 09:49:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: kent-pc)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 18
Error: (08/17/2015 03:15:38 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 17
==================== Memory info ===========================
Processor: AMD FX™-8350 Eight-Core Processor
Percentage of memory in use: 36%
Total physical RAM: 8093.19 MB
Available physical RAM: 5111.21 MB
Total Virtual: 9373.19 MB
Available Virtual: 6047.46 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:891.62 GB) (Free:767.73 GB) NTFS
Drive f: () (Fixed) (Total:465.76 GB) (Free:402.69 GB) NTFS ==>[system with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 000C3EFA)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 00000001)
Partition: GPT.
==================== End of log ============================
Sign In
Create Account
