[Bruce1270]

Hi Legna
 

Can I just cancel the popup and proceed to my account?

Don't do anything with that at the moment.

Just so that the Todo backup program works correctly please uninstall it and then we will reinstall it. I also need fresh FRST logs.

Step1 - Uninstall Todo Backup

Please uninstall the following program:

EaseUS Todo Backup Free 5.8


To do this:
Please go to Start Menu -> Control Panel -> Uninstall a program or Programs and Features
In the list of installed programs locate and click on the program to uninstall e.g. EaseUS Todo Backup Free 5.8
Click uninstall.

Then

Download the latest version of EaseUS Todo Backup from here to your desktop. Choose the FREE version.
Right click the file, select Run as Administrator and follow the on screen installation instructions.


Step2 - Fresh FRST logs

• Please run Farbars Recovery Scan Tool again. Run FRST by right clicking on it and selecting Run as Administrator. Allow it to update if it wants to.
• Please tick the Addition.txt box under Optional Scan.
• Press Scan button.
• It will make logs FRST.txt & Addition.txt in the same directory the tool is run.
• Please copy and paste the FRST.txt and Addition.txt to your reply.
  
  Things for your next post:
• Any issues with reinstalling Todo Backup?
• FRST.txt and Addition.txt

[Advertisements]

Hi,

 

Uninstall and reinstalled EaseUS Todo Backup successfully.

 

Here's the FRST.txt

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-09-2015
Ran by LENOVO (administrator) on IDEA-PC (08-09-2015 07:49:02)
Running from C:\Users\LENOVO\Desktop
Loaded Profiles: UpdatusUser & LENOVO (Available Profiles: UpdatusUser & LENOVO)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinDaemon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Wondershare) C:\Program Files (x86)\Wondershare\MobileGo for Android\MobileGoService.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(iSkySoft) C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
() C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13262480 2012-12-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1256080 2012-12-03] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => C:\windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\windows\system32\igfxpers.exe
HKLM\...\Run: [SynLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-08-27] (Synaptics)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-09-30] ()
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-15] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-04-13] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-04-13] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-05-03] (Vimicro)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1694208 2013-05-04] (Wondershare)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2080768 2014-09-11] (iSkySoft)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-09-06] (AVAST Software)
HKLM-x32\...\Run: [EaseUS TB Tray Agent] => C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [253992 2014-12-15] ()
HKU\S-1-5-21-122341192-2292051211-3585160535-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-11-21] (Microsoft Corporation)
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\...\Run: [Wondershare Helper Compact] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1694208 2013-05-04] (Wondershare)
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-02] (Piriform Ltd)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-12-26] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-06] (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-09-12]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MobileGo Service.lnk [2013-09-28]
ShortcutTarget: MobileGo Service.lnk -> C:\Program Files (x86)\Wondershare\MobileGo for Android\MobileGoService.exe (Wondershare)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{D4F0B1D2-BCEE-4F56-ACF4-C1F8BBA110CA}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-sg/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-122341192-2292051211-3585160535-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-09-30] (Qualcomm Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-09-06] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-06] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2013-07-24] (RocketLife, LLP)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\searchplugins\lazy-inbox.xml [2013-09-11]
FF Extension: YouTube Video and Audio Downloader - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2015-02-26]
FF Extension: Firebug - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2013-09-10]
FF Extension: 硕鼠下载助手(FLVCD Helper) - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2014-10-07]
FF Extension: Sort Tabs - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2014-09-11]
FF Extension: The Addon Bar (restored) - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2015-04-08]
FF Extension: Screengrab  (fix version) - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi [2013-09-10]
FF Extension: FlashGot - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2013-12-18]
FF Extension: eBay Toolbar - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{249df6a2-e336-47d1-b6c3-ec711ad140ca}.xpi [2015-04-23]
FF Extension: Ebates Cash Back - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{35d6291e-1d4b-f9b4-c52f-77e6410d1326}.xpi [2015-03-25]
FF Extension: Easy Youtube Video Downloader Express - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2015-02-26]
FF Extension: Yahoo Mail Hide Ad Panel - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{c37bac34-849a-4d28-be41-549b2c76c64e}.xpi [2014-06-07]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-06]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-04-13]
FF HKU\S-1-5-21-122341192-2292051211-3585160535-1002\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Media Cope\Extensions\wifv
FF Extension: Media Cope - Web Image Fullscreen Viewer - C:\Program Files (x86)\Media Cope\Extensions\wifv [2014-01-20]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-09-06]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [220288 2012-09-30] (Qualcomm Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-06] (AVAST Software)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-08-01] (CHENGDU YIWO Tech Development Co., Ltd)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-26] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-07] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-07] (Hewlett-Packard) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-30] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-06] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-09-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-09-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-09-06] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-06] (AVAST Software)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-30] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows ® Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2014-12-15] ()
S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [43664 2015-09-01] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S3 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-09-01] ()
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [990976 2012-10-23] (Vimicro Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-08 07:49 - 2015-09-08 07:49 - 00020309 _____ C:\Users\LENOVO\Desktop\FRST.txt
2015-09-08 07:48 - 2015-09-08 07:48 - 00000000 ____D C:\Users\LENOVO\Desktop\FRST-OlderVersion
2015-09-08 07:47 - 2015-09-08 07:47 - 00012625 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-08 07:42 - 2015-09-08 07:42 - 00002156 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 8.6 .lnk
2015-09-08 07:42 - 2015-09-08 07:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup Free 8.6
2015-09-08 07:41 - 2014-12-15 01:03 - 00024104 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\WINDOWS\system32\fbnative.exe
2015-09-08 07:38 - 2015-09-08 07:38 - 00001746 _____ C:\WINDOWS\PFRO.log
2015-09-08 07:38 - 2015-09-08 07:38 - 00000077 _____ C:\WINDOWS\setupact.log
2015-09-08 07:38 - 2015-09-08 07:38 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-08 07:18 - 2015-09-08 07:27 - 109092008 _____ (CHENGDU YIWO Tech Development Co., Ltd ) C:\Users\LENOVO\Desktop\tb_free(EaseUS Todo Backup Free 5.8).exe
2015-09-07 17:22 - 2015-09-07 17:23 - 49986349 _____ C:\Users\LENOVO\Desktop\How to fix 'Damaged SD card' - SD card is damaged. Try reformatting it (Samsung Galaxy Note 4).mp4
2015-09-06 18:43 - 2015-09-07 12:18 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-09-06 18:43 - 2015-09-06 18:43 - 01048344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00447944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-09-06 18:43 - 2015-09-06 18:43 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00150672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-09-06 18:43 - 2015-09-06 18:43 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00001949 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\AVAST Software
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\ProgramData\AVAST Software
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\Program Files\AVAST Software
2015-09-06 18:04 - 2015-09-06 18:04 - 02870984 _____ (ESET) C:\Users\LENOVO\Desktop\esetsmartinstaller_enu.exe
2015-09-06 17:44 - 2015-09-06 17:47 - 158417712 _____ (AVAST Software) C:\Users\LENOVO\Desktop\avast_free_antivirus_setup.exe
2015-09-06 17:44 - 2015-09-06 17:44 - 05961160 _____ (AVAST Software) C:\Users\LENOVO\Desktop\avastclear.exe
2015-09-06 17:42 - 2015-09-06 17:42 - 00000228 _____ C:\Users\LENOVO\Desktop\Avast Uninstall Utility Download aswClear for Avast Removal.URL
2015-09-06 04:53 - 2015-09-06 04:53 - 00000000 ____D C:\Users\LENOVO\Desktop\Maju Photos
2015-09-06 01:55 - 2015-09-06 01:55 - 00000311 _____ C:\Users\LENOVO\Desktop\4.0 ice cream sandwich - My Android phone screen is un-usable, how do I transfer all my data to a new phone - Android Enthus.URL
2015-09-02 06:26 - 2015-09-08 07:49 - 00000000 ____D C:\FRST
2015-09-02 06:18 - 2015-09-08 07:48 - 02190336 _____ (Farbar) C:\Users\LENOVO\Desktop\FRST64.exe
2015-09-01 05:11 - 2015-09-01 05:11 - 00000000 ____D C:\Users\LENOVO\AppData\Local\2Browse
2015-09-01 01:29 - 2015-09-01 01:29 - 00246745 _____ C:\Users\LENOVO\AppData\Local\census.cache
2015-09-01 01:29 - 2015-09-01 01:29 - 00095659 _____ C:\Users\LENOVO\AppData\Local\ars.cache
2015-09-01 01:21 - 2015-09-01 01:21 - 00000036 _____ C:\Users\LENOVO\AppData\Local\housecall.guid.cache
2015-09-01 00:39 - 2015-09-01 00:39 - 00043664 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2015-08-31 23:57 - 2015-09-01 02:23 - 00000000 ____D C:\Users\LENOVO\Desktop\FakeAVRemover
2015-08-31 23:03 - 2015-09-08 07:44 - 00000000 ____D C:\Users\LENOVO\Desktop\Removal Tools
2015-08-31 16:49 - 2015-08-31 16:49 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-31 16:49 - 2015-08-31 16:49 - 00001170 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-31 16:49 - 2015-08-31 16:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-31 16:49 - 2015-08-31 16:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-31 16:45 - 2015-08-31 16:45 - 00000000 ____D C:\Users\LENOVO\Desktop\firefox
2015-08-30 21:10 - 2015-08-30 21:10 - 00000000 ____D C:\Users\LENOVO\AppData\Local\Downloaded Installations
2015-08-29 20:15 - 2015-08-30 17:44 - 00000000 ____D C:\Users\LENOVO\Desktop\teresa
2015-08-27 01:27 - 2015-09-06 03:47 - 00000000 ____D C:\Users\LENOVO\Desktop\after windows 8.1 upgrade,Internet Connection but Browsers do not work
2015-08-26 08:55 - 2015-08-26 08:55 - 01605632 _____ C:\Users\LENOVO\Desktop\adwcleaner_5.003.exe
2015-08-26 01:14 - 2015-08-26 01:14 - 00000000 ____D C:\Users\LENOVO\AppData\Local\GWX
2015-08-25 05:59 - 2015-08-11 09:20 - 25191936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-25 05:59 - 2015-08-11 08:20 - 19871232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-24 06:47 - 2015-05-25 21:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-08-24 06:47 - 2015-05-25 21:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-24 06:43 - 2015-08-24 06:44 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-08-24 06:43 - 2015-08-24 06:43 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-08-24 06:43 - 2015-08-24 06:43 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-24 02:14 - 2015-09-02 09:47 - 00000000 ____D C:\Users\LENOVO\Desktop\Maju Forms
2015-08-23 18:25 - 2015-08-25 16:09 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-23 18:25 - 2015-08-23 02:27 - 00000000 __SHD C:\Recovery
2015-08-23 18:24 - 2015-08-23 18:24 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2015-08-23 18:23 - 2015-08-23 18:23 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-08-23 18:23 - 2015-08-23 18:23 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files\MSBuild
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-23 18:23 - 2013-08-03 12:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-23 18:23 - 2013-08-03 12:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-23 05:46 - 2015-08-23 05:46 - 00000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-08-23 04:54 - 2015-08-24 08:10 - 00000000 ____D C:\Users\LENOVO\Desktop\馬雲(all copied)
2015-08-23 04:22 - 2015-07-30 22:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 04:22 - 2015-07-30 21:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 04:01 - 2015-04-30 07:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-08-23 04:01 - 2015-01-27 11:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-23 04:01 - 2015-01-24 09:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-08-23 04:01 - 2014-11-10 10:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-08-23 04:01 - 2014-11-10 09:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-08-23 04:01 - 2014-10-31 07:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-08-23 04:01 - 2014-10-31 07:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-08-23 03:51 - 2015-03-18 01:26 - 00467776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-23 03:51 - 2015-01-23 15:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-08-23 03:51 - 2015-01-23 13:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-08-23 03:50 - 2015-07-19 09:58 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-08-23 03:50 - 2015-07-19 02:51 - 03704320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-23 03:50 - 2015-07-19 02:31 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-08-23 03:50 - 2015-07-19 02:31 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-08-23 03:50 - 2015-07-19 02:31 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-08-23 03:50 - 2015-07-19 02:29 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-08-23 03:50 - 2015-07-19 02:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-08-23 03:50 - 2015-07-19 02:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-08-23 03:50 - 2015-07-19 02:28 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-08-23 03:50 - 2015-07-19 02:12 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-08-23 03:50 - 2015-07-19 02:10 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-23 03:50 - 2015-07-19 02:09 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-23 03:50 - 2015-07-17 04:36 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-08-23 03:50 - 2015-07-17 04:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-08-23 03:50 - 2015-07-17 04:35 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-23 03:50 - 2015-07-17 04:26 - 05923328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-23 03:50 - 2015-07-17 04:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-08-23 03:50 - 2015-07-17 04:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-08-23 03:50 - 2015-07-17 03:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-08-23 03:50 - 2015-07-17 03:51 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-08-23 03:50 - 2015-07-17 03:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-08-23 03:50 - 2015-07-17 03:45 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-23 03:50 - 2015-07-17 03:45 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-08-23 03:50 - 2015-07-17 03:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-08-23 03:50 - 2015-07-17 03:39 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-08-23 03:50 - 2015-07-17 03:38 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-08-23 03:50 - 2015-07-17 03:36 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-08-23 03:50 - 2015-07-17 03:34 - 14451200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-23 03:50 - 2015-07-17 03:32 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-08-23 03:50 - 2015-07-17 03:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-23 03:50 - 2015-07-17 03:13 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-08-23 03:50 - 2015-07-17 03:12 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-23 03:50 - 2015-07-17 03:12 - 02427904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-23 03:50 - 2015-07-17 03:10 - 12856832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-23 03:50 - 2015-07-17 03:06 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-08-23 03:50 - 2015-07-17 03:01 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-23 03:50 - 2015-07-17 02:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-23 03:50 - 2015-07-17 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-08-23 03:50 - 2015-07-17 02:42 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-23 03:50 - 2015-07-17 02:38 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-23 03:50 - 2015-07-17 02:37 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-08-23 03:50 - 2015-07-10 02:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-08-23 03:50 - 2015-06-28 13:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-08-23 03:50 - 2015-06-28 13:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-08-23 03:50 - 2015-06-28 13:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-23 03:50 - 2015-06-28 13:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-08-23 03:50 - 2015-06-28 00:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-23 03:50 - 2015-06-27 11:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-08-23 03:50 - 2015-06-27 11:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-08-23 03:50 - 2015-06-27 11:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-08-23 03:50 - 2015-06-27 11:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-08-23 03:50 - 2015-06-27 11:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-08-23 03:50 - 2015-06-27 10:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-08-23 03:50 - 2015-06-27 10:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-08-23 03:50 - 2015-06-27 10:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-23 03:50 - 2015-06-27 10:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-08-23 03:50 - 2015-06-27 09:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-08-23 03:50 - 2015-06-27 09:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-08-23 03:50 - 2015-06-16 06:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-23 03:50 - 2015-06-16 06:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-08-23 03:50 - 2015-06-16 06:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-23 03:50 - 2015-06-16 06:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-08-23 03:50 - 2015-06-16 05:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-08-23 03:50 - 2015-06-16 05:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-08-23 03:50 - 2015-06-16 05:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-08-23 03:50 - 2015-06-16 05:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-08-23 03:50 - 2015-06-16 05:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-08-23 03:50 - 2015-06-16 05:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-23 03:50 - 2015-06-16 04:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-08-23 03:50 - 2015-06-16 04:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-08-23 03:50 - 2015-06-16 04:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-08-23 03:50 - 2015-06-16 04:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-08-23 03:50 - 2015-06-16 04:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-08-23 03:50 - 2015-06-16 04:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-08-23 03:50 - 2015-06-16 04:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-08-23 03:50 - 2015-06-16 04:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-08-23 03:50 - 2015-06-16 04:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-08-23 03:50 - 2015-06-16 03:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-08-23 03:50 - 2015-06-10 02:27 - 00411133 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-08-23 03:50 - 2015-05-31 05:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-08-23 03:50 - 2015-05-31 03:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-23 03:50 - 2015-05-31 03:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-23 03:50 - 2015-05-23 11:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-08-23 03:50 - 2015-05-23 02:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-08-23 03:50 - 2015-05-23 02:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-08-23 03:50 - 2015-05-08 01:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-23 03:50 - 2015-05-08 01:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-23 03:50 - 2015-05-08 00:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-23 03:50 - 2015-05-08 00:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-23 03:50 - 2015-05-07 23:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-08-23 03:50 - 2015-05-07 23:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-08-23 03:50 - 2015-05-03 08:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-08-23 03:50 - 2015-05-01 07:05 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-08-23 03:50 - 2015-05-01 06:48 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-08-23 03:50 - 2015-04-22 00:13 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2015-08-23 03:50 - 2015-04-21 23:49 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-08-23 03:50 - 2015-04-10 08:34 - 02256896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-23 03:50 - 2015-04-10 08:11 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-23 03:50 - 2015-03-30 13:47 - 00561928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-23 03:50 - 2015-03-20 11:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-08-23 03:50 - 2015-03-20 11:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-08-23 03:50 - 2015-03-20 10:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-08-23 03:50 - 2015-03-20 10:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-08-23 03:50 - 2015-03-20 09:56 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-08-23 03:50 - 2015-03-14 16:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-08-23 03:50 - 2015-03-14 16:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-08-23 03:50 - 2015-03-14 09:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-08-23 03:50 - 2015-03-09 10:02 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-23 03:50 - 2015-03-04 09:32 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-08-23 03:50 - 2015-03-04 09:12 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-08-23 03:50 - 2015-03-02 09:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-08-23 03:50 - 2015-03-02 09:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-08-23 03:50 - 2015-01-30 08:53 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-08-23 03:50 - 2015-01-29 09:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-08-23 03:50 - 2015-01-29 09:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-08-23 03:50 - 2015-01-29 09:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-08-23 03:50 - 2015-01-12 10:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-08-23 03:50 - 2015-01-12 09:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-08-23 03:50 - 2014-12-19 16:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-08-23 03:50 - 2014-12-19 16:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-08-23 03:50 - 2014-12-09 11:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-08-23 03:50 - 2014-12-09 09:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-08-23 03:50 - 2014-12-09 03:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-08-23 03:50 - 2014-11-14 14:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-08-23 03:50 - 2014-10-31 06:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-08-23 03:50 - 2014-10-31 06:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-08-23 03:50 - 2014-10-18 14:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-08-23 03:49 - 2015-07-29 07:24 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-08-23 03:49 - 2015-07-28 22:24 - 01148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 01116160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-08-23 03:49 - 2015-07-16 08:29 - 07458648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-23 03:49 - 2015-07-16 08:29 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-23 03:49 - 2015-07-16 08:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-23 03:49 - 2015-07-16 08:28 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-23 03:49 - 2015-07-14 03:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-08-23 03:49 - 2015-07-14 03:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-08-23 03:49 - 2015-07-11 01:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-23 03:49 - 2015-07-02 06:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-08-23 03:49 - 2015-07-02 06:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-08-23 03:49 - 2015-07-02 05:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-08-23 03:49 - 2015-07-02 05:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-08-23 03:49 - 2015-06-27 07:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-08-23 03:49 - 2015-05-21 21:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-08-23 03:49 - 2015-04-02 06:22 - 02985984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2015-08-23 03:49 - 2015-04-02 06:20 - 04417536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2015-08-23 03:49 - 2015-04-01 11:45 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2015-08-23 03:49 - 2015-04-01 10:31 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2015-08-23 03:49 - 2015-03-24 05:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-08-23 03:49 - 2015-03-24 05:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-08-23 03:49 - 2015-03-20 12:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-08-23 03:49 - 2015-03-20 12:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-08-23 03:49 - 2015-03-20 12:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-08-23 03:49 - 2015-03-20 11:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-08-23 03:49 - 2015-03-20 10:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-08-23 03:49 - 2015-03-20 10:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-08-23 03:49 - 2015-03-20 10:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-08-23 03:49 - 2015-03-13 09:11 - 02162176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-08-23 03:49 - 2015-03-13 08:39 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-08-23 03:49 - 2015-03-06 10:47 - 01696256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2015-08-23 03:49 - 2014-11-05 03:25 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-08-23 03:49 - 2014-11-05 03:25 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-08-23 03:49 - 2014-11-04 14:55 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-08-23 03:49 - 2014-11-04 14:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-08-23 03:49 - 2014-11-04 14:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-08-23 03:49 - 2014-11-04 14:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-08-23 03:49 - 2014-10-29 09:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-08-23 03:49 - 2014-10-29 09:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-08-23 03:49 - 2014-10-29 09:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-08-23 03:49 - 2014-10-29 09:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-08-23 03:49 - 2014-10-29 09:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-08-23 03:49 - 2014-10-29 09:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-08-23 03:49 - 2014-06-10 06:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-23 03:49 - 2014-06-10 06:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-23 03:48 - 2015-07-15 05:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-23 03:48 - 2015-07-15 05:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-08-23 03:48 - 2015-07-15 05:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-08-23 03:48 - 2015-07-14 11:22 - 02529880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-08-23 03:48 - 2015-07-14 11:21 - 01901776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-08-23 03:48 - 2015-07-11 01:42 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-08-23 03:48 - 2015-07-11 00:47 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-08-23 03:48 - 2015-07-07 17:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-08-23 03:48 - 2015-07-07 17:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-08-23 03:48 - 2015-07-07 17:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-08-23 03:48 - 2015-06-13 01:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-23 03:48 - 2015-06-13 00:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-23 03:48 - 2015-05-12 02:17 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-08-23 03:48 - 2015-05-03 23:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 03:48 - 2015-05-03 22:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 03:48 - 2015-05-03 22:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-08-23 03:48 - 2015-05-03 22:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-08-23 03:48 - 2015-04-25 10:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-08-23 03:48 - 2015-04-14 06:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-08-23 03:48 - 2015-04-14 06:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-08-23 03:48 - 2015-04-09 06:55 - 00410128 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-08-23 03:48 - 2015-04-09 06:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-08-23 03:48 - 2015-04-03 08:35 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-08-23 03:48 - 2015-04-03 08:14 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-08-23 03:48 - 2015-03-13 10:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-08-23 03:48 - 2015-03-13 10:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-08-23 03:48 - 2015-03-13 10:02 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2015-08-23 03:48 - 2015-02-24 16:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-08-23 03:48 - 2015-02-21 07:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-08-23 03:48 - 2015-02-18 07:19 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-08-23 03:48 - 2015-02-03 08:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-08-23 03:48 - 2015-02-03 08:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-08-23 03:48 - 2015-02-03 07:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-08-23 03:48 - 2015-02-03 07:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-08-23 03:48 - 2015-01-30 11:01 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-08-23 03:48 - 2015-01-30 11:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-08-23 03:48 - 2015-01-30 10:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-08-23 03:48 - 2015-01-30 10:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-08-23 03:48 - 2015-01-30 09:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-08-23 03:48 - 2015-01-30 09:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-08-23 03:48 - 2015-01-30 09:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-08-23 03:48 - 2015-01-28 10:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-08-23 03:48 - 2015-01-28 09:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-08-23 03:48 - 2015-01-20 02:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-08-23 03:48 - 2014-12-19 14:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-08-23 03:48 - 2014-12-12 10:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-08-23 03:47 - 2015-07-11 02:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-08-23 03:47 - 2015-07-11 01:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-08-23 03:47 - 2015-07-11 01:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-08-23 03:47 - 2015-07-11 00:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-08-23 03:47 - 2015-06-11 11:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-23 03:47 - 2015-06-11 00:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-23 03:46 - 2015-07-29 22:37 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-23 03:46 - 2015-07-29 22:30 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-23 03:46 - 2015-07-29 22:23 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-23 03:46 - 2015-07-25 02:57 - 04177408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-08-23 03:46 - 2015-07-25 02:57 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-23 03:46 - 2015-07-25 02:52 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-23 03:46 - 2015-07-25 01:27 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-23 03:46 - 2015-07-25 01:23 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-23 03:46 - 2015-07-10 01:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-23 03:46 - 2015-07-10 01:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-23 03:46 - 2015-07-10 00:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-23 03:46 - 2015-06-16 13:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-08-23 03:46 - 2015-06-16 13:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-08-23 03:46 - 2015-06-12 04:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-08-23 03:46 - 2015-06-12 04:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-08-23 03:46 - 2015-05-12 00:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-08-23 03:46 - 2015-04-28 21:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-08-23 03:46 - 2015-04-28 21:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls
2015-08-23 03:46 - 2015-04-16 14:17 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-08-23 03:46 - 2015-04-10 08:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-23 03:46 - 2015-04-10 08:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-08-23 03:46 - 2015-04-01 12:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-23 03:46 - 2015-04-01 12:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-08-23 03:46 - 2015-04-01 12:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-08-23 03:46 - 2015-04-01 12:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-08-23 03:46 - 2015-04-01 11:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-08-23 03:46 - 2015-04-01 11:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-23 03:46 - 2015-04-01 11:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-23 03:46 - 2015-04-01 10:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-08-23 03:46 - 2015-04-01 10:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-08-23 03:46 - 2015-04-01 10:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-08-23 03:46 - 2015-04-01 10:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-08-23 03:46 - 2015-04-01 10:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-23 03:46 - 2015-04-01 10:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-08-23 03:46 - 2015-03-13 12:03 - 00239424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-08-23 03:46 - 2015-03-13 12:03 - 00154432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-08-23 03:46 - 2015-03-04 18:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-08-23 03:46 - 2015-03-04 11:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-08-23 03:46 - 2015-03-04 10:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-08-23 03:46 - 2015-01-31 07:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-08-23 03:46 - 2015-01-28 09:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-08-23 03:46 - 2015-01-28 09:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-08-23 03:46 - 2015-01-27 12:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-08-23 03:46 - 2015-01-27 10:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-08-23 03:45 - 2015-04-25 10:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-08-23 03:45 - 2015-04-25 10:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-08-23 03:45 - 2015-04-23 23:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-23 03:45 - 2015-04-23 23:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-23 03:45 - 2015-03-06 11:08 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2015-08-23 03:45 - 2015-03-06 10:43 - 01969664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2015-08-23 03:45 - 2015-01-30 02:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-08-23 03:45 - 2015-01-30 02:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-08-23 03:45 - 2014-12-06 11:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-23 03:45 - 2014-12-06 09:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-08-23 03:44 - 2015-05-12 21:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-08-23 03:44 - 2015-05-03 23:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-08-23 03:44 - 2015-05-03 22:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-08-23 03:44 - 2015-03-14 08:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-23 03:44 - 2015-02-08 07:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-23 03:44 - 2015-02-08 07:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-08-23 03:44 - 2015-01-30 10:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-08-23 03:44 - 2015-01-30 09:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-08-23 03:44 - 2015-01-30 09:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-08-23 03:44 - 2015-01-30 09:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-08-23 03:44 - 2015-01-30 09:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-08-23 03:44 - 2015-01-30 09:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-08-23 03:44 - 2015-01-30 09:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-08-23 03:44 - 2015-01-30 09:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-08-23 03:44 - 2015-01-28 07:47 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-23 03:44 - 2015-01-28 07:41 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-23 03:44 - 2014-12-11 13:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-08-23 03:44 - 2014-07-24 11:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-08-23 03:44 - 2014-07-24 11:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-08-23 03:43 - 2015-05-08 00:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-08-23 02:38 - 2015-09-08 06:06 - 00003926 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3DAF5571-29A1-4A4F-BEAF-7B840134C7E9}
2015-08-23 02:38 - 2015-08-24 08:13 - 00000000 __SHD C:\Users\LENOVO\AppData\Local\EmieUserList
2015-08-23 02:38 - 2015-08-24 08:13 - 00000000 __SHD C:\Users\LENOVO\AppData\Local\EmieSiteList
2015-08-23 02:38 - 2015-08-24 08:13 - 00000000 __SHD C:\Users\LENOVO\AppData\Local\EmieBrowserModeList
2015-08-23 02:36 - 2015-08-23 02:36 - 00001453 _____ C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-23 02:36 - 2015-08-23 02:36 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-08-23 02:36 - 2015-08-23 02:36 - 00000020 ___SH C:\Users\LENOVO\ntuser.ini
2015-08-23 02:34 - 2015-08-23 02:34 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-23 02:34 - 2015-08-23 02:34 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2015-08-23 02:31 - 2015-08-23 02:31 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-08-23 02:29 - 2015-08-23 02:36 - 00000000 ____D C:\Users\LENOVO
2015-08-23 02:29 - 2015-08-23 02:34 - 00032388 _____ C:\WINDOWS\diagwrn.xml
2015-08-23 02:29 - 2015-08-23 02:34 - 00032388 _____ C:\WINDOWS\diagerr.xml
2015-08-23 02:29 - 2015-08-23 02:29 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 02:29 - 2015-08-23 02:29 - 00000000 ___RD C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 02:29 - 2015-08-23 02:29 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-08-23 02:29 - 2013-08-22 23:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-23 02:29 - 2013-08-22 23:36 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____D C:\Program Files\Realtek
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____D C:\Program Files (x86)\USB Camera
2015-08-23 02:26 - 2015-08-28 15:25 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-08-23 02:26 - 2015-08-28 15:25 - 00000000 ____D C:\WINDOWS\system32\NV
2015-08-23 02:26 - 2015-08-23 02:30 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-23 02:26 - 2015-08-23 02:30 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-23 02:26 - 2015-08-23 02:30 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-23 02:26 - 2015-08-23 02:26 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2015-08-23 02:26 - 2015-08-23 02:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2015-08-23 02:26 - 2015-08-23 02:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-23 02:26 - 2015-08-23 02:26 - 00000000 ____D C:\Program Files\Synaptics
2015-08-23 02:26 - 2014-10-01 19:54 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-08-23 02:26 - 2014-10-01 19:54 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-08-23 02:26 - 2013-10-29 07:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-23 02:26 - 2013-10-29 07:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 01042720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-23 02:26 - 2013-10-29 07:38 - 00580384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-23 02:26 - 2013-10-25 19:44 - 03435888 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-21 09:38 - 2015-08-24 06:43 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense
2015-08-20 17:51 - 2015-03-04 15:26 - 00011105 ____N C:\WINDOWS\system32\AutoconfigV2.cab
2015-08-14 01:00 - 2015-09-01 06:26 - 00000000 ____D C:\Program Files (x86)\Mp4Gain
2015-08-13 08:44 - 2015-08-13 08:44 - 00000000 ____D C:\ProgramData\iSkysoft
2015-08-13 06:43 - 2015-08-13 08:55 - 00000000 ____D C:\Users\LENOVO\Documents\iSkysoft Video Editor
2015-08-13 06:43 - 2015-08-13 06:43 - 00000000 ____D C:\Users\LENOVO\AppData\Local\iSkysoft
2015-08-13 06:36 - 2015-08-13 06:43 - 00000000 ____D C:\Users\Public\Documents\iSkysoft
2015-08-13 05:54 - 2004-03-09 01:00 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2015-08-13 05:54 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2015-08-13 05:54 - 2004-03-09 00:00 - 00132880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSINET.OCX
2015-08-09 18:15 - 2015-08-09 18:15 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-08-09 17:35 - 2015-08-09 17:36 - 00000000 ____D C:\Users\LENOVO\Desktop\Firefox bookmarks backup 9 aug 2015
2015-08-09 16:59 - 2015-08-23 02:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-08-09 16:59 - 2015-08-09 16:59 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-08-09 16:54 - 2015-08-13 04:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-09 16:54 - 2015-08-09 16:59 - 00000000 ____D C:\Program Files\Microsoft Office
2015-08-09 16:54 - 2015-08-09 16:54 - 00000000 __RHD C:\MSOCache
2015-08-09 16:54 - 2015-08-09 16:54 - 00000000 ____D C:\Users\LENOVO\AppData\Local\Microsoft Help

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-08 07:48 - 2013-09-12 17:50 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-122341192-2292051211-3585160535-1002
2015-09-08 07:44 - 2014-11-21 16:44 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-08 07:41 - 2013-09-10 10:18 - 00000000 ____D C:\Program Files (x86)\EaseUS
2015-09-08 07:38 - 2013-08-22 22:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-08 07:32 - 2013-09-13 17:42 - 00000000 ____D C:\Users\LENOVO\AppData\Local\CrashDumps
2015-09-08 07:32 - 2013-09-10 23:19 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Media Player Classic
2015-09-08 07:00 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-08 01:46 - 2013-09-10 23:45 - 00000000 ____D C:\FDownload
2015-09-08 00:10 - 2013-09-15 13:15 - 00001681 _____ C:\Users\Public\Desktop\Recuva.lnk
2015-09-08 00:10 - 2013-09-15 13:15 - 00000000 ____D C:\Program Files\Recuva
2015-09-07 07:48 - 2015-07-31 20:04 - 00002035 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2015-09-06 17:43 - 2013-09-12 06:57 - 00000000 ____D C:\Users\LENOVO\AppData\Local\CutePDF Writer
2015-09-06 14:35 - 2013-08-22 21:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-09-03 09:15 - 2015-08-01 07:21 - 00000000 ____D C:\Users\LENOVO\Desktop\Motivational Pics
2015-09-02 18:43 - 2014-10-03 21:53 - 00000000 ____D C:\Users\LENOVO\Desktop\zujin
2015-09-01 06:39 - 2015-01-23 23:16 - 00000000 ____D C:\AdwCleaner
2015-09-01 02:44 - 2015-02-20 19:02 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-08-31 23:47 - 2014-06-30 09:13 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-31 07:30 - 2013-11-29 05:32 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\FileZilla
2015-08-27 05:26 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-08-26 03:24 - 2015-07-28 18:19 - 00000000 ____D C:\Users\LENOVO\Desktop\Majuprimus Filing
2015-08-25 16:06 - 2015-07-10 21:39 - 00000000 ___HD C:\$Windows.~BT
2015-08-25 13:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-25 12:19 - 2013-09-12 07:04 - 00233495 _____ C:\WINDOWS\hpoins21.dat
2015-08-25 12:19 - 2013-09-12 07:04 - 00001360 _____ C:\ProgramData\hpzinstall.log
2015-08-25 09:38 - 2012-07-26 13:26 - 00000229 _____ C:\WINDOWS\win.ini
2015-08-25 07:44 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\rescache
2015-08-25 06:00 - 2012-07-26 15:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-25 00:22 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\AppCompat
2015-08-24 06:44 - 2013-08-22 22:44 - 00429664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-24 06:43 - 2014-11-21 23:56 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-24 06:43 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-08-23 18:24 - 2013-08-22 23:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-23 04:02 - 2014-11-21 16:25 - 00000000 ____D C:\Program Files\Windows Journal
2015-08-23 03:39 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-23 03:32 - 2015-08-04 11:03 - 00000000 ____D C:\Users\LENOVO\Desktop\MAJU_ RECEIPTS#
2015-08-23 02:37 - 2013-09-10 10:14 - 00000000 ____D C:\Users\LENOVO\AppData\Local\Packages
2015-08-23 02:34 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\Registration
2015-08-23 02:33 - 2013-08-22 23:36 - 00000000 __RSD C:\WINDOWS\Media
2015-08-23 02:33 - 2013-08-22 23:36 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-23 02:31 - 2015-04-22 06:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-23 02:31 - 2014-11-23 05:17 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-08-23 02:31 - 2014-11-23 05:17 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-08-23 02:31 - 2014-11-21 16:25 - 00000000 ____D C:\WINDOWS\ShellNew
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-08-23 02:31 - 2014-10-08 00:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Downloader(xmlbar)
2015-08-23 02:31 - 2014-06-30 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-23 02:31 - 2014-02-21 08:55 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 02:31 - 2014-02-21 08:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 02:31 - 2014-02-08 03:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NameWiz
2015-08-23 02:31 - 2014-01-20 17:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Cope
2015-08-23 02:31 - 2013-12-11 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Swivel
2015-08-23 02:31 - 2013-11-29 05:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-08-23 02:31 - 2013-10-09 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2015-08-23 02:31 - 2013-10-09 01:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2015-08-23 02:31 - 2013-09-16 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2015-08-23 02:31 - 2013-09-15 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2015-08-23 02:31 - 2013-09-12 07:30 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2015-08-23 02:31 - 2013-09-12 07:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-08-23 02:31 - 2013-09-12 06:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CutePDF
2015-08-23 02:31 - 2013-09-11 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\风行
2015-08-23 02:31 - 2013-09-10 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\IME
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-08-23 02:31 - 2013-08-22 21:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-23 02:31 - 2013-04-13 05:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2015-08-23 02:31 - 2013-04-13 05:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2015-08-23 02:31 - 2013-04-13 05:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:31 - 2013-04-13 05:17 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-08-23 02:31 - 2013-04-13 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2015-08-23 02:31 - 2013-04-13 05:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-08-23 02:31 - 2013-04-13 04:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-08-23 02:31 - 2012-07-26 13:37 - 00000000 ____D C:\Users\Default.migrated
2015-08-23 02:30 - 2015-07-25 01:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\硕鼠软件
2015-08-23 02:30 - 2015-05-06 23:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-08-23 02:30 - 2014-10-07 23:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
2015-08-23 02:30 - 2013-09-28 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2015-08-23 02:30 - 2013-08-22 23:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\IME
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\Help
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-08-23 02:30 - 2012-10-10 07:10 - 00000000 ____D C:\ProgramData\PRICache
2015-08-23 02:29 - 2013-10-09 01:06 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2015-08-23 02:29 - 2013-09-10 10:14 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:29 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-23 02:29 - 2013-04-13 05:30 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:27 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\System
2015-08-23 02:25 - 2013-08-22 21:36 - 00000000 __RHD C:\Users\Default
2015-08-23 00:33 - 2013-04-13 05:17 - 00432016 _____ C:\WINDOWS\system32\prfh0804.dat
2015-08-23 00:33 - 2013-04-13 05:17 - 00132686 _____ C:\WINDOWS\system32\prfc0804.dat
2015-08-22 13:14 - 2013-09-16 02:10 - 05476352 ___SH C:\Users\LENOVO\Desktop\Thumbs.db
2015-08-22 03:14 - 2012-07-26 16:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2015-08-19 23:58 - 2014-02-17 23:45 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Audacity
2015-08-14 09:50 - 2014-11-22 00:03 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-08-14 09:50 - 2014-11-22 00:03 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-13 03:48 - 2013-09-10 17:57 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-13 03:46 - 2013-09-10 17:57 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-10 19:05 - 2013-09-15 19:31 - 00562176 ___SH C:\Users\LENOVO\Downloads\Thumbs.db
2015-08-09 18:49 - 2015-07-25 01:00 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\flvcd
2015-08-09 16:54 - 2013-04-13 05:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

==================== Files in the root of some directories =======

2013-09-13 19:04 - 2013-11-04 04:35 - 0000911 _____ () C:\Users\LENOVO\AppData\Roaming\coreavc.ini
2015-09-01 01:29 - 2015-09-01 01:29 - 0095659 _____ () C:\Users\LENOVO\AppData\Local\ars.cache
2015-09-01 01:29 - 2015-09-01 01:29 - 0246745 _____ () C:\Users\LENOVO\AppData\Local\census.cache
2015-09-01 01:21 - 2015-09-01 01:21 - 0000036 _____ () C:\Users\LENOVO\AppData\Local\housecall.guid.cache
2013-04-13 05:09 - 2013-04-13 05:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-09-12 07:04 - 2015-08-25 12:19 - 0001360 _____ () C:\ProgramData\hpzinstall.log
2014-03-15 01:16 - 2015-03-29 04:34 - 0030600 _____ () C:\ProgramData\wifv

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-08 02:23

==================== End of FRST.txt ============================

 

 

 

HERE'S THE ADDITION.TXT

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-09-2015
Ran by LENOVO (2015-09-08 07:49:25)
Running from C:\Users\LENOVO\Desktop
Windows 8.1 (X64) (2015-08-22 18:36:36)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-122341192-2292051211-3585160535-500 - Administrator - Disabled)
Guest (S-1-5-21-122341192-2292051211-3585160535-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-122341192-2292051211-3585160535-1008 - Limited - Enabled)
LENOVO (S-1-5-21-122341192-2292051211-3585160535-1002 - Administrator - Enabled) => C:\Users\LENOVO
UpdatusUser (S-1-5-21-122341192-2292051211-3585160535-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3 Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.3.2225 - AVAST Software)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
C6200 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
C6200_Help (x32 Version: 100.0.206.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
ConvertHelper 3.1.1 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version:  - DownloadHelper)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version:  3.0 - CutePDF.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
EaseUS Todo Backup Free 8.6  (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 8.6 - CHENGDU YIWO Tech Development Co., Ltd)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)
Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )
FileZilla Client 3.12.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.12.0.2 - Tim Kosse)
Freemake Video Converter version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart All-In-One Driver Software (HKLM\...\{A96C5DB7-40F9-46DD-B36F-9E657D1D9E04}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.12.1023.1 - Vimicro)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.4331.52 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Media Cope 4.0 (HKLM-x32\...\Media Cope_is1) (Version:  - Media Cope)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 40.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 en-US)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3 - Mozilla)
NameWiz (HKLM-x32\...\NameWiz) (Version:  - )
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVIDIA Graphics Driver 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.0 - Lenovo)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
PS_AIO_02_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
PS_AIO_02_Software (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
PS_AIO_02_Software_Min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.210 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6798 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.) Hidden
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.23 - Piriform)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Swivel (HKLM-x32\...\Swivel) (Version: 1.11 - Newgrounds.com, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.13 - Synaptics Incorporated)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
UltraGet Video Downloader version 3.0.7 (HKLM-x32\...\{D6DAC6E1-400B-4819-89A9-6B8BBEB3A516}_is1) (Version: 3.0.7 - Anvsoft, Inc.)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)
UserGuide (x32 Version: 1.0.0.9 - Lenovo) Hidden
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Driver Package - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wondershare MobileGo for Android ( Version 4.0.0 ) (HKLM-x32\...\{1E04C795-7359-4E05-8A0E-5644F777AA08}_is1) (Version: 4.0.0 - Wondershare)
硕鼠 0.4.7.9 测试版-3 (HKLM-x32\...\硕鼠) (Version: 0.4.7.9 测试版-3 - flvcd.com)
谷歌拼音输入法 2.7 (HKLM\...\GooglePinyin2) (Version:  - Google Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-122341192-2292051211-3585160535-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

23-08-2015 03:39:59 Windows Update
26-08-2015 08:47:58 JRT Pre-Junkware Removal
27-08-2015 04:55:23 restore01_after windows 8.1 upgrade
30-08-2015 21:11:12 Installed SDFormatter.
01-09-2015 06:28:42 Removed SDFormatter.
04-09-2015 01:40:40 Restore Point Created by FRST
06-09-2015 17:51:26 avast! antivirus system restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 21:25 - 2015-09-04 01:40 - 00000035 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1197CCD0-CD1F-45F1-B88A-0A05720A91FF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-06] (AVAST Software)
Task: {353788B4-807D-4C66-B67D-E1BDF8862A8C} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.)
Task: {3E9208EB-35A9-4FB4-B41B-1CC60DFBF559} - System32\Tasks\Google Pinyin Daemon => C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinDaemon.exe [2015-07-13] (Google Inc.)
Task: {625AE1D3-A80F-413C-84C7-A776EE930D40} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {88488CCA-905A-48DF-B3AB-CCD9914479E8} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-08-13] (Microsoft Corporation)
Task: {8C7910E1-495F-493B-A78A-996ACE880767} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {A0A2EFF0-71F3-46BD-B67B-87EB53ED92DA} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-27] (Synaptics Incorporated)
Task: {B84C2CF6-6D69-453B-BE5C-4D580823354E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-02] (Piriform Ltd)
Task: {C54FC35C-FE0E-460C-97E6-4BA353ADF890} - System32\Tasks\{885FAABB-6C84-4CA1-BFAE-1C523497BFD4} => pcalua.exe -a "C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinUninstaller.exe"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (Whitelisted) ==============

2013-09-12 06:39 - 2012-10-05 10:49 - 00087152 _____ () C:\WINDOWS\System32\cpwmon64.dll
2012-09-30 10:02 - 2012-09-30 10:02 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-09-30 09:59 - 2012-09-30 09:59 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2012-09-30 10:01 - 2012-09-30 10:01 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2015-07-10 01:32 - 2015-07-10 01:32 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00253992 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
2015-09-08 07:41 - 2015-06-23 01:08 - 00245800 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
2015-09-06 18:43 - 2015-09-06 18:43 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-09-06 18:43 - 2015-09-06 18:43 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-08 02:02 - 2015-09-08 02:02 - 02962432 _____ () C:\Program Files\AVAST Software\Avast\defs\15090701\algo.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2015-08-13 06:43 - 2014-09-11 18:58 - 01498112 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
2015-08-13 06:43 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
2015-09-06 18:43 - 2015-09-06 18:43 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-04-13 05:04 - 2012-06-26 01:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00098856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00017448 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00088616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 01296424 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00060968 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00022568 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00186920 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00165416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00058408 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00015912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00108072 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00030248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00068136 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00158248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll
2015-09-08 07:41 - 2015-03-14 11:54 - 00281128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll
2015-09-08 07:41 - 2015-03-14 11:54 - 00072232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00139816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00037416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll
2015-09-08 07:41 - 2015-03-14 11:54 - 00759848 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00193064 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00407080 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidImage.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00148008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00076840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00207912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00024616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00020520 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00032296 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00034856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00064040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00025128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00115752 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00194088 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00037928 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00136232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00020008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidDeviceManager.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00043048 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00353832 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceManager.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00027176 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceAdapter.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00137256 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Device.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00146984 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Partition.dll
2015-09-08 07:41 - 2015-06-26 09:12 - 00033320 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\LibraryManager.dll
2015-09-08 07:41 - 2015-03-14 12:05 - 00249896 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\uexper.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00223272 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\traynet.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00275496 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\libcurl.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00118328 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\zlib1.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00223784 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-122341192-2292051211-3585160535-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Theme2\img7.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BDAAED29-94C6-4E48-B31C-1C6B01C03E3D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
FirewallRules: [TCP Query User{142A1148-A214-4501-8D25-403F5EF5DB55}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [UDP Query User{BBED7723-927D-4397-B2B1-F50F8D0C9C9F}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [TCP Query User{71BEBC61-1538-49FE-8E92-92E8D3A06A1C}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [UDP Query User{4536F095-6EE9-4FF8-B742-0F0C4D11BCD0}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [TCP Query User{D60F3C32-5AA0-495B-B0E2-8833D7DBD837}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [UDP Query User{90ACC760-EDE0-435A-A86B-85813924E992}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [TCP Query User{D5EC9ADC-57F4-45C0-8E79-03C512A294B5}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [UDP Query User{04210088-E56B-46D7-ACD3-25E6FBDD9D16}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [{C714BB6C-84BE-40E5-9E77-61DFA6EBCDD3}] => (Allow) C:\Users\LENOVO\AppData\Local\Temp\7zS57BE\HPDiagnosticCoreUI.exe
FirewallRules: [{D0D1AF2F-C3BF-4325-B8E8-7456285DC5F6}] => (Allow) C:\Users\LENOVO\AppData\Local\Temp\7zS57BE\HPDiagnosticCoreUI.exe
FirewallRules: [{6905CE10-B03D-4513-859A-620C948E9F13}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{1AEA1C2F-A62E-4A8C-9C04-1B07FD225E05}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{4843D0A9-6321-46E9-B21C-85509A64BE45}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{168BD5E7-4A1C-477E-AEFB-E9B848107733}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{D2CC26F6-6210-4582-9815-36F5DFCFF1AC}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{597DF760-9F07-46D1-A775-7457B31662B7}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe

==================== Faulty Device Manager Devices =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (09/08/2015 07:49:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:49:17Z. Error Code: 0x80070005.

Error: (09/08/2015 07:48:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:48:47Z. Error Code: 0x80070005.

Error: (09/08/2015 07:48:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:48:17Z. Error Code: 0x80070005.

Error: (09/08/2015 07:47:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:47:47Z. Error Code: 0x80070005.

Error: (09/08/2015 07:47:14 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:47:14Z. Error Code: 0x80070005.

Error: (09/08/2015 07:46:33 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:46:33Z. Error Code: 0x80070005.

Error: (09/08/2015 07:45:59 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:45:59Z. Error Code: 0x80070005.

Error: (09/08/2015 07:45:29 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:45:29Z. Error Code: 0x80070005.

Error: (09/08/2015 07:44:46 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:44:46Z. Error Code: 0x80070005.

Error: (09/08/2015 07:44:16 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:44:16Z. Error Code: 0x80070005.


System errors:
=============
Error: (09/07/2015 05:29:59 PM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 05:29:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Superfetch service terminated with the following error:
%%1062

Error: (09/07/2015 05:21:39 PM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 04:28:50 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (09/07/2015 10:22:07 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 10:05:07 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 06:57:24 AM) (Source: DCOM) (EventID: 10010) (User: idea-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (09/07/2015 05:24:50 AM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (09/06/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
%%1275

Error: (09/06/2015 06:07:08 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\LENOVO\AppData\Local\Temp\ehdrv.sys


Microsoft Office:
=========================
Error: (09/08/2015 07:49:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:49:17Z

Error: (09/08/2015 07:48:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:48:47Z

Error: (09/08/2015 07:48:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:48:17Z

Error: (09/08/2015 07:47:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:47:47Z

Error: (09/08/2015 07:47:14 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:47:14Z

Error: (09/08/2015 07:46:33 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:46:33Z

Error: (09/08/2015 07:45:59 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:45:59Z

Error: (09/08/2015 07:45:29 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:45:29Z

Error: (09/08/2015 07:44:46 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:44:46Z

Error: (09/08/2015 07:44:16 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:44:16Z


CodeIntegrity:
===================================
  Date: 2015-08-19 17:11:24.559
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-19 17:11:23.355
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-18 14:03:19.221
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-18 14:03:18.060
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:46:06.894
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:46:05.696
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:41:28.240
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:41:27.069
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:29:05.514
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:29:04.311
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel® Core™ i7-3632QM CPU @ 2.20GHz
Percentage of memory in use: 11%
Total physical RAM: 16239.52 MB
Available physical RAM: 14354.46 MB
Total Virtual: 17263.52 MB
Available Virtual: 15297.34 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:123.45 GB) (Free:50.81 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:92.69 GB) (Free:89.57 GB) NTFS
Drive f: (LRS_ESP) (Fixed) (Total:0.97 GB) (Free:0.49 GB) FAT32 ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 522E827C)

Partition: GPT.

==================== End of Addition.txt ============================

 

I am still receiving avast malware infection pop up when logging in .

[legna]

Hi,

 

Uninstall and reinstalled EaseUS Todo Backup successfully.

 

Here's the FRST.txt

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-09-2015
Ran by LENOVO (administrator) on IDEA-PC (08-09-2015 07:49:02)
Running from C:\Users\LENOVO\Desktop
Loaded Profiles: UpdatusUser & LENOVO (Available Profiles: UpdatusUser & LENOVO)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinDaemon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Wondershare) C:\Program Files (x86)\Wondershare\MobileGo for Android\MobileGoService.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(iSkySoft) C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
() C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17709_none_fa7932f59afc2e40\TiWorker.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13262480 2012-12-07] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1256080 2012-12-03] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] => C:\windows\system32\hkcmd.exe
HKLM\...\Run: [Persistence] => C:\windows\system32\igfxpers.exe
HKLM\...\Run: [SynLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-08-27] (Synaptics)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-09-30] ()
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-15] (Lenovo)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-04-13] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-04-13] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-05-03] (Vimicro)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-31] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1694208 2013-05-04] (Wondershare)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe [2080768 2014-09-11] (iSkySoft)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-09-06] (AVAST Software)
HKLM-x32\...\Run: [EaseUS TB Tray Agent] => C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe [253992 2014-12-15] ()
HKU\S-1-5-21-122341192-2292051211-3585160535-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-11-21] (Microsoft Corporation)
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\...\Run: [Wondershare Helper Compact] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1694208 2013-05-04] (Wondershare)
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-02] (Piriform Ltd)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-12-26] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-06] (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-15] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-09-12]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MobileGo Service.lnk [2013-09-28]
ShortcutTarget: MobileGo Service.lnk -> C:\Program Files (x86)\Wondershare\MobileGo for Android\MobileGoService.exe (Wondershare)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{D4F0B1D2-BCEE-4F56-ACF4-C1F8BBA110CA}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-sg/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-122341192-2292051211-3585160535-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-09-30] (Qualcomm Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-09-06] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-06] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2013-07-24] (RocketLife, LLP)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\searchplugins\lazy-inbox.xml [2013-09-11]
FF Extension: YouTube Video and Audio Downloader - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2015-02-26]
FF Extension: Firebug - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2013-09-10]
FF Extension: 硕鼠下载助手(FLVCD Helper) - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2014-10-07]
FF Extension: Sort Tabs - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2014-09-11]
FF Extension: The Addon Bar (restored) - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\[email protected] [2015-04-08]
FF Extension: Screengrab  (fix version) - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi [2013-09-10]
FF Extension: FlashGot - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2013-12-18]
FF Extension: eBay Toolbar - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{249df6a2-e336-47d1-b6c3-ec711ad140ca}.xpi [2015-04-23]
FF Extension: Ebates Cash Back - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{35d6291e-1d4b-f9b4-c52f-77e6410d1326}.xpi [2015-03-25]
FF Extension: Easy Youtube Video Downloader Express - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2015-02-26]
FF Extension: Yahoo Mail Hide Ad Panel - C:\Users\LENOVO\AppData\Roaming\Mozilla\Firefox\Profiles\7cyjnh17.default\Extensions\{c37bac34-849a-4d28-be41-549b2c76c64e}.xpi [2014-06-07]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-06]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-04-13]
FF HKU\S-1-5-21-122341192-2292051211-3585160535-1002\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Media Cope\Extensions\wifv
FF Extension: Media Cope - Web Image Fullscreen Viewer - C:\Program Files (x86)\Media Cope\Extensions\wifv [2014-01-20]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-09-06]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [220288 2012-09-30] (Qualcomm Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-06] (AVAST Software)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [36904 2015-08-01] (CHENGDU YIWO Tech Development Co., Ltd)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [File not signed]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [166720 2012-06-26] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-07] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-07] (Hewlett-Packard) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-30] (Atheros) [File not signed]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-06] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-06] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-09-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-09-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-09-06] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-06] (AVAST Software)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-30] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-09-25] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-09-25] (Windows ® Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48168 2014-12-15] ()
S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [43664 2015-09-01] ()
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
S3 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-09-01] ()
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [990976 2012-10-23] (Vimicro Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-08 07:49 - 2015-09-08 07:49 - 00020309 _____ C:\Users\LENOVO\Desktop\FRST.txt
2015-09-08 07:48 - 2015-09-08 07:48 - 00000000 ____D C:\Users\LENOVO\Desktop\FRST-OlderVersion
2015-09-08 07:47 - 2015-09-08 07:47 - 00012625 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-08 07:42 - 2015-09-08 07:42 - 00002156 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 8.6 .lnk
2015-09-08 07:42 - 2015-09-08 07:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup Free 8.6
2015-09-08 07:41 - 2014-12-15 01:03 - 00024104 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\WINDOWS\system32\fbnative.exe
2015-09-08 07:38 - 2015-09-08 07:38 - 00001746 _____ C:\WINDOWS\PFRO.log
2015-09-08 07:38 - 2015-09-08 07:38 - 00000077 _____ C:\WINDOWS\setupact.log
2015-09-08 07:38 - 2015-09-08 07:38 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-09-08 07:18 - 2015-09-08 07:27 - 109092008 _____ (CHENGDU YIWO Tech Development Co., Ltd ) C:\Users\LENOVO\Desktop\tb_free(EaseUS Todo Backup Free 5.8).exe
2015-09-07 17:22 - 2015-09-07 17:23 - 49986349 _____ C:\Users\LENOVO\Desktop\How to fix 'Damaged SD card' - SD card is damaged. Try reformatting it (Samsung Galaxy Note 4).mp4
2015-09-06 18:43 - 2015-09-07 12:18 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-09-06 18:43 - 2015-09-06 18:43 - 01048344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00447944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00378880 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-09-06 18:43 - 2015-09-06 18:43 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00150672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-09-06 18:43 - 2015-09-06 18:43 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-09-06 18:43 - 2015-09-06 18:43 - 00001949 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\AVAST Software
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\ProgramData\AVAST Software
2015-09-06 18:43 - 2015-09-06 18:43 - 00000000 ____D C:\Program Files\AVAST Software
2015-09-06 18:04 - 2015-09-06 18:04 - 02870984 _____ (ESET) C:\Users\LENOVO\Desktop\esetsmartinstaller_enu.exe
2015-09-06 17:44 - 2015-09-06 17:47 - 158417712 _____ (AVAST Software) C:\Users\LENOVO\Desktop\avast_free_antivirus_setup.exe
2015-09-06 17:44 - 2015-09-06 17:44 - 05961160 _____ (AVAST Software) C:\Users\LENOVO\Desktop\avastclear.exe
2015-09-06 17:42 - 2015-09-06 17:42 - 00000228 _____ C:\Users\LENOVO\Desktop\Avast Uninstall Utility Download aswClear for Avast Removal.URL
2015-09-06 04:53 - 2015-09-06 04:53 - 00000000 ____D C:\Users\LENOVO\Desktop\Maju Photos
2015-09-06 01:55 - 2015-09-06 01:55 - 00000311 _____ C:\Users\LENOVO\Desktop\4.0 ice cream sandwich - My Android phone screen is un-usable, how do I transfer all my data to a new phone - Android Enthus.URL
2015-09-02 06:26 - 2015-09-08 07:49 - 00000000 ____D C:\FRST
2015-09-02 06:18 - 2015-09-08 07:48 - 02190336 _____ (Farbar) C:\Users\LENOVO\Desktop\FRST64.exe
2015-09-01 05:11 - 2015-09-01 05:11 - 00000000 ____D C:\Users\LENOVO\AppData\Local\2Browse
2015-09-01 01:29 - 2015-09-01 01:29 - 00246745 _____ C:\Users\LENOVO\AppData\Local\census.cache
2015-09-01 01:29 - 2015-09-01 01:29 - 00095659 _____ C:\Users\LENOVO\AppData\Local\ars.cache
2015-09-01 01:21 - 2015-09-01 01:21 - 00000036 _____ C:\Users\LENOVO\AppData\Local\housecall.guid.cache
2015-09-01 00:39 - 2015-09-01 00:39 - 00043664 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2015-08-31 23:57 - 2015-09-01 02:23 - 00000000 ____D C:\Users\LENOVO\Desktop\FakeAVRemover
2015-08-31 23:03 - 2015-09-08 07:44 - 00000000 ____D C:\Users\LENOVO\Desktop\Removal Tools
2015-08-31 16:49 - 2015-08-31 16:49 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-31 16:49 - 2015-08-31 16:49 - 00001170 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-08-31 16:49 - 2015-08-31 16:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-31 16:49 - 2015-08-31 16:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-31 16:45 - 2015-08-31 16:45 - 00000000 ____D C:\Users\LENOVO\Desktop\firefox
2015-08-30 21:10 - 2015-08-30 21:10 - 00000000 ____D C:\Users\LENOVO\AppData\Local\Downloaded Installations
2015-08-29 20:15 - 2015-08-30 17:44 - 00000000 ____D C:\Users\LENOVO\Desktop\teresa
2015-08-27 01:27 - 2015-09-06 03:47 - 00000000 ____D C:\Users\LENOVO\Desktop\after windows 8.1 upgrade,Internet Connection but Browsers do not work
2015-08-26 08:55 - 2015-08-26 08:55 - 01605632 _____ C:\Users\LENOVO\Desktop\adwcleaner_5.003.exe
2015-08-26 01:14 - 2015-08-26 01:14 - 00000000 ____D C:\Users\LENOVO\AppData\Local\GWX
2015-08-25 05:59 - 2015-08-11 09:20 - 25191936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-25 05:59 - 2015-08-11 08:20 - 19871232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-24 06:47 - 2015-05-25 21:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-08-24 06:47 - 2015-05-25 21:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-24 06:43 - 2015-08-24 06:44 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-08-24 06:43 - 2015-08-24 06:43 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-08-24 06:43 - 2015-08-24 06:43 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-24 02:14 - 2015-09-02 09:47 - 00000000 ____D C:\Users\LENOVO\Desktop\Maju Forms
2015-08-23 18:25 - 2015-08-25 16:09 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-23 18:25 - 2015-08-23 02:27 - 00000000 __SHD C:\Recovery
2015-08-23 18:24 - 2015-08-23 18:24 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2015-08-23 18:23 - 2015-08-23 18:23 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-08-23 18:23 - 2015-08-23 18:23 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files\MSBuild
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-23 18:23 - 2015-08-23 18:23 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-23 18:23 - 2013-08-03 12:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-23 18:23 - 2013-08-03 12:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-23 05:46 - 2015-08-23 05:46 - 00000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-08-23 04:54 - 2015-08-24 08:10 - 00000000 ____D C:\Users\LENOVO\Desktop\馬雲(all copied)
2015-08-23 04:22 - 2015-07-30 22:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 04:22 - 2015-07-30 21:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-23 04:01 - 2015-04-30 07:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-08-23 04:01 - 2015-01-27 11:44 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-23 04:01 - 2015-01-24 09:51 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-08-23 04:01 - 2014-11-10 10:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-08-23 04:01 - 2014-11-10 09:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-08-23 04:01 - 2014-10-31 07:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-08-23 04:01 - 2014-10-31 07:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-08-23 03:51 - 2015-03-18 01:26 - 00467776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-23 03:51 - 2015-01-23 15:17 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-08-23 03:51 - 2015-01-23 13:02 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-08-23 03:50 - 2015-07-19 09:58 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-08-23 03:50 - 2015-07-19 02:51 - 03704320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-23 03:50 - 2015-07-19 02:31 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-08-23 03:50 - 2015-07-19 02:31 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-08-23 03:50 - 2015-07-19 02:31 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-08-23 03:50 - 2015-07-19 02:29 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-08-23 03:50 - 2015-07-19 02:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-08-23 03:50 - 2015-07-19 02:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-08-23 03:50 - 2015-07-19 02:28 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-08-23 03:50 - 2015-07-19 02:12 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-08-23 03:50 - 2015-07-19 02:10 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-23 03:50 - 2015-07-19 02:09 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-23 03:50 - 2015-07-17 04:36 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-08-23 03:50 - 2015-07-17 04:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-08-23 03:50 - 2015-07-17 04:35 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-23 03:50 - 2015-07-17 04:26 - 05923328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-23 03:50 - 2015-07-17 04:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-08-23 03:50 - 2015-07-17 04:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-08-23 03:50 - 2015-07-17 03:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-08-23 03:50 - 2015-07-17 03:51 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-08-23 03:50 - 2015-07-17 03:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-08-23 03:50 - 2015-07-17 03:45 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-23 03:50 - 2015-07-17 03:45 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-08-23 03:50 - 2015-07-17 03:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-08-23 03:50 - 2015-07-17 03:39 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-08-23 03:50 - 2015-07-17 03:38 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-08-23 03:50 - 2015-07-17 03:36 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-08-23 03:50 - 2015-07-17 03:34 - 14451200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-23 03:50 - 2015-07-17 03:32 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-08-23 03:50 - 2015-07-17 03:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-23 03:50 - 2015-07-17 03:13 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-08-23 03:50 - 2015-07-17 03:12 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-23 03:50 - 2015-07-17 03:12 - 02427904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-23 03:50 - 2015-07-17 03:10 - 12856832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-23 03:50 - 2015-07-17 03:06 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-08-23 03:50 - 2015-07-17 03:01 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-23 03:50 - 2015-07-17 02:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-23 03:50 - 2015-07-17 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-08-23 03:50 - 2015-07-17 02:42 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-23 03:50 - 2015-07-17 02:38 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-23 03:50 - 2015-07-17 02:37 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-08-23 03:50 - 2015-07-10 02:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-08-23 03:50 - 2015-06-28 13:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-08-23 03:50 - 2015-06-28 13:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-08-23 03:50 - 2015-06-28 13:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-23 03:50 - 2015-06-28 13:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-08-23 03:50 - 2015-06-28 00:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-23 03:50 - 2015-06-27 11:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-08-23 03:50 - 2015-06-27 11:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-08-23 03:50 - 2015-06-27 11:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-08-23 03:50 - 2015-06-27 11:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-08-23 03:50 - 2015-06-27 11:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-08-23 03:50 - 2015-06-27 10:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-08-23 03:50 - 2015-06-27 10:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-08-23 03:50 - 2015-06-27 10:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-23 03:50 - 2015-06-27 10:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-08-23 03:50 - 2015-06-27 09:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-08-23 03:50 - 2015-06-27 09:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-08-23 03:50 - 2015-06-16 06:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-23 03:50 - 2015-06-16 06:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-08-23 03:50 - 2015-06-16 06:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-23 03:50 - 2015-06-16 06:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-08-23 03:50 - 2015-06-16 05:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-08-23 03:50 - 2015-06-16 05:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-08-23 03:50 - 2015-06-16 05:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-08-23 03:50 - 2015-06-16 05:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-08-23 03:50 - 2015-06-16 05:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-08-23 03:50 - 2015-06-16 05:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-23 03:50 - 2015-06-16 04:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-08-23 03:50 - 2015-06-16 04:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-08-23 03:50 - 2015-06-16 04:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-08-23 03:50 - 2015-06-16 04:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-08-23 03:50 - 2015-06-16 04:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-08-23 03:50 - 2015-06-16 04:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-08-23 03:50 - 2015-06-16 04:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-08-23 03:50 - 2015-06-16 04:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-08-23 03:50 - 2015-06-16 04:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-08-23 03:50 - 2015-06-16 03:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-08-23 03:50 - 2015-06-10 02:27 - 00411133 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-08-23 03:50 - 2015-05-31 05:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-08-23 03:50 - 2015-05-31 03:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-23 03:50 - 2015-05-31 03:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-23 03:50 - 2015-05-23 11:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-08-23 03:50 - 2015-05-23 02:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-08-23 03:50 - 2015-05-23 02:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-08-23 03:50 - 2015-05-08 01:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-23 03:50 - 2015-05-08 01:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-23 03:50 - 2015-05-08 00:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-23 03:50 - 2015-05-08 00:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-23 03:50 - 2015-05-07 23:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-08-23 03:50 - 2015-05-07 23:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-08-23 03:50 - 2015-05-03 08:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-08-23 03:50 - 2015-05-01 07:05 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-08-23 03:50 - 2015-05-01 06:48 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-08-23 03:50 - 2015-04-22 00:13 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2015-08-23 03:50 - 2015-04-21 23:49 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-08-23 03:50 - 2015-04-10 08:34 - 02256896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-23 03:50 - 2015-04-10 08:11 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-23 03:50 - 2015-03-30 13:47 - 00561928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-23 03:50 - 2015-03-20 11:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-08-23 03:50 - 2015-03-20 11:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-08-23 03:50 - 2015-03-20 10:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-08-23 03:50 - 2015-03-20 10:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-08-23 03:50 - 2015-03-20 09:56 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-08-23 03:50 - 2015-03-14 16:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-08-23 03:50 - 2015-03-14 16:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-08-23 03:50 - 2015-03-14 09:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-08-23 03:50 - 2015-03-09 10:02 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-23 03:50 - 2015-03-04 09:32 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-08-23 03:50 - 2015-03-04 09:12 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-08-23 03:50 - 2015-03-02 09:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-08-23 03:50 - 2015-03-02 09:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-08-23 03:50 - 2015-01-30 08:53 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-08-23 03:50 - 2015-01-29 09:58 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-08-23 03:50 - 2015-01-29 09:29 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-08-23 03:50 - 2015-01-29 09:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-08-23 03:50 - 2015-01-12 10:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-08-23 03:50 - 2015-01-12 09:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-08-23 03:50 - 2014-12-19 16:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-08-23 03:50 - 2014-12-19 16:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-08-23 03:50 - 2014-12-09 11:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-08-23 03:50 - 2014-12-09 09:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-08-23 03:50 - 2014-12-09 03:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-08-23 03:50 - 2014-12-09 03:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-08-23 03:50 - 2014-11-14 14:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-08-23 03:50 - 2014-10-31 06:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-08-23 03:50 - 2014-10-31 06:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-08-23 03:50 - 2014-10-18 14:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-08-23 03:49 - 2015-07-29 07:24 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-08-23 03:49 - 2015-07-28 22:24 - 01148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 01116160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-08-23 03:49 - 2015-07-28 22:24 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-08-23 03:49 - 2015-07-16 08:29 - 07458648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-23 03:49 - 2015-07-16 08:29 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-23 03:49 - 2015-07-16 08:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-23 03:49 - 2015-07-16 08:28 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-23 03:49 - 2015-07-14 03:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-08-23 03:49 - 2015-07-14 03:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-08-23 03:49 - 2015-07-11 01:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-23 03:49 - 2015-07-02 06:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-08-23 03:49 - 2015-07-02 06:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-08-23 03:49 - 2015-07-02 05:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-08-23 03:49 - 2015-07-02 05:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-08-23 03:49 - 2015-06-27 07:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-08-23 03:49 - 2015-05-21 21:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-08-23 03:49 - 2015-04-02 06:22 - 02985984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2015-08-23 03:49 - 2015-04-02 06:20 - 04417536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2015-08-23 03:49 - 2015-04-01 11:45 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2015-08-23 03:49 - 2015-04-01 10:31 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2015-08-23 03:49 - 2015-03-24 05:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-08-23 03:49 - 2015-03-24 05:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-08-23 03:49 - 2015-03-20 12:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-08-23 03:49 - 2015-03-20 12:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-08-23 03:49 - 2015-03-20 12:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-08-23 03:49 - 2015-03-20 11:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-08-23 03:49 - 2015-03-20 10:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-08-23 03:49 - 2015-03-20 10:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-08-23 03:49 - 2015-03-20 10:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-08-23 03:49 - 2015-03-13 09:11 - 02162176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-08-23 03:49 - 2015-03-13 08:39 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-08-23 03:49 - 2015-03-06 10:47 - 01696256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2015-08-23 03:49 - 2014-11-05 03:25 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-08-23 03:49 - 2014-11-05 03:25 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-08-23 03:49 - 2014-11-04 14:55 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-08-23 03:49 - 2014-11-04 14:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-08-23 03:49 - 2014-11-04 14:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-08-23 03:49 - 2014-11-04 14:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-08-23 03:49 - 2014-10-29 09:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-08-23 03:49 - 2014-10-29 09:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-08-23 03:49 - 2014-10-29 09:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-08-23 03:49 - 2014-10-29 09:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-08-23 03:49 - 2014-10-29 09:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-08-23 03:49 - 2014-10-29 09:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-08-23 03:49 - 2014-06-10 06:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-23 03:49 - 2014-06-10 06:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-23 03:48 - 2015-07-15 05:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-23 03:48 - 2015-07-15 05:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-08-23 03:48 - 2015-07-15 05:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-08-23 03:48 - 2015-07-14 11:22 - 02529880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-08-23 03:48 - 2015-07-14 11:21 - 01901776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-08-23 03:48 - 2015-07-11 01:42 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-08-23 03:48 - 2015-07-11 00:47 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-08-23 03:48 - 2015-07-07 17:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-08-23 03:48 - 2015-07-07 17:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-08-23 03:48 - 2015-07-07 17:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-08-23 03:48 - 2015-06-13 01:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-23 03:48 - 2015-06-13 00:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-23 03:48 - 2015-05-12 02:17 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-08-23 03:48 - 2015-05-03 23:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 03:48 - 2015-05-03 22:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-23 03:48 - 2015-05-03 22:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-08-23 03:48 - 2015-05-03 22:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-08-23 03:48 - 2015-04-25 10:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-08-23 03:48 - 2015-04-14 06:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-08-23 03:48 - 2015-04-14 06:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-08-23 03:48 - 2015-04-09 06:55 - 00410128 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-08-23 03:48 - 2015-04-09 06:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-08-23 03:48 - 2015-04-03 08:35 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-08-23 03:48 - 2015-04-03 08:14 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-08-23 03:48 - 2015-03-13 10:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-08-23 03:48 - 2015-03-13 10:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-08-23 03:48 - 2015-03-13 10:02 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2015-08-23 03:48 - 2015-02-24 16:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-08-23 03:48 - 2015-02-21 07:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-08-23 03:48 - 2015-02-18 07:19 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-08-23 03:48 - 2015-02-03 08:03 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-08-23 03:48 - 2015-02-03 08:02 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-08-23 03:48 - 2015-02-03 07:53 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-08-23 03:48 - 2015-02-03 07:53 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-08-23 03:48 - 2015-01-30 11:01 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-08-23 03:48 - 2015-01-30 11:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-08-23 03:48 - 2015-01-30 10:03 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-08-23 03:48 - 2015-01-30 10:03 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-08-23 03:48 - 2015-01-30 09:44 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-08-23 03:48 - 2015-01-30 09:42 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-08-23 03:48 - 2015-01-30 09:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-08-23 03:48 - 2015-01-28 10:24 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-08-23 03:48 - 2015-01-28 09:47 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-08-23 03:48 - 2015-01-20 02:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-08-23 03:48 - 2014-12-19 14:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-08-23 03:48 - 2014-12-12 10:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-08-23 03:47 - 2015-07-11 02:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-08-23 03:47 - 2015-07-11 01:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-08-23 03:47 - 2015-07-11 01:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-08-23 03:47 - 2015-07-11 00:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-08-23 03:47 - 2015-06-11 11:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-23 03:47 - 2015-06-11 00:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-23 03:46 - 2015-07-29 22:37 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-23 03:46 - 2015-07-29 22:30 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-23 03:46 - 2015-07-29 22:23 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-23 03:46 - 2015-07-25 02:57 - 04177408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-08-23 03:46 - 2015-07-25 02:57 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-23 03:46 - 2015-07-25 02:52 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-23 03:46 - 2015-07-25 01:27 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-23 03:46 - 2015-07-25 01:23 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-23 03:46 - 2015-07-10 01:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-23 03:46 - 2015-07-10 01:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-23 03:46 - 2015-07-10 00:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-23 03:46 - 2015-06-16 13:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-08-23 03:46 - 2015-06-16 13:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-08-23 03:46 - 2015-06-12 04:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-08-23 03:46 - 2015-06-12 04:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-08-23 03:46 - 2015-05-12 00:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-08-23 03:46 - 2015-04-28 21:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-08-23 03:46 - 2015-04-28 21:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls
2015-08-23 03:46 - 2015-04-16 14:17 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-08-23 03:46 - 2015-04-10 08:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-23 03:46 - 2015-04-10 08:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-08-23 03:46 - 2015-04-01 12:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-23 03:46 - 2015-04-01 12:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-08-23 03:46 - 2015-04-01 12:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-08-23 03:46 - 2015-04-01 12:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-08-23 03:46 - 2015-04-01 11:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-08-23 03:46 - 2015-04-01 11:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-23 03:46 - 2015-04-01 11:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-23 03:46 - 2015-04-01 10:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-08-23 03:46 - 2015-04-01 10:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-08-23 03:46 - 2015-04-01 10:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-08-23 03:46 - 2015-04-01 10:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-08-23 03:46 - 2015-04-01 10:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-23 03:46 - 2015-04-01 10:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-08-23 03:46 - 2015-03-13 12:03 - 00239424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-08-23 03:46 - 2015-03-13 12:03 - 00154432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-08-23 03:46 - 2015-03-04 18:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-08-23 03:46 - 2015-03-04 11:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-08-23 03:46 - 2015-03-04 10:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-08-23 03:46 - 2015-01-31 07:20 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-08-23 03:46 - 2015-01-28 09:31 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-08-23 03:46 - 2015-01-28 09:11 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-08-23 03:46 - 2015-01-27 12:22 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-08-23 03:46 - 2015-01-27 10:11 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-08-23 03:45 - 2015-04-25 10:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-08-23 03:45 - 2015-04-25 10:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-08-23 03:45 - 2015-04-23 23:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-23 03:45 - 2015-04-23 23:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-23 03:45 - 2015-03-06 11:08 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2015-08-23 03:45 - 2015-03-06 10:43 - 01969664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2015-08-23 03:45 - 2015-01-30 02:45 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-08-23 03:45 - 2015-01-30 02:34 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-08-23 03:45 - 2014-12-06 11:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-23 03:45 - 2014-12-06 09:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-08-23 03:44 - 2015-05-12 21:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-08-23 03:44 - 2015-05-03 23:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-08-23 03:44 - 2015-05-03 22:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-08-23 03:44 - 2015-03-14 08:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-23 03:44 - 2015-02-08 07:57 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-23 03:44 - 2015-02-08 07:49 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-08-23 03:44 - 2015-01-30 10:02 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-08-23 03:44 - 2015-01-30 09:40 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-08-23 03:44 - 2015-01-30 09:37 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-08-23 03:44 - 2015-01-30 09:24 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-08-23 03:44 - 2015-01-30 09:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-08-23 03:44 - 2015-01-30 09:16 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-08-23 03:44 - 2015-01-30 09:08 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-08-23 03:44 - 2015-01-30 09:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-08-23 03:44 - 2015-01-28 07:47 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-23 03:44 - 2015-01-28 07:41 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-23 03:44 - 2014-12-11 13:36 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-08-23 03:44 - 2014-07-24 11:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-08-23 03:44 - 2014-07-24 11:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-08-23 03:43 - 2015-05-08 00:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-08-23 02:38 - 2015-09-08 06:06 - 00003926 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3DAF5571-29A1-4A4F-BEAF-7B840134C7E9}
2015-08-23 02:38 - 2015-08-24 08:13 - 00000000 __SHD C:\Users\LENOVO\AppData\Local\EmieUserList
2015-08-23 02:38 - 2015-08-24 08:13 - 00000000 __SHD C:\Users\LENOVO\AppData\Local\EmieSiteList
2015-08-23 02:38 - 2015-08-24 08:13 - 00000000 __SHD C:\Users\LENOVO\AppData\Local\EmieBrowserModeList
2015-08-23 02:36 - 2015-08-23 02:36 - 00001453 _____ C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-23 02:36 - 2015-08-23 02:36 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-08-23 02:36 - 2015-08-23 02:36 - 00000020 ___SH C:\Users\LENOVO\ntuser.ini
2015-08-23 02:34 - 2015-08-23 02:34 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-23 02:34 - 2015-08-23 02:34 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2015-08-23 02:31 - 2015-08-23 02:31 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:31 - 2015-08-23 02:31 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-08-23 02:29 - 2015-08-23 02:36 - 00000000 ____D C:\Users\LENOVO
2015-08-23 02:29 - 2015-08-23 02:34 - 00032388 _____ C:\WINDOWS\diagwrn.xml
2015-08-23 02:29 - 2015-08-23 02:34 - 00032388 _____ C:\WINDOWS\diagerr.xml
2015-08-23 02:29 - 2015-08-23 02:29 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 02:29 - 2015-08-23 02:29 - 00000000 ___RD C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 02:29 - 2015-08-23 02:29 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-23 02:29 - 2014-11-21 23:57 - 00000000 ___RD C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-08-23 02:29 - 2014-11-21 16:52 - 00000369 _____ C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-08-23 02:29 - 2013-08-22 23:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-23 02:29 - 2013-08-22 23:36 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____D C:\Program Files\Realtek
2015-08-23 02:27 - 2015-08-23 02:27 - 00000000 ____D C:\Program Files (x86)\USB Camera
2015-08-23 02:26 - 2015-08-28 15:25 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-08-23 02:26 - 2015-08-28 15:25 - 00000000 ____D C:\WINDOWS\system32\NV
2015-08-23 02:26 - 2015-08-23 02:30 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-23 02:26 - 2015-08-23 02:30 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-23 02:26 - 2015-08-23 02:30 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-23 02:26 - 2015-08-23 02:26 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2015-08-23 02:26 - 2015-08-23 02:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2015-08-23 02:26 - 2015-08-23 02:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-23 02:26 - 2015-08-23 02:26 - 00000000 ____D C:\Program Files\Synaptics
2015-08-23 02:26 - 2014-10-01 19:54 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-08-23 02:26 - 2014-10-01 19:54 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-08-23 02:26 - 2013-10-29 07:39 - 06610720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-23 02:26 - 2013-10-29 07:39 - 03477280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 01042720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-23 02:26 - 2013-10-29 07:38 - 00580384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-23 02:26 - 2013-10-29 07:38 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-23 02:26 - 2013-10-25 19:44 - 03435888 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-21 09:38 - 2015-08-24 06:43 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense
2015-08-20 17:51 - 2015-03-04 15:26 - 00011105 ____N C:\WINDOWS\system32\AutoconfigV2.cab
2015-08-14 01:00 - 2015-09-01 06:26 - 00000000 ____D C:\Program Files (x86)\Mp4Gain
2015-08-13 08:44 - 2015-08-13 08:44 - 00000000 ____D C:\ProgramData\iSkysoft
2015-08-13 06:43 - 2015-08-13 08:55 - 00000000 ____D C:\Users\LENOVO\Documents\iSkysoft Video Editor
2015-08-13 06:43 - 2015-08-13 06:43 - 00000000 ____D C:\Users\LENOVO\AppData\Local\iSkysoft
2015-08-13 06:36 - 2015-08-13 06:43 - 00000000 ____D C:\Users\Public\Documents\iSkysoft
2015-08-13 05:54 - 2004-03-09 01:00 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2015-08-13 05:54 - 2004-03-09 00:00 - 01081616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2015-08-13 05:54 - 2004-03-09 00:00 - 00132880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSINET.OCX
2015-08-09 18:15 - 2015-08-09 18:15 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2015-08-09 17:35 - 2015-08-09 17:36 - 00000000 ____D C:\Users\LENOVO\Desktop\Firefox bookmarks backup 9 aug 2015
2015-08-09 16:59 - 2015-08-23 02:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-08-09 16:59 - 2015-08-09 16:59 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2015-08-09 16:55 - 2015-08-09 16:55 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-08-09 16:54 - 2015-08-13 04:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-09 16:54 - 2015-08-09 16:59 - 00000000 ____D C:\Program Files\Microsoft Office
2015-08-09 16:54 - 2015-08-09 16:54 - 00000000 __RHD C:\MSOCache
2015-08-09 16:54 - 2015-08-09 16:54 - 00000000 ____D C:\Users\LENOVO\AppData\Local\Microsoft Help

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-08 07:48 - 2013-09-12 17:50 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-122341192-2292051211-3585160535-1002
2015-09-08 07:44 - 2014-11-21 16:44 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-08 07:41 - 2013-09-10 10:18 - 00000000 ____D C:\Program Files (x86)\EaseUS
2015-09-08 07:38 - 2013-08-22 22:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-08 07:32 - 2013-09-13 17:42 - 00000000 ____D C:\Users\LENOVO\AppData\Local\CrashDumps
2015-09-08 07:32 - 2013-09-10 23:19 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Media Player Classic
2015-09-08 07:00 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-08 01:46 - 2013-09-10 23:45 - 00000000 ____D C:\FDownload
2015-09-08 00:10 - 2013-09-15 13:15 - 00001681 _____ C:\Users\Public\Desktop\Recuva.lnk
2015-09-08 00:10 - 2013-09-15 13:15 - 00000000 ____D C:\Program Files\Recuva
2015-09-07 07:48 - 2015-07-31 20:04 - 00002035 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2015-09-06 17:43 - 2013-09-12 06:57 - 00000000 ____D C:\Users\LENOVO\AppData\Local\CutePDF Writer
2015-09-06 14:35 - 2013-08-22 21:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-09-03 09:15 - 2015-08-01 07:21 - 00000000 ____D C:\Users\LENOVO\Desktop\Motivational Pics
2015-09-02 18:43 - 2014-10-03 21:53 - 00000000 ____D C:\Users\LENOVO\Desktop\zujin
2015-09-01 06:39 - 2015-01-23 23:16 - 00000000 ____D C:\AdwCleaner
2015-09-01 02:44 - 2015-02-20 19:02 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-08-31 23:47 - 2014-06-30 09:13 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-31 07:30 - 2013-11-29 05:32 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\FileZilla
2015-08-27 05:26 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-08-26 03:24 - 2015-07-28 18:19 - 00000000 ____D C:\Users\LENOVO\Desktop\Majuprimus Filing
2015-08-25 16:06 - 2015-07-10 21:39 - 00000000 ___HD C:\$Windows.~BT
2015-08-25 13:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-25 12:19 - 2013-09-12 07:04 - 00233495 _____ C:\WINDOWS\hpoins21.dat
2015-08-25 12:19 - 2013-09-12 07:04 - 00001360 _____ C:\ProgramData\hpzinstall.log
2015-08-25 09:38 - 2012-07-26 13:26 - 00000229 _____ C:\WINDOWS\win.ini
2015-08-25 07:44 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\rescache
2015-08-25 06:00 - 2012-07-26 15:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-25 00:22 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\AppCompat
2015-08-24 06:44 - 2013-08-22 22:44 - 00429664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-24 06:43 - 2014-11-21 23:56 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-RS
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-24 06:43 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-24 06:43 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-08-23 18:24 - 2013-08-22 23:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-23 04:02 - 2014-11-21 16:25 - 00000000 ____D C:\Program Files\Windows Journal
2015-08-23 03:39 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-23 03:32 - 2015-08-04 11:03 - 00000000 ____D C:\Users\LENOVO\Desktop\MAJU_ RECEIPTS#
2015-08-23 02:37 - 2013-09-10 10:14 - 00000000 ____D C:\Users\LENOVO\AppData\Local\Packages
2015-08-23 02:34 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\Registration
2015-08-23 02:33 - 2013-08-22 23:36 - 00000000 __RSD C:\WINDOWS\Media
2015-08-23 02:33 - 2013-08-22 23:36 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-23 02:31 - 2015-04-22 06:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-23 02:31 - 2014-11-23 05:17 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-08-23 02:31 - 2014-11-23 05:17 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-08-23 02:31 - 2014-11-21 16:25 - 00000000 ____D C:\WINDOWS\ShellNew
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-08-23 02:31 - 2014-11-21 16:00 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-08-23 02:31 - 2014-10-08 00:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Downloader(xmlbar)
2015-08-23 02:31 - 2014-06-30 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-23 02:31 - 2014-02-21 08:55 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 02:31 - 2014-02-21 08:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-23 02:31 - 2014-02-08 03:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NameWiz
2015-08-23 02:31 - 2014-01-20 17:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Cope
2015-08-23 02:31 - 2013-12-11 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Swivel
2015-08-23 02:31 - 2013-11-29 05:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-08-23 02:31 - 2013-10-09 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2015-08-23 02:31 - 2013-10-09 01:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2015-08-23 02:31 - 2013-09-16 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2015-08-23 02:31 - 2013-09-15 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2015-08-23 02:31 - 2013-09-12 07:30 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2015-08-23 02:31 - 2013-09-12 07:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-08-23 02:31 - 2013-09-12 06:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CutePDF
2015-08-23 02:31 - 2013-09-11 01:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\风行
2015-08-23 02:31 - 2013-09-10 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-08-23 02:31 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\IME
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-08-23 02:31 - 2013-08-22 21:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-08-23 02:31 - 2013-08-22 21:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-23 02:31 - 2013-04-13 05:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2015-08-23 02:31 - 2013-04-13 05:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2015-08-23 02:31 - 2013-04-13 05:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:31 - 2013-04-13 05:17 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-08-23 02:31 - 2013-04-13 05:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2015-08-23 02:31 - 2013-04-13 05:03 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-08-23 02:31 - 2013-04-13 04:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-08-23 02:31 - 2012-07-26 13:37 - 00000000 ____D C:\Users\Default.migrated
2015-08-23 02:30 - 2015-07-25 01:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\硕鼠软件
2015-08-23 02:30 - 2015-05-06 23:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-08-23 02:30 - 2014-10-07 23:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft
2015-08-23 02:30 - 2013-09-28 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2015-08-23 02:30 - 2013-08-22 23:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\IME
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\Help
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-23 02:30 - 2013-08-22 23:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-08-23 02:30 - 2012-10-10 07:10 - 00000000 ____D C:\ProgramData\PRICache
2015-08-23 02:29 - 2013-10-09 01:06 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2015-08-23 02:29 - 2013-09-10 10:14 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:29 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-23 02:29 - 2013-04-13 05:30 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-08-23 02:27 - 2013-08-22 23:36 - 00000000 ____D C:\WINDOWS\System
2015-08-23 02:25 - 2013-08-22 21:36 - 00000000 __RHD C:\Users\Default
2015-08-23 00:33 - 2013-04-13 05:17 - 00432016 _____ C:\WINDOWS\system32\prfh0804.dat
2015-08-23 00:33 - 2013-04-13 05:17 - 00132686 _____ C:\WINDOWS\system32\prfc0804.dat
2015-08-22 13:14 - 2013-09-16 02:10 - 05476352 ___SH C:\Users\LENOVO\Desktop\Thumbs.db
2015-08-22 03:14 - 2012-07-26 16:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2015-08-19 23:58 - 2014-02-17 23:45 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\Audacity
2015-08-14 09:50 - 2014-11-22 00:03 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-08-14 09:50 - 2014-11-22 00:03 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-13 03:48 - 2013-09-10 17:57 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-13 03:46 - 2013-09-10 17:57 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-10 19:05 - 2013-09-15 19:31 - 00562176 ___SH C:\Users\LENOVO\Downloads\Thumbs.db
2015-08-09 18:49 - 2015-07-25 01:00 - 00000000 ____D C:\Users\LENOVO\AppData\Roaming\flvcd
2015-08-09 16:54 - 2013-04-13 05:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

==================== Files in the root of some directories =======

2013-09-13 19:04 - 2013-11-04 04:35 - 0000911 _____ () C:\Users\LENOVO\AppData\Roaming\coreavc.ini
2015-09-01 01:29 - 2015-09-01 01:29 - 0095659 _____ () C:\Users\LENOVO\AppData\Local\ars.cache
2015-09-01 01:29 - 2015-09-01 01:29 - 0246745 _____ () C:\Users\LENOVO\AppData\Local\census.cache
2015-09-01 01:21 - 2015-09-01 01:21 - 0000036 _____ () C:\Users\LENOVO\AppData\Local\housecall.guid.cache
2013-04-13 05:09 - 2013-04-13 05:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-09-12 07:04 - 2015-08-25 12:19 - 0001360 _____ () C:\ProgramData\hpzinstall.log
2014-03-15 01:16 - 2015-03-29 04:34 - 0030600 _____ () C:\ProgramData\wifv

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-08 02:23

==================== End of FRST.txt ============================

 

 

 

HERE'S THE ADDITION.TXT

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-09-2015
Ran by LENOVO (2015-09-08 07:49:25)
Running from C:\Users\LENOVO\Desktop
Windows 8.1 (X64) (2015-08-22 18:36:36)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-122341192-2292051211-3585160535-500 - Administrator - Disabled)
Guest (S-1-5-21-122341192-2292051211-3585160535-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-122341192-2292051211-3585160535-1008 - Limited - Enabled)
LENOVO (S-1-5-21-122341192-2292051211-3585160535-1002 - Administrator - Enabled) => C:\Users\LENOVO
UpdatusUser (S-1-5-21-122341192-2292051211-3585160535-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiograbber MP3 Plugin (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.3.2225 - AVAST Software)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
C6200 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
C6200_Help (x32 Version: 100.0.206.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
ConvertHelper 3.1.1 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version:  - DownloadHelper)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version:  3.0 - CutePDF.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
EaseUS Todo Backup Free 8.6  (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 8.6 - CHENGDU YIWO Tech Development Co., Ltd)
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.4 - Lenovo)
Energy Management (x32 Version: 8.0.2.4 - Lenovo) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )
FileZilla Client 3.12.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.12.0.2 - Tim Kosse)
Freemake Video Converter version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart All-In-One Driver Software (HKLM\...\{A96C5DB7-40F9-46DD-B36F-9E657D1D9E04}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.12.1023.1 - Vimicro)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4331.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.4331.52 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3423 - CyberLink Corp.)
Lenovo YouCam (x32 Version: 4.1.3423 - CyberLink Corp.) Hidden
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Media Cope 4.0 (HKLM-x32\...\Media Cope_is1) (Version:  - Media Cope)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 40.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 en-US)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3 - Mozilla)
NameWiz (HKLM-x32\...\NameWiz) (Version:  - )
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVIDIA Graphics Driver 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.0 - Lenovo)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
PS_AIO_02_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
PS_AIO_02_Software (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
PS_AIO_02_Software_Min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.210 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6798 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.) Hidden
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.23 - Piriform)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Swivel (HKLM-x32\...\Swivel) (Version: 1.11 - Newgrounds.com, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.13 - Synaptics Incorporated)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
UltraGet Video Downloader version 3.0.7 (HKLM-x32\...\{D6DAC6E1-400B-4819-89A9-6B8BBEB3A516}_is1) (Version: 3.0.7 - Anvsoft, Inc.)
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)
UserGuide (x32 Version: 1.0.0.9 - Lenovo) Hidden
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Driver Package - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wondershare MobileGo for Android ( Version 4.0.0 ) (HKLM-x32\...\{1E04C795-7359-4E05-8A0E-5644F777AA08}_is1) (Version: 4.0.0 - Wondershare)
硕鼠 0.4.7.9 测试版-3 (HKLM-x32\...\硕鼠) (Version: 0.4.7.9 测试版-3 - flvcd.com)
谷歌拼音输入法 2.7 (HKLM\...\GooglePinyin2) (Version:  - Google Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-122341192-2292051211-3585160535-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points =========================

23-08-2015 03:39:59 Windows Update
26-08-2015 08:47:58 JRT Pre-Junkware Removal
27-08-2015 04:55:23 restore01_after windows 8.1 upgrade
30-08-2015 21:11:12 Installed SDFormatter.
01-09-2015 06:28:42 Removed SDFormatter.
04-09-2015 01:40:40 Restore Point Created by FRST
06-09-2015 17:51:26 avast! antivirus system restore point

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 21:25 - 2015-09-04 01:40 - 00000035 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1197CCD0-CD1F-45F1-B88A-0A05720A91FF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-06] (AVAST Software)
Task: {353788B4-807D-4C66-B67D-E1BDF8862A8C} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-09-01] (Dolby Laboratories Inc.)
Task: {3E9208EB-35A9-4FB4-B41B-1CC60DFBF559} - System32\Tasks\Google Pinyin Daemon => C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinDaemon.exe [2015-07-13] (Google Inc.)
Task: {625AE1D3-A80F-413C-84C7-A776EE930D40} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {88488CCA-905A-48DF-B3AB-CCD9914479E8} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-08-13] (Microsoft Corporation)
Task: {8C7910E1-495F-493B-A78A-996ACE880767} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {A0A2EFF0-71F3-46BD-B67B-87EB53ED92DA} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-27] (Synaptics Incorporated)
Task: {B84C2CF6-6D69-453B-BE5C-4D580823354E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-02] (Piriform Ltd)
Task: {C54FC35C-FE0E-460C-97E6-4BA353ADF890} - System32\Tasks\{885FAABB-6C84-4CA1-BFAE-1C523497BFD4} => pcalua.exe -a "C:\Program Files (x86)\Google\Google Pinyin 2\GooglePinyinUninstaller.exe"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (Whitelisted) ==============

2013-09-12 06:39 - 2012-10-05 10:49 - 00087152 _____ () C:\WINDOWS\System32\cpwmon64.dll
2012-09-30 10:02 - 2012-09-30 10:02 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-09-30 09:59 - 2012-09-30 09:59 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2012-09-30 10:01 - 2012-09-30 10:01 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2015-07-10 01:32 - 2015-07-10 01:32 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00253992 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
2015-09-08 07:41 - 2015-06-23 01:08 - 00245800 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
2015-09-06 18:43 - 2015-09-06 18:43 - 00102864 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-09-06 18:43 - 2015-09-06 18:43 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-08 02:02 - 2015-09-08 02:02 - 02962432 _____ () C:\Program Files\AVAST Software\Avast\defs\15090701\algo.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-04-13 05:36 - 2012-07-12 20:59 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2015-08-13 06:43 - 2014-09-11 18:58 - 01498112 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
2015-08-13 06:43 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
2015-09-06 18:43 - 2015-09-06 18:43 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-04-13 05:04 - 2012-06-26 01:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00098856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00017448 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00088616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 01296424 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00060968 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00022568 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00186920 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00165416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00058408 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00015912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00108072 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00030248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00068136 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00158248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll
2015-09-08 07:41 - 2015-03-14 11:54 - 00281128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll
2015-09-08 07:41 - 2015-03-14 11:54 - 00072232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00139816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00037416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll
2015-09-08 07:41 - 2015-03-14 11:54 - 00759848 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00193064 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00407080 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidImage.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00148008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00076840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00207912 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00024616 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00020520 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00032296 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00034856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00064040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll
2015-09-08 07:41 - 2015-08-01 15:10 - 00025128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00115752 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00194088 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00077864 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00037928 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00136232 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00020008 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidDeviceManager.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00043048 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00353832 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceManager.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00027176 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceAdapter.dll
2015-09-08 07:41 - 2015-06-23 00:58 - 00137256 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Device.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00146984 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Partition.dll
2015-09-08 07:41 - 2015-06-26 09:12 - 00033320 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\LibraryManager.dll
2015-09-08 07:41 - 2015-03-14 12:05 - 00249896 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\uexper.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00223272 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\traynet.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00275496 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\libcurl.dll
2015-09-08 07:41 - 2014-12-15 01:04 - 00118328 _____ () C:\Program Files (x86)\EaseUS\TrayPopup\zlib1.dll
2015-09-08 07:41 - 2014-12-15 00:53 - 00223784 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-122341192-2292051211-3585160535-1001\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-122341192-2292051211-3585160535-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Theme2\img7.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BDAAED29-94C6-4E48-B31C-1C6B01C03E3D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
FirewallRules: [TCP Query User{142A1148-A214-4501-8D25-403F5EF5DB55}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [UDP Query User{BBED7723-927D-4397-B2B1-F50F8D0C9C9F}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [TCP Query User{71BEBC61-1538-49FE-8E92-92E8D3A06A1C}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [UDP Query User{4536F095-6EE9-4FF8-B742-0F0C4D11BCD0}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [TCP Query User{D60F3C32-5AA0-495B-B0E2-8833D7DBD837}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [UDP Query User{90ACC760-EDE0-435A-A86B-85813924E992}C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe] => (Block) C:\program files (x86)\wondershare\mobilego for android\mobilegoservice.exe
FirewallRules: [TCP Query User{D5EC9ADC-57F4-45C0-8E79-03C512A294B5}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [UDP Query User{04210088-E56B-46D7-ACD3-25E6FBDD9D16}C:\program files (x86)\intel\intelappstore\bin\ismagent.exe] => (Block) C:\program files (x86)\intel\intelappstore\bin\ismagent.exe
FirewallRules: [{C714BB6C-84BE-40E5-9E77-61DFA6EBCDD3}] => (Allow) C:\Users\LENOVO\AppData\Local\Temp\7zS57BE\HPDiagnosticCoreUI.exe
FirewallRules: [{D0D1AF2F-C3BF-4325-B8E8-7456285DC5F6}] => (Allow) C:\Users\LENOVO\AppData\Local\Temp\7zS57BE\HPDiagnosticCoreUI.exe
FirewallRules: [{6905CE10-B03D-4513-859A-620C948E9F13}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{1AEA1C2F-A62E-4A8C-9C04-1B07FD225E05}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{4843D0A9-6321-46E9-B21C-85509A64BE45}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{168BD5E7-4A1C-477E-AEFB-E9B848107733}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{D2CC26F6-6210-4582-9815-36F5DFCFF1AC}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{597DF760-9F07-46D1-A775-7457B31662B7}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe

==================== Faulty Device Manager Devices =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (09/08/2015 07:49:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:49:17Z. Error Code: 0x80070005.

Error: (09/08/2015 07:48:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:48:47Z. Error Code: 0x80070005.

Error: (09/08/2015 07:48:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:48:17Z. Error Code: 0x80070005.

Error: (09/08/2015 07:47:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:47:47Z. Error Code: 0x80070005.

Error: (09/08/2015 07:47:14 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:47:14Z. Error Code: 0x80070005.

Error: (09/08/2015 07:46:33 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:46:33Z. Error Code: 0x80070005.

Error: (09/08/2015 07:45:59 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:45:59Z. Error Code: 0x80070005.

Error: (09/08/2015 07:45:29 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:45:29Z. Error Code: 0x80070005.

Error: (09/08/2015 07:44:46 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:44:46Z. Error Code: 0x80070005.

Error: (09/08/2015 07:44:16 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Failed to schedule Software Protection service for re-start at 2115-08-14T23:44:16Z. Error Code: 0x80070005.


System errors:
=============
Error: (09/07/2015 05:29:59 PM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 05:29:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Superfetch service terminated with the following error:
%%1062

Error: (09/07/2015 05:21:39 PM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 04:28:50 PM) (Source: DCOM) (EventID: 10010) (User: idea-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (09/07/2015 10:22:07 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 10:05:07 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )
Description: Unexpected provider failure. Restarting the service may fix the problem. Error code: 8007001F@02000014

Error: (09/07/2015 06:57:24 AM) (Source: DCOM) (EventID: 10010) (User: idea-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (09/07/2015 05:24:50 AM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (09/06/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The eapihdrv service failed to start due to the following error:
%%1275

Error: (09/06/2015 06:07:08 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\LENOVO\AppData\Local\Temp\ehdrv.sys


Microsoft Office:
=========================
Error: (09/08/2015 07:49:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:49:17Z

Error: (09/08/2015 07:48:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:48:47Z

Error: (09/08/2015 07:48:17 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:48:17Z

Error: (09/08/2015 07:47:47 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:47:47Z

Error: (09/08/2015 07:47:14 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:47:14Z

Error: (09/08/2015 07:46:33 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:46:33Z

Error: (09/08/2015 07:45:59 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:45:59Z

Error: (09/08/2015 07:45:29 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:45:29Z

Error: (09/08/2015 07:44:46 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:44:46Z

Error: (09/08/2015 07:44:16 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800700052115-08-14T23:44:16Z


CodeIntegrity:
===================================
  Date: 2015-08-19 17:11:24.559
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-19 17:11:23.355
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-18 14:03:19.221
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-18 14:03:18.060
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:46:06.894
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:46:05.696
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:41:28.240
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:41:27.069
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:29:05.514
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-08-14 01:29:04.311
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel® Core™ i7-3632QM CPU @ 2.20GHz
Percentage of memory in use: 11%
Total physical RAM: 16239.52 MB
Available physical RAM: 14354.46 MB
Total Virtual: 17263.52 MB
Available Virtual: 15297.34 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:123.45 GB) (Free:50.81 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive d: (LENOVO) (Fixed) (Total:92.69 GB) (Free:89.57 GB) NTFS
Drive f: (LRS_ESP) (Fixed) (Total:0.97 GB) (Free:0.49 GB) FAT32 ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 522E827C)

Partition: GPT.

==================== End of Addition.txt ============================

 

I am still receiving avast malware infection pop up when logging in .

[Bruce1270]

Hi Legna

Thanks for the logs, couple of minor issues to address.

FRST fix


NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-04-13]
C:\Program Files\McAfee\MSK
EmptyTemp:

• Save this as fixlist.txt, in the same location as FRST.exe on your desktop.
  
• Run FRST by right clicking on it and selecting Run as Administrator and press Fix
• On completion a log (fixlog.txt) will be generated.
• Please select all text in this fix, copy (CTRL + C) and then Paste (CTRL + V) in your next reply.
  
  
  Question:
  
  I noticed that the User Account Control (UAC) is turned off and the administrator setting is off meaning the user account control prompt will not appear. It improves the security by preventing applications or users, either accidentally or possibly maliciously, from changing important system settings.
  
  Have you amended these settings?
  
  Things for your next post:
• fixlog.txt
• Answer to my question

[legna]

hi,

 

Here's the results of fixlog.txt

 

Fix result of Farbar Recovery Scan Tool (x64) Version:07-09-2015
Ran by LENOVO (2015-09-09 22:09:40) Run:3
Running from C:\Users\LENOVO\Desktop
Loaded Profiles: UpdatusUser & LENOVO (Available Profiles: UpdatusUser & LENOVO)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK
FF Extension: No Name - C:\Program Files\McAfee\MSK [2013-04-13]
C:\Program Files\McAfee\MSK
EmptyTemp:
*****************

Restore point was successfully created.
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\[email protected] => value removed successfully
C:\Program Files\McAfee\MSK => moved successfully
"C:\Program Files\McAfee\MSK" => File/Folder not found.
EmptyTemp: => 7.5 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 22:09:50 ====

 

 

Yes, I did switch off  User Account Control (UAC) due to the annoying alerts.

[legna]

Hi,

 

Will it be ok to uninstall avast and install another virus scanner and see if the problem still exist?

 

Can you recommend me another virus scanner to install as I need my pc to log in to my account in that site.

 

Kindly reply.

 

Thanks

[Bruce1270]

Hi Legna
 

Yes, I did switch off User Account Control (UAC) due to the annoying alerts.

That's fine. We do not recommend disabling UAC due to security reasons but the choice is up to you.
 

Will it be ok to uninstall avast and install another virus scanner and see if the problem still exist?

This will be entirely up to you. If you uninstall AVAST I would recommend using Windows Defender. In windows 8 and 8.1 this is the rebranded Microsoft Security Essentials AV product from Microsoft. It's free, light weight on resource and does a good job of protecting your pc. Alternatively
you could also try Avira free anti virus which you can dowload from here .

You can remove AVAST by

• Disconnect from the net
• Uninstall Avast via control panel -> Uninstall a program or Programs and Features
• Locate AVAST and click Uninstall
• Then Run the AVAST uninstall tool utility you downloaded to your desktop previously and accept the reboot to safe mode
• Once complete reboot your system.
  
  To enable Windows Defender please see this tutorial .Scroll down to Option 2.
  
  Subject to no further issues...
  
  Good News! - Your system now appears to be clean.
  Now for some clean up and "housekeeping" procedures.
  
  
  A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:
• Download Delfix from here
• Locate the file and right click on it. Click on Run as Administrator.
• Ensure Remove disinfection tools is ticked
  Also tick:
• Create registry backup
• Purge system restore
• Reset system settings
  
  
• Click Run
  
  The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply
  
  General maintenance
  
  Another essential task is to keep your computer updated with the latest operating system patches and security fixes. Windows Updates are constantly being revised to combat the newest hacks and threats. Microsoft releases security updates that help your computer from becoming vulnerable. It is best if you have these set to download automatically. Follow the instructions below to ensure your settings are optimal.
  1. Click the Start Orb in the lower left corner of the screen.
  2. Type Windows Update in the search box that appears
  3. Click on the Windows Update program that appears in the search results.
  
  4. Click on Change Settings.
  
  5. Select "Install updates automatically (recommended)" from the Important updates drop-down.
  
  6. Choose a day and a time when you know the computer will be on and connected to the internet. The default is 3:00AM every day.
  7. Ensure that all of the other check boxes are checked.
  8. Click OK.
  
  Malwarebytes - Update and run weekly to keep your system clean.
  
  Prevention tips
• Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.
• Install and keep only one anti-virus on your machine. Update it and scan your machine with it at least once a week.
• Be careful of the websites you visit.
• When browsing the internet, look closely at the links you click on. Some aren't always what they seem.
• Avoid Peer to Peer file sharing utilities, these are a minefield of malware infections.
• Pay attention when installing a program to your computer, particularly to any check boxes that may appear during installation, it is common for unwanted software to be installed in this way.
  
  To learn more about how to protect yourself while on the internet read this little guide Best security practices.
  
  Go here for some good advice about how to prevent infection.
  
  Happy safe surfing!!
  
  Don't forget to post your Delfix log.
  
  Thanks

[legna]

Hi,

 

Uninstalled avast and enabled windows defender.

Under security, Network access protection agent service is not running and OFF.

Should this be turned on or OFF?

 

I then carried on with windows update.

During windows update, there was a pop up: installing IWDAud_Device_06.

What's that?  Is this part of windows update?

 

Also did a full scan with windows defender.

 

Here's the DelFix.txt

 

# DelFix v1.011 - Logfile created 11/09/2015 at 04:52:55
# Updated 18/08/2015 by Xplode
# Username : LENOVO - IDEA-PC
# Operating System : Windows 8.1  (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\TDSSKiller.3.0.0.44_20.02.2015_22.45.53_log.txt
Deleted : C:\TDSSKiller.3.0.0.44_20.02.2015_22.46.19_log.txt
Deleted : C:\TDSSKiller.3.1.0.5_01.09.2015_06.37.41_log.txt
Deleted : C:\TDSSKiller.3.1.0.5_31.08.2015_17.58.57_log.txt
Deleted : C:\Users\LENOVO\Desktop\adwcleaner_5.003.exe
Deleted : C:\Users\LENOVO\Desktop\JRT.exe
Deleted : C:\Users\LENOVO\Desktop\TFC.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #4 [restore01_after windows 8.1 upgrade | 08/26/2015 20:55:23]
Deleted : RP #5 [Installed SDFormatter. | 08/30/2015 13:11:12]
Deleted : RP #6 [Removed SDFormatter. | 08/31/2015 22:28:42]
Deleted : RP #8 [Restore Point Created by FRST | 09/03/2015 17:40:40]
Deleted : RP #9 [avast! antivirus system restore point | 09/06/2015 09:51:26]
Deleted : RP #11 [Restore Point Created by FRST | 09/09/2015 14:09:41]
Deleted : RP #12 [avast! antivirus system restore point | 09/10/2015 18:41:19]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

 

I am now able to log into my account in that site without any problem after uninstalling avast

and enabling windows defender.

 

A million thanks to you, Bruce & Martin

 

PS: KIndly let me know the answer to the following question.

Although I will not be downgrading windows 8.1 to 8, I would like to know why

previously when I went to change pc settings, recovery, refresh your pc without affecting your files.

and press get started,

: it says there was a problem refreshing your pc.(windows8 should be there but why is there a problem)

If you have a windows installation or recovery media,insert it and restart the pc from the media.

In fact, I bought this pc with windows 8 on it.

 

Thank you
 

 

[Bruce1270]

Hi legna
 

Under security, Network access protection agent service is not running and OFF.

Should this be turned on or OFF?

The Network Access Protection Agent Service is a service which is utilised if the computer is connected to a domain but for a home network is not needed so can remain off.
 

installing IWDAud_Device_06.

What's that? Is this part of windows update?

The IWDAud_Device_06 is intel wireless display audio device and is a legitimate update via windows for your machine.
 

PS: KIndly let me know the answer to the following question.

Although I will not be downgrading windows 8.1 to 8, I would like to know why

previously when I went to change pc settings, recovery, refresh your pc without affecting your files.

and press get started,

: it says there was a problem refreshing your pc.(windows8 should be there but why is there a problem)

If you have a windows installation or recovery media,insert it and restart the pc from the media.

In fact, I bought this pc with windows 8 on it.

It may be that some files have become corrupt or missing.

You could try running Sytem File Check to see if this will resolve your issue.

To do this, follow these steps:

1.Open an elevated command prompt. To do this,
2.Swipe in from the right edge of the screen, and then tap Search. Or, if you are using a mouse, point to the lower-right corner of the screen, and then click Search.
3.Type Command Prompt in the Search box, right-click Command Prompt, and then click Run as administrator.
4.If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.


5.When command prompt opens, copy and paste the following commands into it and press enter.

sfc /scannow

Please note: there is one space between the c and the /

6.Let the scan complete then copy and paste the following command at the command prompt and press enter

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

7.This will create a file, sfcdetails.txt on your Desktop.
8.Type exit to close the command prompt window.
9.Open file sfcdetails.txt and copy/paste this in your next reply.
10.If the file is too large you can zip the file and attach to your post.

[legna]

Hi,

 

Before I proceed, I  would like to clarify the following:

 

Will it be ok to perform sfc /scannow on a solid state drive (SSD)?

 

By the way, eversince I upgrade to windows 8.1, wifi is always losing connectivity showing server not found.

Is there any way to correct this? No such issues when i use windows 8.

 

Waiting for your reply.

 

Thanks

Edited by legna, 12 September 2015 - 03:18 AM.

[Bruce1270]

Yes. You can go ahead

[legna]

Hi,

 

Here's the sfcdetails.txt

 

2015-09-14 02:47:48, Info                  CSI    0000000a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:48, Info                  CSI    0000000b [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:50, Info                  CSI    0000000c [SR] Verify complete
2015-09-14 02:47:50, Info                  CSI    0000000d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:50, Info                  CSI    0000000e [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:51, Info                  CSI    0000000f [SR] Verify complete
2015-09-14 02:47:51, Info                  CSI    00000010 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:51, Info                  CSI    00000011 [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:52, Info                  CSI    00000012 [SR] Verify complete
2015-09-14 02:47:52, Info                  CSI    00000013 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:52, Info                  CSI    00000014 [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:54, Info                  CSI    00000015 [SR] Verify complete
2015-09-14 02:47:54, Info                  CSI    00000016 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:54, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:55, Info                  CSI    00000018 [SR] Verify complete
2015-09-14 02:47:55, Info                  CSI    00000019 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:55, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:56, Info                  CSI    0000001b [SR] Verify complete
2015-09-14 02:47:56, Info                  CSI    0000001c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:56, Info                  CSI    0000001d [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:57, Info                  CSI    0000001e [SR] Verify complete
2015-09-14 02:47:57, Info                  CSI    0000001f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:57, Info                  CSI    00000020 [SR] Beginning Verify and Repair transaction
2015-09-14 02:47:59, Info                  CSI    00000021 [SR] Verify complete
2015-09-14 02:47:59, Info                  CSI    00000022 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:47:59, Info                  CSI    00000023 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:00, Info                  CSI    00000024 [SR] Verify complete
2015-09-14 02:48:00, Info                  CSI    00000025 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:00, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:01, Info                  CSI    00000027 [SR] Verify complete
2015-09-14 02:48:01, Info                  CSI    00000028 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:01, Info                  CSI    00000029 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:02, Info                  CSI    0000002a [SR] Verify complete
2015-09-14 02:48:02, Info                  CSI    0000002b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:02, Info                  CSI    0000002c [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:04, Info                  CSI    0000002d [SR] Verify complete
2015-09-14 02:48:04, Info                  CSI    0000002e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:04, Info                  CSI    0000002f [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:05, Info                  CSI    00000030 [SR] Verify complete
2015-09-14 02:48:05, Info                  CSI    00000031 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:05, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:06, Info                  CSI    00000033 [SR] Verify complete
2015-09-14 02:48:06, Info                  CSI    00000034 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:06, Info                  CSI    00000035 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:07, Info                  CSI    00000036 [SR] Verify complete
2015-09-14 02:48:07, Info                  CSI    00000037 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:07, Info                  CSI    00000038 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:09, Info                  CSI    00000039 [SR] Verify complete
2015-09-14 02:48:09, Info                  CSI    0000003a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:09, Info                  CSI    0000003b [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:10, Info                  CSI    0000003c [SR] Verify complete
2015-09-14 02:48:10, Info                  CSI    0000003d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:10, Info                  CSI    0000003e [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:11, Info                  CSI    0000003f [SR] Verify complete
2015-09-14 02:48:11, Info                  CSI    00000040 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:11, Info                  CSI    00000041 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:12, Info                  CSI    00000042 [SR] Verify complete
2015-09-14 02:48:12, Info                  CSI    00000043 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:12, Info                  CSI    00000044 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:14, Info                  CSI    00000045 [SR] Verify complete
2015-09-14 02:48:14, Info                  CSI    00000046 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:14, Info                  CSI    00000047 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:15, Info                  CSI    00000048 [SR] Verify complete
2015-09-14 02:48:15, Info                  CSI    00000049 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:15, Info                  CSI    0000004a [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:16, Info                  CSI    0000004b [SR] Verify complete
2015-09-14 02:48:16, Info                  CSI    0000004c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:16, Info                  CSI    0000004d [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:17, Info                  CSI    0000004e [SR] Verify complete
2015-09-14 02:48:17, Info                  CSI    0000004f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:17, Info                  CSI    00000050 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:19, Info                  CSI    00000051 [SR] Verify complete
2015-09-14 02:48:19, Info                  CSI    00000052 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:19, Info                  CSI    00000053 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:20, Info                  CSI    00000054 [SR] Verify complete
2015-09-14 02:48:20, Info                  CSI    00000055 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:20, Info                  CSI    00000056 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:21, Info                  CSI    00000057 [SR] Verify complete
2015-09-14 02:48:21, Info                  CSI    00000058 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:21, Info                  CSI    00000059 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:22, Info                  CSI    0000005a [SR] Verify complete
2015-09-14 02:48:22, Info                  CSI    0000005b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:22, Info                  CSI    0000005c [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:24, Info                  CSI    0000005d [SR] Verify complete
2015-09-14 02:48:24, Info                  CSI    0000005e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:24, Info                  CSI    0000005f [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:25, Info                  CSI    00000060 [SR] Verify complete
2015-09-14 02:48:25, Info                  CSI    00000061 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:25, Info                  CSI    00000062 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:26, Info                  CSI    00000063 [SR] Verify complete
2015-09-14 02:48:26, Info                  CSI    00000064 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:26, Info                  CSI    00000065 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:27, Info                  CSI    00000066 [SR] Verify complete
2015-09-14 02:48:27, Info                  CSI    00000067 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:27, Info                  CSI    00000068 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:29, Info                  CSI    00000069 [SR] Verify complete
2015-09-14 02:48:29, Info                  CSI    0000006a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:29, Info                  CSI    0000006b [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:30, Info                  CSI    0000006c [SR] Verify complete
2015-09-14 02:48:30, Info                  CSI    0000006d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:30, Info                  CSI    0000006e [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:31, Info                  CSI    0000006f [SR] Verify complete
2015-09-14 02:48:31, Info                  CSI    00000070 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:31, Info                  CSI    00000071 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:33, Info                  CSI    00000072 [SR] Verify complete
2015-09-14 02:48:33, Info                  CSI    00000073 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:33, Info                  CSI    00000074 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:34, Info                  CSI    00000075 [SR] Verify complete
2015-09-14 02:48:34, Info                  CSI    00000076 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:34, Info                  CSI    00000077 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:35, Info                  CSI    00000078 [SR] Verify complete
2015-09-14 02:48:35, Info                  CSI    00000079 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:35, Info                  CSI    0000007a [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:36, Info                  CSI    0000007b [SR] Verify complete
2015-09-14 02:48:36, Info                  CSI    0000007c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:36, Info                  CSI    0000007d [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:38, Info                  CSI    0000007e [SR] Verify complete
2015-09-14 02:48:38, Info                  CSI    0000007f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:38, Info                  CSI    00000080 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:39, Info                  CSI    00000081 [SR] Verify complete
2015-09-14 02:48:39, Info                  CSI    00000082 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:39, Info                  CSI    00000083 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:40, Info                  CSI    00000084 [SR] Verify complete
2015-09-14 02:48:40, Info                  CSI    00000085 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:40, Info                  CSI    00000086 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:41, Info                  CSI    00000087 [SR] Verify complete
2015-09-14 02:48:41, Info                  CSI    00000088 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:41, Info                  CSI    00000089 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:43, Info                  CSI    0000008a [SR] Verify complete
2015-09-14 02:48:43, Info                  CSI    0000008b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:43, Info                  CSI    0000008c [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:44, Info                  CSI    0000008d [SR] Verify complete
2015-09-14 02:48:44, Info                  CSI    0000008e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:44, Info                  CSI    0000008f [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:45, Info                  CSI    00000090 [SR] Verify complete
2015-09-14 02:48:45, Info                  CSI    00000091 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:45, Info                  CSI    00000092 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:47, Info                  CSI    00000094 [SR] Verify complete
2015-09-14 02:48:47, Info                  CSI    00000095 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:47, Info                  CSI    00000096 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:48, Info                  CSI    00000097 [SR] Verify complete
2015-09-14 02:48:48, Info                  CSI    00000098 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:48, Info                  CSI    00000099 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:49, Info                  CSI    0000009a [SR] Verify complete
2015-09-14 02:48:49, Info                  CSI    0000009b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:49, Info                  CSI    0000009c [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:51, Info                  CSI    0000009d [SR] Verify complete
2015-09-14 02:48:51, Info                  CSI    0000009e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:51, Info                  CSI    0000009f [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:52, Info                  CSI    000000a0 [SR] Verify complete
2015-09-14 02:48:52, Info                  CSI    000000a1 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:52, Info                  CSI    000000a2 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:53, Info                  CSI    000000a3 [SR] Verify complete
2015-09-14 02:48:53, Info                  CSI    000000a4 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:53, Info                  CSI    000000a5 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:54, Info                  CSI    000000a6 [SR] Verify complete
2015-09-14 02:48:54, Info                  CSI    000000a7 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:54, Info                  CSI    000000a8 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:56, Info                  CSI    000000a9 [SR] Verify complete
2015-09-14 02:48:56, Info                  CSI    000000aa [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:56, Info                  CSI    000000ab [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:57, Info                  CSI    000000ac [SR] Verify complete
2015-09-14 02:48:57, Info                  CSI    000000ad [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:57, Info                  CSI    000000ae [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:58, Info                  CSI    000000af [SR] Verify complete
2015-09-14 02:48:58, Info                  CSI    000000b0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:48:58, Info                  CSI    000000b1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:48:59, Info                  CSI    000000b2 [SR] Verify complete
2015-09-14 02:49:00, Info                  CSI    000000b3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:00, Info                  CSI    000000b4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:01, Info                  CSI    000000b5 [SR] Verify complete
2015-09-14 02:49:01, Info                  CSI    000000b6 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:01, Info                  CSI    000000b7 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:02, Info                  CSI    000000b8 [SR] Verify complete
2015-09-14 02:49:02, Info                  CSI    000000b9 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:02, Info                  CSI    000000ba [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:03, Info                  CSI    000000bb [SR] Verify complete
2015-09-14 02:49:03, Info                  CSI    000000bc [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:03, Info                  CSI    000000bd [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:05, Info                  CSI    000000be [SR] Verify complete
2015-09-14 02:49:05, Info                  CSI    000000bf [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:05, Info                  CSI    000000c0 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:06, Info                  CSI    000000c1 [SR] Verify complete
2015-09-14 02:49:06, Info                  CSI    000000c2 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:06, Info                  CSI    000000c3 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:07, Info                  CSI    000000c4 [SR] Verify complete
2015-09-14 02:49:07, Info                  CSI    000000c5 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:07, Info                  CSI    000000c6 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:08, Info                  CSI    000000c7 [SR] Verify complete
2015-09-14 02:49:08, Info                  CSI    000000c8 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:08, Info                  CSI    000000c9 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:10, Info                  CSI    000000ca [SR] Verify complete
2015-09-14 02:49:10, Info                  CSI    000000cb [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:10, Info                  CSI    000000cc [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:11, Info                  CSI    000000cd [SR] Verify complete
2015-09-14 02:49:11, Info                  CSI    000000ce [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:11, Info                  CSI    000000cf [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:12, Info                  CSI    000000d0 [SR] Verify complete
2015-09-14 02:49:12, Info                  CSI    000000d1 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:12, Info                  CSI    000000d2 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:14, Info                  CSI    000000d3 [SR] Verify complete
2015-09-14 02:49:14, Info                  CSI    000000d4 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:14, Info                  CSI    000000d5 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:15, Info                  CSI    000000d6 [SR] Verify complete
2015-09-14 02:49:15, Info                  CSI    000000d7 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:15, Info                  CSI    000000d8 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:16, Info                  CSI    000000d9 [SR] Verify complete
2015-09-14 02:49:16, Info                  CSI    000000da [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:16, Info                  CSI    000000db [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:17, Info                  CSI    000000dc [SR] Verify complete
2015-09-14 02:49:17, Info                  CSI    000000dd [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:17, Info                  CSI    000000de [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:19, Info                  CSI    000000df [SR] Verify complete
2015-09-14 02:49:19, Info                  CSI    000000e0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:19, Info                  CSI    000000e1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:20, Info                  CSI    000000e2 [SR] Verify complete
2015-09-14 02:49:20, Info                  CSI    000000e3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:20, Info                  CSI    000000e4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:22, Info                  CSI    000000e5 [SR] Verify complete
2015-09-14 02:49:22, Info                  CSI    000000e6 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:22, Info                  CSI    000000e7 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:23, Info                  CSI    000000e8 [SR] Verify complete
2015-09-14 02:49:23, Info                  CSI    000000e9 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:23, Info                  CSI    000000ea [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:25, Info                  CSI    000000f0 [SR] Verify complete
2015-09-14 02:49:25, Info                  CSI    000000f1 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:25, Info                  CSI    000000f2 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:28, Info                  CSI    0000010b [SR] Verify complete
2015-09-14 02:49:28, Info                  CSI    0000010c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:28, Info                  CSI    0000010d [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:30, Info                  CSI    00000112 [SR] Verify complete
2015-09-14 02:49:30, Info                  CSI    00000113 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:30, Info                  CSI    00000114 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:32, Info                  CSI    00000116 [SR] Verify complete
2015-09-14 02:49:32, Info                  CSI    00000117 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:32, Info                  CSI    00000118 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:34, Info                  CSI    00000124 [SR] Verify complete
2015-09-14 02:49:34, Info                  CSI    00000125 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:34, Info                  CSI    00000126 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:37, Info                  CSI    00000128 [SR] Verify complete
2015-09-14 02:49:37, Info                  CSI    00000129 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:37, Info                  CSI    0000012a [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:39, Info                  CSI    0000012b [SR] Verify complete
2015-09-14 02:49:39, Info                  CSI    0000012c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:39, Info                  CSI    0000012d [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:43, Info                  CSI    00000147 [SR] Verify complete
2015-09-14 02:49:43, Info                  CSI    00000148 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:43, Info                  CSI    00000149 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:46, Info                  CSI    0000015e [SR] Verify complete
2015-09-14 02:49:46, Info                  CSI    0000015f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:46, Info                  CSI    00000160 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:49, Info                  CSI    0000017f [SR] Verify complete
2015-09-14 02:49:49, Info                  CSI    00000180 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:49, Info                  CSI    00000181 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:52, Info                  CSI    00000187 [SR] Verify complete
2015-09-14 02:49:52, Info                  CSI    00000188 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:52, Info                  CSI    00000189 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:55, Info                  CSI    00000197 [SR] Verify complete
2015-09-14 02:49:55, Info                  CSI    00000198 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:55, Info                  CSI    00000199 [SR] Beginning Verify and Repair transaction
2015-09-14 02:49:58, Info                  CSI    000001ac [SR] Verify complete
2015-09-14 02:49:58, Info                  CSI    000001ad [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:49:58, Info                  CSI    000001ae [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:00, Info                  CSI    000001b1 [SR] Verify complete
2015-09-14 02:50:00, Info                  CSI    000001b2 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:00, Info                  CSI    000001b3 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:03, Info                  CSI    000001b5 [SR] Verify complete
2015-09-14 02:50:03, Info                  CSI    000001b6 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:03, Info                  CSI    000001b7 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:05, Info                  CSI    000001bf [SR] Verify complete
2015-09-14 02:50:05, Info                  CSI    000001c0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:05, Info                  CSI    000001c1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:09, Info                  CSI    000001f9 [SR] Verify complete
2015-09-14 02:50:09, Info                  CSI    000001fa [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:09, Info                  CSI    000001fb [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:13, Info                  CSI    00000219 [SR] Verify complete
2015-09-14 02:50:13, Info                  CSI    0000021a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:13, Info                  CSI    0000021b [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:22, Info                  CSI    00000232 [SR] Verify complete
2015-09-14 02:50:22, Info                  CSI    00000233 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:22, Info                  CSI    00000234 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:24, Info                  CSI    0000023b [SR] Verify complete
2015-09-14 02:50:24, Info                  CSI    0000023c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:24, Info                  CSI    0000023d [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:26, Info                  CSI    00000248 [SR] Verify complete
2015-09-14 02:50:26, Info                  CSI    00000249 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:26, Info                  CSI    0000024a [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:30, Info                  CSI    00000265 [SR] Verify complete
2015-09-14 02:50:30, Info                  CSI    00000266 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:30, Info                  CSI    00000267 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:31, Info                  CSI    00000269 [SR] Verify complete
2015-09-14 02:50:32, Info                  CSI    0000026a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:32, Info                  CSI    0000026b [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:33, Info                  CSI    0000026c [SR] Verify complete
2015-09-14 02:50:33, Info                  CSI    0000026d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:33, Info                  CSI    0000026e [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:35, Info                  CSI    0000027a [SR] Verify complete
2015-09-14 02:50:35, Info                  CSI    0000027b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:35, Info                  CSI    0000027c [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:37, Info                  CSI    000002aa [SR] Verify complete
2015-09-14 02:50:37, Info                  CSI    000002ab [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:37, Info                  CSI    000002ac [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:40, Info                  CSI    000002f6 [SR] Verify complete
2015-09-14 02:50:40, Info                  CSI    000002f7 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:40, Info                  CSI    000002f8 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:44, Info                  CSI    0000030a [SR] Verify complete
2015-09-14 02:50:44, Info                  CSI    0000030b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:44, Info                  CSI    0000030c [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:47, Info                  CSI    00000310 [SR] Verify complete
2015-09-14 02:50:47, Info                  CSI    00000311 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:47, Info                  CSI    00000312 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:54, Info                  CSI    00000313 [SR] Verify complete
2015-09-14 02:50:55, Info                  CSI    00000314 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:55, Info                  CSI    00000315 [SR] Beginning Verify and Repair transaction
2015-09-14 02:50:58, Info                  CSI    00000330 [SR] Verify complete
2015-09-14 02:50:58, Info                  CSI    00000331 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:50:58, Info                  CSI    00000332 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:01, Info                  CSI    0000033f [SR] Verify complete
2015-09-14 02:51:01, Info                  CSI    00000340 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:01, Info                  CSI    00000341 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:04, Info                  CSI    00000342 [SR] Verify complete
2015-09-14 02:51:04, Info                  CSI    00000343 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:04, Info                  CSI    00000344 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:07, Info                  CSI    0000034d [SR] Verify complete
2015-09-14 02:51:07, Info                  CSI    0000034e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:07, Info                  CSI    0000034f [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:13, Info                  CSI    0000036e [SR] Verify complete
2015-09-14 02:51:13, Info                  CSI    0000036f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:13, Info                  CSI    00000370 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:15, Info                  CSI    00000373 [SR] Verify complete
2015-09-14 02:51:15, Info                  CSI    00000374 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:15, Info                  CSI    00000375 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:17, Info                  CSI    00000379 [SR] Verify complete
2015-09-14 02:51:17, Info                  CSI    0000037a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:17, Info                  CSI    0000037b [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:22, Info                  CSI    00000387 [SR] Verify complete
2015-09-14 02:51:22, Info                  CSI    00000388 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:22, Info                  CSI    00000389 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:25, Info                  CSI    000003b6 [SR] Verify complete
2015-09-14 02:51:25, Info                  CSI    000003b7 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:25, Info                  CSI    000003b8 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:27, Info                  CSI    000003bd [SR] Verify complete
2015-09-14 02:51:27, Info                  CSI    000003be [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:27, Info                  CSI    000003bf [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:29, Info                  CSI    000003c9 [SR] Verify complete
2015-09-14 02:51:29, Info                  CSI    000003ca [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:29, Info                  CSI    000003cb [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:31, Info                  CSI    000003de [SR] Verify complete
2015-09-14 02:51:31, Info                  CSI    000003df [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:31, Info                  CSI    000003e0 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:33, Info                  CSI    000003ed [SR] Verify complete
2015-09-14 02:51:33, Info                  CSI    000003ee [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:33, Info                  CSI    000003ef [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:35, Info                  CSI    000003f9 [SR] Verify complete
2015-09-14 02:51:35, Info                  CSI    000003fa [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:35, Info                  CSI    000003fb [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:38, Info                  CSI    000003ff [SR] Verify complete
2015-09-14 02:51:38, Info                  CSI    00000400 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:38, Info                  CSI    00000401 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:39, Info                  CSI    00000403 [SR] Verify complete
2015-09-14 02:51:40, Info                  CSI    00000404 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:40, Info                  CSI    00000405 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:43, Info                  CSI    0000040f [SR] Verify complete
2015-09-14 02:51:43, Info                  CSI    00000410 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:43, Info                  CSI    00000411 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:44, Info                  CSI    0000041b [SR] Verify complete
2015-09-14 02:51:45, Info                  CSI    0000041c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:45, Info                  CSI    0000041d [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:47, Info                  CSI    0000041e [SR] Verify complete
2015-09-14 02:51:47, Info                  CSI    0000041f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:47, Info                  CSI    00000420 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:49, Info                  CSI    0000042b [SR] Verify complete
2015-09-14 02:51:49, Info                  CSI    0000042c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:49, Info                  CSI    0000042d [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:51, Info                  CSI    00000434 [SR] Verify complete
2015-09-14 02:51:51, Info                  CSI    00000435 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:51, Info                  CSI    00000436 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:54, Info                  CSI    0000043e [SR] Verify complete
2015-09-14 02:51:54, Info                  CSI    0000043f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:54, Info                  CSI    00000440 [SR] Beginning Verify and Repair transaction
2015-09-14 02:51:57, Info                  CSI    00000472 [SR] Verify complete
2015-09-14 02:51:58, Info                  CSI    00000473 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:51:58, Info                  CSI    00000474 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:00, Info                  CSI    0000047b [SR] Verify complete
2015-09-14 02:52:00, Info                  CSI    0000047c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:00, Info                  CSI    0000047d [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:02, Info                  CSI    00000482 [SR] Verify complete
2015-09-14 02:52:03, Info                  CSI    00000483 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:03, Info                  CSI    00000484 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:05, Info                  CSI    00000488 [SR] Verify complete
2015-09-14 02:52:05, Info                  CSI    00000489 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:05, Info                  CSI    0000048a [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:07, Info                  CSI    0000048b [SR] Verify complete
2015-09-14 02:52:08, Info                  CSI    0000048c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:08, Info                  CSI    0000048d [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:10, Info                  CSI    00000492 [SR] Verify complete
2015-09-14 02:52:10, Info                  CSI    00000493 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:10, Info                  CSI    00000494 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:13, Info                  CSI    0000049d [SR] Verify complete
2015-09-14 02:52:13, Info                  CSI    0000049e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:13, Info                  CSI    0000049f [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:15, Info                  CSI    000004af [SR] Verify complete
2015-09-14 02:52:15, Info                  CSI    000004b0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:15, Info                  CSI    000004b1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:18, Info                  CSI    000004bb [SR] Verify complete
2015-09-14 02:52:18, Info                  CSI    000004bc [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:18, Info                  CSI    000004bd [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:20, Info                  CSI    000004c8 [SR] Verify complete
2015-09-14 02:52:20, Info                  CSI    000004c9 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:20, Info                  CSI    000004ca [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:22, Info                  CSI    000004d8 [SR] Verify complete
2015-09-14 02:52:22, Info                  CSI    000004d9 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:22, Info                  CSI    000004da [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:24, Info                  CSI    000004dc [SR] Verify complete
2015-09-14 02:52:25, Info                  CSI    000004dd [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:25, Info                  CSI    000004de [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:28, Info                  CSI    000004df [SR] Verify complete
2015-09-14 02:52:28, Info                  CSI    000004e0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:28, Info                  CSI    000004e1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:32, Info                  CSI    00000519 [SR] Verify complete
2015-09-14 02:52:32, Info                  CSI    0000051a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:32, Info                  CSI    0000051b [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:33, Info                  CSI    0000051e [SR] Verify complete
2015-09-14 02:52:33, Info                  CSI    0000051f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:33, Info                  CSI    00000520 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:36, Info                  CSI    0000052f [SR] Verify complete
2015-09-14 02:52:36, Info                  CSI    00000530 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:36, Info                  CSI    00000531 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:38, Info                  CSI    00000532 [SR] Verify complete
2015-09-14 02:52:38, Info                  CSI    00000533 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:38, Info                  CSI    00000534 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:39, Info                  CSI    00000536 [SR] Verify complete
2015-09-14 02:52:40, Info                  CSI    00000537 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:40, Info                  CSI    00000538 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:42, Info                  CSI    00000539 [SR] Verify complete
2015-09-14 02:52:42, Info                  CSI    0000053a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:42, Info                  CSI    0000053b [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:44, Info                  CSI    0000053c [SR] Verify complete
2015-09-14 02:52:44, Info                  CSI    0000053d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:44, Info                  CSI    0000053e [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:46, Info                  CSI    0000053f [SR] Verify complete
2015-09-14 02:52:46, Info                  CSI    00000540 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:46, Info                  CSI    00000541 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:48, Info                  CSI    00000542 [SR] Verify complete
2015-09-14 02:52:48, Info                  CSI    00000543 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:48, Info                  CSI    00000544 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:49, Info                  CSI    00000545 [SR] Verify complete
2015-09-14 02:52:49, Info                  CSI    00000546 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:49, Info                  CSI    00000547 [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:51, Info                  CSI    00000548 [SR] Verify complete
2015-09-14 02:52:51, Info                  CSI    00000549 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:51, Info                  CSI    0000054a [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:53, Info                  CSI    0000054b [SR] Verify complete
2015-09-14 02:52:53, Info                  CSI    0000054c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:53, Info                  CSI    0000054d [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:55, Info                  CSI    0000056a [SR] Verify complete
2015-09-14 02:52:55, Info                  CSI    0000056b [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:55, Info                  CSI    0000056c [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:57, Info                  CSI    0000056d [SR] Verify complete
2015-09-14 02:52:57, Info                  CSI    0000056e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:57, Info                  CSI    0000056f [SR] Beginning Verify and Repair transaction
2015-09-14 02:52:59, Info                  CSI    00000572 [SR] Verify complete
2015-09-14 02:52:59, Info                  CSI    00000573 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:52:59, Info                  CSI    00000574 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:02, Info                  CSI    00000575 [SR] Verify complete
2015-09-14 02:53:02, Info                  CSI    00000576 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:02, Info                  CSI    00000577 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:04, Info                  CSI    00000578 [SR] Verify complete
2015-09-14 02:53:04, Info                  CSI    00000579 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:04, Info                  CSI    0000057a [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:06, Info                  CSI    0000057b [SR] Verify complete
2015-09-14 02:53:06, Info                  CSI    0000057c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:06, Info                  CSI    0000057d [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:07, Info                  CSI    0000057e [SR] Verify complete
2015-09-14 02:53:07, Info                  CSI    0000057f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:07, Info                  CSI    00000580 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:11, Info                  CSI    00000581 [SR] Verify complete
2015-09-14 02:53:11, Info                  CSI    00000582 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:11, Info                  CSI    00000583 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:13, Info                  CSI    0000058e [SR] Verify complete
2015-09-14 02:53:13, Info                  CSI    0000058f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:13, Info                  CSI    00000590 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:14, Info                  CSI    00000591 [SR] Verify complete
2015-09-14 02:53:14, Info                  CSI    00000592 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:14, Info                  CSI    00000593 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:16, Info                  CSI    00000600 [SR] Verify complete
2015-09-14 02:53:16, Info                  CSI    00000601 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:16, Info                  CSI    00000602 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:18, Info                  CSI    00000606 [SR] Verify complete
2015-09-14 02:53:18, Info                  CSI    00000607 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:18, Info                  CSI    00000608 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:20, Info                  CSI    00000609 [SR] Verify complete
2015-09-14 02:53:20, Info                  CSI    0000060a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:20, Info                  CSI    0000060b [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:22, Info                  CSI    0000060c [SR] Verify complete
2015-09-14 02:53:22, Info                  CSI    0000060d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:22, Info                  CSI    0000060e [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:23, Info                  CSI    0000060f [SR] Verify complete
2015-09-14 02:53:23, Info                  CSI    00000610 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:23, Info                  CSI    00000611 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:25, Info                  CSI    00000612 [SR] Verify complete
2015-09-14 02:53:25, Info                  CSI    00000613 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:25, Info                  CSI    00000614 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:27, Info                  CSI    00000621 [SR] Verify complete
2015-09-14 02:53:27, Info                  CSI    00000622 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:27, Info                  CSI    00000623 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:30, Info                  CSI    00000634 [SR] Verify complete
2015-09-14 02:53:30, Info                  CSI    00000635 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:30, Info                  CSI    00000636 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:33, Info                  CSI    0000064f [SR] Verify complete
2015-09-14 02:53:33, Info                  CSI    00000650 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:33, Info                  CSI    00000651 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:36, Info                  CSI    00000653 [SR] Verify complete
2015-09-14 02:53:36, Info                  CSI    00000654 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:36, Info                  CSI    00000655 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:37, Info                  CSI    00000656 [SR] Verify complete
2015-09-14 02:53:37, Info                  CSI    00000657 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:37, Info                  CSI    00000658 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:39, Info                  CSI    0000065c [SR] Verify complete
2015-09-14 02:53:39, Info                  CSI    0000065d [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:39, Info                  CSI    0000065e [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:42, Info                  CSI    00000669 [SR] Verify complete
2015-09-14 02:53:42, Info                  CSI    0000066a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:42, Info                  CSI    0000066b [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:45, Info                  CSI    00000682 [SR] Verify complete
2015-09-14 02:53:46, Info                  CSI    00000683 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:46, Info                  CSI    00000684 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:48, Info                  CSI    00000692 [SR] Verify complete
2015-09-14 02:53:48, Info                  CSI    00000693 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:48, Info                  CSI    00000694 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:50, Info                  CSI    0000069e [SR] Verify complete
2015-09-14 02:53:50, Info                  CSI    0000069f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:50, Info                  CSI    000006a0 [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:54, Info                  CSI    000006b9 [SR] Verify complete
2015-09-14 02:53:54, Info                  CSI    000006ba [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:54, Info                  CSI    000006bb [SR] Beginning Verify and Repair transaction
2015-09-14 02:53:57, Info                  CSI    000006d2 [SR] Verify complete
2015-09-14 02:53:57, Info                  CSI    000006d3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:53:57, Info                  CSI    000006d4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:00, Info                  CSI    00000715 [SR] Verify complete
2015-09-14 02:54:00, Info                  CSI    00000716 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:00, Info                  CSI    00000717 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:02, Info                  CSI    00000718 [SR] Verify complete
2015-09-14 02:54:02, Info                  CSI    00000719 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:02, Info                  CSI    0000071a [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:04, Info                  CSI    0000071d [SR] Verify complete
2015-09-14 02:54:04, Info                  CSI    0000071e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:04, Info                  CSI    0000071f [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:07, Info                  CSI    00000739 [SR] Verify complete
2015-09-14 02:54:07, Info                  CSI    0000073a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:07, Info                  CSI    0000073b [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:10, Info                  CSI    00000754 [SR] Verify complete
2015-09-14 02:54:10, Info                  CSI    00000755 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:10, Info                  CSI    00000756 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:13, Info                  CSI    00000766 [SR] Verify complete
2015-09-14 02:54:13, Info                  CSI    00000767 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:13, Info                  CSI    00000768 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:15, Info                  CSI    00000770 [SR] Verify complete
2015-09-14 02:54:15, Info                  CSI    00000771 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:15, Info                  CSI    00000772 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:17, Info                  CSI    00000773 [SR] Verify complete
2015-09-14 02:54:17, Info                  CSI    00000774 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:17, Info                  CSI    00000775 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:19, Info                  CSI    0000077b [SR] Verify complete
2015-09-14 02:54:19, Info                  CSI    0000077c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:19, Info                  CSI    0000077d [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:23, Info                  CSI    000007a3 [SR] Verify complete
2015-09-14 02:54:23, Info                  CSI    000007a4 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:23, Info                  CSI    000007a5 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:25, Info                  CSI    000007b2 [SR] Verify complete
2015-09-14 02:54:26, Info                  CSI    000007b3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:26, Info                  CSI    000007b4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:28, Info                  CSI    000007bf [SR] Verify complete
2015-09-14 02:54:28, Info                  CSI    000007c0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:28, Info                  CSI    000007c1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:30, Info                  CSI    000007c3 [SR] Verify complete
2015-09-14 02:54:30, Info                  CSI    000007c4 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:30, Info                  CSI    000007c5 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:32, Info                  CSI    000007cf [SR] Verify complete
2015-09-14 02:54:32, Info                  CSI    000007d0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:32, Info                  CSI    000007d1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:38, Info                  CSI    000007d2 [SR] Verify complete
2015-09-14 02:54:38, Info                  CSI    000007d3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:38, Info                  CSI    000007d4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:43, Info                  CSI    000007ed [SR] Verify complete
2015-09-14 02:54:43, Info                  CSI    000007ee [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:43, Info                  CSI    000007ef [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:45, Info                  CSI    000007f0 [SR] Verify complete
2015-09-14 02:54:45, Info                  CSI    000007f1 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:45, Info                  CSI    000007f2 [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:47, Info                  CSI    000007f8 [SR] Verify complete
2015-09-14 02:54:47, Info                  CSI    000007f9 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:47, Info                  CSI    000007fa [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:51, Info                  CSI    00000819 [SR] Verify complete
2015-09-14 02:54:51, Info                  CSI    0000081a [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:51, Info                  CSI    0000081b [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:53, Info                  CSI    0000082b [SR] Verify complete
2015-09-14 02:54:53, Info                  CSI    0000082c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:53, Info                  CSI    0000082d [SR] Beginning Verify and Repair transaction
2015-09-14 02:54:58, Info                  CSI    0000084e [SR] Verify complete
2015-09-14 02:54:58, Info                  CSI    0000084f [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:54:58, Info                  CSI    00000850 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:00, Info                  CSI    00000851 [SR] Verify complete
2015-09-14 02:55:00, Info                  CSI    00000852 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:00, Info                  CSI    00000853 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:02, Info                  CSI    00000864 [SR] Verify complete
2015-09-14 02:55:02, Info                  CSI    00000865 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:02, Info                  CSI    00000866 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:04, Info                  CSI    0000086b [SR] Verify complete
2015-09-14 02:55:04, Info                  CSI    0000086c [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:04, Info                  CSI    0000086d [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:05, Info                  CSI    00000870 [SR] Verify complete
2015-09-14 02:55:05, Info                  CSI    00000871 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:05, Info                  CSI    00000872 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:07, Info                  CSI    00000875 [SR] Verify complete
2015-09-14 02:55:08, Info                  CSI    00000876 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:08, Info                  CSI    00000877 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:10, Info                  CSI    0000087d [SR] Verify complete
2015-09-14 02:55:10, Info                  CSI    0000087e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:10, Info                  CSI    0000087f [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:12, Info                  CSI    00000882 [SR] Verify complete
2015-09-14 02:55:12, Info                  CSI    00000883 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:12, Info                  CSI    00000884 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:13, Info                  CSI    00000888 [SR] Verify complete
2015-09-14 02:55:14, Info                  CSI    00000889 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:14, Info                  CSI    0000088a [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:16, Info                  CSI    0000088d [SR] Verify complete
2015-09-14 02:55:16, Info                  CSI    0000088e [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:16, Info                  CSI    0000088f [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:18, Info                  CSI    00000892 [SR] Verify complete
2015-09-14 02:55:18, Info                  CSI    00000893 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:18, Info                  CSI    00000894 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:20, Info                  CSI    0000089f [SR] Verify complete
2015-09-14 02:55:20, Info                  CSI    000008a0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:20, Info                  CSI    000008a1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:22, Info                  CSI    000008a2 [SR] Verify complete
2015-09-14 02:55:22, Info                  CSI    000008a3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:22, Info                  CSI    000008a4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:24, Info                  CSI    000008a6 [SR] Verify complete
2015-09-14 02:55:24, Info                  CSI    000008a7 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:24, Info                  CSI    000008a8 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:26, Info                  CSI    000008a9 [SR] Verify complete
2015-09-14 02:55:26, Info                  CSI    000008aa [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:26, Info                  CSI    000008ab [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:28, Info                  CSI    000008ac [SR] Verify complete
2015-09-14 02:55:28, Info                  CSI    000008ad [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:28, Info                  CSI    000008ae [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:30, Info                  CSI    000008af [SR] Verify complete
2015-09-14 02:55:30, Info                  CSI    000008b0 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:30, Info                  CSI    000008b1 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:32, Info                  CSI    000008b2 [SR] Verify complete
2015-09-14 02:55:32, Info                  CSI    000008b3 [SR] Verifying 100 (0x0000000000000064) components
2015-09-14 02:55:32, Info                  CSI    000008b4 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:35, Info                  CSI    000008b7 [SR] Verify complete
2015-09-14 02:55:35, Info                  CSI    000008b8 [SR] Verifying 46 (0x000000000000002e) components
2015-09-14 02:55:35, Info                  CSI    000008b9 [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:35, Info                  CSI    000008ba [SR] Verify complete
2015-09-14 02:55:35, Info                  CSI    000008bb [SR] Repairing 0 components
2015-09-14 02:55:35, Info                  CSI    000008bc [SR] Beginning Verify and Repair transaction
2015-09-14 02:55:35, Info                  CSI    000008bd [SR] Repair complete
 

 

[Bruce1270]

Hi legna

The SFC scan all looks fine with no issues.

I don't know if you are actually planning on carrying out a refresh now or in the near future but if you do and you get the same problem my advice would be to start a new topic in the windows 8 technical forum - http://www.geekstogo...ndows-8-and-81/ where people in that area of expertise could assist you.

If you do please let them know you have already posted and received assistance in the Security - Virus, spyware, Malware removal forum and post the link to this topic.

Many thanks

[Naathim]

<p>Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. <br /><br />If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.<br /><br />Everyone else please begin a New Topic.</p>