Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

win32/proxychanger.tf trojan wpad.com.gr/proxy.pac ESET Warnings

Started by roachklip , Nov 12 2015 03:55 PM

This topic is locked

#1
roachklip

Posted 12 November 2015 - 03:55 PM

Member

Member
45 posts

Hello.

My ESET antivirus keeps popping up every 10 minutes or so with this...

here are my logs...

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015

Ran by Joe (administrator) on LIVINGROOM1 (12-11-2015 16:38:46)

Running from C:\Users\Joe\Desktop

Loaded Profiles: Joe (Available Profiles: Joe)

Platform: Windows 10 Home (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe

() C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe

(Auslogics) C:\Program Files (x86)\Auslogics\Anti-Malware\AntiMalware.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{9AF45D7C-34F1-4BA0-B799-825C8C04494C}\AiChargerDT.exe

(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Ai Charger II\Ai_ChargerII_TrayIcon(ASUS_Manager).exe

(Auslogics) C:\Program Files (x86)\Auslogics\BoostSpeed\BoostSpeed.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe

(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

(www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIKME.EXE

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Auslogics) C:\Program Files (x86)\Auslogics\Driver Updater\DriverUpdater.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15081.0_x64__8wekyb3d8bbwe\Video.UI.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Irfan Skiljan) C:\Program Files (x86)\IrfanView\i_view32.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595336 2014-10-01] (ESET)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2014-04-25] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.15.438\ASUSWSLoader.exe [63272 2014-11-07] ()

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)

HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [650784 2015-01-20] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863776 2015-01-20] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065024 2014-06-10] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-08-19] (AMD)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\Run: [BitComet] => C:\Program Files\BitComet\BitComet.exe [17257648 2013-12-31] (www.BitComet.com)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIKME.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\MountPoints2: {e5fe87d2-78cf-11e5-8280-54271ed33f96} - "I:\VZW_Software_upgrade_assistant.exe"

HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIKME.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION)

HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [60688 2015-10-21] (Apple Inc.)

ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.15.438\ASUSWSShellExt64.dll [2014-09-03] (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.15.438\ASUSWSShellExt64.dll [2014-09-03] (ASUS Cloud Corporation.)

ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.15.438\ASUSWSShellExt64.dll [2014-09-03] (ASUS Cloud Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-2421003995-3247290216-19678324-1001] => hxxp://wpad.com.gr/proxy.pac

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{ad7cac48-8da8-4967-a501-cf0690795e49}: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{dbb177e6-cf24-4e76-b622-554cf30844bb}: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{fcebeeb6-60f0-4a17-a71d-df7121d18680}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB

SearchScopes: HKU\S-1-5-21-2421003995-3247290216-19678324-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-2421003995-3247290216-19678324-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-10-23] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-10-23] (Microsoft Corporation)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2015-10-23] (Microsoft Corporation)

BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2015-10-23] (Microsoft Corporation)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-23] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-23] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-23] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-10-23] (Microsoft Corporation)

FireFox:

========

FF ProfilePath: C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\u7uz6xld.default

FF DefaultSearchEngine: Google

FF DefaultSearchEngine.US: Google

FF SelectedSearchEngine: Google

FF Keyword.URL: hxxps://www.google.com/search?q=

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-10-23] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-10-23] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-18] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-18] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-10-24] [not signed]

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR Profile: C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-08]

CHR Extension: (Google Docs) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08]

CHR Extension: (Google Drive) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]

CHR Extension: (YouTube) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Google Search) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]

CHR Extension: (Google Sheets) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-08]

CHR Extension: (Google Docs Offline) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-27]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08]

CHR Extension: (Instagram for Chrome) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnbmdkdflhjiclaoiiifmheknpccalb [2015-11-12]

CHR Extension: (Gmail) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [File not signed]

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2013-11-06] ()

R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe [71680 2013-08-16] (ASUS Cloud Corporation) [File not signed]

R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2934456 2015-10-16] (Microsoft Corporation)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2014-10-01] (ESET)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)

R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG)

R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-09] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-09] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()

R0 assdv2; C:\Windows\System32\Drivers\assdv2.sys [21816 2013-12-05] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)

R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [165376 2015-07-09] (Microsoft Corporation)

R3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [36864 2015-07-09] (Microsoft Corporation)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-09] (Microsoft Corporation)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-08-18] (ESET)

R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241368 2014-08-18] (ESET)

R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [169280 2014-08-18] (ESET)

R2 epfw; C:\Windows\system32\DRIVERS\epfw.sys [222280 2014-08-18] (ESET)

R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [44632 2014-08-18] (ESET)

R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-09-18] (ESET)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-12] (Malwarebytes)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-03-11] (Realtek Semiconductor Corporation)

R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3453144 2015-06-23] (Realtek Semiconductor Corporation )

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-09] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-09] (Microsoft Corporation)

R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-12 16:38 - 2015-11-12 16:39 - 00020486 _____ C:\Users\Joe\Desktop\FRST.txt

2015-11-12 16:35 - 2015-11-12 16:38 - 00000000 ____D C:\FRST

2015-11-12 16:34 - 2015-11-12 16:35 - 02198528 _____ (Farbar) C:\Users\Joe\Desktop\FRST64.exe

2015-11-12 16:01 - 2015-11-12 16:23 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log

2015-11-12 16:01 - 2015-11-12 16:01 - 00016148 _____ C:\WINDOWS\system32\LIVINGROOM1_Joe_HistoryPrediction.bin

2015-11-12 09:50 - 2015-11-12 09:50 - 00003468 _____ C:\WINDOWS\System32\Tasks\ESET Windows 10 upgrade – Refresh settings

2015-11-12 09:50 - 2015-11-12 09:50 - 00000000 ____D C:\Program Files\Common Files\AV

2015-11-11 07:59 - 2015-11-11 08:16 - 00000000 ____D C:\ProgramData\BSD

2015-11-10 17:10 - 2015-11-05 00:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-11-10 17:10 - 2015-11-05 00:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

2015-11-10 17:10 - 2015-11-05 00:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2015-11-10 17:10 - 2015-11-05 00:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2015-11-10 17:10 - 2015-11-05 00:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-11-10 17:10 - 2015-11-05 00:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-11-10 17:10 - 2015-11-05 00:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2015-11-10 17:10 - 2015-11-05 00:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2015-11-10 17:10 - 2015-11-04 23:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2015-11-10 17:10 - 2015-11-04 23:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys

2015-11-10 17:10 - 2015-11-04 23:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2015-11-10 17:10 - 2015-11-04 23:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-11-10 17:10 - 2015-11-04 23:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-11-10 17:10 - 2015-11-04 23:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2015-11-10 17:10 - 2015-11-04 23:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2015-11-10 17:10 - 2015-11-04 23:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-11-10 17:10 - 2015-11-04 23:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-11-10 17:10 - 2015-11-04 23:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2015-11-10 17:10 - 2015-11-04 23:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2015-11-10 17:10 - 2015-11-04 23:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-11-10 17:10 - 2015-11-04 23:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll

2015-11-10 17:10 - 2015-11-04 23:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2015-11-10 17:10 - 2015-11-04 23:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-11-10 17:10 - 2015-11-04 23:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2015-11-10 17:10 - 2015-11-04 23:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-11-10 17:10 - 2015-11-04 23:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll

2015-11-10 17:10 - 2015-11-04 23:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-11-10 17:10 - 2015-11-04 23:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-11-10 17:10 - 2015-11-04 23:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-11-10 17:10 - 2015-11-04 23:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-11-10 17:10 - 2015-11-04 23:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2015-11-10 17:10 - 2015-11-04 23:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll

2015-11-10 17:10 - 2015-11-04 23:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2015-11-10 17:10 - 2015-11-04 22:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-11-10 17:10 - 2015-11-04 22:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2015-11-10 17:10 - 2015-11-04 22:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-11-10 17:10 - 2015-11-04 22:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2015-11-10 17:10 - 2015-11-04 22:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-11-10 17:10 - 2015-11-04 22:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2015-11-10 17:10 - 2015-11-04 22:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll

2015-11-10 17:10 - 2015-11-04 22:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-11-10 17:10 - 2015-11-04 22:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2015-11-10 17:10 - 2015-11-04 22:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-11-10 17:10 - 2015-11-04 22:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-11-10 17:10 - 2015-11-04 22:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2015-11-10 17:10 - 2015-11-04 22:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll

2015-11-10 17:10 - 2015-11-04 22:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-11-10 17:10 - 2015-11-04 22:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-11-10 17:10 - 2015-11-04 22:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2015-11-10 17:10 - 2015-11-04 22:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-11-10 17:10 - 2015-11-04 22:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2015-11-10 17:10 - 2015-11-04 22:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2015-11-10 17:10 - 2015-11-04 22:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll

2015-11-08 16:40 - 2014-01-02 18:35 - 00007699 _____ C:\Users\Joe\Documents\HTML.txt

2015-11-05 10:45 - 2015-11-05 10:50 - 00000000 ____D C:\Users\Joe\Desktop\New folder (5)

2015-11-05 09:12 - 2015-11-06 11:48 - 00069649 _____ C:\Users\Joe\Documents\BillzNew.xlsx

2015-11-05 08:09 - 2015-11-05 08:09 - 00001361 _____ C:\Users\Joe\Desktop\Auslogics Anti-Malware.lnk

2015-11-03 08:51 - 2015-11-03 08:55 - 00000000 ____D C:\Users\Joe\Desktop\Scarface - Deeply Rooted

2015-11-02 08:22 - 2015-11-02 08:23 - 00000000 ____D C:\Users\Joe\Desktop\New folder (4)

2015-11-02 08:10 - 2015-11-02 08:10 - 00001043 _____ C:\Users\Public\Desktop\CDex.lnk

2015-11-02 08:10 - 2015-11-02 08:10 - 00000000 ____D C:\Users\Joe\AppData\Local\CDex

2015-11-02 08:10 - 2015-11-02 08:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex

2015-11-02 08:09 - 2015-11-02 08:10 - 00000000 ____D C:\Program Files (x86)\CDex

2015-10-31 19:27 - 2015-08-24 18:18 - 00000000 ____D C:\Users\Joe\Desktop\Walter Beasley - I'm Back (2015)

2015-10-31 17:59 - 2015-10-31 18:21 - 95414864 _____ C:\Users\Joe\Desktop\zym7l.Walter.Beasley..Im.Back.2015.rar

2015-10-31 10:16 - 2015-09-25 19:44 - 00000000 ____D C:\Users\Joe\Desktop\Jeff Lorber Fusion - Step It Up (2015)

2015-10-31 10:09 - 2015-10-31 10:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2015-10-31 08:57 - 2015-05-04 20:23 - 00000000 ____D C:\Users\Joe\Desktop\Nappy Roots - The 40 Akerz Project [iTunes]

2015-10-31 08:50 - 2015-10-31 08:51 - 105257346 _____ C:\Users\Joe\Desktop\Nappy Roots - The 40 Akerz Project [iTunes].zip

2015-10-31 08:39 - 2015-10-31 10:06 - 372107083 _____ C:\Users\Joe\Desktop\7067JLSU5flac.rar

2015-10-30 07:05 - 2015-10-30 07:05 - 00607176 RSHOT (Auslogics) C:\WINDOWS\SysWOW64\ActionCenterForms.dll

2015-10-28 18:06 - 2015-08-21 07:28 - 00000000 ____D C:\Users\Joe\Desktop\The Weeknd - Beauty Behind The Madness

2015-10-26 07:35 - 2007-11-01 06:35 - 00000000 ____D C:\Users\Joe\Desktop\Sister Sledge - The Very Best Of Sister Sledge 1973 - 1993

2015-10-24 06:18 - 2015-11-12 16:18 - 00000943 _____ C:\WINDOWS\Tasks\EPSON WF-4640 Series Update {A690698C-17B6-446E-A114-AD1B0AB57BD9}.job

2015-10-24 06:18 - 2015-11-12 16:18 - 00000757 _____ C:\WINDOWS\Tasks\EPSON WF-4640 Series Invitation {A690698C-17B6-446E-A114-AD1B0AB57BD9}.job

2015-10-24 06:18 - 2015-10-24 06:18 - 00004142 _____ C:\WINDOWS\System32\Tasks\EPSON WF-4640 Series Update {A690698C-17B6-446E-A114-AD1B0AB57BD9}

2015-10-24 06:18 - 2015-10-24 06:18 - 00003964 _____ C:\WINDOWS\System32\Tasks\EPSON WF-4640 Series Invitation {A690698C-17B6-446E-A114-AD1B0AB57BD9}

2015-10-22 22:31 - 2015-10-22 22:31 - 00001829 _____ C:\Users\Public\Desktop\iTunes.lnk

2015-10-22 22:31 - 2015-10-22 22:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-10-22 22:31 - 2015-10-22 22:31 - 00000000 ____D C:\Program Files\iTunes

2015-10-22 22:31 - 2015-10-22 22:31 - 00000000 ____D C:\Program Files\iPod

2015-10-22 22:31 - 2015-10-22 22:31 - 00000000 ____D C:\Program Files (x86)\iTunes

2015-10-22 22:25 - 2015-10-22 22:25 - 00001921 _____ C:\Users\Public\Desktop\QuickTime Player.lnk

2015-10-22 22:25 - 2015-10-22 22:25 - 00000000 ____D C:\Users\Joe\AppData\LocalLow\Apple Computer

2015-10-22 22:25 - 2015-10-22 22:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-10-22 22:25 - 2015-10-22 22:25 - 00000000 ____D C:\Program Files (x86)\QuickTime

2015-10-22 11:15 - 2015-10-22 11:15 - 00000000 ____D C:\ProgramData\Samsung

2015-10-22 11:13 - 2015-10-22 11:13 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudmdm.sys

2015-10-22 11:13 - 2015-10-22 11:13 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\WINDOWS\system32\Drivers\ssudbus.sys

2015-10-22 11:12 - 2015-10-22 11:12 - 00000000 ____D C:\Users\Public\Documents\Verizon2.0_Log

2015-10-22 11:12 - 2015-10-22 11:12 - 00000000 ____D C:\Users\Joe\AppData\Roaming\VERIZON

2015-10-22 10:18 - 2015-10-22 10:18 - 00061917 _____ C:\WINDOWS\SysWOW64\CCCInstall_201510221118149168.log

2015-10-22 10:18 - 2015-10-22 10:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

2015-10-22 10:17 - 2015-10-22 10:17 - 00000000 ____D C:\ProgramData\ATI

2015-10-22 10:17 - 2015-10-22 10:17 - 00000000 ____D C:\Program Files\ATI Technologies

2015-10-22 10:16 - 2015-10-22 10:16 - 00061037 _____ C:\WINDOWS\SysWOW64\CCCInstall_201510221116541008.log

2015-10-22 10:16 - 2015-10-22 10:16 - 00000000 ____D C:\Users\Default\AppData\Roaming\ATI

2015-10-22 10:16 - 2015-10-22 10:16 - 00000000 ____D C:\Users\Default\AppData\Local\ATI

2015-10-22 10:16 - 2015-10-22 10:16 - 00000000 ____D C:\Users\Default User\AppData\Roaming\ATI

2015-10-22 10:16 - 2015-10-22 10:16 - 00000000 ____D C:\Users\Default User\AppData\Local\ATI

2015-10-22 10:14 - 2015-10-22 10:14 - 47794160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 39712768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 30776304 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 27544560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 22327280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 15725552 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 14310896 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap

2015-10-22 10:14 - 2015-10-22 10:14 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap

2015-10-22 10:14 - 2015-10-22 10:14 - 01196032 _____ C:\WINDOWS\system32\amdocl_as64.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 01070592 _____ C:\WINDOWS\system32\amdocl_ld64.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 01004032 _____ C:\WINDOWS\SysWOW64\amdocl_as32.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00833800 _____ C:\WINDOWS\system32\amdicdxx.dat

2015-10-22 10:14 - 2015-10-22 10:14 - 00807424 _____ C:\WINDOWS\SysWOW64\amdocl_ld32.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00662392 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb

2015-10-22 10:14 - 2015-10-22 10:14 - 00662392 _____ C:\WINDOWS\system32\atiapfxx.blb

2015-10-22 10:14 - 2015-10-22 10:14 - 00631280 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00471312 _____ C:\WINDOWS\system32\amdmiracast.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00243696 _____ C:\WINDOWS\system32\clinfo.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00213488 _____ C:\WINDOWS\system32\amdgfxinfo64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00199664 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00198640 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00177344 _____ C:\WINDOWS\system32\ativce03.dat

2015-10-22 10:14 - 2015-10-22 10:14 - 00175648 _____ C:\WINDOWS\system32\amde31a.dat

2015-10-22 10:14 - 2015-10-22 10:14 - 00168944 _____ C:\WINDOWS\system32\atieah64.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00152560 _____ C:\WINDOWS\SysWOW64\atieah32.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00151936 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00143344 _____ C:\WINDOWS\system32\amdhdl64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00132080 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00117600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00111600 _____ C:\WINDOWS\system32\hsa-thunk64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00111088 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00110312 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00100816 _____ C:\WINDOWS\system32\ativce02.dat

2015-10-22 10:14 - 2015-10-22 10:14 - 00097776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00089584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00087992 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00081168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00073712 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00071152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00068080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00064496 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00060912 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe

2015-10-22 10:14 - 2015-10-22 10:14 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00057840 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00047664 _____ C:\WINDOWS\system32\kapp_ci.sbin

2015-10-22 10:14 - 2015-10-22 10:14 - 00043536 _____ C:\WINDOWS\system32\kapp_si.sbin

2015-10-22 10:14 - 2015-10-22 10:14 - 00038384 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll

2015-10-22 10:14 - 2015-10-22 10:14 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll

2015-10-21 07:33 - 2015-10-21 07:33 - 00001362 _____ C:\Users\Joe\Desktop\Auslogics Disk Defrag Professional.lnk

2015-10-21 07:33 - 2015-10-21 07:33 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Auslogics

2015-10-20 13:59 - 2015-10-20 13:59 - 00000000 ____D C:\Users\Joe\AppData\Local\NetworkTiles

2015-10-20 06:24 - 2015-10-20 08:12 - 1776740121 _____ C:\Users\Joe\Desktop\10-19-15.mp4

2015-10-19 07:44 - 2015-10-19 07:45 - 00000000 ____D C:\Users\Joe\Desktop\J. Cole - 2014 Forest Hills Drive {MP3-2014}

2015-10-19 07:39 - 2015-10-19 07:41 - 00000000 ____D C:\Users\Joe\Desktop\The Weeknd -Beauty Behind The Madness (2015) [CD RIP] H3X

2015-10-18 16:20 - 2015-10-18 16:20 - 00000000 ____D C:\WINDOWS\en

2015-10-18 16:19 - 2015-10-18 16:19 - 00001385 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk

2015-10-18 16:18 - 2015-10-18 16:42 - 2423837688 _____ C:\Users\Joe\Desktop\10-18-15.mp4

2015-10-18 10:45 - 2015-10-18 10:45 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-10-18 10:45 - 2015-10-18 10:45 - 00001223 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-10-18 10:45 - 2015-10-18 10:45 - 00000000 ____D C:\Users\Joe\AppData\Local\Mozilla

2015-10-18 10:45 - 2015-10-18 10:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-10-18 10:45 - 2015-10-18 10:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-10-18 10:44 - 2015-10-18 10:44 - 00243608 _____ C:\Users\Joe\Desktop\Firefox Setup Stub 41.0.2.exe

2015-10-18 10:20 - 2015-10-18 10:20 - 00000000 ____D C:\Users\Joe\AppData\LocalLow\Adobe

2015-10-18 10:20 - 2015-10-18 10:20 - 00000000 ____D C:\Users\Joe\AppData\Local\CEF

2015-10-18 10:17 - 2015-10-30 17:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2015-10-18 10:17 - 2015-10-30 17:19 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2015-10-18 10:17 - 2015-10-18 10:17 - 00002131 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk

2015-10-18 10:17 - 2015-10-18 10:17 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-10-18 10:14 - 2015-10-18 10:20 - 00000000 ____D C:\Users\Joe\AppData\Local\Adobe

2015-10-18 02:56 - 2015-11-12 15:01 - 00000916 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-10-18 02:56 - 2015-11-11 10:00 - 00000912 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-10-18 02:56 - 2015-11-11 04:01 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-10-18 02:56 - 2015-10-18 02:56 - 00003974 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2015-10-18 02:56 - 2015-10-18 02:56 - 00003742 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2015-10-18 02:56 - 2015-10-18 02:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-10-18 02:55 - 2015-10-18 02:55 - 00929872 _____ (Google Inc.) C:\Users\Joe\Downloads\ChromeSetup.exe

2015-10-18 01:57 - 2015-10-18 01:57 - 30153948 _____ C:\Users\Joe\Downloads\Auslogics BoostSpeed Premium 8.0.0.0 [Full + Patch].mp4

2015-10-18 01:42 - 2015-11-05 08:09 - 00000000 ____D C:\WINDOWS\System32\Tasks\Auslogics

2015-10-18 01:42 - 2015-11-05 08:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics

2015-10-18 01:42 - 2015-11-05 08:09 - 00000000 ____D C:\ProgramData\Auslogics

2015-10-18 01:42 - 2015-11-05 08:08 - 00000000 ____D C:\Program Files (x86)\Auslogics

2015-10-18 01:42 - 2015-10-18 01:42 - 00001249 _____ C:\Users\Joe\Desktop\Auslogics BoostSpeed 8.lnk

2015-10-18 01:41 - 2015-10-18 01:41 - 14894466 _____ C:\Users\Joe\Downloads\BoostSpeed.8.0.0.rar

2015-10-18 01:30 - 2015-10-17 22:02 - 00000000 ___DC C:\WINDOWS\Panther

2015-10-18 01:30 - 2015-10-17 21:38 - 00000000 __SHD C:\Recovery

2015-10-18 01:27 - 2015-10-18 01:28 - 00000000 ____D C:\Windows.old

2015-10-18 01:26 - 2015-10-18 01:26 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02573768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01997336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01871360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2015-10-18 01:26 - 2015-10-18 01:26 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2015-10-18 01:26 - 2015-10-18 01:26 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2015-10-18 01:26 - 2015-10-18 01:26 - 00929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-10-18 01:26 - 2015-10-18 01:26 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2015-10-18 01:26 - 2015-10-18 01:26 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00078528 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2015-10-18 01:26 - 2015-10-18 01:26 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2015-10-18 01:08 - 2015-10-18 01:08 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2015-10-18 01:07 - 2015-10-18 01:07 - 00000000 ____D C:\Program Files\Reference Assemblies

2015-10-18 01:07 - 2015-10-18 01:07 - 00000000 ____D C:\Program Files\MSBuild

2015-10-18 01:07 - 2015-10-18 01:07 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies

2015-10-18 01:07 - 2015-10-18 01:07 - 00000000 ____D C:\Program Files (x86)\MSBuild

2015-10-18 01:07 - 2015-06-17 21:10 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2015-10-18 01:07 - 2015-06-17 21:10 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2015-10-18 01:07 - 2015-06-17 21:10 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2015-10-18 01:07 - 2015-05-30 00:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2015-10-18 01:07 - 2015-05-30 00:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-10-18 01:07 - 2015-05-30 00:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2015-10-18 00:24 - 2015-10-18 00:24 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2015-10-17 23:58 - 2015-10-17 23:58 - 00001074 _____ C:\Users\Joe\Desktop\IrfanView.lnk

2015-10-17 23:58 - 2015-10-17 23:58 - 00000000 ____D C:\Users\Joe\AppData\Local\MicrosoftEdge

2015-10-17 23:33 - 2015-10-17 23:33 - 00000000 ____D C:\Users\Joe\Desktop\Misc._Flights

2015-10-17 23:31 - 2015-11-02 08:42 - 00000000 ____D C:\Users\Joe\Desktop\mediafaces@

2015-10-17 23:31 - 2015-10-26 07:45 - 00000000 ____D C:\Users\Joe\Desktop\Album Images@

2015-10-17 23:28 - 2015-10-17 23:28 - 00000000 ____D C:\Users\Owners

2015-10-17 23:28 - 2015-10-17 23:04 - 00069286 _____ C:\Users\Owners\Desktop\BillzNew.xlsx

2015-10-17 22:07 - 2015-10-17 22:07 - 00000000 ____D C:\Users\Joe\AppData\Roaming\AMD

2015-10-17 22:05 - 2015-10-25 16:18 - 00000000 ____D C:\Users\Joe\AppData\Local\AMD

2015-10-17 22:05 - 2015-10-17 22:06 - 00002377 _____ C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2015-10-17 22:04 - 2015-10-17 22:04 - 00000000 ____D C:\Users\Joe\AppData\Local\Publishers

2015-10-17 22:02 - 2015-10-17 22:04 - 00000000 ____D C:\Users\Joe\AppData\Local\Comms

2015-10-17 22:02 - 2015-10-17 22:02 - 00000020 ___SH C:\Users\Joe\ntuser.ini

2015-10-17 22:02 - 2015-10-17 22:02 - 00000000 ____D C:\Users\Joe\AppData\Local\TileDataLayer

2015-10-17 21:54 - 2015-11-11 10:05 - 00875126 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-10-17 21:53 - 2015-10-17 21:53 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat

2015-10-17 21:45 - 2015-10-17 21:45 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2015-10-17 21:40 - 2015-10-17 21:40 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate

2015-10-17 21:39 - 2015-10-18 11:38 - 00000000 ___RD C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-10-17 21:39 - 2015-10-17 22:02 - 00000000 ___RD C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-17 21:39 - 2015-10-17 22:02 - 00000000 ____D C:\Users\Joe

2015-10-17 21:39 - 2015-07-30 17:42 - 00000000 __RSD C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-10-17 21:39 - 2015-07-30 17:42 - 00000000 ___RD C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-17 21:39 - 2015-07-30 17:42 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-10-17 21:37 - 2015-11-02 08:10 - 00000000 ____D C:\ProgramData\Package Cache

2015-10-17 21:37 - 2015-10-22 10:17 - 00000000 ____D C:\ProgramData\AMD

2015-10-17 21:37 - 2015-10-17 21:40 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2015-10-17 21:36 - 2015-10-22 10:16 - 00000000 ____D C:\AMD

2015-10-17 21:36 - 2015-10-17 21:36 - 00188565 _____ C:\WINDOWS\system32\Drivers\RTWAVES40.dat

2015-10-17 21:36 - 2015-10-17 21:36 - 00001390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioWizard.lnk

2015-10-17 21:36 - 2015-10-17 21:36 - 00001378 _____ C:\Users\Public\Desktop\AudioWizard.lnk

2015-10-17 21:36 - 2015-10-17 21:36 - 00000000 ____H C:\ProgramData\DP45977C.lfl

2015-10-17 21:36 - 2015-10-17 21:36 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2015-10-17 21:36 - 2015-10-17 21:36 - 00000000 ____D C:\Program Files\Realtek

2015-10-17 21:36 - 2015-10-17 21:36 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2015-10-17 21:36 - 2015-10-17 21:36 - 00000000 ____D C:\Program Files\AMD

2015-10-17 21:36 - 2015-10-17 21:36 - 00000000 _____ C:\WINDOWS\ativpsrm.bin

2015-10-17 21:32 - 2015-10-17 21:32 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-10-17 21:31 - 2015-10-17 21:32 - 00030720 _____ C:\WINDOWS\system32\NetSetupMig.log

2015-10-17 20:48 - 2015-10-17 21:55 - 00009528 _____ C:\WINDOWS\diagwrn.xml

2015-10-17 20:48 - 2015-10-17 21:55 - 00009528 _____ C:\WINDOWS\diagerr.xml

2015-10-17 20:00 - 2015-10-17 20:00 - 00028824 _____ C:\Users\Joe\Downloads\GWXWebWindows.exe

2015-10-17 16:16 - 2015-10-22 23:18 - 00023040 _____ C:\Users\Joe\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-10-17 14:28 - 2015-10-18 01:27 - 00000000 ___SD C:\Users\Joe\Documents\My Shapes

2015-10-17 14:19 - 2015-10-17 15:02 - 00000000 ____D C:\Users\Joe\AppData\Local\MSfree Inc

2015-10-17 14:17 - 2015-10-17 22:06 - 00000000 ___RD C:\Users\Joe\OneDrive

2015-10-17 14:14 - 2015-10-17 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools

2015-10-17 14:14 - 2015-10-17 14:14 - 00002484 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visio 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002405 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002399 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002393 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk

2015-10-17 14:14 - 2015-10-17 14:14 - 00002385 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2015-10-17 14:10 - 2015-10-17 14:10 - 00199772 _____ C:\WindowsGARABD.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00198072 _____ C:\WindowsGARA.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00189464 _____ C:\WindowsGARAIT.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00181124 _____ C:\WindowsARIALNI.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00180740 _____ C:\WindowsARIALNB.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00180084 _____ C:\WindowsARIALNBI.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00175956 _____ C:\WindowsARIALN.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00076588 _____ C:\WindowsALGER.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00066696 _____ C:\WindowsVIVALDII.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00056596 _____ C:\WindowsHARLOWSI.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00047644 _____ C:\WindowsBAUHS93.tt2

2015-10-17 14:10 - 2015-10-17 14:10 - 00000000 ____D C:\Program Files\Microsoft Office 15

2015-10-17 13:13 - 2015-10-18 09:20 - 00000000 ____D C:\Users\Joe\Desktop\1998BUP

2015-10-17 13:11 - 2015-10-17 13:11 - 00000000 ____D C:\Users\Joe\AppData\Roaming\IrfanView

2015-10-17 13:11 - 2015-10-17 13:11 - 00000000 ____D C:\Program Files (x86)\IrfanView

2015-10-17 13:10 - 2015-10-17 13:10 - 02126264 _____ (Irfan Skiljan) C:\Users\Joe\Downloads\iview440_setup.exe

2015-10-16 19:53 - 2015-10-16 19:53 - 00060576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFD88.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00019104 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFD1E.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00018080 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFD53.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00016032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFE3C.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00016032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFE07.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00014496 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFDE2.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00013984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFB6A.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00012448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFE71.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00011936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFBD3.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00010912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFDAD.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00010912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFCC4.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00010912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFB44.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00010400 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFE96.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00010400 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFCF9.tmp

2015-10-16 19:53 - 2015-10-16 19:53 - 00010400 _____ (Microsoft Corporation) C:\WINDOWS\system32\TBMFB9F.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00062624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFD65.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00020640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFD0B.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00018080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFD40.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00016032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFE29.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00016032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFDF4.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00014496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFDC0.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00013984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFB57.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00012448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFE4F.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00011936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFBB1.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00010912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFD9A.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00010912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFBE6.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00010912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFB13.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00010400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFE83.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00010400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFCD6.tmp

2015-10-16 17:56 - 2015-10-16 17:56 - 00010400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TBMFB8C.tmp

2015-10-16 09:40 - 2015-10-31 22:44 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Apple Computer

2015-10-16 09:40 - 2015-10-31 10:09 - 00000000 ____D C:\Users\Joe\AppData\Local\Apple Computer

2015-10-16 09:39 - 2015-10-16 09:39 - 00000000 ____D C:\ProgramData\Apple Computer

2015-10-16 09:38 - 2015-10-16 09:38 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2015-10-16 09:38 - 2015-10-16 09:38 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple

2015-10-16 09:38 - 2015-10-16 09:38 - 00000000 ____D C:\Users\Joe\AppData\Local\Apple

2015-10-16 09:38 - 2015-10-16 09:38 - 00000000 ____D C:\Program Files\Bonjour

2015-10-16 09:38 - 2015-10-16 09:38 - 00000000 ____D C:\Program Files (x86)\Bonjour

2015-10-16 09:38 - 2015-10-16 09:38 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2015-10-16 09:37 - 2015-10-22 22:31 - 00000000 ____D C:\Program Files\Common Files\Apple

2015-10-16 09:37 - 2015-10-16 09:38 - 00000000 ____D C:\ProgramData\Apple

2015-10-16 09:35 - 2015-10-16 09:35 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2015-10-16 09:34 - 2015-10-16 09:36 - 167601944 _____ (Apple Inc.) C:\Users\Joe\Downloads\iTunes6464Setup.exe

2015-10-16 00:07 - 2015-10-16 00:07 - 00000115 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

2015-10-16 00:06 - 2015-10-16 00:06 - 00000000 ____D C:\ProgramData\IsolatedStorage

2015-10-16 00:05 - 2015-10-17 21:47 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Audio Copy

2015-10-16 00:05 - 2015-10-16 00:06 - 00000000 ____D C:\Users\Joe\AppData\Local\EasyAudioCopy

2015-10-16 00:05 - 2015-10-16 00:05 - 24384824 _____ C:\Users\Joe\Downloads\easyaudiocopy-1.0.1.9.exe

2015-10-16 00:05 - 2015-10-16 00:05 - 00001163 _____ C:\Users\Joe\Desktop\Easy Audio Copy.lnk

2015-10-15 20:11 - 2015-10-15 20:15 - 00000000 ____D C:\Users\Joe\Desktop\New folder (3)

2015-10-14 07:32 - 2015-10-14 16:47 - 00000000 ____D C:\Users\Owners\Desktop\mediafaces@

2015-10-14 07:30 - 2015-10-14 07:32 - 00000000 ____D C:\Users\Owners\Desktop\Album Images@

2015-10-14 02:32 - 2015-08-22 08:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll

2015-10-14 02:32 - 2015-08-22 08:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-12 16:36 - 2014-11-19 10:45 - 00000000 ____D C:\Users\Joe\AppData\Roaming\BitComet

2015-11-12 16:18 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2015-11-12 16:04 - 2014-11-09 21:33 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{073931BD-8D21-4E0C-A568-51C4E0205EAD}

2015-11-12 16:02 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\sru

2015-11-12 13:40 - 2014-11-20 07:40 - 00000943 _____ C:\WINDOWS\Tasks\EPSON WF-4640 Series Update {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9}.job

2015-11-12 13:40 - 2014-11-20 07:40 - 00000757 _____ C:\WINDOWS\Tasks\EPSON WF-4640 Series Invitation {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9}.job

2015-11-12 13:28 - 2014-11-11 09:17 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-11-12 08:33 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-11-12 08:20 - 2015-10-11 07:35 - 00000000 ____D C:\Users\Joe\Desktop\MovieMaker

2015-11-11 18:00 - 2014-11-10 23:06 - 00000526 _____ C:\WINDOWS\Tasks\Nero 2015 Platinum Update.job

2015-11-11 10:06 - 2013-08-22 08:25 - 00000187 _____ C:\WINDOWS\win.ini

2015-11-11 09:59 - 2015-07-30 16:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-11-11 09:58 - 2015-07-10 04:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2015-11-11 03:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-11-10 17:38 - 2015-07-30 17:25 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-11-10 17:38 - 2014-11-12 03:50 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-11-10 17:35 - 2014-11-12 03:50 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-11-04 18:37 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2015-11-04 14:00 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\rescache

2015-11-03 13:20 - 2015-07-30 17:43 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-11-03 13:20 - 2015-07-30 17:43 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-11-03 08:46 - 2015-09-10 00:19 - 00000000 ____D C:\WINDOWS\ShellNew

2015-11-02 17:28 - 2014-11-09 21:29 - 00000000 ____D C:\Users\Joe\AppData\Local\Packages

2015-10-24 06:19 - 2014-11-20 07:41 - 00000000 ____D C:\Program Files (x86)\EPSON Software

2015-10-24 06:18 - 2014-11-20 07:40 - 00001010 _____ C:\Users\Public\Desktop\EPSON Scan.lnk

2015-10-23 07:38 - 2014-04-25 04:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2015-10-22 11:32 - 2014-11-10 23:45 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Winamp

2015-10-22 10:14 - 2015-08-20 20:51 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 10211008 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 08982440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 07482552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 01223552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 00143048 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 00138376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 00130072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll

2015-10-22 10:14 - 2015-08-20 20:51 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll

2015-10-22 10:14 - 2015-08-20 20:46 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys

2015-10-22 10:14 - 2015-08-20 20:46 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll

2015-10-22 10:14 - 2015-08-20 20:46 - 00874480 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll

2015-10-22 10:14 - 2015-08-20 20:46 - 00683504 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe

2015-10-22 10:14 - 2015-08-20 20:46 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys

2015-10-22 10:14 - 2015-08-20 20:46 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll

2015-10-22 10:14 - 2015-08-20 20:46 - 00255472 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe

2015-10-18 16:19 - 2014-04-25 04:32 - 00001454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2015-10-18 16:18 - 2014-04-25 04:32 - 00000000 ____D C:\Program Files (x86)\Windows Live

2015-10-18 10:45 - 2014-11-10 23:06 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Mozilla

2015-10-18 10:20 - 2014-11-09 21:29 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Adobe

2015-10-18 10:20 - 2014-04-25 04:12 - 00000000 ____D C:\ProgramData\Adobe

2015-10-18 02:56 - 2014-11-09 21:42 - 00000000 ____D C:\Program Files (x86)\Google

2015-10-18 02:28 - 2015-07-30 16:49 - 01577224 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-10-18 02:12 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\appcompat

2015-10-18 01:30 - 2015-07-30 17:42 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2015-10-18 01:27 - 2015-07-30 17:42 - 00000000 ___RD C:\WINDOWS\PurchaseDialog

2015-10-18 01:27 - 2015-07-30 17:42 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-18 01:27 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2015-10-18 01:27 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\Provisioning

2015-10-18 01:27 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\L2Schemas

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\system32\winrm

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\system32\WCN

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\system32\slmgr

2015-10-18 00:30 - 2015-09-10 00:05 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\SysWOW64\Com

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\oobe

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\MUI

2015-10-18 00:30 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\migwiz

2015-10-18 00:30 - 2015-07-10 04:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2015-10-18 00:30 - 2015-07-10 04:47 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2015-10-18 00:29 - 2015-09-10 00:19 - 00000000 ____D C:\Program Files\Windows Journal

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ___SD C:\WINDOWS\system32\F12

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ___SD C:\WINDOWS\system32\dsc

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ___RD C:\WINDOWS\MiracastView

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\Com

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\IME

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\Help

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\Program Files\Windows Photo Viewer

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\Program Files\Windows Defender

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\Program Files\Common Files\System

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2015-10-18 00:29 - 2015-07-30 17:42 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2015-10-18 00:29 - 2015-07-10 04:47 - 00000000 ____D C:\WINDOWS\system32\Dism

2015-10-18 00:29 - 2015-07-10 04:47 - 00000000 ____D C:\WINDOWS\servicing

2015-10-18 00:06 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\restore

2015-10-17 21:54 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\Registration

2015-10-17 21:53 - 2015-09-22 07:20 - 00003776 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d0f531a749693

2015-10-17 21:53 - 2015-09-02 17:48 - 00003776 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d0e5d1808fe046

2015-10-17 21:53 - 2015-08-08 10:07 - 00003776 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d0d1ebfa94c5db

2015-10-17 21:53 - 2015-06-29 17:29 - 00003776 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d0b2bb11088c7e

2015-10-17 21:53 - 2015-02-08 18:03 - 00003776 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d043f37f70dace

2015-10-17 21:53 - 2014-11-20 07:40 - 00004084 _____ C:\WINDOWS\System32\Tasks\EPSON WF-4640 Series Update {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9}

2015-10-17 21:53 - 2014-11-20 07:40 - 00003898 _____ C:\WINDOWS\System32\Tasks\EPSON WF-4640 Series Invitation {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9}

2015-10-17 21:53 - 2014-11-10 23:06 - 00003440 _____ C:\WINDOWS\System32\Tasks\Nero 2015 Platinum Update

2015-10-17 21:53 - 2014-11-10 01:04 - 00002878 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2015-10-17 21:53 - 2014-11-09 21:35 - 00003706 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2421003995-3247290216-19678324-1001

2015-10-17 21:53 - 2014-04-25 04:16 - 00003376 _____ C:\WINDOWS\System32\Tasks\AsusVibeSchedule

2015-10-17 21:50 - 2015-07-30 17:42 - 00000000 __RHD C:\Users\Public\Libraries

2015-10-17 21:47 - 2015-07-10 04:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM

2015-10-17 21:47 - 2014-11-20 07:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software

2015-10-17 21:47 - 2014-11-20 07:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2015-10-17 21:47 - 2014-11-19 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)

2015-10-17 21:47 - 2014-11-18 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\herdProtect

2015-10-17 21:47 - 2014-11-12 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Essentials

2015-10-17 21:47 - 2014-11-10 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp

2015-10-17 21:47 - 2014-11-10 01:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2015-10-17 21:47 - 2014-11-10 00:39 - 00000000 ____D C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-10-17 21:47 - 2014-11-10 00:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-10-17 21:47 - 2014-11-10 00:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Winrar and Options

2015-10-17 21:47 - 2014-06-22 11:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Music Maker

2015-10-17 21:47 - 2014-04-25 04:32 - 00000000 ____D C:\WINDOWS\fr

2015-10-17 21:47 - 2014-04-25 04:32 - 00000000 ____D C:\WINDOWS\es

2015-10-17 21:47 - 2014-04-25 04:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10

2015-10-17 21:47 - 2014-04-25 04:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 3

2015-10-17 21:47 - 2014-04-25 04:11 - 00000000 ____D C:\Program Files (x86)\ASUS

2015-10-17 21:45 - 2013-08-22 08:36 - 00000000 ____D C:\Users\Default.migrated

2015-10-17 21:42 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-10-17 21:42 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\InputMethod

2015-10-17 21:42 - 2014-06-22 11:08 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2015-10-17 21:42 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared

2015-10-17 21:42 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared

2015-10-17 21:41 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\InputMethod

2015-10-17 21:41 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\MediaViewer

2015-10-17 21:40 - 2015-07-30 17:42 - 00000000 ____D C:\WINDOWS\system32\Recovery

2015-10-17 21:40 - 2015-07-30 17:42 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2015-10-17 21:40 - 2014-11-10 01:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaFACE Applications

2015-10-17 21:40 - 2014-11-10 00:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET

2015-10-17 21:40 - 2014-06-22 11:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD

2015-10-17 21:40 - 2014-06-22 11:08 - 00000000 ____D C:\Program Files (x86)\AMD AVT

2015-10-17 21:40 - 2014-04-25 04:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2015-10-17 21:40 - 2014-04-25 03:50 - 00000000 ____D C:\Program Files (x86)\Realtek

2015-10-17 21:40 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\ADFS

2015-10-17 21:31 - 2015-07-10 04:47 - 00000000 __RHD C:\Users\Default

2015-10-17 20:48 - 2015-09-10 01:58 - 00000000 ___HD C:\$Windows.~BT

2015-10-17 20:48 - 2014-11-09 21:29 - 00442582 _____ C:\Users\Joe\AppData\Local\BTServer.log

2015-10-17 08:15 - 2014-11-11 09:17 - 00001121 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-10-17 08:15 - 2014-11-11 09:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-10-16 22:52 - 2015-10-12 02:35 - 00000000 ____D C:\Users\Joe\AppData\Local\Windows Live

2015-10-16 09:38 - 2015-09-25 16:40 - 00062976 ___SH C:\Users\Joe\Desktop\Thumbs.db

2015-10-14 08:08 - 2013-08-22 10:36 - 00000000 ___RD C:\WINDOWS\ToastData

==================== Files in the root of some directories =======

2014-11-09 21:29 - 2015-10-17 20:48 - 0442582 _____ () C:\Users\Joe\AppData\Local\BTServer.log

2015-10-17 16:16 - 2015-10-22 23:18 - 0023040 _____ () C:\Users\Joe\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-10-17 21:36 - 2015-10-17 21:36 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2015-10-16 00:07 - 2015-10-16 00:07 - 0000115 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-11-09 15:55

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-11-2015

Ran by Joe (2015-11-12 16:39:40)

Running from C:\Users\Joe\Desktop

Windows 10 Home (X64) (2015-10-18 03:02:02)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2421003995-3247290216-19678324-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2421003995-3247290216-19678324-503 - Limited - Disabled)

Guest (S-1-5-21-2421003995-3247290216-19678324-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2421003995-3247290216-19678324-1003 - Limited - Enabled)

Joe (S-1-5-21-2421003995-3247290216-19678324-1001 - Administrator - Enabled) => C:\Users\Joe

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)

AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

AMD Catalyst Install Manager (HKLM\...\{BEA22FB5-D4B1-3F5A-37D2-025C21DF4E43}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)

Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)

ASUS Manager - Ai Booting (HKLM-x32\...\{2DCE446C-D090-4458-8782-8F16DF94351E}) (Version: 2.01.12 - ASUSTeK Computer Inc.)

ASUS Manager - Ai Charger II (HKLM-x32\...\{9AF45D7C-34F1-4BA0-B799-825C8C04494C}) (Version: 2.00.11 - ASUSTeK Computer Inc.)

ASUS Manager - Backup & Recovery (HKLM-x32\...\{34D67DE5-2ECF-4E6B-A243-2C16E2792787}) (Version: 2.01.10 - ASUSTeK Computer Inc.)

ASUS Manager - Family Safety (HKLM-x32\...\{016AFF97-4E18-4560-B8E5-B684BB124E32}) (Version: 2.00.03 - ASUSTeK Computer Inc.)

ASUS Manager - PC Cleanup (HKLM-x32\...\{E22A19AE-7DDB-4959-B1DB-A0996294352A}) (Version: 2.01.08 - ASUSTeK Computer Inc.)

ASUS Manager - Power Manager (HKLM-x32\...\{DD248BEE-E925-4720-A775-9A42276BB6EA}) (Version: 2.02.02 - ASUSTeK Computer Inc.)

ASUS Manager - Update (HKLM-x32\...\{675BBE8A-0ED3-4048-8723-BA51EAB8E1A8}) (Version: 2.02.04 - ASUSTeK Computer Inc.)

ASUS Manager (HKLM-x32\...\{F5E5AD85-4A90-4604-A887-464D3818D8FD}) (Version: 2.08.00 - ASUSTeK Computer Inc.)

ASUS Music Maker (HKLM-x32\...\MAGIX_{AB515018-7F9D-4047-B0C0-F26BAC30F3E1}) (Version: 18.0.4.1 - MAGIX AG)

ASUS Music Maker (Version: 18.0.4.1 - MAGIX AG) Hidden

ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5424.52 - CyberLink Corp.)

ASUSDVD (x32 Version: 10.0.5424.52 - CyberLink Corp.) Hidden

AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK)

Auslogics Anti-Malware (HKLM-x32\...\{A5A6F7C9-F91E-45C7-8DAA-289CBB0C817D}_is1) (Version: 1.6.0.0 - Auslogics Labs Pty Ltd)

Auslogics BoostSpeed 8 (HKLM-x32\...\{7216871F-869E-437C-B9BF-2A13F2DCE63F}_is1) (Version: 8.0.0.0 - Auslogics Labs Pty Ltd)

Auslogics Disk Defrag Professional (HKLM-x32\...\{ADE1535C-C836-4F2E-BDA1-1C7C304743E3}_is1) (Version: 4.7.0.0 - Auslogics Software Pty Ltd)

Auslogics Driver Updater (HKLM-x32\...\{23BB1B18-3537-48F7-BEF7-42BC65DBF993}_is1) (Version: 1.6.1.0 - Auslogics Labs Pty Ltd)

BitComet 1.37 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.37 - CometNetwork)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)

CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.79.0.2015 - Georgy Berdyshev)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)

CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.4428 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)

CyberLink PowerDirector 10 (Version: 10.0.0.2810 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Document Capture Pro (HKLM-x32\...\{8930DCE5-510D-4476-A879-835188F7B6F4}) (Version: 1.06.0011 - Seiko Epson Corporation)

Easy Audio Copy (HKU\S-1-5-21-2421003995-3247290216-19678324-1001\...\Easy Audio Copy) (Version: 1.0.1.9 - Andre Wiethoff)

eManual (HKLM-x32\...\{0C84E634-EB68-4A54-B21E-A05EC87A4CC5}) (Version: 1.00.07 - ASUSTeK Computer Inc.)

EPSON Connect version 1.0 (HKLM-x32\...\EPSON Connect_is1) (Version: 1.0 - Epson America Inc.)

Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.7.0.0 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM-x32\...\{E4631929-CBD3-49A1-9BB7-F36E701F7C34}) (Version: 3.10.0040 - Seiko Epson Corporation)

Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.53.00 - SEIKO EPSON CORPORATION)

Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)

EPSON WF-4640 Series Printer Uninstall (HKLM\...\EPSON WF-4640 Series) (Version: - SEIKO EPSON Corporation)

Epson WF-4640 User’s Guide version 1.0 (HKLM-x32\...\UsersGuideEpson WF-4640 User’s Guide_is1) (Version: 1.0 - )

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)

ESET Smart Security (HKLM\...\{C082CDB9-D173-4740-AE0E-C685E6F44850}) (Version: 8.0.304.0 - ESET, spol s r. o.)

Fellowes/NEATO MediaFACE (HKLM-x32\...\Fellowes/NEATO MediaFACE) (Version: - )

Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)

Galería de fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden

herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)

HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden

iCloud (HKLM\...\{B33C558F-772F-4308-A059-390FBF9BAAAE}) (Version: 5.0.2.61 - Apple Inc.)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.40 - Irfan Skiljan)

iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)

Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProplusRetail - en-us) (Version: 16.0.6228.1004 - Microsoft Corporation)

Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.6228.1004 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visio Professional 2016 - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.6228.1004 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 41.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2 - Mozilla)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

Nero 7 Essentials (HKLM-x32\...\{C6115A28-F277-4E82-B067-84D28BF21033}) (Version: 7.03.1357 - Nero AG)

OEM Application Profile (HKLM-x32\...\{315F1A48-D883-B234-7C79-15873574ACC1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6228.1004 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.6228.1004 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6228.1004 - Microsoft Corporation) Hidden

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.769.092613 - REALTEK Semiconductor Corp.)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30166 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.18.621.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7035 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0224 - REALTEK Semiconductor Corp.)

Software Updater (HKLM-x32\...\{E1BAD1BA-C0E8-4018-9281-E7D2C6B07474}) (Version: 4.3.6 - SEIKO EPSON CORPORATION) <==== ATTENTION

WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.438 - ASUS Cloud Corporation)

Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

Winrar and Options (HKLM\...\Winrar_and_Options) (Version: 1.0 - Winrar)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Restore Points =========================

30-10-2015 08:45:25 Windows Update

02-11-2015 08:09:55 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501

10-11-2015 17:02:32 Scheduled Checkpoint

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {031C26DD-1396-4EC6-814C-B882A2040651} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

Task: {037DC8C0-2F22-4AC0-AF1C-C78123B67848} - System32\Tasks\ASUS\ASUS Updater => C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSFourceUpdater.exe [2013-11-28] ()

Task: {06BF2F65-A57D-446A-BE33-E00316AFA8AA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION

Task: {10BBE0A1-8F92-4C06-8E4A-5A9FF3DD53C1} - System32\Tasks\ASUS\Power_Manager_background => C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe [2014-02-20] (ASUSTeK)

Task: {150C147E-30CF-4CAD-A150-D99868FB8A63} - System32\Tasks\ESET Windows 10 upgrade – Refresh settings => C:\Program Files\Common Files\AV\ESET Smart Security 8.0\upgrade.exe [2015-11-12] (ESET)

Task: {17172B95-EE8A-4965-A022-50826B1A797D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {19BA2E70-BEDA-4F58-8C63-523DB41B081B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION

Task: {1E25510E-4115-45AF-8D78-92FEA8DDC635} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-10] (Microsoft Corporation)

Task: {2864CBE0-9B95-439B-8463-BD294AB1B7B6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2015-10-23] (Microsoft Corporation)

Task: {3481E446-5403-49D8-A1A1-0DAF23D8F41E} - System32\Tasks\EPSON WF-4640 Series Invitation {A690698C-17B6-446E-A114-AD1B0AB57BD9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {39540A32-0961-4FFD-A55A-F5C1DCC64DC9} - System32\Tasks\Auslogics\Disk Defrag Prof\Task {00000001-0FAF-4126-9EF0-E84AD3676A88} for Joe => C:\Program Files (x86)\Auslogics\Disk Defrag Professional\DiskDefragPro.exe [2015-09-08] (Auslogics)

Task: {4617E858-5E0F-4A42-A9EB-DCA075AEFAE9} - System32\Tasks\EPSON WF-4640 Series Update {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {466A398C-3FFE-40DA-ABC0-9F74FF61E0E1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION

Task: {4AECE75C-1ACB-4DD1-AEF0-6FF3770B39F2} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-16] (Microsoft Corporation)

Task: {5160318D-5EAC-4520-95D2-87413918BCC0} - System32\Tasks\Auslogics\Disk Defrag Prof\Task {00000001-0166-43C2-ABA5-BA9F8B63177F} for Joe => C:\Program Files (x86)\Auslogics\Disk Defrag Professional\DiskDefragPro.exe [2015-09-08] (Auslogics)

Task: {5241AE3A-545F-4AE9-B72E-437829A62979} - System32\Tasks\GoogleUpdateTaskMachineCore1d0f531a749693 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {58AB143C-B1B2-4CCC-A1E4-D9ED41BE91F7} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] ()

Task: {5E3A9C51-92EC-4674-A3DB-37A75B3E89F8} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION

Task: {71C48932-5433-4B16-8F14-BC63F362C098} - System32\Tasks\Auslogics\BoostSpeed\Scan and Repair => Rundll32.exe TaskSchedulerHelper.dll,RunTask "BoostSpeed.exe" "-UseTray -Schedule"

Task: {72D65463-6AB4-4857-8594-653CEB1E4ECD} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION

Task: {791302D9-6266-492F-89C1-992BFC51CAF4} - System32\Tasks\ASUS\ASUS Manager - PC Cleanup - SecureDeleteBackground => C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe [2014-03-25] ()

Task: {7AF21016-5FDA-4CAE-9A6C-DE0D29540F73} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION

Task: {7E7F64CA-1423-4909-A51A-760B3594CE58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {7ED8C994-8EE2-4305-A77E-6F177882DCA0} - System32\Tasks\Auslogics\Anti-Malware\Start Anti-Malware оn Joe logon => C:\Program Files (x86)\Auslogics\Anti-Malware\AntiMalware.exe [2015-10-23] (Auslogics)

Task: {7EDAED79-6346-4905-A88A-5DB3AF8DCF00} - System32\Tasks\Nero 2015 Platinum Update => Wscript.exe //nologo //B //E:jscript "C:\Users\Joe\AppData\Roaming\Nero 2015 Platinum\settings.ini"

Task: {80D45009-C243-47FA-898E-64BFBD054B8A} - System32\Tasks\EPSON WF-4640 Series Update {A690698C-17B6-446E-A114-AD1B0AB57BD9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

Task: {93004192-96EA-4A3B-9D37-4830D19B1D84} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2015-10-23] (Microsoft Corporation)

Task: {9334386B-D207-45A4-A30F-A3E9C84EB05D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION

Task: {93EE0BD2-EEBD-4F51-8D10-B71DCF265436} - System32\Tasks\ASUS\ASUS Manager HotKey Service => C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe [2013-11-26] (ASUSTeK Computer Inc.)

Task: {9A4A41E9-7C37-4D05-B539-0507FFFAAB33} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION

Task: {9C5003D1-2A8C-4388-91B1-36E41589E308} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUS Manager\Application Update\ASUSUpdateChecker.exe [2013-11-27] ()

Task: {9F992686-674B-4887-AA4C-03782D83FCE3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-10-16] (Microsoft Corporation)

Task: {A00FDF3B-80ED-49D5-B829-BA4023EB19BA} - System32\Tasks\GoogleUpdateTaskMachineCore1d0b2bb11088c7e => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {A4703205-C989-4195-93E6-26AC60FE5DEC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)

Task: {A7EF2EBF-08B6-4010-BBAF-4C3F34858554} - System32\Tasks\Auslogics\Disk Defrag Prof\Task {00000001-6C87-4F48-B6B6-F3FF8260B0A1} for Joe => C:\Program Files (x86)\Auslogics\Disk Defrag Professional\DiskDefragPro.exe [2015-09-08] (Auslogics)

Task: {AA13BBCD-E934-4608-8F20-C5803BAB02A5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION

Task: {ADA9103A-ECC4-4F1F-B251-BBF0A652D3B7} - System32\Tasks\ASUS\ASUS AiCharger_Desktop Execute => C:\Program Files (x86)\InstallShield Installation Information\{9AF45D7C-34F1-4BA0-B799-825C8C04494C}\AiChargerDT.exe [2013-04-02] (ASUSTek Computer Inc.)

Task: {B9075629-518D-49F1-B77C-BD1A6A63D1D0} - System32\Tasks\Auslogics\Driver Updater\Start Driver Updater оn logon => C:\Program Files (x86)\Auslogics\Driver Updater\DriverUpdater.exe [2015-09-11] (Auslogics)

Task: {BE389575-22DA-4417-AC66-8613D0838678} - System32\Tasks\Auslogics\BoostSpeed\Start BoostSpeed оn Joe logon => C:\Program Files (x86)\Auslogics\BoostSpeed\BoostSpeed.exe [2015-06-15] (Auslogics)

Task: {BF7351B8-722B-4D7F-90B6-AD995C394100} - System32\Tasks\ASUS\ASUS Manager BackgroundWindow => C:\Program Files (x86)\ASUS\ASUS Manager\BackgroundWindow.exe [2013-08-23] ()

Task: {C1DAA96F-7E7C-4819-ACAA-A7DD32F4E144} - System32\Tasks\GoogleUpdateTaskMachineCore1d043f37f70dace => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {C797D378-3EBD-4177-A31A-62007692CD8E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)

Task: {C90AA304-4847-46F6-B321-E2EAEEF105F3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION

Task: {D2ECF740-5D13-47A4-BFE1-5F52B0E9DC8A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION

Task: {E7378018-AFA6-4B10-A0EF-E525B64CFFD3} - System32\Tasks\GoogleUpdateTaskMachineCore1d0e5d1808fe046 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {F1BFD09D-ED66-41F5-A602-FB6C83B26326} - System32\Tasks\GoogleUpdateTaskMachineCore1d0d1ebfa94c5db => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-18] (Google Inc.)

Task: {F28DF44F-2684-4E5D-A94A-1A6EECC30102} - System32\Tasks\ASUS\ASUS AiCharger_II TrayIcon => C:\Program Files (x86)\ASUS\ASUS Manager\Ai Charger II\Ai_ChargerII_TrayIcon(ASUS_Manager).exe [2014-02-19] (ASUSTeK)

Task: {FFF08CFE-044B-42E8-94BC-8265B0B64361} - System32\Tasks\EPSON WF-4640 Series Invitation {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE [2013-02-28] (SEIKO EPSON CORPORATION)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\EPSON WF-4640 Series Invitation {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-4640 Series Invitation {A690698C-17B6-446E-A114-AD1B0AB57BD9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE

Task: C:\WINDOWS\Tasks\EPSON WF-4640 Series Update {2983E78D-F2E5-4014-B4BE-84DD6C69D8D9}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE:/EXE:{2983E78D-F2E5-4014-B4BE-84DD6C69D8D9} /F:UpdateWORKGROUP\LIVINGROOM1$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON WF-4640 Series Update {A690698C-17B6-446E-A114-AD1B0AB57BD9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKME.EXE:/EXE:{A690698C-17B6-446E-A114-AD1B0AB57BD9} /F:UpdateWORKGROUP\LIVINGROOM1$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\Nero 2015 Platinum Update.job => Wscript.exe X/nologo /B /E:jscript C:\Users\Joe\AppData\Roaming\Nero 2015 Platinum\settings.ini

==================== Loaded Modules (Whitelisted) ==============

2015-09-10 00:08 - 2015-09-10 00:08 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll

2015-08-21 21:09 - 2015-08-21 21:09 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll

2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll

2015-08-21 21:09 - 2015-08-21 21:09 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll

2015-09-23 15:47 - 2015-09-23 15:47 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-10-13 04:45 - 2015-10-13 04:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2015-10-17 14:10 - 2015-10-16 11:20 - 00161448 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll

2015-09-10 00:08 - 2015-09-10 00:08 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll

2014-04-25 04:21 - 2012-04-24 05:43 - 00390632 ____R () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2014-06-22 11:13 - 2014-03-25 20:36 - 00929936 _____ () C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe

2015-10-18 01:26 - 2015-10-18 01:26 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2015-10-23 07:36 - 2015-10-23 07:36 - 08903336 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll

2014-06-22 11:13 - 2014-03-12 17:51 - 00907776 _____ () C:\Windows\PCCleanupContextMenu\x64\ContextMenuHandler.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2015-10-18 01:26 - 2015-10-18 01:26 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2014-06-22 11:12 - 2013-11-06 05:58 - 00920736 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe

2015-10-23 07:36 - 2015-10-23 07:36 - 08903336 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\1033\GrooveIntlResource.dll

2014-06-22 11:12 - 2015-11-11 10:01 - 00036864 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll

2014-06-22 11:12 - 2010-06-28 21:58 - 00104448 ____R () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll

2015-10-13 04:46 - 2015-10-13 04:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2015-09-23 15:47 - 2015-09-23 15:47 - 00073512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2015-11-11 04:01 - 2015-11-06 23:36 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libglesv2.dll

2015-11-11 04:01 - 2015-11-06 23:36 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libegl.dll

2015-11-11 04:01 - 2015-11-06 23:36 - 16496456 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2421003995-3247290216-19678324-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

DNS Servers: 192.168.1.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{12769373-E78E-4F2E-A98A-337E12D3D080}] => (Allow) C:\Users\Joe\AppData\Local\Microsoft\OneDrive\OneDrive.exe

FirewallRules: [{E0D34A4F-28C7-4BA8-BE44-AC1027EFF460}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{286CF471-BA3B-465F-B721-D28D7D5F2F0B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{7823D51D-D8F2-45AC-8C4B-1690ECCAC989}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{F6FB2B58-323E-41C0-841A-90936236FEE7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{E72FA3FB-E111-47AF-AB14-742126BB9559}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

FirewallRules: [{DE11CBB5-81B1-4EE5-AEEA-DECC5AEF0411}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

FirewallRules: [{6249D317-75DC-4FD1-964E-13C4D7763E9C}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{8D1E70BC-1081-4622-A9BC-69C68D4C1AEA}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{9D616B52-E7A8-4F06-BB85-362E69881552}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe

FirewallRules: [{A77FED9D-8321-49B5-ACC8-C0889F39E3D9}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe

FirewallRules: [{545EA501-F808-49ED-AADB-18B076B18A2B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{75D621B8-BCD5-4BE8-B984-4F99E522A5CD}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{61F00DA0-BE5F-4C1E-B633-97BF4B29C389}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{7C270216-0652-423B-9C1C-8AAD34C59F24}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [{852FE405-DAD1-4BFB-A499-1C4B5C612F30}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{09A07CEF-A3C9-40E0-AAA4-F59323AB52B4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{4FE0F15E-4976-4E2D-96C3-381A56F2ED84}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{3EFE8BE2-8B6D-45DF-BF75-09E050C9DA3A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{66AA3A26-76D9-4D6A-8226-6BBB84D61B34}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{2DEC231D-3141-4646-A168-2D5B39BE3598}] => (Allow) LPort=2869

FirewallRules: [{0AFE17E3-EB6F-417D-A195-28D2B1BDCDF8}] => (Allow) LPort=1900

FirewallRules: [{B151ED45-BF13-482D-BF7A-273A797B6C0A}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{BBE987C2-3F81-472C-A992-3B63C3DF19A5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{6598E3F3-06E1-4130-8B16-02CDFB496D39}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{F7D4573E-6CFF-46BB-A87C-1940DCE97736}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (11/12/2015 04:01:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7116656

Error: (11/12/2015 04:01:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7116656

Error: (11/12/2015 04:01:39 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2015 04:01:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7115094

Error: (11/12/2015 04:01:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7115094

Error: (11/12/2015 04:01:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2015 04:01:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 7113437

Error: (11/12/2015 04:01:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 7113437

Error: (11/12/2015 04:01:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/12/2015 03:03:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 3625937

System errors:

=============

Error: (11/12/2015 03:03:29 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/12/2015 02:03:08 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/12/2015 12:33:07 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/12/2015 10:30:26 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/12/2015 09:59:47 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/11/2015 06:33:20 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/11/2015 03:04:00 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/11/2015 10:42:02 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 4

Error: (11/11/2015 10:14:16 AM) (Source: DCOM) (EventID: 10016) (User: LivingRoom1)

Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}LivingRoom1JoeS-1-5-21-2421003995-3247290216-19678324-1001LocalHost (Using LRPC)Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

Error: (11/11/2015 09:58:18 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Sync Host_Session1 service terminated with the following error:

%%5

==================== Memory info ===========================

Processor: AMD FX™-8300 Eight-Core Processor

Percentage of memory in use: 29%

Total physical RAM: 12203.44 MB

Available physical RAM: 8626.68 MB

Total Virtual: 14059.44 MB

Available Virtual: 9118.22 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:1848.14 GB) (Free:1519.26 GB) NTFS

Drive d: (FreeAgent GoFlex Drive) (Fixed) (Total:2794.51 GB) (Free:920.86 GB) NTFS

Drive e: (Seagate Expansion Drive) (Fixed) (Total:4657.4 GB) (Free:4556.39 GB) NTFS

Drive g: (FreeAgent GoFlex Drive) (Fixed) (Total:2794.51 GB) (Free:1335.39 GB) NTFS

Drive h: () (Removable) (Total:14.91 GB) (Free:10.15 GB) FAT32

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 1863 GB) (Disk ID: CDE1F06D)

Partition: GPT.

Attempted reading MBR returned 0 bytes.

Could not read MBR for disk 1.

Attempted reading MBR returned 0 bytes.

Could not read MBR for disk 2.

========================================================

Disk: 3 (Size: 4657.5 GB) (Disk ID: 91CB3FC7)

Partition: GPT.

========================================================

Disk: 4 (Size: 14.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

#2
Essexboy

Posted 13 November 2015 - 09:13 AM

GeekU Moderator

Retired Staff
69,964 posts

Hi, could you start FRST and type/copy/paste the following into the search box :

wpad.com.gr;proxy.pac

Then press search registry

A log will be generated please post that

#3
roachklip

Posted 13 November 2015 - 09:56 AM

Member

Topic Starter
Member
45 posts

here is the log.

thanks.

Farbar Recovery Scan Tool (x64) Version:07-11-2015

Ran by Joe (2015-11-13 10:54:12)

Running from C:\Users\Joe\Desktop

Boot Mode: Normal

================== Search Registry: "wpad.com.gr;proxy.pac" ===========

===================== Search result for "wpad.com.gr" ==========

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NlaSvc\Parameters\Internet\ManualProxies]

""="0http://wpad.com.gr/proxy.pac"

[HKEY_USERS\S-1-5-21-2421003995-3247290216-19678324-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]

"AutoConfigURL"="http://wpad.com.gr/proxy.pac"

===================== Search result for "proxy.pac" ==========

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NlaSvc\Parameters\Internet\ManualProxies]

""="0http://wpad.com.gr/proxy.pac"

[HKEY_USERS\S-1-5-21-2421003995-3247290216-19678324-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]

"AutoConfigURL"="http://wpad.com.gr/proxy.pac"

====== End of Search ======

#4
Essexboy

Posted 13 November 2015 - 11:49 AM

GeekU Moderator

Retired Staff
69,964 posts

Download the attached wpad.reg to your desktop

wpad.reg 284bytes 372 downloads
Right click the file and select Merge
Accept all warnings and reboot

Then run a fresh FRST scan please and let me know if ESET has gone quiet

#5
roachklip

Posted 13 November 2015 - 12:06 PM

Member

Topic Starter
Member
45 posts

it appears that the popups have gone away so far!!

thank you thank you thank you!!!!

here are the FRST logs.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015

Ran by Joe (administrator) on LIVINGROOM1 (13-11-2015 13:01:37)

Running from C:\Users\Joe\Desktop

Loaded Profiles: Joe (Available Profiles: Joe)

Platform: Windows 10 Home (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16565_none_1162030161f5c19b\TiWorker.exe