Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

I would appreciate it if someone would please check my computer [Close

Started by Win10Enthusiast , Nov 23 2015 06:32 PM

infected bsod scam

This topic is locked

#1
Win10Enthusiast

Posted 23 November 2015 - 06:32 PM

Member

Member
50 posts

Earlier this afternoon, I turned on my laptop, it is a Windows 10 Inspiron i7 5000 series, and I saw this blue screen of death. This BSOD had instructions on it to call this number: 1 866 453 2895. The blue screen also cautioned me NOT to restart my computer.

I am relatively new to computers, and I barely understood what was happening. I called the number, This technician had me press Ctrl, then press Ctrl + R. I dont remember all that was done, I am new to all of this stuff, it is all pretty geeky to me. The tech did a remote session and showed me all these errors, 1,555 of them. Then he said I needed to pay for this service, he said I needed to pay 449 dollars for Lifetime Protection. Well, I dont have that kind of money, I asked my friends if they could help me, I described the above and one of them said it could be a scam.

I ended up NOT paying a cent.

I restarted my computer at that point with no problems, I do not think this was a real blue screen of death, because if it had been, I would not have been able to use the computer. It seems to be working okay, but I would really like it if one of your experts could look at it. GeeksToGo is a highly trusted brand name, you were recommended by several of my friends here in Texas. I dont know computers, but I DO know brand names and trustability and GeeksToGo fits the bill for Trust.

I ran a scan using MalwareBytes. It found zero problems.

Still, I want a Geek To Go expert to look my machine over very thoroughly. I want to be sure.

I dont know how I could have had this problem with McAfee protection on my laptop. I have only had this laptop since October 31.

FRST Scan

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:23-11-2015

Ran by kebli (administrator) on DESKTOP-O8A2EKO (23-11-2015 16:35:07)

Running from C:\Users\kebli\Desktop

Loaded Profiles: kebli (Available Profiles: kebli)

Platform: Windows 10 Home (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Edge)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(TeamViewer GmbH) C:\Users\kebli\AppData\Local\Temp\TeamViewer\TeamViewer_Service.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

() C:\Windows\System32\igfxTray.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe

(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe

(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(CyberLink) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\Power2Go8\CLMLSvc_P2G8.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe

(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDSurrogateHost.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

(Microsoft Corporation) C:\Windows\System32\browser_broker.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Dell) C:\Program Files\Dell\Dell Data Services\DDSSvc.exe

(Dell) C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe

() C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe

() C:\Program Files\Dell\Dell Product Registration\PRSvc.exe

(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe

(Dell) C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe

(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe

(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Tracker Software Products (Canada) Ltd.) C:\Program Files\Tracker Software\PDF Editor\PDFXEdit.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe

(Wisdom Software Inc. ) C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5786576 2015-06-24] (Dell Inc.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8496344 2015-07-06] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880 2015-07-06] (Realtek Semiconductor)

HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [611248 2015-05-26] (Waves Audio Ltd.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-23] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2369240 2015-10-20] (Microsoft Corp.)

HKU\S-1-5-21-4169369895-2292233020-3573544003-1001\...\RunOnce: [1123_15561411962816] => C:\Users\kebli\AppData\Local\LMIR0002.tmp_r.bat [331 2015-11-23] ()

HKU\S-1-5-21-4169369895-2292233020-3573544003-1001\...\RunOnce: [1123_15583761962816] => C:\Users\kebli\AppData\Local\LMIR0003.tmp_r.bat [331 2015-11-23] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62

Tcpip\..\Interfaces\{cbdb64e4-631a-4bcb-bfd3-3b89faa0d84a}: [DhcpNameServer] 209.18.47.61 209.18.47.62

Internet Explorer:

==================

HKU\S-1-5-21-4169369895-2292233020-3573544003-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell15.msn.com/?pc=DCTE

HKU\S-1-5-21-4169369895-2292233020-3573544003-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell15.msn.com/?pc=DCTE

SearchScopes: HKU\S-1-5-21-4169369895-2292233020-3573544003-1001 -> DefaultScope {9AA333D0-86E3-4797-93A4-5360567B0888} URL =

SearchScopes: HKU\S-1-5-21-4169369895-2292233020-3573544003-1001 -> {9AA333D0-86E3-4797-93A4-5360567B0888} URL =

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-11-13] (McAfee, Inc.)

Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-11-13] (McAfee, Inc.)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-11-13] (McAfee, Inc.)

Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-11-13] (McAfee, Inc.)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-09-28] (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-09-28] (McAfee, Inc.)

FireFox:

========

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()

FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2015-09-09] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-31] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-10-31] (Google Inc.)

FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2015-09-09] (Tracker Software Products (Canada) Ltd.)

FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2015-09-09] (Tracker Software Products (Canada) Ltd.)

FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi

FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-03]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi

FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-03]

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-10-31] [not signed]

Chrome:

=======

CHR Profile: C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-31]

CHR Extension: (Google Docs) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-31]

CHR Extension: (Google Drive) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-31]

CHR Extension: (YouTube) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-31]

CHR Extension: (Google Search) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-31]

CHR Extension: (Google Sheets) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-31]

CHR Extension: (SiteAdvisor) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-10-31]

CHR Extension: (Supernova) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegpgpjbmbggplclldecdbpcmopmlbll [2015-11-02]

CHR Extension: (Google Docs Offline) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]

CHR Extension: (Chrome Web Store Payments) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-31]

CHR Extension: (Gmail) - C:\Users\kebli\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-31]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-11-18]

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-11-18]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173784 2015-10-20] (Microsoft Corp.)

S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [588904 2015-07-14] ()

R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [137968 2015-09-22] (Dell Inc.)

R2 Dell Data Services; C:\Program Files\Dell\Dell Data Services\DDSSvc.exe [46792 2015-06-19] (Dell)

R2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [114888 2015-10-20] (Dell)

R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [49864 2015-08-24] ()

R2 Dell Product Registration; C:\Program Files\Dell\Dell Product Registration\PRSvc.exe [69320 2015-07-08] ()

R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)

R2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [150256 2015-06-09] (Intel Corporation)

R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [350312 2015-07-14] (Intel Corporation)

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Corporation)

R3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]

S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [223520 2015-07-11] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [157928 2015-11-13] (McAfee, Inc.)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [783120 2015-09-28] (McAfee, Inc.)

S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.)

R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-08-11] (McAfee, Inc.)

S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-07-31] (McAfee, Inc.)

R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [376264 2015-08-10] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-07-31] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2014-04-14] ()

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-07-06] (Realtek Semiconductor)

R2 TeamViewer; c:\users\kebli\appdata\local\temp\teamviewer\TeamViewer_Service.exe [4346640 2015-09-11] (TeamViewer GmbH)

R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [564144 2015-05-26] (Waves Audio Ltd.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [80768 2015-08-10] (McAfee, Inc.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)

R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [19440 2015-05-08] (OSR Open Systems Resources, Inc.)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-11-12] (Windows ® Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-11-12] (Windows ® Win 7 DDK provider)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)

R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-06-16] (Intel Corporation)

R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [185128 2015-06-16] (Intel Corporation)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [255728 2015-06-09] (Intel Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-11-23] (Malwarebytes)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-07] (Intel Corporation)

R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [413432 2015-08-10] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349096 2015-08-10] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-08-10] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [495856 2015-08-10] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [839376 2015-08-10] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [537408 2015-08-12] (McAfee, Inc.)

S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [111256 2015-08-12] (McAfee, Inc.)

R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-11-13] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [244024 2015-08-10] (McAfee, Inc.)

R3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [3776792 2015-06-22] (Intel Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek )

R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-23 16:35 - 2015-11-23 16:35 - 00022497 _____ C:\Users\kebli\Desktop\FRST.txt

2015-11-23 16:32 - 2015-11-23 16:32 - 02348544 _____ (Farbar) C:\Users\kebli\Desktop\FRST64.exe

2015-11-23 16:23 - 2015-11-23 16:35 - 00000000 ____D C:\FRST

2015-11-23 16:13 - 2015-11-23 16:13 - 00016148 _____ C:\Windows\system32\DESKTOP-O8A2EKO_kebli_HistoryPrediction.bin

2015-11-23 16:05 - 2015-11-23 16:05 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-11-23 16:05 - 2015-11-23 16:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-11-23 16:04 - 2015-11-23 16:04 - 22908888 _____ (Malwarebytes ) C:\Users\kebli\Downloads\mbam-setup-2.2.0.1024.exe

2015-11-23 16:04 - 2015-11-23 16:04 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-11-23 16:04 - 2015-11-23 16:04 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-11-23 16:04 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-11-23 16:04 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-11-23 16:04 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2015-11-23 15:50 - 2015-11-23 15:50 - 00000331 _____ C:\Users\kebli\AppData\Local\LMIR0003.tmp_r.bat

2015-11-23 15:50 - 2015-11-23 15:50 - 00000331 _____ C:\Users\kebli\AppData\Local\LMIR0002.tmp_r.bat

2015-11-23 15:35 - 2015-11-23 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2015-11-23 15:30 - 2015-11-23 15:42 - 00000000 ____D C:\Program Files (x86)\LogMeIn Rescue RC - 6da099a3-4168-4b36-8747-5c5258f7a6f0

2015-11-23 15:23 - 2015-11-23 15:30 - 00000843 _____ C:\session.log

2015-11-23 15:23 - 2015-11-23 15:23 - 00000248 _____ C:\rescue.info

2015-11-23 15:22 - 2015-11-23 15:22 - 01833888 _____ (LogMeIn, Inc.) C:\Users\kebli\Downloads\Support-LogMeInRescue.exe

2015-11-23 14:13 - 2015-11-23 15:27 - 00000000 ____D C:\Users\kebli\AppData\Roaming\TeamViewer

2015-11-19 15:12 - 2015-11-19 15:12 - 00000000 ____D C:\Users\kebli\AppData\Local\VS Revo Group

2015-11-19 15:12 - 2015-11-19 15:12 - 00000000 ____D C:\ProgramData\VS Revo Group

2015-11-19 15:12 - 2015-11-19 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro

2015-11-19 15:12 - 2015-11-19 15:12 - 00000000 ____D C:\Program Files\VS Revo Group

2015-11-19 15:12 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys

2015-11-19 15:11 - 2015-11-19 15:11 - 11069616 _____ (VS Revo Group ) C:\Users\kebli\Downloads\RevoUninProSetup.exe

2015-11-19 13:16 - 2015-11-19 13:16 - 00206080 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys

2015-11-19 13:16 - 2015-11-19 13:16 - 00108800 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2015-11-19 12:21 - 2015-11-19 12:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2015-11-19 02:46 - 2015-11-19 02:46 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab

2015-11-19 02:45 - 2015-11-19 02:46 - 00679936 _____ C:\Users\kebli\Downloads\Detection.msi

2015-11-18 17:14 - 2015-11-18 17:14 - 00671338 _____ C:\Users\kebli\Downloads\pg28346-images.epub

2015-11-18 17:13 - 2015-11-18 17:13 - 00122235 _____ C:\Users\kebli\Downloads\pg20796-images.epub

2015-11-18 17:11 - 2015-11-18 17:11 - 00174207 _____ C:\Users\kebli\Downloads\pg50138-images.epub

2015-11-18 17:01 - 2015-11-18 17:01 - 00249172 _____ C:\Users\kebli\Downloads\pg50290-images.epub

2015-11-18 16:58 - 2015-11-18 16:58 - 00131448 _____ C:\Users\kebli\Downloads\pg19090-images.epub

2015-11-18 16:56 - 2015-11-18 16:56 - 00279028 _____ C:\Users\kebli\Downloads\pg18458-images (1).epub

2015-11-18 13:47 - 2015-11-18 13:47 - 00287792 _____ C:\Windows\Minidump\111815-20890-01.dmp

2015-11-18 12:52 - 2015-11-18 12:52 - 00000000 ____D C:\Users\kebli\AppData\Roaming\dvdcss

2015-11-18 12:51 - 2015-11-18 12:53 - 00000000 ____D C:\Users\kebli\AppData\Roaming\vlc

2015-11-18 12:51 - 2015-11-18 12:51 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2015-11-18 12:50 - 2015-11-18 12:50 - 28849904 _____ C:\Users\kebli\Downloads\vlc-2.2.1-win32.exe

2015-11-17 08:11 - 2015-11-18 13:47 - 1028055038 _____ C:\Windows\MEMORY.DMP

2015-11-17 08:11 - 2015-11-18 13:47 - 00000000 ____D C:\Windows\Minidump

2015-11-17 08:11 - 2015-11-17 08:11 - 00287736 _____ C:\Windows\Minidump\111715-35875-01.dmp

2015-11-15 23:04 - 2015-11-15 23:42 - 00000000 ____D C:\ProgramData\GFACE

2015-11-15 23:04 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2015-11-15 23:04 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2015-11-15 23:03 - 2015-11-18 23:34 - 00000000 ____D C:\Program Files (x86)\Crytek

2015-11-15 23:03 - 2015-11-15 23:03 - 29350504 _____ C:\Users\kebli\Downloads\warface-launcher.exe

2015-11-15 18:22 - 2015-11-15 18:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft

2015-11-15 18:20 - 2015-11-18 13:46 - 00000000 ____D C:\Program Files (x86)\World of Warcraft

2015-11-15 18:12 - 2015-11-18 13:44 - 00000000 ____D C:\Users\kebli\AppData\Local\Battle.net

2015-11-15 18:12 - 2015-11-18 13:44 - 00000000 ____D C:\Program Files (x86)\Battle.net

2015-11-15 18:12 - 2015-11-15 18:13 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Battle.net

2015-11-15 18:12 - 2015-11-15 18:12 - 00000000 ____D C:\Users\kebli\AppData\Local\Blizzard Entertainment

2015-11-15 18:12 - 2015-11-15 18:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net

2015-11-15 18:12 - 2015-11-15 18:12 - 00000000 ____D C:\ProgramData\Blizzard Entertainment

2015-11-15 18:11 - 2015-11-15 18:11 - 02950200 _____ (Blizzard Entertainment) C:\Users\kebli\Downloads\Battle.net-Setup.exe

2015-11-15 18:11 - 2015-11-15 18:11 - 00000000 ____D C:\ProgramData\Battle.net

2015-11-15 13:13 - 2015-11-15 13:13 - 00000000 ____D C:\Users\kebli\AppData\Roaming\LolClient

2015-11-15 13:03 - 2015-11-15 13:03 - 00000000 _____ C:\6d202fdc223a3d60784e57034652

2015-11-15 13:03 - 2015-11-15 13:03 - 00000000 _____ C:\250d3053d620527a37b583fe9d2d

2015-11-15 12:38 - 2015-11-15 12:38 - 00000000 ____D C:\ProgramData\Riot Games

2015-11-15 12:37 - 2015-11-15 12:37 - 00000000 ____D C:\Riot Games

2015-11-15 12:37 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2015-11-15 12:37 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2015-11-15 12:37 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2015-11-15 12:37 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2015-11-15 12:37 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2015-11-15 12:33 - 2015-11-15 12:37 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Riot Games

2015-11-15 12:33 - 2015-11-15 12:33 - 27864920 _____ (Riot Games) C:\Users\kebli\Downloads\LeagueofLegends_NA_Installer_9_15_2014.exe

2015-11-14 00:23 - 2015-11-14 00:24 - 03634400 _____ C:\Users\kebli\Downloads\WallpapersEveryday-setup.exe

2015-11-13 21:37 - 2015-11-13 21:37 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Tracker Software

2015-11-13 21:37 - 2015-11-13 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange

2015-11-13 21:37 - 2015-11-13 21:37 - 00000000 ____D C:\ProgramData\FileOpen

2015-11-13 21:37 - 2015-11-13 21:37 - 00000000 ____D C:\Program Files\Tracker Software

2015-11-13 21:35 - 2015-11-13 21:36 - 66741908 _____ C:\Users\kebli\Downloads\PDFXVE5.zip

2015-11-12 18:30 - 2015-11-12 18:30 - 03867040 _____ C:\Windows\system32\PortChanger.exe

2015-11-12 18:30 - 2015-11-12 18:30 - 02398112 _____ (Hewlett Packard) C:\Windows\system32\hppldcoi.dll

2015-11-12 18:30 - 2015-11-12 18:30 - 01421312 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpotiop1.dll

2015-11-12 18:30 - 2015-11-12 18:30 - 00861184 _____ (Hewlett-Packard) C:\Windows\system32\hpowiav1.dll

2015-11-12 18:30 - 2015-11-12 18:30 - 00498176 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpovst01.dll

2015-11-12 18:30 - 2015-11-12 18:30 - 00151968 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\Dot4.sys

2015-11-12 18:30 - 2015-11-12 18:30 - 00049056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dot4usb.sys

2015-11-12 18:30 - 2015-11-12 18:30 - 00036352 _____ (Hewlett-Packard Company) C:\Windows\system32\HPZ3LWN7.DLL

2015-11-12 18:30 - 2015-11-12 18:30 - 00027040 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\Dot4Prt.sys

2015-11-12 18:30 - 2015-11-12 18:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2015-11-12 18:30 - 2015-11-12 18:30 - 00000000 ____D C:\Windows\LastGood.Tmp

2015-11-10 16:54 - 2015-11-05 00:15 - 08020832 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-11-10 16:54 - 2015-11-05 00:15 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll

2015-11-10 16:54 - 2015-11-05 00:14 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2015-11-10 16:54 - 2015-11-05 00:13 - 00577888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-11-10 16:54 - 2015-11-05 00:11 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll

2015-11-10 16:54 - 2015-11-05 00:06 - 03621248 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-11-10 16:54 - 2015-11-04 23:56 - 01083072 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-11-10 16:54 - 2015-11-04 23:56 - 00116064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2015-11-10 16:54 - 2015-11-04 23:56 - 00025280 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-11-10 16:54 - 2015-11-04 23:30 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll

2015-11-10 16:54 - 2015-11-04 23:24 - 02878512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-11-10 16:54 - 2015-11-04 23:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll

2015-11-10 16:54 - 2015-11-04 23:20 - 21873664 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll

2015-11-10 16:54 - 2015-11-04 23:18 - 24597504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-11-10 16:54 - 2015-11-04 23:18 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2015-11-10 16:54 - 2015-11-04 23:17 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2015-11-10 16:54 - 2015-11-04 23:12 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\internetmail.dll

2015-11-10 16:54 - 2015-11-04 23:11 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll

2015-11-10 16:54 - 2015-11-04 23:10 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-11-10 16:54 - 2015-11-04 23:10 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2015-11-10 16:54 - 2015-11-04 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-11-10 16:54 - 2015-11-04 23:05 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-11-10 16:54 - 2015-11-04 23:03 - 02180608 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2015-11-10 16:54 - 2015-11-04 23:03 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll

2015-11-10 16:54 - 2015-11-04 23:01 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll

2015-11-10 16:54 - 2015-11-04 23:01 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2015-11-10 16:54 - 2015-11-04 22:59 - 03587072 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys

2015-11-10 16:54 - 2015-11-04 22:59 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll

2015-11-10 16:54 - 2015-11-04 22:58 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll

2015-11-10 16:54 - 2015-11-04 22:56 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll

2015-11-10 16:54 - 2015-11-04 22:55 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll

2015-11-10 16:54 - 2015-11-04 22:54 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll

2015-11-10 16:54 - 2015-11-04 22:47 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-11-10 16:54 - 2015-11-04 22:42 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2015-11-10 16:54 - 2015-11-04 22:40 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2015-11-10 16:54 - 2015-11-04 22:35 - 18803712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll

2015-11-10 16:54 - 2015-11-04 22:35 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2015-11-10 16:54 - 2015-11-04 22:33 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-11-10 16:54 - 2015-11-04 22:28 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-11-10 16:54 - 2015-11-04 22:27 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll

2015-11-10 16:54 - 2015-11-04 22:27 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll

2015-11-10 16:54 - 2015-11-04 22:23 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll

2015-11-10 16:53 - 2015-11-05 00:06 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll

2015-11-10 16:53 - 2015-11-05 00:01 - 00607408 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe

2015-11-10 16:53 - 2015-11-04 23:23 - 00762888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll

2015-11-10 16:53 - 2015-11-04 23:18 - 00539728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe

2015-11-10 16:53 - 2015-11-04 23:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll

2015-11-10 16:53 - 2015-11-04 23:05 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-11-10 16:53 - 2015-11-04 23:01 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-11-10 16:53 - 2015-11-04 22:58 - 01383936 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys

2015-11-10 16:53 - 2015-11-04 22:34 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll

2015-11-10 16:53 - 2015-11-04 22:33 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-11-10 16:53 - 2015-11-04 22:30 - 00767488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-11-10 12:44 - 2015-11-10 12:44 - 00605909 _____ C:\Users\kebli\Downloads\pg20782-images.epub

2015-11-10 12:42 - 2015-11-10 12:42 - 00306792 _____ C:\Users\kebli\Downloads\pg12013-images.epub

2015-11-10 12:39 - 2015-11-10 12:39 - 00279028 _____ C:\Users\kebli\Downloads\pg18458-images.epub

2015-11-10 01:33 - 2015-11-10 01:33 - 00144811 _____ C:\Users\kebli\Downloads\pg19651-images.epub

2015-11-10 00:15 - 2015-11-10 00:15 - 00236907 _____ C:\Users\kebli\Downloads\pg25550-images.epub

2015-11-04 21:27 - 2015-11-04 21:27 - 03933496 _____ (Logitech, Inc.) C:\Windows\system32\LogiLDA.DLL

2015-11-04 21:27 - 2015-11-04 21:27 - 02458936 _____ (Logitech, Inc.) C:\Windows\system32\LdaCx2.dll

2015-11-04 21:27 - 2015-11-04 21:27 - 00354264 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib110.dll

2015-11-02 20:34 - 2015-11-02 20:34 - 00007679 _____ C:\Users\kebli\AppData\Local\Resmon.ResmonCfg

2015-11-01 09:36 - 2015-11-01 09:36 - 00000000 ____D C:\Windows\system32\SleepStudy

2015-11-01 01:29 - 2015-11-23 15:49 - 00000000 ____D C:\Users\kebli\Desktop\Pics Nov 1

2015-11-01 01:26 - 2015-11-01 01:26 - 00002113 _____ C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\ScreenHunter 6.0 Free.lnk

2015-11-01 01:26 - 2015-11-01 01:26 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free

2015-11-01 01:26 - 2015-11-01 01:26 - 00000000 ____D C:\Users\kebli\AppData\Local\Wisdom-soft

2015-11-01 01:26 - 2015-11-01 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wisdom-soft ScreenHunter 6 Free

2015-11-01 01:26 - 2015-11-01 01:26 - 00000000 ____D C:\Program Files (x86)\Wisdom-soft ScreenHunter 6.0 Free

2015-11-01 01:24 - 2015-11-01 01:25 - 12798032 _____ C:\Users\kebli\Downloads\setupscreenhunterfree.exe

2015-11-01 01:24 - 2015-11-01 01:24 - 12798032 _____ C:\Users\kebli\Downloads\setupscreenhunterfree (1).exe

2015-11-01 01:04 - 2015-11-01 01:04 - 10513112 _____ (Microsoft Corporation) C:\Users\kebli\Downloads\BingDesktopSetup.exe

2015-11-01 01:04 - 2015-11-01 01:04 - 00362029 _____ C:\Windows\SysWOW64\sqlite3.dll

2015-10-31 14:32 - 2015-10-31 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-10-31 14:31 - 2015-11-23 15:36 - 00000928 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-10-31 14:31 - 2015-11-23 15:36 - 00000924 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-10-31 14:31 - 2015-11-01 10:34 - 00000000 ____D C:\Users\kebli\AppData\Local\Google

2015-10-31 14:31 - 2015-10-31 14:32 - 00000000 ____D C:\Program Files (x86)\Google

2015-10-31 14:31 - 2015-10-31 14:31 - 00003986 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-10-31 14:31 - 2015-10-31 14:31 - 00003754 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-10-31 14:30 - 2015-10-31 14:31 - 00929872 _____ (Google Inc.) C:\Users\kebli\Downloads\ChromeSetup.exe

2015-10-31 10:36 - 2015-05-19 12:59 - 00207208 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys

2015-10-31 01:39 - 2015-11-23 14:57 - 00004168 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8E32CCF5-6C3B-4761-B98F-5E7BA2CFD104}

2015-10-31 01:04 - 2015-11-10 17:47 - 00000000 ____D C:\Windows\system32\MRT

2015-10-31 01:04 - 2015-11-10 17:44 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-10-31 01:03 - 2015-10-05 22:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2015-10-31 01:03 - 2015-10-05 21:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2015-10-31 01:03 - 2015-09-24 22:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-10-31 01:03 - 2015-09-24 22:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-10-31 01:03 - 2015-09-24 22:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll

2015-10-31 01:03 - 2015-09-24 22:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll

2015-10-31 01:03 - 2015-09-24 21:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll

2015-10-31 01:03 - 2015-09-17 01:50 - 02464216 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2015-10-31 01:03 - 2015-09-17 01:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2015-10-31 01:03 - 2015-09-17 01:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll

2015-10-31 01:03 - 2015-09-17 01:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2015-10-31 01:03 - 2015-09-17 01:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-10-31 01:03 - 2015-09-17 01:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll

2015-10-31 01:03 - 2015-09-17 01:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-10-31 01:03 - 2015-09-17 01:48 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2015-10-31 01:03 - 2015-09-17 01:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll

2015-10-31 01:03 - 2015-09-17 01:28 - 02154808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2015-10-31 01:03 - 2015-09-17 01:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2015-10-31 01:03 - 2015-09-17 01:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-10-31 01:03 - 2015-09-17 01:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll

2015-10-31 01:03 - 2015-09-17 01:26 - 00646672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2015-10-31 01:03 - 2015-09-17 01:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll

2015-10-31 01:03 - 2015-09-17 01:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll

2015-10-31 01:03 - 2015-09-17 01:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll

2015-10-31 01:03 - 2015-09-17 01:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll

2015-10-31 01:03 - 2015-09-17 01:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll

2015-10-31 01:03 - 2015-09-17 01:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll

2015-10-31 01:03 - 2015-09-17 00:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll

2015-10-31 01:03 - 2015-09-17 00:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll

2015-10-31 01:03 - 2015-09-17 00:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll

2015-10-31 01:03 - 2015-09-17 00:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll

2015-10-31 01:03 - 2015-09-17 00:55 - 02236416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-10-31 01:03 - 2015-09-17 00:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll

2015-10-31 01:03 - 2015-09-17 00:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll

2015-10-31 01:03 - 2015-09-17 00:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll

2015-10-31 01:03 - 2015-09-17 00:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2015-10-31 01:03 - 2015-09-17 00:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2015-10-31 01:03 - 2015-09-17 00:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll

2015-10-31 01:03 - 2015-09-17 00:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll

2015-10-31 01:03 - 2015-09-17 00:51 - 02660864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll

2015-10-31 01:03 - 2015-09-17 00:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll

2015-10-31 01:03 - 2015-09-17 00:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll

2015-10-31 01:03 - 2015-09-17 00:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll

2015-10-31 01:03 - 2015-09-17 00:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2015-10-31 01:03 - 2015-09-17 00:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll

2015-10-31 01:03 - 2015-09-17 00:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll

2015-10-31 01:03 - 2015-09-17 00:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll

2015-10-31 01:03 - 2015-09-17 00:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll

2015-10-31 01:03 - 2015-09-17 00:35 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll

2015-10-31 01:03 - 2015-09-17 00:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll

2015-10-31 01:03 - 2015-09-17 00:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2015-10-31 01:03 - 2015-08-27 00:54 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-10-31 01:03 - 2015-08-27 00:23 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-10-31 01:03 - 2015-08-18 01:52 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2015-10-31 01:03 - 2015-08-18 01:29 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2015-10-31 01:03 - 2015-08-11 04:50 - 01643872 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll

2015-10-31 01:03 - 2015-08-02 21:18 - 08613200 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll

2015-10-31 01:03 - 2015-08-02 20:56 - 06878256 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll

2015-10-31 01:03 - 2015-08-02 20:30 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_UserAccount.dll

2015-10-31 01:03 - 2015-08-02 20:15 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll

2015-10-31 01:03 - 2015-08-02 20:03 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll

2015-10-31 01:03 - 2015-07-30 01:23 - 00527952 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-10-31 01:03 - 2015-07-30 01:16 - 02147080 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2015-10-31 01:03 - 2015-07-30 01:15 - 00632168 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2015-10-31 01:03 - 2015-07-30 01:03 - 02116448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2015-10-31 01:03 - 2015-07-29 23:26 - 01867160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2015-10-31 01:03 - 2015-07-29 23:24 - 00445240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-10-31 01:03 - 2015-07-29 23:22 - 00507696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2015-10-31 01:03 - 2015-07-29 23:12 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll

2015-10-31 01:03 - 2015-07-29 22:49 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2015-10-31 01:03 - 2015-07-29 22:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2015-10-31 01:03 - 2015-07-29 22:44 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll

2015-10-31 01:03 - 2015-07-29 22:44 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll

2015-10-31 01:03 - 2015-07-29 22:15 - 09889792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2015-10-31 01:03 - 2015-07-29 22:04 - 01714176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2015-10-31 01:02 - 2015-10-10 02:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-10-31 01:02 - 2015-09-30 23:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-10-31 01:02 - 2015-09-30 23:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2015-10-31 01:02 - 2015-09-30 23:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-10-31 01:02 - 2015-09-30 23:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2015-10-31 01:02 - 2015-09-30 22:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2015-10-31 01:02 - 2015-09-24 23:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-10-31 01:02 - 2015-09-24 23:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2015-10-31 01:02 - 2015-09-24 22:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi

2015-10-31 01:02 - 2015-09-24 22:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-10-31 01:02 - 2015-09-24 22:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll

2015-10-31 01:02 - 2015-09-24 22:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll

2015-10-31 01:02 - 2015-09-24 22:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-10-31 01:02 - 2015-09-24 22:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll

2015-10-31 01:02 - 2015-09-24 22:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-10-31 01:02 - 2015-09-24 22:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll

2015-10-31 01:02 - 2015-09-24 22:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll

2015-10-31 01:02 - 2015-09-24 21:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll

2015-10-31 01:02 - 2015-09-24 21:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll

2015-10-31 01:02 - 2015-09-24 21:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll

2015-10-31 01:02 - 2015-09-24 21:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll

2015-10-31 01:02 - 2015-09-24 21:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll

2015-10-31 01:02 - 2015-09-24 21:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-10-31 01:02 - 2015-09-24 21:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll

2015-10-31 01:02 - 2015-09-24 21:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-10-31 01:02 - 2015-09-24 21:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-10-31 01:02 - 2015-09-24 21:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll

2015-10-31 01:02 - 2015-09-24 21:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2015-10-31 01:02 - 2015-09-24 21:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll

2015-10-31 01:02 - 2015-09-24 21:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll

2015-10-31 01:02 - 2015-09-24 21:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll

2015-10-31 01:02 - 2015-09-24 21:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll

2015-10-31 01:02 - 2015-09-24 21:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll

2015-10-31 01:02 - 2015-09-24 21:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-10-31 01:02 - 2015-09-24 21:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll

2015-10-31 01:02 - 2015-09-17 01:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2015-10-31 01:02 - 2015-09-17 01:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll

2015-10-31 01:02 - 2015-09-17 01:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2015-10-31 01:02 - 2015-09-17 01:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe

2015-10-31 01:02 - 2015-09-17 01:48 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2015-10-31 01:02 - 2015-09-17 01:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2015-10-31 01:02 - 2015-09-17 01:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys

2015-10-31 01:02 - 2015-09-17 01:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll

2015-10-31 01:02 - 2015-09-17 01:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2015-10-31 01:02 - 2015-09-17 01:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2015-10-31 01:02 - 2015-09-17 01:48 - 00243760 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-10-31 01:02 - 2015-09-17 01:44 - 00781976 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2015-10-31 01:02 - 2015-09-17 01:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll

2015-10-31 01:02 - 2015-09-17 01:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe

2015-10-31 01:02 - 2015-09-17 01:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll

2015-10-31 01:02 - 2015-09-17 01:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll

2015-10-31 01:02 - 2015-09-17 01:26 - 02446648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2015-10-31 01:02 - 2015-09-17 01:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll

2015-10-31 01:02 - 2015-09-17 01:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-10-31 01:02 - 2015-09-17 01:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll

2015-10-31 01:02 - 2015-09-17 01:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll

2015-10-31 01:02 - 2015-09-17 01:21 - 00658528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll

2015-10-31 01:02 - 2015-09-17 01:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll

2015-10-31 01:02 - 2015-09-17 01:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll

2015-10-31 01:02 - 2015-09-17 01:06 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll

2015-10-31 01:02 - 2015-09-17 01:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll

2015-10-31 01:02 - 2015-09-17 01:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll

2015-10-31 01:02 - 2015-09-17 00:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2015-10-31 01:02 - 2015-09-17 00:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll

2015-10-31 01:02 - 2015-09-17 00:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll

2015-10-31 01:02 - 2015-09-17 00:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll

2015-10-31 01:02 - 2015-09-17 00:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll

2015-10-31 01:02 - 2015-09-17 00:55 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll

2015-10-31 01:02 - 2015-09-17 00:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll

2015-10-31 01:02 - 2015-09-17 00:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe

2015-10-31 01:02 - 2015-09-17 00:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll

2015-10-31 01:02 - 2015-09-17 00:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-10-31 01:02 - 2015-09-17 00:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll

2015-10-31 01:02 - 2015-09-17 00:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll

2015-10-31 01:02 - 2015-09-17 00:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll

2015-10-31 01:02 - 2015-09-17 00:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll

2015-10-31 01:02 - 2015-09-17 00:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll

2015-10-31 01:02 - 2015-09-17 00:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2015-10-31 01:02 - 2015-09-17 00:50 - 00929280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys

2015-10-31 01:02 - 2015-09-17 00:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2015-10-31 01:02 - 2015-09-17 00:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll

2015-10-31 01:02 - 2015-09-17 00:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys

2015-10-31 01:02 - 2015-09-17 00:49 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-10-31 01:02 - 2015-09-17 00:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll

2015-10-31 01:02 - 2015-09-17 00:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll

2015-10-31 01:02 - 2015-09-17 00:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2015-10-31 01:02 - 2015-09-17 00:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll

2015-10-31 01:02 - 2015-09-17 00:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll

2015-10-31 01:02 - 2015-09-17 00:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll

2015-10-31 01:02 - 2015-09-17 00:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll

2015-10-31 01:02 - 2015-09-17 00:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll

2015-10-31 01:02 - 2015-09-17 00:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll

2015-10-31 01:02 - 2015-09-17 00:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2015-10-31 01:02 - 2015-09-17 00:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll

2015-10-31 01:02 - 2015-09-17 00:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll

2015-10-31 01:02 - 2015-09-17 00:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe

2015-10-31 01:02 - 2015-09-17 00:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll

2015-10-31 01:02 - 2015-09-17 00:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll

2015-10-31 01:02 - 2015-09-17 00:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll

2015-10-31 01:02 - 2015-09-17 00:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2015-10-31 01:02 - 2015-09-17 00:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll

2015-10-31 01:02 - 2015-09-17 00:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2015-10-31 01:02 - 2015-09-17 00:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll

2015-10-31 01:02 - 2015-09-17 00:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2015-10-31 01:02 - 2015-09-17 00:43 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll

2015-10-31 01:02 - 2015-09-17 00:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll

2015-10-31 01:02 - 2015-09-17 00:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll

2015-10-31 01:02 - 2015-09-17 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-10-31 01:02 - 2015-09-17 00:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll

2015-10-31 01:02 - 2015-09-17 00:35 - 02207232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-10-31 01:02 - 2015-09-17 00:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll

2015-10-31 01:02 - 2015-09-17 00:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll

2015-10-31 01:02 - 2015-09-17 00:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll

2015-10-31 01:02 - 2015-09-17 00:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-10-31 01:02 - 2015-09-17 00:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll

2015-10-31 01:02 - 2015-09-17 00:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2015-10-31 01:02 - 2015-09-17 00:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll

2015-10-31 01:02 - 2015-09-17 00:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll

2015-10-31 01:02 - 2015-09-17 00:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll

2015-10-31 01:02 - 2015-09-17 00:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll

2015-10-31 01:02 - 2015-09-17 00:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll

2015-10-31 01:02 - 2015-08-27 00:51 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-10-31 01:02 - 2015-08-27 00:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2015-10-31 01:02 - 2015-08-27 00:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-10-31 01:02 - 2015-08-27 00:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2015-10-31 01:02 - 2015-08-27 00:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll

2015-10-31 01:02 - 2015-08-27 00:16 - 02153472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-10-31 01:02 - 2015-08-27 00:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2015-10-31 01:02 - 2015-08-27 00:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2015-10-31 01:02 - 2015-08-27 00:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll

2015-10-31 01:02 - 2015-08-20 01:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2015-10-31 01:02 - 2015-08-20 00:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe

2015-10-31 01:02 - 2015-08-18 02:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2015-10-31 01:02 - 2015-08-18 02:13 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll

2015-10-31 01:02 - 2015-08-18 02:13 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll

2015-10-31 01:02 - 2015-08-18 01:58 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll

2015-10-31 01:02 - 2015-08-18 01:56 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll

2015-10-31 01:02 - 2015-08-18 01:54 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll

2015-10-31 01:02 - 2015-08-18 01:49 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2015-10-31 01:02 - 2015-08-18 01:49 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll

2015-10-31 01:02 - 2015-08-17 23:44 - 00008847 _____ C:\Windows\system32\ResPriHMImageList

2015-10-31 01:02 - 2015-08-11 05:04 - 04532304 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2015-10-31 01:02 - 2015-08-11 05:04 - 01087296 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2015-10-31 01:02 - 2015-08-11 05:02 - 00292856 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe

2015-10-31 01:02 - 2015-08-11 04:40 - 04048808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2015-10-31 01:02 - 2015-08-11 04:40 - 00918320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2015-10-31 01:02 - 2015-08-11 04:37 - 00243800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe

2015-10-31 01:02 - 2015-08-11 04:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll

2015-10-31 01:02 - 2015-08-11 04:18 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll

2015-10-31 01:02 - 2015-08-11 04:14 - 00404480 _____ C:\Windows\system32\diagtrack_wininternal.dll

2015-10-31 01:02 - 2015-08-11 04:13 - 00413184 _____ C:\Windows\system32\diagtrack_win.dll

2015-10-31 01:02 - 2015-08-11 04:11 - 02446336 _____ C:\Windows\system32\InputService.dll

2015-10-31 01:02 - 2015-08-11 04:10 - 00293376 _____ C:\Windows\system32\TextInputFramework.dll

2015-10-31 01:02 - 2015-08-11 04:08 - 00893440 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll

2015-10-31 01:02 - 2015-08-11 04:07 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe

2015-10-31 01:02 - 2015-08-11 04:05 - 03527168 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2015-10-31 01:02 - 2015-08-11 04:05 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\LocationPermissions.dll

2015-10-31 01:02 - 2015-08-11 04:03 - 02558976 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2015-10-31 01:02 - 2015-08-11 04:00 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2015-10-31 01:02 - 2015-08-11 03:59 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2015-10-31 01:02 - 2015-08-11 03:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll

2015-10-31 01:02 - 2015-08-11 03:51 - 01823232 _____ C:\Windows\SysWOW64\InputService.dll

2015-10-31 01:02 - 2015-08-11 03:50 - 00200704 _____ C:\Windows\SysWOW64\TextInputFramework.dll

2015-10-31 01:02 - 2015-08-11 03:48 - 00671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll

2015-10-31 01:02 - 2015-08-11 03:43 - 02748416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2015-10-31 01:02 - 2015-08-11 03:40 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2015-10-31 01:02 - 2015-08-08 01:24 - 02415104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-10-31 01:02 - 2015-08-08 01:24 - 01679360 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-10-31 01:02 - 2015-08-08 01:00 - 01985024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-10-31 01:02 - 2015-08-05 22:17 - 00237392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2015-10-31 01:02 - 2015-08-05 22:17 - 00200528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys

2015-10-31 01:02 - 2015-08-05 21:22 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys

2015-10-31 01:02 - 2015-08-04 23:00 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll

2015-10-31 01:02 - 2015-08-04 22:39 - 00261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll

2015-10-31 01:02 - 2015-08-03 23:07 - 00102752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-10-31 01:02 - 2015-08-03 22:23 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll

2015-10-31 01:02 - 2015-08-02 21:32 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll

2015-10-31 01:02 - 2015-08-02 21:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NotificationObjFactory.dll

2015-10-31 01:02 - 2015-08-02 21:12 - 00801632 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe

2015-10-31 01:02 - 2015-08-02 20:49 - 00700256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe

2015-10-31 01:02 - 2015-08-02 20:23 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll

2015-10-31 01:02 - 2015-08-02 20:18 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\NetworkStatus.dll

2015-10-31 01:02 - 2015-08-02 20:15 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll

2015-10-31 01:02 - 2015-08-02 20:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll

2015-10-31 01:02 - 2015-08-02 20:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEDataLayerHelpers.dll

2015-10-31 01:02 - 2015-08-02 20:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll

2015-10-31 01:02 - 2015-08-02 19:59 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll

2015-10-31 01:02 - 2015-07-30 01:21 - 00816576 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2015-10-31 01:02 - 2015-07-30 01:17 - 01200400 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-10-31 01:02 - 2015-07-30 01:17 - 01025840 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll

2015-10-31 01:02 - 2015-07-30 01:14 - 00333168 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll

2015-10-31 01:02 - 2015-07-30 01:06 - 01043872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2015-10-31 01:02 - 2015-07-30 00:24 - 00252768 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll

2015-10-31 01:02 - 2015-07-29 23:29 - 00705520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-10-31 01:02 - 2015-07-29 23:26 - 00877016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2015-10-31 01:02 - 2015-07-29 23:25 - 00713312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2015-10-31 01:02 - 2015-07-29 23:24 - 00285632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll

2015-10-31 01:02 - 2015-07-29 23:08 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe

2015-10-31 01:02 - 2015-07-29 22:52 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll

2015-10-31 01:02 - 2015-07-29 22:46 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\mfmkvsrcsnk.dll

2015-10-31 01:02 - 2015-07-29 22:40 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2015-10-31 01:02 - 2015-07-29 22:29 - 00654848 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll

2015-10-31 01:02 - 2015-07-29 22:06 - 00373248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmkvsrcsnk.dll

2015-10-31 01:02 - 2015-07-29 21:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll

2015-10-31 01:01 - 2015-09-24 22:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll

2015-10-31 01:01 - 2015-09-24 22:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll

2015-10-31 01:01 - 2015-09-24 22:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll

2015-10-31 01:01 - 2015-09-24 21:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll

2015-10-31 01:01 - 2015-09-24 21:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll

2015-10-31 01:01 - 2015-09-24 21:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll

2015-10-31 01:01 - 2015-09-24 21:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll

2015-10-31 01:01 - 2015-09-19 00:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll

2015-10-31 01:01 - 2015-09-17 01:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2015-10-31 01:01 - 2015-09-17 01:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2015-10-31 01:01 - 2015-09-17 01:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2015-10-31 01:01 - 2015-09-17 01:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll

2015-10-31 01:01 - 2015-09-17 01:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2015-10-31 01:01 - 2015-09-17 01:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll

2015-10-31 01:01 - 2015-09-17 01:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll

2015-10-31 01:01 - 2015-09-17 01:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe

2015-10-31 01:01 - 2015-09-17 01:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll

2015-10-31 01:01 - 2015-09-17 01:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll

2015-10-31 01:01 - 2015-09-17 01:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe

2015-10-31 01:01 - 2015-09-17 01:03 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll

2015-10-31 01:01 - 2015-09-17 01:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe

2015-10-31 01:01 - 2015-09-17 01:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll

2015-10-31 01:01 - 2015-09-17 01:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll

2015-10-31 01:01 - 2015-09-17 01:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll

2015-10-31 01:01 - 2015-09-17 00:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll

2015-10-31 01:01 - 2015-09-17 00:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll

2015-10-31 01:01 - 2015-09-17 00:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll

2015-10-31 01:01 - 2015-09-17 00:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll

2015-10-31 01:01 - 2015-09-17 00:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2015-10-31 01:01 - 2015-09-17 00:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-10-31 01:01 - 2015-09-17 00:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2015-10-31 01:01 - 2015-09-17 00:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll

2015-10-31 01:01 - 2015-09-17 00:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll

2015-10-31 01:01 - 2015-09-17 00:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll

2015-10-31 01:01 - 2015-09-17 00:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll

2015-10-31 01:01 - 2015-09-17 00:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll

2015-10-31 01:01 - 2015-09-17 00:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll

2015-10-31 01:01 - 2015-09-17 00:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll

2015-10-31 01:01 - 2015-09-17 00:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll

2015-10-31 01:01 - 2015-09-17 00:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll

2015-10-31 01:01 - 2015-09-17 00:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll

2015-10-31 01:01 - 2015-09-17 00:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll

2015-10-31 01:01 - 2015-09-17 00:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll

2015-10-31 01:01 - 2015-09-17 00:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll

2015-10-31 01:01 - 2015-09-17 00:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll

2015-10-31 01:01 - 2015-09-17 00:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll

2015-10-31 01:01 - 2015-08-27 00:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll

2015-10-31 01:01 - 2015-08-27 00:39 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-10-31 01:01 - 2015-08-27 00:08 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-10-31 01:01 - 2015-08-20 00:21 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll

2015-10-31 01:01 - 2015-08-18 02:04 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-10-31 01:01 - 2015-08-18 01:59 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll

2015-10-31 01:01 - 2015-08-18 01:59 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll

2015-10-31 01:01 - 2015-08-18 01:58 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll

2015-10-31 01:01 - 2015-08-18 01:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll

2015-10-31 01:01 - 2015-08-18 01:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll

2015-10-31 01:01 - 2015-08-18 01:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll

2015-10-31 01:01 - 2015-08-18 01:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll

2015-10-31 01:01 - 2015-08-18 01:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll

2015-10-31 01:01 - 2015-08-18 01:36 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll

2015-10-31 01:01 - 2015-08-18 01:35 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll

2015-10-31 01:01 - 2015-08-18 01:35 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll

2015-10-31 01:01 - 2015-08-18 01:34 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll

2015-10-31 01:01 - 2015-08-18 01:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll

2015-10-31 01:01 - 2015-08-11 05:03 - 00442208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2015-10-31 01:01 - 2015-08-11 05:02 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys

2015-10-31 01:01 - 2015-08-11 04:52 - 00993104 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll

2015-10-31 01:01 - 2015-08-11 04:26 - 00845664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll

2015-10-31 01:01 - 2015-08-11 04:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\tetheringclient.dll

2015-10-31 01:01 - 2015-08-11 04:11 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe

2015-10-31 01:01 - 2015-08-11 04:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll

2015-10-31 01:01 - 2015-08-11 04:05 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll

2015-10-31 01:01 - 2015-08-11 03:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll

2015-10-31 01:01 - 2015-08-11 03:59 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll

2015-10-31 01:01 - 2015-08-11 03:59 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tetheringclient.dll

2015-10-31 01:01 - 2015-08-11 03:50 - 00420352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe

2015-10-31 01:01 - 2015-08-11 03:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Core.TextInput.dll

2015-10-31 01:01 - 2015-08-11 03:39 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2015-10-31 01:01 - 2015-08-11 03:38 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll

2015-10-31 01:01 - 2015-08-08 02:29 - 01822280 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-10-31 01:01 - 2015-08-08 02:01 - 01533496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-10-31 01:01 - 2015-08-02 21:18 - 00594472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll

2015-10-31 01:01 - 2015-08-02 21:18 - 00046432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpiowin32.sys

2015-10-31 01:01 - 2015-08-02 21:17 - 00052264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys

2015-10-31 01:01 - 2015-08-02 20:24 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModelShim.dll

2015-10-31 01:01 - 2015-08-02 20:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll

2015-10-31 01:01 - 2015-08-02 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2015-10-31 01:01 - 2015-08-02 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2015-10-31 01:01 - 2015-08-02 20:06 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2015-10-31 01:01 - 2015-07-29 23:22 - 00896144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll

2015-10-31 01:01 - 2015-07-29 22:45 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\fwpolicyiomgr.dll

2015-10-31 01:01 - 2015-07-29 22:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys

2015-10-31 01:01 - 2015-07-29 22:44 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.V2.dll

2015-10-31 01:01 - 2015-07-29 22:44 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys

2015-10-31 01:01 - 2015-07-29 22:44 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\VoiceActivationManager.dll

2015-10-31 01:01 - 2015-07-29 22:41 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll

2015-10-31 01:01 - 2015-07-29 22:38 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll

2015-10-31 01:01 - 2015-07-29 22:07 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fwpolicyiomgr.dll

2015-10-31 01:01 - 2015-07-29 22:06 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.V2.dll

2015-10-31 01:01 - 2015-07-29 22:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoiceActivationManager.dll

2015-10-31 00:58 - 2015-10-31 00:58 - 00003122 _____ C:\Windows\System32\Tasks\McAfeeLogon

2015-10-31 00:58 - 2015-10-31 00:58 - 00000000 ____D C:\Windows\System32\Tasks\McAfee

2015-10-31 00:55 - 2015-10-31 00:55 - 00000000 ____D C:\Program Files\Common Files\AV

2015-10-31 00:23 - 2015-11-23 16:13 - 00000000 ____D C:\Users\kebli\Desktop\main

2015-10-31 00:23 - 2015-10-31 00:27 - 00000000 ____D C:\Users\kebli\.ebookreader

2015-10-31 00:23 - 2015-10-31 00:23 - 00000000 ____D C:\Users\kebli\AppData\Local\Icecream

2015-10-31 00:23 - 2015-10-31 00:23 - 00000000 ____D C:\Users\kebli\AppData\Local\CrashRpt

2015-10-31 00:22 - 2015-10-31 00:22 - 20193216 _____ (Icecream Apps ) C:\Users\kebli\Downloads\ebook_reader_setup.exe

2015-10-31 00:14 - 2015-10-31 00:14 - 00228452 _____ C:\Users\kebli\Downloads\pg20857.epub

2015-10-31 00:04 - 2015-10-31 00:04 - 00339367 _____ C:\Users\kebli\Downloads\pg20857-images.epub

2015-10-30 23:45 - 2015-10-30 23:45 - 00000000 ____D C:\Program Files (x86)\Dell Customer Connect

2015-10-30 23:19 - 2015-10-30 23:19 - 00000000 ____D C:\Users\kebli\AppData\Local\NetworkTiles

2015-10-30 23:00 - 2015-10-30 23:00 - 00000000 ____D C:\Users\kebli\AppData\Local\MicrosoftEdge

2015-10-30 22:55 - 2015-10-30 22:55 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Macromedia

2015-10-30 22:54 - 2015-10-30 22:54 - 00002340 _____ C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2015-10-30 22:54 - 2015-10-30 22:54 - 00000000 ___RD C:\Users\kebli\OneDrive

2015-10-30 22:54 - 2015-10-30 22:54 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Intel Corporation

2015-10-30 22:53 - 2015-10-30 22:53 - 00000000 ____D C:\Users\kebli\AppData\Roaming\ATI

2015-10-30 22:53 - 2015-10-30 22:53 - 00000000 ____D C:\Users\kebli\AppData\Local\ATI

2015-10-30 22:53 - 2015-10-30 22:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2015-10-30 22:53 - 2015-10-30 22:53 - 00000000 ____D C:\ProgramData\ATI

2015-10-30 22:52 - 2015-10-30 22:54 - 00000000 ____D C:\Users\kebli\AppData\Local\Comms

2015-10-30 22:52 - 2015-10-30 22:52 - 00000000 ____D C:\Program Files (x86)\Dell Update

2015-10-30 22:51 - 2015-10-30 22:52 - 00000000 ____D C:\Users\kebli\AppData\Roaming\DropboxOEM

2015-10-30 22:51 - 2015-10-30 22:51 - 00000000 ____D C:\Users\kebli\AppData\Local\Publishers

2015-10-30 22:51 - 2015-10-30 22:51 - 00000000 ____D C:\Users\kebli\AppData\Local\Power2Go8

2015-10-30 22:51 - 2015-10-30 22:51 - 00000000 ____D C:\Users\kebli\AppData\Local\DropboxOEM

2015-10-30 22:50 - 2015-11-18 23:32 - 00000000 ____D C:\Users\kebli\AppData\Local\Packages

2015-10-30 22:50 - 2015-10-30 22:50 - 00016148 _____ C:\Windows\system32\DESKTOP-O8A2EKO_defaultuser0_HistoryPrediction.bin

2015-10-30 22:50 - 2015-10-30 22:50 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Intel

2015-10-30 22:50 - 2015-10-30 22:50 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Adobe

2015-10-30 22:50 - 2015-10-30 22:50 - 00000000 ____D C:\Users\kebli\AppData\Local\VirtualStore

2015-10-30 22:50 - 2015-10-30 22:50 - 00000000 ____D C:\Users\kebli\AppData\Local\TileDataLayer

2015-10-30 22:48 - 2015-11-19 15:23 - 00000000 ____D C:\Users\kebli

2015-10-30 22:48 - 2015-10-30 22:50 - 00000000 ___RD C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-30 22:48 - 2015-10-30 22:48 - 00000020 ___SH C:\Users\kebli\ntuser.ini

2015-10-30 22:48 - 2015-07-10 06:04 - 00000000 __RSD C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell

2015-10-30 22:48 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2015-10-30 22:48 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-30 22:48 - 2015-07-10 06:04 - 00000000 ____D C:\Users\kebli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2015-10-30 22:46 - 2015-10-30 22:46 - 00004150 _____ C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask

2015-10-30 22:46 - 2015-10-30 22:46 - 00003560 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask

2015-10-30 22:46 - 2015-10-30 22:46 - 00003322 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest

2015-10-30 22:44 - 2015-11-23 15:30 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2015-10-30 04:42 - 2015-11-18 13:57 - 00000000 ___HD C:\$WINDOWS.~BT

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-23 16:30 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\sru

2015-11-23 15:35 - 2015-09-18 06:22 - 00876942 _____ C:\Windows\system32\PerfStringBackup.INI

2015-11-23 15:33 - 2015-09-18 06:42 - 00009132 _____ C:\Windows\SysWOW64\Gms.log

2015-11-23 15:33 - 2015-07-10 07:22 - 00000275 _____ C:\Windows\WindowsUpdate.log

2015-11-23 15:29 - 2015-07-10 07:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-11-23 15:28 - 2015-09-18 05:59 - 00006808 _____ C:\Windows\PFRO.log

2015-11-23 15:28 - 2015-07-10 04:05 - 00524288 ___SH C:\Windows\system32\config\BBI

2015-11-23 08:55 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\AppReadiness

2015-11-22 15:54 - 2015-07-10 04:05 - 00032768 ___SH C:\Windows\system32\config\ELAM

2015-11-19 13:16 - 2015-07-10 07:20 - 00192205 _____ C:\Windows\setupact.log

2015-11-18 23:43 - 2015-09-18 06:29 - 00000000 ____D C:\Program Files (x86)\McAfee

2015-11-18 13:59 - 2015-09-18 06:28 - 00000000 ____D C:\Windows\Panther

2015-11-15 13:03 - 2015-09-18 06:28 - 00000000 ____D C:\DELL

2015-11-13 21:36 - 2015-09-18 06:11 - 00000000 ____D C:\ProgramData\Package Cache

2015-11-12 01:26 - 2015-09-18 06:28 - 00000000 ____D C:\ProgramData\McAfee

2015-11-11 09:11 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\rescache

2015-11-11 01:49 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\NDF

2015-11-11 01:47 - 2015-07-10 05:55 - 00000000 ____D C:\Windows\CbsTemp

2015-11-11 01:13 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\appraiser

2015-11-04 21:27 - 2012-11-06 00:26 - 00828872 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110.dll

2015-11-04 21:27 - 2012-11-06 00:26 - 00661448 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110.dll

2015-11-04 03:32 - 2015-07-10 07:20 - 00201352 _____ C:\Windows\system32\FNTCACHE.DAT

2015-11-04 03:31 - 2015-07-10 08:16 - 00000000 ____D C:\Program Files\Windows Journal

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ___SD C:\Windows\SysWOW64\F12

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ___SD C:\Windows\system32\F12

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ___RD C:\Windows\PurchaseDialog

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\oobe

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\Provisioning

2015-11-04 03:31 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\L2Schemas

2015-11-03 13:20 - 2015-07-10 06:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-11-03 13:20 - 2015-07-10 06:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-10-31 10:37 - 2015-09-18 06:29 - 00000000 ____D C:\Program Files\mcafee

2015-10-31 10:33 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\appcompat

2015-10-31 00:59 - 2015-09-18 06:29 - 00000000 ____D C:\Program Files\Common Files\McAfee

2015-10-31 00:58 - 2015-07-10 06:04 - 00000000 ___HD C:\Windows\ELAMBKUP

2015-10-31 00:52 - 2015-09-18 06:26 - 00000000 ____D C:\ProgramData\PCDr

2015-10-31 00:34 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\LiveKernelReports

2015-10-30 23:45 - 2015-09-18 06:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell

2015-10-30 22:59 - 2015-09-18 06:22 - 00000000 ____D C:\Program Files\Dell

2015-10-30 22:59 - 2015-09-18 06:08 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-10-30 22:51 - 2015-07-10 06:04 - 00000000 ___RD C:\Windows\PrintDialog

2015-10-30 22:51 - 2015-07-10 06:04 - 00000000 ___RD C:\Windows\MiracastView

2015-10-30 22:51 - 2015-07-10 06:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel

2015-10-30 22:49 - 2015-07-10 06:04 - 00000000 ____D C:\Windows\system32\WinBioDatabase

==================== Files in the root of some directories =======

2015-11-23 15:50 - 2015-11-23 15:50 - 0000331 _____ () C:\Users\kebli\AppData\Local\LMIR0002.tmp_r.bat

2015-11-23 15:50 - 2015-11-23 15:50 - 0000331 _____ () C:\Users\kebli\AppData\Local\LMIR0003.tmp_r.bat

2015-11-02 20:34 - 2015-11-02 20:34 - 0007679 _____ () C:\Users\kebli\AppData\Local\Resmon.ResmonCfg

2015-09-18 06:23 - 2015-09-18 06:23 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2015-09-18 06:11 - 2015-09-18 06:11 - 0000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log

2015-09-18 06:08 - 2015-09-18 06:09 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log

2015-09-18 06:10 - 2015-09-18 06:11 - 0000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log

2015-09-18 06:09 - 2015-09-18 06:10 - 0000113 _____ () C:\ProgramData\{E1646825-D391-42A0-93AA-27FA810DA093}.log

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-11-23 09:05

==================== End of FRST.txt ============================Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:23-11-2015