Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Can't update or uninstall Silverlight


  • Please log in to reply

#1
cgnolte

cgnolte

    Member

  • Member
  • PipPip
  • 23 posts

We recently took my wife's Dell Latitude D610 out of the drawer it had been in for a year or more, to see if it would be a usable laptop for our 12-year-old daughter.  I soon noticed that IE was hijacked to set its homepage to a Chinese porn website.  I installed AVG, which found a few trojans and claimed to have secured them.  Since then, I have been performed numerous Windows Updates, trying to bring this Windows 7 machine up to date.  The IE homepage is no longer hijacked.

 

However, some of my Windows Updates are failing.  In particular, Microsoft Silverlight won't update--fails with an unknown error.  Following the Microsoft Knowledge Base article, I went to the website and downloaded Silverlight manually, and the installation still failed.  Next, I tried uninstalling from the Control Panel, and got an error saying I did not have access to a registry key. Googling that error led me to a thread on this site. 

 

I installed FRST and did a scan.  I do see some text about tencent and qq -- I think these are Chinese websites my wife may have visited, and likely are the source of the trojan.  I would appreciate any advice and assistance.  

 

Also, please opine whether this computer's specs are so hopelessly obsolete that we should just give up and buy our daughter a new computer!

 

Here are the scans:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:19-12-2015
Ran by Sue (administrator) on SUE-PC (19-12-2015 14:28:28)
Running from C:\Users\Sue\Desktop
Loaded Profiles: Sue (Available Profiles: Sue & Heather)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Logitech Inc.) C:\Program Files\Logitech\Vid HD\Vid.exe
() C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIGCA.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [87] => C:\ProgramData\microsoft908\908.exe [124224 2011-04-22] (DT Soft Ltd)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3855272 2015-12-09] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\Run: [Logitech Vid] => C:\Program Files\Logitech\Vid HD\Vid.exe [5915480 2010-10-29] (Logitech Inc.)
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\Run: [Epson Stylus NX420(Network)] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCA.EXE [200704 2009-09-14] (SEIKO EPSON CORPORATION)
Startup: C:\Users\Sue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2010-12-10]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicyScripts: Restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{5C3721BE-2B24-4D25-A5BE-4487ABA3C258}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{63F8297F-CB29-469E-8C36-4B12FBFF658F}: [DhcpNameServer] 10.0.1.1
 
Internet Explorer:
==================
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?gws_rd=ssl
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/
SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> DefaultScope {60BDEE68-60CD-49A9-86E6-524668AACE9C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=BABTDF&PC=BBLN&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> {60BDEE68-60CD-49A9-86E6-524668AACE9C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12] (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-12] (Microsoft Corporation)
 
FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll [No File]
FF Plugin: @qq.com/npqscall,version=1.0.0 -> %commonprogramfiles%\tencent\NPQSCALL\npqscall.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-19] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://intranet.epa.gov/
CHR StartupUrls: Default -> ""
CHR Profile: C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-19]
CHR Extension: (Google Docs) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-19]
CHR Extension: (Google Drive) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-19]
CHR Extension: (YouTube) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-19]
CHR Extension: (Google Search) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-19]
CHR Extension: (Google Sheets) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-19]
CHR Extension: (Google Docs Offline) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-19]
CHR Extension: (Sudoku for Google Chrome™) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifaabgmcffhggbfgjknkgenljelbocin [2015-12-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-19]
CHR Extension: (Gmail) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-19]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-12-10] (Adobe Systems) [File not signed]
S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [615584 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3857272 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [862632 2015-11-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [255920 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [193968 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
R3 GTIPCI21; C:\Windows\System32\DRIVERS\gtipci21.sys [88192 2006-09-14] (Texas Instruments)
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2599936 2007-08-12] (Intel® Corporation)
R3 STAC97; C:\Windows\System32\drivers\STAC97.sys [273168 2005-03-10] (SigmaTel, Inc.)
R3 VSTHWICH; C:\Windows\System32\DRIVERS\VSTICH3.SYS [242176 2009-07-13] (Conexant Systems, Inc.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-12-19 14:28 - 2015-12-19 14:31 - 00012239 _____ C:\Users\Sue\Desktop\FRST.txt
2015-12-19 14:24 - 2015-12-19 14:28 - 00000000 ____D C:\FRST
2015-12-19 14:22 - 2015-12-19 14:23 - 01721344 _____ (Farbar) C:\Users\Sue\Desktop\FRST.exe
2015-12-19 13:55 - 2015-12-19 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-19 13:49 - 2015-12-19 13:51 - 07022816 _____ (Microsoft Corporation) C:\Users\Sue\Downloads\Silverlight.exe
2015-12-19 13:47 - 2015-12-19 13:49 - 15692724 _____ C:\Users\Sue\Downloads\Silverlight.dmg
2015-12-19 10:07 - 2015-12-19 10:07 - 00000000 ____D C:\Users\Heather\AppData\Local\Google
2015-12-19 09:15 - 2015-12-19 09:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-12-19 09:15 - 2015-12-19 09:15 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-12-19 07:56 - 2015-10-08 18:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-19 07:56 - 2015-10-08 14:13 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-19 06:48 - 2015-11-10 13:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-19 06:48 - 2015-11-10 13:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-19 06:48 - 2015-07-30 12:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-12-19 06:48 - 2015-02-03 21:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-12-19 06:48 - 2015-02-02 22:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-12-19 06:16 - 2015-12-19 06:16 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-19 06:16 - 2015-12-19 06:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-19 06:12 - 2015-12-19 14:17 - 00000880 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-19 06:12 - 2015-12-19 10:58 - 00000876 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-19 06:11 - 2015-12-19 06:14 - 00000000 ____D C:\Program Files\Google
2015-12-19 05:25 - 2015-12-19 05:25 - 00000000 ____D C:\Users\Heather\AppData\Roaming\AVG
2015-12-19 05:24 - 2015-12-19 05:24 - 00000000 ____D C:\Users\Heather\AppData\Local\Avg
2015-12-19 03:15 - 2015-12-19 03:15 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-19 03:15 - 2015-12-19 03:15 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-19 03:15 - 2015-12-19 03:15 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-19 03:15 - 2015-12-19 03:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-12-19 03:15 - 2015-12-19 03:15 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-19 03:15 - 2015-12-19 03:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-12-19 03:15 - 2015-12-19 03:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-12-19 03:15 - 2015-12-19 03:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-19 03:14 - 2015-12-19 03:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2015-12-18 21:52 - 2015-12-18 22:36 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-18 17:33 - 2015-02-24 22:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-12-18 09:05 - 2013-10-03 20:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2015-12-18 09:05 - 2013-10-03 20:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-12-18 09:04 - 2015-01-08 21:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-12-18 09:04 - 2015-01-08 21:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-12-18 09:04 - 2015-01-08 21:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-12-18 08:35 - 2015-12-18 08:35 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-12-18 08:35 - 2015-12-18 08:35 - 00000000 ____D C:\Windows\system32\appraiser
2015-12-18 08:28 - 2015-05-08 22:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-12-18 08:28 - 2015-05-08 22:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-12-18 08:28 - 2015-05-08 22:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-12-18 08:28 - 2015-05-08 22:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-12-18 08:28 - 2015-05-08 22:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-12-18 08:27 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-12-18 08:27 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-12-18 08:27 - 2015-05-08 20:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-12-18 08:26 - 2014-12-18 21:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-12-18 08:25 - 2013-04-25 18:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2015-12-18 08:23 - 2015-04-12 22:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-12-18 08:17 - 2015-10-01 12:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-12-18 08:16 - 2015-10-01 12:50 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-12-18 07:40 - 2014-04-04 21:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-12-18 07:40 - 2013-11-26 06:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-12-18 07:39 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-12-18 07:39 - 2014-04-04 21:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-12-18 07:38 - 2015-11-10 13:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-18 07:38 - 2015-11-10 12:40 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-18 07:37 - 2014-10-24 20:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-12-18 07:22 - 2013-07-02 22:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2015-12-18 07:22 - 2013-07-02 22:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2015-12-18 07:19 - 2013-09-07 21:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-12-18 07:11 - 2015-01-28 22:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-12-18 07:06 - 2012-07-04 14:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-12-18 07:05 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-12-18 07:05 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-12-18 07:01 - 2015-07-10 12:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-12-18 07:01 - 2015-07-10 12:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-12-18 07:01 - 2015-07-10 12:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-12-18 07:00 - 2015-07-01 15:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-12-18 07:00 - 2015-07-01 15:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-12-18 07:00 - 2013-02-11 22:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-12-18 06:52 - 2015-11-11 13:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-18 06:52 - 2015-11-11 13:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-18 06:52 - 2012-11-02 00:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-12-18 06:51 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-12-18 06:51 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-12-18 06:51 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-12-18 06:51 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-12-18 06:50 - 2012-07-25 22:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-12-18 06:50 - 2012-07-25 22:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2015-12-18 06:50 - 2012-07-25 22:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-12-18 06:50 - 2012-07-25 22:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-12-18 06:50 - 2012-07-25 22:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2015-12-18 06:50 - 2012-07-25 21:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-12-18 06:50 - 2012-07-25 21:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-12-18 06:50 - 2012-06-02 09:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-12-18 06:49 - 2015-08-27 12:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-12-18 06:49 - 2015-08-27 12:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-12-18 06:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-12-18 06:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-12-18 06:48 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-12-18 06:48 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-12-18 06:48 - 2013-10-29 21:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-12-18 06:48 - 2013-01-23 23:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-12-18 06:47 - 2014-11-10 21:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-12-18 06:45 - 2015-08-05 12:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-12-18 06:45 - 2011-06-15 23:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-12-18 06:44 - 2013-10-18 20:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-12-18 06:44 - 2011-02-18 00:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-12-18 06:40 - 2014-06-30 17:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-12-18 06:40 - 2014-06-15 20:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-12-18 06:40 - 2014-06-15 20:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-12-18 06:40 - 2014-06-15 20:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-12-18 06:40 - 2014-03-09 16:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-12-18 06:39 - 2014-06-06 01:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-12-18 06:39 - 2014-03-09 16:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-12-18 06:37 - 2013-10-11 21:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-12-18 06:37 - 2013-10-11 21:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-12-18 06:37 - 2013-10-11 20:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-12-18 06:37 - 2013-10-11 20:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-12-18 06:36 - 2014-03-04 04:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-12-18 06:34 - 2014-08-11 20:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-12-18 06:34 - 2012-03-01 00:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2015-12-18 06:34 - 2012-03-01 00:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2015-12-18 06:33 - 2012-08-21 15:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-12-18 06:29 - 2015-07-15 12:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-12-18 06:29 - 2015-07-15 12:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-12-18 06:28 - 2015-07-15 12:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-12-18 06:24 - 2015-10-29 12:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-12-18 06:24 - 2015-10-29 12:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-12-18 06:24 - 2015-10-29 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-12-18 06:24 - 2015-10-29 12:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-12-18 06:23 - 2015-10-19 19:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-12-18 06:23 - 2015-10-19 19:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-12-18 06:23 - 2015-10-19 19:52 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-12-18 06:23 - 2015-10-19 19:48 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-12-18 06:23 - 2015-10-19 19:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-12-18 06:23 - 2015-10-19 18:29 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-12-18 06:23 - 2015-10-13 11:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-12-18 06:23 - 2015-10-13 11:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-12-18 06:22 - 2015-10-19 19:52 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-12-18 06:22 - 2015-10-19 19:45 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-12-18 06:22 - 2015-10-19 19:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-12-18 06:22 - 2015-10-19 19:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-12-18 06:22 - 2015-10-19 19:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-12-18 06:22 - 2015-10-19 19:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-12-18 06:22 - 2015-10-19 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-12-18 06:22 - 2015-10-19 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-12-18 06:22 - 2015-10-19 19:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-12-18 06:22 - 2015-10-19 18:28 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-12-18 06:22 - 2015-10-19 18:28 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-12-18 06:19 - 2011-12-30 00:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-12-18 06:18 - 2013-05-09 22:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-12-18 06:16 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-12-18 06:15 - 2015-09-01 20:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-12-18 06:13 - 2015-10-12 23:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-12-18 06:12 - 2015-11-20 13:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-18 06:12 - 2015-11-20 13:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-18 06:12 - 2015-11-20 13:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-18 06:12 - 2015-11-20 13:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-18 06:11 - 2014-01-27 21:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-12-18 06:11 - 2013-03-18 22:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2015-12-18 06:10 - 2015-11-03 13:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-18 06:10 - 2013-08-27 19:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-12-18 06:09 - 2015-04-10 22:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-12-18 06:09 - 2015-03-03 23:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-12-18 06:09 - 2015-03-03 23:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-12-18 06:09 - 2013-04-25 23:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-12-18 06:06 - 2013-05-12 22:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2015-12-18 06:06 - 2013-05-12 22:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2015-12-18 06:03 - 2014-09-04 00:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-12-18 06:02 - 2015-11-05 14:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-18 06:01 - 2011-05-03 23:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-12-18 06:01 - 2011-05-03 23:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-12-18 06:01 - 2011-05-03 23:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-12-18 06:01 - 2011-05-03 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-12-18 06:00 - 2011-05-03 23:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-12-18 06:00 - 2011-05-03 23:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-12-18 06:00 - 2011-05-03 23:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-12-18 06:00 - 2011-05-03 23:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-12-18 06:00 - 2011-05-03 23:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-12-18 05:59 - 2015-01-16 21:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-12-18 05:59 - 2012-06-06 00:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2015-12-18 05:58 - 2014-02-03 21:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-12-18 05:58 - 2014-02-03 21:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-12-18 05:58 - 2014-02-03 21:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-12-18 05:58 - 2014-02-03 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-12-18 05:56 - 2012-10-03 11:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-12-18 05:56 - 2012-10-03 11:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-12-18 05:56 - 2012-10-03 11:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-12-18 05:56 - 2012-10-03 10:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-12-18 05:49 - 2015-07-22 12:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-12-18 05:49 - 2015-07-22 12:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-12-18 05:49 - 2015-07-22 12:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-12-18 05:49 - 2015-07-22 11:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-12-18 05:44 - 2014-06-17 20:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-12-18 05:43 - 2015-07-09 12:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-12-18 05:43 - 2015-07-09 12:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-12-18 05:43 - 2015-06-17 12:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-12-18 05:42 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-12-18 05:42 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-12-18 05:42 - 2012-07-04 16:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2015-12-18 05:42 - 2012-07-04 16:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-12-18 05:42 - 2012-07-04 16:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2015-12-18 05:41 - 2015-04-17 21:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-12-18 05:34 - 2015-05-25 13:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-12-18 05:34 - 2015-05-25 13:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-12-18 05:27 - 2014-01-23 21:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-12-18 05:27 - 2013-07-25 03:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-12-18 05:24 - 2015-11-03 13:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-18 05:24 - 2014-08-01 06:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-12-18 05:20 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-12-18 05:20 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-12-18 05:20 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-12-18 05:20 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-12-18 05:16 - 2014-06-06 04:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-12-18 05:14 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-12-18 05:13 - 2015-10-01 11:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-12-18 05:01 - 2014-06-18 17:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-12-18 05:01 - 2014-06-18 17:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-12-18 05:01 - 2014-06-18 17:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-12-18 04:47 - 2012-12-07 07:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-12-18 04:47 - 2012-12-07 07:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-12-18 04:47 - 2012-12-07 05:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-12-18 04:37 - 2014-12-11 12:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-12-18 00:48 - 2012-09-25 17:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2015-12-18 00:48 - 2011-12-16 02:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2015-12-18 00:31 - 2015-09-23 08:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-12-18 00:31 - 2015-09-23 08:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-12-18 00:28 - 2015-11-05 14:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-18 00:28 - 2015-11-05 04:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-18 00:28 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-12-18 00:27 - 2014-07-16 20:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-12-18 00:27 - 2014-07-16 20:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-12-18 00:27 - 2014-07-16 20:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-12-18 00:27 - 2014-07-16 20:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-12-18 00:27 - 2014-07-16 20:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-12-18 00:27 - 2014-07-16 20:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-12-18 00:27 - 2012-04-25 23:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2015-12-18 00:27 - 2012-04-25 23:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2015-12-18 00:23 - 2015-09-18 12:47 - 00023384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-12-18 00:23 - 2015-09-18 12:44 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-12-18 00:23 - 2015-09-18 12:35 - 00999936 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-12-18 00:23 - 2015-06-03 15:17 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-12-18 00:23 - 2015-06-03 15:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-12-18 00:23 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-12-18 00:23 - 2013-10-11 21:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-12-18 00:23 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-12-18 00:20 - 2015-02-02 22:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-12-17 23:39 - 2015-06-25 04:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-12-17 23:39 - 2015-06-25 04:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-12-17 23:39 - 2015-06-25 04:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-12-17 23:39 - 2015-02-18 02:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-12-17 23:38 - 2013-08-04 20:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-12-17 23:37 - 2013-07-25 20:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-12-17 23:36 - 2014-10-29 20:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-12-17 23:31 - 2012-11-22 21:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2015-12-17 22:53 - 2015-12-17 22:54 - 00000000 ____D C:\b20138dfe1dda6a3b55664
2015-12-17 22:45 - 2011-11-17 00:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2015-12-17 22:24 - 2012-03-17 02:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2015-12-17 22:15 - 2012-10-09 12:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-12-17 22:15 - 2012-10-09 12:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-12-17 21:45 - 2012-05-13 23:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-12-17 21:16 - 2012-01-04 03:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-12-17 20:48 - 2015-07-14 21:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-12-17 20:43 - 2015-04-29 13:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-12-17 20:43 - 2015-04-29 13:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-12-17 20:43 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-12-17 20:43 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-12-17 20:43 - 2015-04-29 13:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-12-17 20:43 - 2014-12-05 22:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-12-17 20:43 - 2012-10-03 11:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-12-17 20:43 - 2012-10-03 11:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-12-17 20:42 - 2014-12-18 20:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-12-17 20:42 - 2014-01-28 21:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-12-17 20:42 - 2013-07-12 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-12-17 17:59 - 2013-06-25 17:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-12-17 17:59 - 2012-11-28 17:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2015-12-17 17:59 - 2012-11-28 17:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2015-12-17 17:58 - 2012-11-28 17:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2015-12-17 17:56 - 2015-02-02 22:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-12-17 17:56 - 2015-02-02 22:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-12-17 17:56 - 2015-02-02 22:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-12-17 17:56 - 2015-02-02 22:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-12-17 17:55 - 2015-02-02 22:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-12-17 17:55 - 2014-10-31 17:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-12-17 17:55 - 2014-06-27 19:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-12-17 17:55 - 2014-06-27 19:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-12-17 17:54 - 2015-02-02 22:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-12-17 17:54 - 2015-02-02 22:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-12-17 17:54 - 2015-02-02 22:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-12-17 17:46 - 2014-10-02 20:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-12-17 06:45 - 2013-11-26 20:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-12-17 06:37 - 2014-10-13 20:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-12-17 06:30 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-12-17 06:30 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-12-17 06:30 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-12-17 06:30 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-12-17 06:30 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-12-17 06:27 - 2015-04-24 12:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-12-17 06:27 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-12-16 22:46 - 2012-02-17 00:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2015-12-16 22:45 - 2012-02-16 23:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2015-12-15 22:51 - 2015-12-15 22:51 - 00000000 ____D C:\Windows\Temp538DAC00-A74D-4F12-17FB-B8EB2C7E298D-Signatures
2015-12-14 23:57 - 2015-12-14 23:57 - 00000000 ____D C:\Users\Sue\AppData\Roaming\AVG
2015-12-14 23:55 - 2015-12-14 23:55 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-14 23:54 - 2015-12-14 23:54 - 00000000 ____D C:\Users\Sue\AppData\Roaming\TuneUp Software
2015-12-14 23:54 - 2015-12-14 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-12-14 23:45 - 2015-12-14 23:45 - 00000000 ___HD C:\$AVG
2015-12-14 23:33 - 2015-12-19 11:02 - 00000000 ____D C:\ProgramData\MFAData
2015-12-14 23:33 - 2015-12-14 23:33 - 00000000 ____D C:\Users\Sue\AppData\Local\MFAData
2015-12-14 23:31 - 2015-12-14 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2015-12-14 23:24 - 2015-12-14 23:45 - 00000000 ____D C:\ProgramData\Avg
2015-12-14 23:24 - 2015-12-14 23:39 - 00000000 ____D C:\Program Files\AVG
2015-12-14 23:21 - 2015-12-14 23:57 - 00000000 ____D C:\Users\Sue\AppData\Local\Avg
2015-12-14 23:21 - 2015-12-14 23:29 - 00000000 ____D C:\Users\Sue\AppData\Local\AvgSetupLog
2015-12-14 22:34 - 2015-12-14 22:34 - 00000000 ____D C:\Windows\Temp60135627-FB3C-F4AC-2CCD-4964BB1165C7-Signatures
2015-12-14 21:05 - 2015-12-14 21:05 - 00000000 ____D C:\Windows\Temp0ABEFD6F-A169-B8E3-DB98-4674184C94B6-Signatures
2015-12-14 21:03 - 2015-12-14 21:03 - 00000000 ____D C:\Program Files\Microsoft CAPICOM 2.1.0.2
2015-12-14 20:32 - 2015-12-14 20:32 - 00000000 ____D C:\Users\Heather\AppData\Local\Logitech® Webcam Software
2015-12-14 20:31 - 2015-12-14 20:31 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Adobe
2015-12-14 20:30 - 2015-12-19 05:24 - 00109280 _____ C:\Users\Heather\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-14 20:30 - 2015-12-14 20:30 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Epson
2015-12-14 20:29 - 2015-12-14 20:29 - 00001413 _____ C:\Users\Heather\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-14 20:28 - 2015-12-14 20:29 - 00000000 ____D C:\Users\Heather
2015-12-14 20:28 - 2015-12-14 20:28 - 00000020 ___SH C:\Users\Heather\ntuser.ini
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\My Documents
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Videos
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Pictures
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Music
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 ____D C:\Users\Heather\AppData\Local\VirtualStore
2015-12-14 20:28 - 2011-01-02 01:38 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Mozilla
2015-12-14 20:28 - 2010-12-01 23:39 - 00000000 ____D C:\Users\Heather\Documents\Visual Studio 2008
2015-12-14 20:28 - 2010-12-01 23:37 - 00000000 ____D C:\Users\Heather\AppData\Local\Microsoft Help
2015-12-14 20:28 - 2010-12-01 00:02 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Macromedia
2015-12-14 20:28 - 2009-07-14 02:49 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Media Center Programs
2015-12-13 18:00 - 2011-03-11 00:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-12-13 18:00 - 2011-03-11 00:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-12-13 18:00 - 2011-03-11 00:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-12-13 18:00 - 2011-03-11 00:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-12-13 18:00 - 2011-03-11 00:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-12-13 18:00 - 2011-03-11 00:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-12-13 18:00 - 2011-03-10 23:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-12-13 17:37 - 2015-12-13 17:43 - 00000000 ____D C:\2358cb107be334e1dd8b5d10
2015-12-13 17:29 - 2015-12-13 17:29 - 00000000 ____D C:\Users\Sue\AppData\Local\Logitech® Webcam Software
2015-12-13 17:06 - 2015-12-13 17:07 - 00000000 ____D C:\037b0a5567cbb37b8153cf05
2015-12-13 17:01 - 2015-12-17 02:11 - 00001945 _____ C:\Windows\epplauncher.mif
2015-12-13 17:00 - 2015-12-17 02:11 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-12-13 16:58 - 2015-12-17 02:07 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-12-13 16:37 - 2015-12-13 16:37 - 00000000 ____D C:\Windows\system32\SPReview
2015-12-13 16:36 - 2015-12-13 16:36 - 00000000 ____D C:\Windows\system32\EventProviders
2015-12-13 15:04 - 2015-12-13 15:08 - 00000000 ____D C:\Windows\system32\MRT
2015-12-13 14:52 - 2015-12-13 15:00 - 00001908 _____ C:\Windows\diagwrn.xml
2015-12-13 14:52 - 2015-12-13 15:00 - 00001908 _____ C:\Windows\diagerr.xml
2015-12-13 14:52 - 2015-12-13 15:00 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-13 14:35 - 2015-12-13 14:35 - 00000000 ____D C:\ESD
2015-12-13 14:10 - 2015-12-13 14:10 - 00000000 ___HD C:\$Windows.~WS
2015-12-13 14:07 - 2015-12-13 14:07 - 00000000 ____D C:\Users\Sue\Documents\SightSpeed Recordings
2015-12-13 14:01 - 2015-12-13 14:01 - 00000000 _____ C:\Windows\EEventManager.INI
2015-12-13 11:32 - 2012-05-31 23:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2015-12-13 11:32 - 2012-05-31 23:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2015-12-13 11:32 - 2012-05-31 23:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2015-12-13 11:32 - 2012-05-31 23:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2015-12-13 11:32 - 2012-05-31 23:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2015-12-13 11:32 - 2012-05-31 23:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2015-11-20 08:05 - 2015-11-20 08:05 - 00031664 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsshimx.sys
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-12-19 14:25 - 2009-07-13 21:37 - 00000000 ____D C:\Windows
2015-12-19 14:17 - 2010-12-11 10:49 - 00000000 ____D C:\Users\Sue\AppData\Local\Google
2015-12-19 14:16 - 2009-07-13 23:34 - 00014160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-19 14:16 - 2009-07-13 23:34 - 00014160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-19 13:55 - 2010-12-04 17:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-19 12:34 - 2010-11-27 18:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-19 12:34 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-19 10:56 - 2009-07-13 23:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-19 09:55 - 2009-07-13 23:33 - 00406024 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-19 09:17 - 2010-12-01 00:04 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-19 09:15 - 2010-12-01 00:02 - 00000000 ____D C:\ProgramData\Adobe
2015-12-19 09:15 - 2010-12-01 00:02 - 00000000 ____D C:\Program Files\Adobe
2015-12-19 09:07 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\rescache
2015-12-19 06:08 - 2010-11-28 19:05 - 00000000 ____D C:\Users\Sue\AppData\Local\Deployment
2015-12-19 04:14 - 2010-11-27 19:04 - 00905808 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-19 04:14 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\inf
2015-12-19 03:58 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-12-19 03:31 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\AppCompat
2015-12-18 23:12 - 2010-11-28 18:51 - 00109280 _____ C:\Users\Sue\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-18 21:53 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\tracing
2015-12-18 21:53 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-12-18 21:52 - 2009-07-14 02:50 - 00000000 ____D C:\Program Files\Windows Journal
2015-12-18 21:52 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Dism
2015-12-18 04:05 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\inetsrv
2015-12-17 23:06 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Defender
2015-12-16 09:22 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\Tencent
2015-12-16 09:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\microsoft908
2015-12-16 08:43 - 2011-07-16 19:08 - 00000000 ____D C:\Program Files\browser
2015-12-13 20:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-12-13 17:26 - 2009-07-13 23:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\DVD Maker
2015-12-13 17:10 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\servicing
2015-12-13 17:10 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\sysprep
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Setup
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\oobe
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\migwiz
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\manifeststore
2015-12-13 16:51 - 2009-07-13 21:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2015-12-13 16:35 - 2010-11-27 18:47 - 00000000 ____D C:\Program Files\Microsoft Office
2015-12-13 16:07 - 2010-11-28 15:00 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-12-13 16:05 - 2010-11-28 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-12-13 15:57 - 2010-11-28 15:07 - 00000000 ____D C:\Windows\system32\logishrd
2015-12-13 15:22 - 2009-07-13 21:04 - 00000478 _____ C:\Windows\win.ini
2015-12-13 14:59 - 2010-11-27 18:37 - 00000000 ____D C:\Windows\Panther
2015-12-13 13:49 - 2006-05-12 14:16 - 00000000 ____D C:\DownLoad
2015-12-13 12:35 - 2011-01-01 18:46 - 00000000 ____D C:\Program Files\Archive_Setup
2015-12-13 12:18 - 2010-11-27 18:19 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2015-12-13 12:17 - 2010-11-27 19:11 - 00000028 _____ C:\Windows\ODBC.INI
2015-12-13 11:59 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\MSBuild
2015-12-13 11:47 - 2010-11-27 18:17 - 00000000 ____D C:\Program Files\Microsoft Web Designer Tools
2015-12-13 11:34 - 2011-04-02 08:26 - 00000000 ____D C:\Windows\Minidump
2015-12-13 11:34 - 2009-07-13 23:52 - 00000000 ____D C:\Windows\Downloaded Program Files
2015-12-13 11:12 - 2009-07-13 21:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-12-13 10:59 - 2010-11-28 19:37 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-12-13 10:21 - 2010-11-30 21:32 - 00000000 ____D C:\Program Files\Telerik
2015-12-13 09:46 - 2010-11-28 14:53 - 00000000 ____D C:\ProgramData\Skype
2015-12-08 22:39 - 2010-11-27 17:53 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-11-23 19:09 - 2010-12-04 09:56 - 137798368 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 
==================== Files in the root of some directories =======
 
2010-11-28 14:55 - 2010-11-28 14:55 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
 
Some files in TEMP:
====================
C:\Users\Sue\AppData\Local\Temp\AMPing.exe
C:\Users\Sue\AppData\Local\Temp\InstallManager_BAB_BAB.exe
C:\Users\Sue\AppData\Local\Temp\_isF5AF.exe
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-12-19 00:14
 
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x86) Version:19-12-2015
Ran by Sue (2015-12-19 14:32:16)
Running from C:\Users\Sue\Desktop
Microsoft Windows 7 Professional  Service Pack 1 (X86) (2010-11-27 22:36:08)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-3100087442-411317864-4144688174-500 - Administrator - Disabled)
Guest (S-1-5-21-3100087442-411317864-4144688174-501 - Limited - Disabled)
Heather (S-1-5-21-3100087442-411317864-4144688174-1004 - Limited - Enabled) => C:\Users\Heather
Sue (S-1-5-21-3100087442-411317864-4144688174-1000 - Administrator - Enabled) => C:\Users\Sue
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader X (10.1.16) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
AVG (HKLM\...\AvgZen) (Version: 1.22.1.40089 - AVG Technologies)
AVG (Version: 16.12.7303 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4489 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.12.7303 - AVG Technologies)
AVG Zen (Version: 1.22.1 - AVG Technologies) Hidden
Bing Rewards Client Installer (Version: 16.0.345.0 - Microsoft Corporation) Hidden
CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden
C-Major Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 42xx - SigmaTel)
Dell Driver Download Manager (HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\f031ef6ac137efc5) (Version: 2.1.0.0 - Dell Inc.)
Driver Detective (HKLM\...\{4640FDE1-B83A-4376-84ED-86F86BEE2D41}) (Version: 8.0.1 - PC Drivers HeadQuarters)
Epson Event Manager (HKLM\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
EPSON NX420 Series Printer Uninstall (HKLM\...\EPSON NX420 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.2 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.2a - SEIKO EPSON CORPORATION)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FMW 1 (Version: 1.32.2 - AVG Technologies) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden
Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7240) - Logitech Inc..)
Logitech Webcam Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Microsoft .NET Compact Framework 2.0 SP2 (HKLM\...\{EDDF99D9-9FE3-4871-A7DB-D1522C51EE9A}) (Version: 2.0.7045 - Microsoft Corporation)
Microsoft .NET Compact Framework 3.5 (HKLM\...\{291B3A3B-F808-45B8-8113-DF232FCB6C82}) (Version: 3.5.7283 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET 2.0 AJAX Extensions 1.0 (HKLM\...\{082BDF7B-4810-4599-BF0D-E3AC44EC8524}) (Version: 1.0.61025 - Microsoft Corporation)
Microsoft Device Emulator version 3.0 - ENU (HKLM\...\{B32E7732-B2FB-3FD0-81AC-6025B1104C66}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Document Explorer 2008 (HKLM\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)
Microsoft Office 2007 Service Pack 2 (SP2) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 ENU (HKLM\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 for Devices ENU (HKLM\...\{241F2BF7-69EB-42A4-9156-96B2426C7504}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.2 (HKLM\...\{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}) (Version: 1.2.0.0 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.57\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.2.183.39\goopdate.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.79\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.65\psuser.dll => No File
 
==================== Restore Points =========================
 
19-12-2015 10:30:17 Windows Update
19-12-2015 12:19:38 Windows Update
19-12-2015 13:37:44 Windows Update
19-12-2015 14:00:46 Removed Microsoft Silverlight
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:04 - 2009-06-10 16:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {4A1EE944-9F4A-4E90-A454-AF289152D06E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {66EDCE08-470F-4B43-A574-BBBDAF53CE02} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-19] (Google Inc.)
Task: {A56A7429-C978-4773-972D-51FF9AEC9922} - System32\Tasks\{2302C6AF-3FD7-470A-B197-5F267533F9E1} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {B3CCB1A3-9F50-42B6-8E3C-734676F2FF2D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {C1B025F3-3021-437A-81B8-FC8BFB988EEF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {E917AA90-B4CF-4B7A-AFCA-AFD3C0AA1B66} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-19] (Google Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
==================== Loaded Modules (Whitelisted) ==============
 
2010-05-07 18:35 - 2010-05-07 18:35 - 02143576 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtCore4.dll
2010-05-07 18:35 - 2010-05-07 18:35 - 07954776 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtGui4.dll
2010-05-07 18:36 - 2010-05-07 18:36 - 00340824 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtXml4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00027480 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00126808 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-12-14 23:24 - 2015-12-14 23:22 - 40500224 _____ () C:\Program Files\AVG\UiDll\2171\libcef.dll
2009-04-09 18:04 - 2009-04-09 18:04 - 02141008 _____ () C:\Program Files\Logitech\Vid HD\QtCore4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 07704400 _____ () C:\Program Files\Logitech\Vid HD\QtGui4.dll
2009-04-22 16:53 - 2009-04-22 16:53 - 00969040 _____ () C:\Program Files\Logitech\Vid HD\QtNetwork4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00475472 _____ () C:\Program Files\Logitech\Vid HD\QtOpenGL4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00363856 _____ () C:\Program Files\Logitech\Vid HD\QtXml4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00200016 _____ () C:\Program Files\Logitech\Vid HD\QtSql4.dll
2010-10-29 15:01 - 2010-10-29 15:01 - 00027472 _____ () C:\Program Files\Logitech\Vid HD\SDL.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 11311952 _____ () C:\Program Files\Logitech\Vid HD\QtWebKit4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00291664 _____ () C:\Program Files\Logitech\Vid HD\phonon4.dll
2010-10-29 15:02 - 2010-10-29 15:02 - 00751616 _____ () C:\Program Files\Logitech\Vid HD\vpxmd.dll
2009-03-03 17:18 - 2009-03-03 17:18 - 00029008 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qgif4.dll
2009-03-03 17:18 - 2009-03-03 17:18 - 00035152 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qico4.dll
2009-03-03 17:18 - 2009-03-03 17:18 - 00138064 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll
2011-11-11 14:07 - 2011-11-11 14:07 - 00265240 _____ () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2011-11-11 14:09 - 2011-11-11 14:09 - 00336408 _____ () C:\Program Files\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
 
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 10.0.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{BA01D8BC-7E39-4A74-BBAE-B1C5E0CB22F5}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{BBCE40F2-A0E9-4CC3-93D4-428DA092E1DB}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{86B3D7F4-BF5C-49BC-A893-A5EDA0CE7181}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{DB3C333A-E046-4628-AC34-EDED7EF8D81B}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{E1E570E1-E357-41CF-88E2-4138FAD7D965}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe
FirewallRules: [{A6B314DD-715C-4AAB-A0D9-A5818F586E2E}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe
FirewallRules: [TCP Query User{E0A20793-7C99-4716-B761-4EF9E6E30FC1}C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe] => (Allow) C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe
FirewallRules: [UDP Query User{1DE90FA4-5C56-4944-81A1-BDCF6E759AE8}C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe] => (Allow) C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe
FirewallRules: [TCP Query User{F91C35B2-DDC4-4673-8104-FDE7AF8A3629}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{3544D40D-6F98-42FC-A69F-08637E549836}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe
FirewallRules: [{B3A59747-B1E0-4AE7-9221-16424C40A280}] => (Allow) C:\Program Files\Common Files\Tencent\QQDownload\107\Tencentdl.exe
FirewallRules: [{57C6C0C2-F414-4B5A-8E13-75C471508BCE}] => (Allow) C:\Program Files\Common Files\Tencent\QQDownload\107\Tencentdl.exe
FirewallRules: [{7D9D1B5A-5DEF-44CB-8F46-B69ECB505272}] => (Allow) C:\Program Files\Tencent\QQ\Bin\QQ.exe
FirewallRules: [{8DF12878-E3BF-47B2-958B-16CFD857BC61}] => (Allow) C:\Program Files\Tencent\QQ\Bin\QQ.exe
FirewallRules: [{F3B6BC67-1A51-46B6-B34D-BF6FAE63BC1E}] => (Allow) C:\Program Files\Tencent\QQ\Bin\auclt.exe
FirewallRules: [{E1B75C40-12D0-46F6-BBFB-3909B6701EBD}] => (Allow) C:\Program Files\Tencent\QQ\Bin\auclt.exe
FirewallRules: [{02B8C847-754D-4043-92B6-52D2200C04D9}] => (Allow) C:\Program Files\Tencent\QQ\Bin\SetupEx\QQSetupEx.exe
FirewallRules: [{247EC0AE-9FEE-4A90-9502-E386EBAEFF45}] => (Allow) C:\Program Files\Tencent\QQ\Bin\SetupEx\QQSetupEx.exe
FirewallRules: [TCP Query User{86A38E93-A8F2-4D2F-8BAF-04A1A922E1BB}C:\program files\tencent\qq\bin\qq.exe] => (Block) C:\program files\tencent\qq\bin\qq.exe
FirewallRules: [UDP Query User{A0C070DD-D3BA-40BE-84BC-0AAC22F4D6B1}C:\program files\tencent\qq\bin\qq.exe] => (Block) C:\program files\tencent\qq\bin\qq.exe
FirewallRules: [TCP Query User{328C348D-E2E2-42BD-B2DE-AB3F43DBB620}C:\program files\tencent\qq\bin\auclt.exe] => (Allow) C:\program files\tencent\qq\bin\auclt.exe
FirewallRules: [UDP Query User{3F9B87A1-5181-4A02-BF66-F7C6209B2F36}C:\program files\tencent\qq\bin\auclt.exe] => (Allow) C:\program files\tencent\qq\bin\auclt.exe
FirewallRules: [{ACA1EC91-0292-4E9D-85D6-DB04081513E2}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{F47CC94B-1D8A-468B-A80A-2781EB9E44BA}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{09C9F009-0C6A-4DA3-838A-9FB62095C881}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
FirewallRules: [{CD6BA82D-8309-43DB-B170-5874FA9D74AD}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
FirewallRules: [{DAFCB248-3847-48E3-B937-240F44CA207B}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
FirewallRules: [{A9C9DC52-5F9F-43A9-9AB0-F08D50F4ACE6}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
FirewallRules: [{0FF5E8B8-44BC-44CE-98A2-782D7E9451AF}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{B4D0D458-0854-4504-AA5E-C73A5D1E3791}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{D4D6A692-44FB-4519-B3CD-BADE4EE1F63C}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
FirewallRules: [{F87BBB49-34DE-4094-A69E-7977C84F98EF}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
FirewallRules: [{FC91358F-4E3A-4654-9AB9-09A1A8352F84}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{5A7CDB30-7416-4DD9-A101-42455FAA14F8}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (12/19/2015 02:03:28 PM) (Source: MsiInstaller) (EventID: 11402) (User: Sue-PC)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.
 
Error: (12/19/2015 01:55:34 PM) (Source: MsiInstaller) (EventID: 1023) (User: Sue-PC)
Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.41105.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Users\Sue\AppData\Local\Temp\SilverlightMSI.log.
 
Error: (12/19/2015 01:55:15 PM) (Source: MsiInstaller) (EventID: 11402) (User: Sue-PC)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.
 
Error: (12/19/2015 01:41:42 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.41105.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\SilverlightMSI.log.
 
Error: (12/19/2015 01:41:31 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.
 
Error: (12/19/2015 12:36:28 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.41105.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\SilverlightMSI.log.
 
Error: (12/19/2015 12:36:22 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.
 
Error: (12/19/2015 12:35:24 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Product: Microsoft Office Enterprise 2007 - Update 'Microsoft Office 2007 Service Pack 3 (SP3)' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
 
Error: (12/19/2015 12:30:08 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Office Enterprise 2007 -- Error 1402.Setup cannot open the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE.  Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance.  For information about how to contact PSS, seePSS10R.CHM.
 
Error: (12/19/2015 12:22:19 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Product: Microsoft Office Enterprise 2007 - Update 'Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
 
 
System errors:
=============
Error: (12/19/2015 01:55:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Silverlight (KB3106614).
 
Error: (12/19/2015 12:40:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Silverlight (KB3106614).
 
Error: (12/19/2015 12:35:30 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: The 2007 Microsoft Office Suite Service Pack 3 (SP3).
 
Error: (12/19/2015 12:22:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft Office Outlook 2007 (KB2687404).
 
Error: (12/19/2015 11:07:34 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Update service hung on starting.
 
Error: (12/19/2015 11:04:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
 
Error: (12/19/2015 11:00:27 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The AVGIDSAgent service hung on starting.
 
Error: (12/19/2015 10:45:58 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: The AVGIDSAgent service did not shut down properly after receiving a preshutdown control.
 
Error: (12/19/2015 10:45:25 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgwd service.
 
Error: (12/19/2015 10:44:52 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Silverlight (KB3106614).
 
 
==================== Memory info =========================== 
 
Processor: Intel® Pentium® M processor 1.86GHz
Percentage of memory in use: 84%
Total physical RAM: 1023.43 MB
Available physical RAM: 158.79 MB
Total Virtual: 2950.6 MB
Available Virtual: 556.66 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:55.82 GB) (Free:16.65 GB) NTFS ==>[drive with boot components (obtained from BCD)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 879D879D)
Partition 1: (Not Active) - (Size=71 MB) - (Type=DE)
Partition 2: (Active) - (Size=55.8 GB) - (Type=07 NTFS)
 
==================== End of Addition.txt ============================

 


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,024 posts
  • MVP
Download the attached fixlist.txt to the same location as FRST
Run FRST and press Fix
A fix log will be generated please post that.
 
 
Uninstall Microsoft Security Essentials If you have AVG you don't want a second anti-virus.
 
 
 

Download : ADWCleaner to your desktop.  Make sure you get the correct Download button.  Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @BleepingComputer
 
NOTE: If using Internet Explorer and you get an alert that stops the program downloading, click on the warning and allow the download to complete.
 
Close  all programs, pause your anti-virus and run AdwCleaner (Vista or Win 7 => right click and Run As Administrator).
 
scan-results.jpg
 
Click on Scan  and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.
 
The report will be saved in the C:\AdwCleaner folder.
 
 
 
Junkware-Removal-Tool
 
Please download Junkware Removal Tool to your desktop.  Make sure you get the correct Download button.  Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @Author's site
  • Pause your anti-virus.  Close all browsers.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  •  
     
     
     

    Run FRST again, check the Additions box and then Scan.  You will get two logs.  Post them both.
     
    The problem with Silverlight is caused by a permission issue in the registry per the event logs:
     
     
    Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION. 

     

     

    There are some other permission issues so let's try Windows Repair All In One.

     

     
     
    Download it and save it then run it.
     
    You can skip to step 4 or 5 where it gives you the same picture as in the above link.
     
    Make sure only the following option is  checked before hitting Start:
     
    Reset Registry Permissions
     
     
     
    Reboot when done   Then see if you have more luck with Silverlight.
     
     
     

     
    Right click on (My) Computer and select Manage (Continue) Then click on the arrow in front of Event Viewer. Next Click on the arrow in front of Windows Logs Right click on System and Clear Log, Clear. Repeat for Application.
     
    Reboot. 
     
    Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).
    sfc  /scannow
     
    (This will check your critical system files. Does this finish without complaint?  IF it says it couldn't fix everything then:
     
    Copy the next two lines:
     
    findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 
    notepad \windows\logs\cbs\junk.txt 
     
    Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.
    Hit Enter. Copy and paste the text from notepad or if it is too big, just attach the file.)
     
     
     
    In either event do:
     
    1. Please download the Event Viewer Tool by Vino Rosso
    and save it to your Desktop:
    2. Right-click VEW.exe and Run AS Administrator
    3. Under 'Select log to query', select:
     
    * System
    4. Under 'Select type to list', select:
    * Error
    * Warning
     
     
    Then use the 'Number of events' as follows:
     
     
    1. Click the radio button for 'Number of events'
    Type 20 in the 1 to 20 box
    Then click the Run button.
    Notepad will open with the output log.
     
     
    Please post the Output log in your next reply then repeat but select Application.
     
     (Second time you run vew it will overwrite the first log so copy it to a reply or rename it first.)
     

     


    • 0

    #3
    cgnolte

    cgnolte

      Member

    • Topic Starter
    • Member
    • PipPip
    • 23 posts

    Thank you for the detailed instructions.  I've made some progress.

     

    Here is the Fixlog:

    Fix result of Farbar Recovery Scan Tool (x86) Version:19-12-2015
    Ran by Sue (2015-12-20 08:11:12) Run:1
    Running from C:\Users\Sue\Desktop
    Loaded Profiles: Sue (Available Profiles: Sue & Heather)
    Boot Mode: Normal
     
    ==============================================
     
    fixlist content:
    *****************
    HKLM\...\Run: [87] => C:\ProgramData\microsoft908\908.exe [124224 2011-04-22] (DT Soft Ltd)
    GroupPolicyScripts: Restriction <======= ATTENTION
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll [No File]
    FF Plugin: @qq.com/npqscall,version=1.0.0 -> %commonprogramfiles%\tencent\NPQSCALL\npqscall.dll [No File]
    2015-12-16 09:22 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\Tencent
    2015-12-16 09:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\microsoft908
    2015-12-16 08:43 - 2011-07-16 19:08 - 00000000 ____D C:\Program Files\browser
    2015-12-13 20:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.57\psuser.dll => No File
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.2.183.39\goopdate.dll => No File
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.79\psuser.dll => No File
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
    CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.65\psuser.dll => No File
    Task: {B3CCB1A3-9F50-42B6-8E3C-734676F2FF2D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
    Task: {C1B025F3-3021-437A-81B8-FC8BFB988EEF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
    FirewallRules: [{B3A59747-B1E0-4AE7-9221-16424C40A280}] => (Allow) C:\Program Files\Common Files\Tencent\QQDownload\107\Tencentdl.exe
    FirewallRules: [{57C6C0C2-F414-4B5A-8E13-75C471508BCE}] => (Allow) C:\Program Files\Common Files\Tencent\QQDownload\107\Tencentdl.exe
    FirewallRules: [{7D9D1B5A-5DEF-44CB-8F46-B69ECB505272}] => (Allow) C:\Program Files\Tencent\QQ\Bin\QQ.exe
    FirewallRules: [{8DF12878-E3BF-47B2-958B-16CFD857BC61}] => (Allow) C:\Program Files\Tencent\QQ\Bin\QQ.exe
    FirewallRules: [{F3B6BC67-1A51-46B6-B34D-BF6FAE63BC1E}] => (Allow) C:\Program Files\Tencent\QQ\Bin\auclt.exe
    FirewallRules: [{E1B75C40-12D0-46F6-BBFB-3909B6701EBD}] => (Allow) C:\Program Files\Tencent\QQ\Bin\auclt.exe
    FirewallRules: [{02B8C847-754D-4043-92B6-52D2200C04D9}] => (Allow) C:\Program Files\Tencent\QQ\Bin\SetupEx\QQSetupEx.exe
    FirewallRules: [{247EC0AE-9FEE-4A90-9502-E386EBAEFF45}] => (Allow) C:\Program Files\Tencent\QQ\Bin\SetupEx\QQSetupEx.exe
    FirewallRules: [TCP Query User{86A38E93-A8F2-4D2F-8BAF-04A1A922E1BB}C:\program files\tencent\qq\bin\qq.exe] => (Block) C:\program files\tencent\qq\bin\qq.exe
    FirewallRules: [UDP Query User{A0C070DD-D3BA-40BE-84BC-0AAC22F4D6B1}C:\program files\tencent\qq\bin\qq.exe] => (Block) C:\program files\tencent\qq\bin\qq.exe
    FirewallRules: [TCP Query User{328C348D-E2E2-42BD-B2DE-AB3F43DBB620}C:\program files\tencent\qq\bin\auclt.exe] => (Allow) C:\program files\tencent\qq\bin\auclt.exe
    FirewallRules: [UDP Query User{3F9B87A1-5181-4A02-BF66-F7C6209B2F36}C:\program files\tencent\qq\bin\auclt.exe] => (Allow) C:\program files\tencent\qq\bin\auclt.exe
    %ALLUSERSPROFILE%\Desktop\Engine.dll
    %USERPROFILE%\Start Menu\Programs\Èí¼þ982
    %ALLUSERSPROFILE%\Application Data\Adobe\something.ini
    %ALLUSERSPROFILE%\Application Data\DAEMON Tools Lite\my908.dll
    %ALLUSERSPROFILE%\Application Data\microsoft908\Engine.dll
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internat Explorer.rnk225
    CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\.TEP"
    CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\ÈͼÞ982"
    EmptyTemp:
     
     
     
     
     
    *****************
     
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\87 => value removed successfully.
    C:\Windows\system32\GroupPolicy\Machine => moved successfully
    C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
    "HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0" => key removed successfully.
    "HKLM\Software\MozillaPlugins\@qq.com/npqscall,version=1.0.0" => key removed successfully.
    C:\ProgramData\Tencent => moved successfully
    C:\ProgramData\microsoft908 => moved successfully
    C:\Program Files\browser => moved successfully
    C:\ProgramData\DAEMON Tools Lite => moved successfully
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}" => key removed successfully.
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}" => key removed successfully.
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}" => key removed successfully.
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}" => key removed successfully.
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}" => key removed successfully.
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}" => key removed successfully.
    "HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}" => key removed successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B3CCB1A3-9F50-42B6-8E3C-734676F2FF2D}" => key removed successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3CCB1A3-9F50-42B6-8E3C-734676F2FF2D}" => key removed successfully.
    C:\Windows\System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => moved successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => key removed successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C1B025F3-3021-437A-81B8-FC8BFB988EEF}" => key removed successfully.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C1B025F3-3021-437A-81B8-FC8BFB988EEF}" => key removed successfully.
    C:\Windows\System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => moved successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => key removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B3A59747-B1E0-4AE7-9221-16424C40A280} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{57C6C0C2-F414-4B5A-8E13-75C471508BCE} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7D9D1B5A-5DEF-44CB-8F46-B69ECB505272} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8DF12878-E3BF-47B2-958B-16CFD857BC61} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F3B6BC67-1A51-46B6-B34D-BF6FAE63BC1E} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E1B75C40-12D0-46F6-BBFB-3909B6701EBD} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{02B8C847-754D-4043-92B6-52D2200C04D9} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{247EC0AE-9FEE-4A90-9502-E386EBAEFF45} => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{86A38E93-A8F2-4D2F-8BAF-04A1A922E1BB}C:\program files\tencent\qq\bin\qq.exe => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A0C070DD-D3BA-40BE-84BC-0AAC22F4D6B1}C:\program files\tencent\qq\bin\qq.exe => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{328C348D-E2E2-42BD-B2DE-AB3F43DBB620}C:\program files\tencent\qq\bin\auclt.exe => value removed successfully.
    HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3F9B87A1-5181-4A02-BF66-F7C6209B2F36}C:\program files\tencent\qq\bin\auclt.exe => value removed successfully.
    %ALLUSERSPROFILE%\Desktop\Engine.dll => Error: No automatic fix found for this entry.
    %USERPROFILE%\Start Menu\Programs\Èí¼þ982 => Error: No automatic fix found for this entry.
    %ALLUSERSPROFILE%\Application Data\Adobe\something.ini => Error: No automatic fix found for this entry.
    %ALLUSERSPROFILE%\Application Data\DAEMON Tools Lite\my908.dll => Error: No automatic fix found for this entry.
    %ALLUSERSPROFILE%\Application Data\microsoft908\Engine.dll => Error: No automatic fix found for this entry.
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internat Explorer.rnk225 => Error: No automatic fix found for this entry.
     
    =========  reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\.TEP" =========
     
    Permanently delete the registry key HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\.TEP (Yes/No)? The operation completed successfully.
     
     
    ========= End of CMD: =========
     
     
    =========  reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\ÈͼÞ982" =========
     
    Permanently delete the registry key HKEY_LOCAL_MACHINE\SOFTWARE\EI�_982 (Yes/No)? ERROR: The system was unable to find the specified registry key or value.
     
    ========= End of CMD: =========
     
    EmptyTemp: => 1.1 GB temporary data Removed.
     
     
    The system needed a reboot.
     
    ==== End of Fixlog 08:21:20 ====
     
    And then I reran a scan.  Here are the new FRST and Addition files:
    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:19-12-2015
    Ran by Sue (administrator) on SUE-PC (20-12-2015 09:36:09)
    Running from C:\Users\Sue\Desktop
    Loaded Profiles: Sue (Available Profiles: Sue & Heather)
    Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Language: English (United States)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
     
    ==================== Processes (Whitelisted) =================
     
    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
     
    (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
     
     
    ==================== Registry (Whitelisted) ===========================
     
    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
     
    HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
    HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
    HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.)
    HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3855272 2015-12-09] (AVG Technologies CZ, s.r.o.)
    HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
    Winlogon\Notify\ScCertProp: wlnotify.dll [X]
    HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\Run: [Logitech Vid] => C:\Program Files\Logitech\Vid HD\Vid.exe [5915480 2010-10-29] (Logitech Inc.)
    HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\Run: [Epson Stylus NX420(Network)] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCA.EXE [200704 2009-09-14] (SEIKO EPSON CORPORATION)
    Startup: C:\Users\Sue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2010-12-10]
    ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
     
    ==================== Internet (Whitelisted) ====================
     
    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
     
    Tcpip\Parameters: [DhcpNameServer] 10.0.1.1
    Tcpip\..\Interfaces\{5C3721BE-2B24-4D25-A5BE-4487ABA3C258}: [DhcpNameServer] 192.168.2.1
    Tcpip\..\Interfaces\{63F8297F-CB29-469E-8C36-4B12FBFF658F}: [DhcpNameServer] 10.0.1.1
     
    Internet Explorer:
    ==================
    HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?gws_rd=ssl
    HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/
    SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> DefaultScope {60BDEE68-60CD-49A9-86E6-524668AACE9C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=BABTDF&PC=BBLN&q={searchTerms}&src=IE-SearchBox
    SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> {60BDEE68-60CD-49A9-86E6-524668AACE9C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
    BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12] (Microsoft Corporation)
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-12] (Microsoft Corporation)
     
    FireFox:
    ========
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-19] (Google Inc.)
    FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-19] (Google Inc.)
    FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
     
    Chrome: 
    =======
    CHR HomePage: Default -> hxxp://intranet.epa.gov/
    CHR StartupUrls: Default -> ""
    CHR Profile: C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Slides) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-19]
    CHR Extension: (Google Docs) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-19]
    CHR Extension: (Google Drive) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-19]
    CHR Extension: (YouTube) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-19]
    CHR Extension: (Google Search) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-19]
    CHR Extension: (Google Sheets) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-19]
    CHR Extension: (Google Docs Offline) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-19]
    CHR Extension: (Sudoku for Google Chrome™) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifaabgmcffhggbfgjknkgenljelbocin [2015-12-19]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-19]
    CHR Extension: (Gmail) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-19]
     
    ==================== Services (Whitelisted) ========================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-12-10] (Adobe Systems) [File not signed]
    S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [615584 2015-12-09] (AVG Technologies CZ, s.r.o.)
    S2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3857272 2015-12-09] (AVG Technologies CZ, s.r.o.)
    R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [862632 2015-11-12] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-12-09] (AVG Technologies CZ, s.r.o.)
    R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
    S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
     
    ===================== Drivers (Whitelisted) ==========================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
    R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [255920 2015-11-06] (AVG Technologies CZ, s.r.o.)
    R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.)
    R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
    R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
    R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
    R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [193968 2015-11-06] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.)
    R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
    R3 GTIPCI21; C:\Windows\System32\DRIVERS\gtipci21.sys [88192 2006-09-14] (Texas Instruments)
    S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()
    R3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2599936 2007-08-12] (Intel® Corporation)
    R3 STAC97; C:\Windows\System32\drivers\STAC97.sys [273168 2005-03-10] (SigmaTel, Inc.)
    R3 VSTHWICH; C:\Windows\System32\DRIVERS\VSTICH3.SYS [242176 2009-07-13] (Conexant Systems, Inc.)
    U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
     
    ==================== NetSvcs (Whitelisted) ===================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
     
    ==================== One Month Created files and folders ========
     
    (If an entry is included in the fixlist, the file/folder will be moved.)
     
    2015-12-20 09:32 - 2015-12-20 09:32 - 00000702 _____ C:\Users\Sue\Desktop\JRT.txt
    2015-12-20 09:24 - 2015-12-20 09:25 - 01599336 _____ (Malwarebytes) C:\Users\Sue\Desktop\JRT.exe
    2015-12-20 08:57 - 2015-12-20 09:13 - 00000000 ____D C:\AdwCleaner
    2015-12-20 08:54 - 2015-12-20 08:55 - 01740288 _____ C:\Users\Sue\Desktop\AdwCleaner.exe
    2015-12-20 08:11 - 2015-12-20 08:21 - 00011071 _____ C:\Users\Sue\Desktop\Fixlog.txt
    2015-12-19 23:46 - 2015-12-19 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2015-12-19 19:04 - 2013-10-01 19:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
    2015-12-19 19:04 - 2013-10-01 18:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
    2015-12-19 19:03 - 2013-10-01 19:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
    2015-12-19 19:03 - 2013-10-01 19:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
    2015-12-19 19:03 - 2013-10-01 19:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
    2015-12-19 19:03 - 2013-10-01 19:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
    2015-12-19 19:03 - 2013-10-01 18:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
    2015-12-19 19:03 - 2013-10-01 18:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
    2015-12-19 19:03 - 2013-10-01 18:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
    2015-12-19 19:03 - 2013-10-01 17:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
    2015-12-19 19:03 - 2013-10-01 17:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
    2015-12-19 19:03 - 2013-10-01 15:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
    2015-12-19 18:52 - 2015-08-05 12:40 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
    2015-12-19 18:52 - 2015-08-05 11:58 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
    2015-12-19 17:22 - 2015-12-19 17:22 - 00000000 ____D C:\Users\Sue\AppData\Local\GWX
    2015-12-19 17:03 - 2012-08-23 09:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
    2015-12-19 17:02 - 2012-08-23 09:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
    2015-12-19 17:02 - 2012-08-23 08:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
    2015-12-19 17:02 - 2012-08-23 06:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
    2015-12-19 17:02 - 2012-08-23 05:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
    2015-12-19 16:34 - 2015-12-19 16:37 - 84429568 _____ (Microsoft Corporation) C:\Users\Sue\Downloads\outlookloc2007-kb2687404-fullfile-x86-glb (1).exe
    2015-12-19 16:32 - 2015-12-19 16:37 - 84429568 _____ (Microsoft Corporation) C:\Users\Sue\Downloads\outlookloc2007-kb2687404-fullfile-x86-glb.exe
    2015-12-19 15:32 - 2014-06-26 20:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2015-12-19 15:04 - 2015-11-11 15:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2015-12-19 15:04 - 2015-11-11 11:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2015-12-19 15:04 - 2015-11-11 10:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2015-12-19 15:04 - 2015-11-11 10:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2015-12-19 15:04 - 2015-11-11 10:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-12-19 15:04 - 2015-11-11 09:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2015-12-19 15:04 - 2015-11-09 19:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2015-12-19 15:04 - 2015-11-09 19:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2015-12-19 15:04 - 2015-11-09 19:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2015-12-19 15:04 - 2015-11-09 19:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2015-12-19 15:04 - 2015-11-09 19:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2015-12-19 15:04 - 2015-11-09 19:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2015-12-19 15:04 - 2015-11-09 19:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2015-12-19 15:04 - 2015-11-09 19:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2015-12-19 15:04 - 2015-11-09 19:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2015-12-19 15:04 - 2015-11-09 19:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2015-12-19 15:04 - 2015-11-09 19:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2015-12-19 15:04 - 2015-11-09 19:03 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2015-12-19 15:04 - 2015-11-09 19:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2015-12-19 15:04 - 2015-11-09 18:57 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2015-12-19 15:04 - 2015-11-09 18:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2015-12-19 15:04 - 2015-11-09 18:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2015-12-19 15:04 - 2015-11-09 18:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
    2015-12-19 15:04 - 2015-11-09 18:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2015-12-19 15:04 - 2015-11-09 18:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2015-12-19 15:04 - 2015-11-09 18:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2015-12-19 15:04 - 2015-11-09 18:36 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2015-12-19 15:04 - 2015-11-09 18:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2015-12-19 15:04 - 2015-11-09 18:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2015-12-19 15:04 - 2015-11-09 18:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2015-12-19 15:04 - 2015-11-09 18:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2015-12-19 15:03 - 2015-11-09 19:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2015-12-19 15:03 - 2015-11-09 19:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2015-12-19 15:03 - 2015-11-09 18:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2015-12-19 15:02 - 2014-07-08 20:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
    2015-12-19 15:02 - 2014-07-08 20:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
    2015-12-19 15:02 - 2014-07-08 20:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
    2015-12-19 15:02 - 2012-02-11 00:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
    2015-12-19 15:02 - 2011-02-25 00:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
    2015-12-19 15:01 - 2014-07-08 20:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
    2015-12-19 15:01 - 2014-07-08 20:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
    2015-12-19 14:57 - 2013-11-26 03:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
    2015-12-19 14:32 - 2015-12-19 14:34 - 00026827 _____ C:\Users\Sue\Desktop\Addition.txt
    2015-12-19 14:28 - 2015-12-20 09:41 - 00009698 _____ C:\Users\Sue\Desktop\FRST.txt
    2015-12-19 14:24 - 2015-12-20 09:36 - 00000000 ____D C:\FRST
    2015-12-19 14:22 - 2015-12-19 14:23 - 01721344 _____ (Farbar) C:\Users\Sue\Desktop\FRST.exe
    2015-12-19 13:49 - 2015-12-19 13:51 - 07022816 _____ (Microsoft Corporation) C:\Users\Sue\Downloads\Silverlight.exe
    2015-12-19 10:07 - 2015-12-19 10:07 - 00000000 ____D C:\Users\Heather\AppData\Local\Google
    2015-12-19 09:15 - 2015-12-19 09:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
    2015-12-19 09:15 - 2015-12-19 09:15 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
    2015-12-19 07:56 - 2015-10-08 18:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
    2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
    2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
    2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
    2015-12-19 07:56 - 2015-10-08 14:13 - 00419928 _____ C:\Windows\system32\locale.nls
    2015-12-19 06:48 - 2015-11-10 13:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2015-12-19 06:48 - 2015-11-10 13:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2015-12-19 06:48 - 2015-07-30 12:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
    2015-12-19 06:48 - 2015-02-03 21:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
    2015-12-19 06:48 - 2015-02-02 22:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2015-12-19 06:16 - 2015-12-19 06:16 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
    2015-12-19 06:16 - 2015-12-19 06:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    2015-12-19 06:12 - 2015-12-20 09:19 - 00000876 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-12-19 06:12 - 2015-12-20 08:17 - 00000880 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-12-19 06:11 - 2015-12-19 06:14 - 00000000 ____D C:\Program Files\Google
    2015-12-19 05:25 - 2015-12-19 05:25 - 00000000 ____D C:\Users\Heather\AppData\Roaming\AVG
    2015-12-19 05:24 - 2015-12-19 05:24 - 00000000 ____D C:\Users\Heather\AppData\Local\Avg
    2015-12-19 03:15 - 2015-12-19 03:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
    2015-12-19 03:15 - 2015-12-19 03:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
    2015-12-19 03:15 - 2015-12-19 03:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
    2015-12-19 03:15 - 2015-12-19 03:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
    2015-12-19 03:15 - 2015-12-19 03:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
    2015-12-19 03:15 - 2015-12-19 03:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
    2015-12-19 03:15 - 2015-12-19 03:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
    2015-12-19 03:15 - 2015-12-19 03:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
    2015-12-19 03:14 - 2015-12-19 03:14 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
    2015-12-19 03:14 - 2015-12-19 03:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
    2015-12-19 03:14 - 2015-12-19 03:14 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
    2015-12-19 03:14 - 2015-12-19 03:14 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
    2015-12-19 03:14 - 2015-12-19 03:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
    2015-12-19 03:14 - 2015-12-19 03:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
    2015-12-19 03:09 - 2015-12-19 03:09 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
    2015-12-19 03:09 - 2015-12-19 03:09 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
    2015-12-19 03:08 - 2015-12-19 03:08 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
    2015-12-18 21:52 - 2015-12-18 22:36 - 00000000 ___SD C:\Windows\system32\GWX
    2015-12-18 17:33 - 2015-02-24 22:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
    2015-12-18 09:05 - 2013-10-03 20:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
    2015-12-18 09:05 - 2013-10-03 20:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
    2015-12-18 09:04 - 2015-01-08 21:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
    2015-12-18 09:04 - 2015-01-08 21:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
    2015-12-18 09:04 - 2015-01-08 21:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
    2015-12-18 08:35 - 2015-12-18 08:35 - 00000000 ___SD C:\Windows\system32\CompatTel
    2015-12-18 08:35 - 2015-12-18 08:35 - 00000000 ____D C:\Windows\system32\appraiser
    2015-12-18 08:28 - 2015-05-08 22:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2015-12-18 08:28 - 2015-05-08 22:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2015-12-18 08:28 - 2015-05-08 22:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2015-12-18 08:28 - 2015-05-08 22:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2015-12-18 08:28 - 2015-05-08 22:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2015-12-18 08:28 - 2015-05-08 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2015-12-18 08:27 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2015-12-18 08:27 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2015-12-18 08:27 - 2015-05-08 20:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2015-12-18 08:26 - 2014-12-18 21:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
    2015-12-18 08:25 - 2013-04-25 18:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
    2015-12-18 08:23 - 2015-04-12 22:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
    2015-12-18 08:17 - 2015-10-01 12:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
    2015-12-18 08:16 - 2015-10-01 12:50 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
    2015-12-18 07:40 - 2014-04-04 21:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2015-12-18 07:40 - 2013-11-26 06:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
    2015-12-18 07:39 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
    2015-12-18 07:39 - 2014-04-04 21:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2015-12-18 07:38 - 2015-11-10 13:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
    2015-12-18 07:38 - 2015-11-10 12:40 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-12-18 07:37 - 2014-10-24 20:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
    2015-12-18 07:22 - 2013-07-02 22:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
    2015-12-18 07:22 - 2013-07-02 22:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
    2015-12-18 07:19 - 2013-09-07 21:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
    2015-12-18 07:11 - 2015-01-28 22:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
    2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
    2015-12-18 07:06 - 2012-07-04 14:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
    2015-12-18 07:05 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
    2015-12-18 07:05 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
    2015-12-18 07:00 - 2015-07-01 15:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
    2015-12-18 07:00 - 2015-07-01 15:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
    2015-12-18 07:00 - 2013-02-11 22:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
    2015-12-18 06:52 - 2015-11-11 13:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
    2015-12-18 06:52 - 2015-11-11 13:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
    2015-12-18 06:52 - 2012-11-02 00:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
    2015-12-18 06:51 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2015-12-18 06:51 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
    2015-12-18 06:51 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
    2015-12-18 06:51 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
    2015-12-18 06:50 - 2012-07-25 22:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
    2015-12-18 06:50 - 2012-07-25 22:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
    2015-12-18 06:50 - 2012-07-25 22:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
    2015-12-18 06:50 - 2012-07-25 22:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
    2015-12-18 06:50 - 2012-07-25 22:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
    2015-12-18 06:50 - 2012-07-25 21:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
    2015-12-18 06:50 - 2012-07-25 21:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
    2015-12-18 06:50 - 2012-06-02 09:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    2015-12-18 06:49 - 2015-08-27 12:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
    2015-12-18 06:49 - 2015-08-27 12:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2015-12-18 06:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
    2015-12-18 06:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
    2015-12-18 06:48 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
    2015-12-18 06:48 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
    2015-12-18 06:48 - 2013-10-29 21:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
    2015-12-18 06:48 - 2013-01-23 23:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
    2015-12-18 06:47 - 2014-11-10 21:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
    2015-12-18 06:45 - 2015-08-05 12:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
    2015-12-18 06:45 - 2011-06-15 23:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
    2015-12-18 06:44 - 2013-10-18 20:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
    2015-12-18 06:44 - 2011-02-18 00:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
    2015-12-18 06:40 - 2014-06-30 17:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
    2015-12-18 06:40 - 2014-06-15 20:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
    2015-12-18 06:40 - 2014-06-15 20:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
    2015-12-18 06:40 - 2014-06-15 20:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
    2015-12-18 06:40 - 2014-03-09 16:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
    2015-12-18 06:39 - 2014-06-06 01:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
    2015-12-18 06:39 - 2014-03-09 16:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
    2015-12-18 06:37 - 2013-10-11 21:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
    2015-12-18 06:37 - 2013-10-11 21:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
    2015-12-18 06:37 - 2013-10-11 20:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
    2015-12-18 06:37 - 2013-10-11 20:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
    2015-12-18 06:36 - 2014-03-04 04:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
    2015-12-18 06:36 - 2014-03-04 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
    2015-12-18 06:36 - 2014-03-04 04:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
    2015-12-18 06:36 - 2014-03-04 04:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
    2015-12-18 06:36 - 2014-03-04 04:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
    2015-12-18 06:36 - 2014-03-04 04:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
    2015-12-18 06:36 - 2014-03-04 04:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
    2015-12-18 06:34 - 2014-08-11 20:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
    2015-12-18 06:34 - 2012-03-01 00:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
    2015-12-18 06:34 - 2012-03-01 00:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
    2015-12-18 06:33 - 2012-08-21 15:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
    2015-12-18 06:29 - 2015-07-15 12:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2015-12-18 06:29 - 2015-07-15 12:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
    2015-12-18 06:28 - 2015-07-15 12:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
    2015-12-18 06:24 - 2015-10-29 12:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
    2015-12-18 06:24 - 2015-10-29 12:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
    2015-12-18 06:24 - 2015-10-29 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
    2015-12-18 06:24 - 2015-10-29 12:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
    2015-12-18 06:23 - 2015-10-19 19:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
    2015-12-18 06:23 - 2015-10-19 19:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-12-18 06:23 - 2015-10-19 19:52 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2015-12-18 06:23 - 2015-10-19 19:48 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2015-12-18 06:23 - 2015-10-19 19:45 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2015-12-18 06:23 - 2015-10-19 19:45 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2015-12-18 06:23 - 2015-10-19 19:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2015-12-18 06:23 - 2015-10-19 19:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2015-12-18 06:23 - 2015-10-19 19:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2015-12-18 06:23 - 2015-10-19 19:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2015-12-18 06:23 - 2015-10-19 19:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2015-12-18 06:23 - 2015-10-19 18:29 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2015-12-18 06:23 - 2015-10-13 11:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
    2015-12-18 06:23 - 2015-10-13 11:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2015-12-18 06:22 - 2015-10-19 19:52 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2015-12-18 06:22 - 2015-10-19 19:45 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-12-18 06:22 - 2015-10-19 19:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2015-12-18 06:22 - 2015-10-19 19:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2015-12-18 06:22 - 2015-10-19 19:45 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2015-12-18 06:22 - 2015-10-19 19:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2015-12-18 06:22 - 2015-10-19 19:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2015-12-18 06:22 - 2015-10-19 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2015-12-18 06:22 - 2015-10-19 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2015-12-18 06:22 - 2015-10-19 19:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2015-12-18 06:22 - 2015-10-19 18:28 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2015-12-18 06:22 - 2015-10-19 18:28 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2015-12-18 06:19 - 2011-12-30 00:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
    2015-12-18 06:18 - 2013-05-09 22:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
    2015-12-18 06:16 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2015-12-18 06:15 - 2015-09-01 21:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2015-12-18 06:15 - 2015-09-01 21:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2015-12-18 06:15 - 2015-09-01 21:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2015-12-18 06:15 - 2015-09-01 21:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2015-12-18 06:15 - 2015-09-01 20:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2015-12-18 06:13 - 2015-10-12 23:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
    2015-12-18 06:12 - 2015-11-20 13:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2015-12-18 06:12 - 2015-11-20 13:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2015-12-18 06:12 - 2015-11-20 13:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2015-12-18 06:12 - 2015-11-20 13:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2015-12-18 06:12 - 2015-11-20 13:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
    2015-12-18 06:11 - 2014-01-27 21:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
    2015-12-18 06:11 - 2013-03-18 22:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
    2015-12-18 06:10 - 2015-11-03 13:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
    2015-12-18 06:10 - 2013-08-27 19:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
    2015-12-18 06:09 - 2015-04-10 22:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
    2015-12-18 06:09 - 2015-03-03 23:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
    2015-12-18 06:09 - 2015-03-03 23:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
    2015-12-18 06:09 - 2013-04-25 23:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2015-12-18 06:06 - 2013-05-12 22:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
    2015-12-18 06:06 - 2013-05-12 22:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
    2015-12-18 06:03 - 2014-09-04 00:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
    2015-12-18 06:02 - 2015-11-05 14:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2015-12-18 06:01 - 2011-05-03 23:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2015-12-18 06:01 - 2011-05-03 23:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2015-12-18 06:01 - 2011-05-03 23:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
    2015-12-18 06:01 - 2011-05-03 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
    2015-12-18 06:00 - 2011-05-03 23:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2015-12-18 06:00 - 2011-05-03 23:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
    2015-12-18 06:00 - 2011-05-03 23:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2015-12-18 06:00 - 2011-05-03 23:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
    2015-12-18 06:00 - 2011-05-03 23:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
    2015-12-18 05:59 - 2015-01-16 21:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
    2015-12-18 05:59 - 2012-06-06 00:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
    2015-12-18 05:58 - 2014-02-03 21:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
    2015-12-18 05:58 - 2014-02-03 21:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
    2015-12-18 05:58 - 2014-02-03 21:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
    2015-12-18 05:58 - 2014-02-03 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
    2015-12-18 05:56 - 2012-10-03 11:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
    2015-12-18 05:56 - 2012-10-03 11:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
    2015-12-18 05:56 - 2012-10-03 11:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
    2015-12-18 05:56 - 2012-10-03 10:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
    2015-12-18 05:49 - 2015-07-22 12:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
    2015-12-18 05:49 - 2015-07-22 12:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2015-12-18 05:49 - 2015-07-22 12:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
    2015-12-18 05:49 - 2015-07-22 11:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
    2015-12-18 05:44 - 2014-06-17 20:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
    2015-12-18 05:43 - 2015-07-09 12:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
    2015-12-18 05:43 - 2015-07-09 12:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
    2015-12-18 05:43 - 2015-06-17 12:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2015-12-18 05:42 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2015-12-18 05:42 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2015-12-18 05:42 - 2012-07-04 16:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
    2015-12-18 05:42 - 2012-07-04 16:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
    2015-12-18 05:42 - 2012-07-04 16:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
    2015-12-18 05:41 - 2015-04-17 21:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2015-12-18 05:34 - 2015-05-25 13:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
    2015-12-18 05:34 - 2015-05-25 13:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
    2015-12-18 05:34 - 2015-05-25 13:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
    2015-12-18 05:34 - 2015-05-25 13:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
    2015-12-18 05:34 - 2015-05-25 13:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
    2015-12-18 05:34 - 2015-05-25 13:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
    2015-12-18 05:27 - 2014-01-23 21:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
    2015-12-18 05:27 - 2013-07-25 03:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
    2015-12-18 05:24 - 2015-11-03 13:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2015-12-18 05:24 - 2014-08-01 06:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
    2015-12-18 05:20 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
    2015-12-18 05:20 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
    2015-12-18 05:20 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
    2015-12-18 05:20 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
    2015-12-18 05:16 - 2014-06-06 04:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
    2015-12-18 05:14 - 2015-10-01 12:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2015-12-18 05:14 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2015-12-18 05:14 - 2015-10-01 12:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2015-12-18 05:14 - 2015-10-01 12:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2015-12-18 05:14 - 2015-10-01 12:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2015-12-18 05:13 - 2015-10-01 11:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2015-12-18 05:01 - 2014-06-18 17:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
    2015-12-18 05:01 - 2014-06-18 17:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
    2015-12-18 05:01 - 2014-06-18 17:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
    2015-12-18 04:47 - 2012-12-07 07:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
    2015-12-18 04:47 - 2012-12-07 07:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
    2015-12-18 04:47 - 2012-12-07 05:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
    2015-12-18 04:47 - 2012-12-07 05:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
    2015-12-18 00:48 - 2012-09-25 17:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
    2015-12-18 00:48 - 2011-12-16 02:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
    2015-12-18 00:31 - 2015-09-23 08:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2015-12-18 00:31 - 2015-09-23 08:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
    2015-12-18 00:28 - 2015-11-05 14:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
    2015-12-18 00:28 - 2015-11-05 04:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
    2015-12-18 00:28 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2015-12-18 00:27 - 2014-07-16 20:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
    2015-12-18 00:27 - 2014-07-16 20:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
    2015-12-18 00:27 - 2014-07-16 20:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
    2015-12-18 00:27 - 2014-07-16 20:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
    2015-12-18 00:27 - 2012-04-25 23:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
    2015-12-18 00:27 - 2012-04-25 23:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
    2015-12-18 00:23 - 2015-09-18 12:47 - 00023384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
    2015-12-18 00:23 - 2015-09-18 12:44 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
    2015-12-18 00:23 - 2015-09-18 12:44 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2015-12-18 00:23 - 2015-09-18 12:44 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
    2015-12-18 00:23 - 2015-09-18 12:44 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
    2015-12-18 00:23 - 2015-09-18 12:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
    2015-12-18 00:23 - 2015-09-18 12:35 - 00999936 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2015-12-18 00:23 - 2015-06-03 15:17 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
    2015-12-18 00:23 - 2015-06-03 15:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2015-12-18 00:23 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
    2015-12-18 00:23 - 2013-10-11 21:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
    2015-12-18 00:23 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
    2015-12-18 00:20 - 2015-02-02 22:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
    2015-12-17 23:39 - 2015-06-25 04:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
    2015-12-17 23:39 - 2015-06-25 04:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2015-12-17 23:39 - 2015-06-25 04:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
    2015-12-17 23:39 - 2015-02-18 02:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
    2015-12-17 23:38 - 2013-08-04 20:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
    2015-12-17 23:37 - 2013-07-25 20:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
    2015-12-17 23:36 - 2014-10-29 20:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
    2015-12-17 23:31 - 2012-11-22 21:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
    2015-12-17 22:53 - 2015-12-17 22:54 - 00000000 ____D C:\b20138dfe1dda6a3b55664
    2015-12-17 22:45 - 2011-11-17 00:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
    2015-12-17 22:24 - 2012-03-17 02:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
    2015-12-17 22:15 - 2012-10-09 12:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
    2015-12-17 22:15 - 2012-10-09 12:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
    2015-12-17 21:45 - 2012-05-13 23:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2015-12-17 21:16 - 2012-01-04 03:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
    2015-12-17 20:48 - 2015-07-14 21:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
    2015-12-17 20:43 - 2015-04-29 13:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
    2015-12-17 20:43 - 2015-04-29 13:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
    2015-12-17 20:43 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
    2015-12-17 20:43 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
    2015-12-17 20:43 - 2015-04-29 13:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
    2015-12-17 20:43 - 2014-12-05 22:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2015-12-17 20:43 - 2012-10-03 11:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
    2015-12-17 20:43 - 2012-10-03 11:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
    2015-12-17 20:42 - 2014-12-18 20:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2015-12-17 20:42 - 2014-01-28 21:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
    2015-12-17 20:42 - 2013-07-12 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
    2015-12-17 17:59 - 2013-06-25 17:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
    2015-12-17 17:59 - 2012-11-28 17:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
    2015-12-17 17:59 - 2012-11-28 17:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
    2015-12-17 17:58 - 2012-11-28 17:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
    2015-12-17 17:56 - 2015-02-02 22:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2015-12-17 17:56 - 2015-02-02 22:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
    2015-12-17 17:56 - 2015-02-02 22:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
    2015-12-17 17:56 - 2015-02-02 22:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
    2015-12-17 17:55 - 2015-02-02 22:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
    2015-12-17 17:55 - 2015-02-02 22:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
    2015-12-17 17:55 - 2014-10-31 17:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
    2015-12-17 17:55 - 2014-06-27 19:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
    2015-12-17 17:55 - 2014-06-27 19:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
    2015-12-17 17:54 - 2015-02-02 22:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
    2015-12-17 17:54 - 2015-02-02 22:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
    2015-12-17 17:54 - 2015-02-02 22:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2015-12-17 17:54 - 2015-02-02 22:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
    2015-12-17 17:54 - 2015-02-02 22:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
    2015-12-17 17:54 - 2015-02-02 22:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
    2015-12-17 17:54 - 2015-02-02 22:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
    2015-12-17 17:54 - 2015-02-02 22:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
    2015-12-17 17:54 - 2015-02-02 22:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
    2015-12-17 17:54 - 2015-02-02 22:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
    2015-12-17 17:54 - 2015-02-02 22:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
    2015-12-17 17:46 - 2014-10-02 20:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2015-12-17 17:46 - 2014-10-02 20:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2015-12-17 17:46 - 2014-10-02 20:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2015-12-17 17:46 - 2014-10-02 20:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2015-12-17 17:46 - 2014-10-02 20:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2015-12-17 06:45 - 2013-11-26 20:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
    2015-12-17 06:45 - 2013-11-26 20:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
    2015-12-17 06:45 - 2013-11-26 20:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
    2015-12-17 06:45 - 2013-11-26 20:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
    2015-12-17 06:45 - 2013-11-26 20:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
    2015-12-17 06:45 - 2013-11-26 20:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
    2015-12-17 06:45 - 2013-11-26 20:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
    2015-12-17 06:37 - 2014-10-13 20:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
    2015-12-17 06:30 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
    2015-12-17 06:30 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
    2015-12-17 06:30 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
    2015-12-17 06:30 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
    2015-12-17 06:30 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
    2015-12-17 06:30 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
    2015-12-17 06:30 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
    2015-12-17 06:30 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
    2015-12-17 06:30 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
    2015-12-17 06:27 - 2015-04-24 12:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
    2015-12-17 06:27 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2015-12-16 22:46 - 2012-02-17 00:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
    2015-12-16 22:45 - 2012-02-16 23:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
    2015-12-15 22:51 - 2015-12-15 22:51 - 00000000 ____D C:\Windows\Temp538DAC00-A74D-4F12-17FB-B8EB2C7E298D-Signatures
    2015-12-14 23:57 - 2015-12-14 23:57 - 00000000 ____D C:\Users\Sue\AppData\Roaming\AVG
    2015-12-14 23:55 - 2015-12-14 23:55 - 00000000 ____D C:\Program Files\Common Files\AV
    2015-12-14 23:54 - 2015-12-14 23:54 - 00000000 ____D C:\Users\Sue\AppData\Roaming\TuneUp Software
    2015-12-14 23:54 - 2015-12-14 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
    2015-12-14 23:45 - 2015-12-14 23:45 - 00000000 ___HD C:\$AVG
    2015-12-14 23:33 - 2015-12-20 09:19 - 00000000 ____D C:\ProgramData\MFAData
    2015-12-14 23:33 - 2015-12-14 23:33 - 00000000 ____D C:\Users\Sue\AppData\Local\MFAData
    2015-12-14 23:31 - 2015-12-14 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
    2015-12-14 23:24 - 2015-12-14 23:45 - 00000000 ____D C:\ProgramData\Avg
    2015-12-14 23:24 - 2015-12-14 23:39 - 00000000 ____D C:\Program Files\AVG
    2015-12-14 23:21 - 2015-12-19 23:39 - 00000000 ____D C:\Users\Sue\AppData\Local\AvgSetupLog
    2015-12-14 23:21 - 2015-12-14 23:57 - 00000000 ____D C:\Users\Sue\AppData\Local\Avg
    2015-12-14 22:34 - 2015-12-14 22:34 - 00000000 ____D C:\Windows\Temp60135627-FB3C-F4AC-2CCD-4964BB1165C7-Signatures
    2015-12-14 21:05 - 2015-12-14 21:05 - 00000000 ____D C:\Windows\Temp0ABEFD6F-A169-B8E3-DB98-4674184C94B6-Signatures
    2015-12-14 21:03 - 2015-12-14 21:03 - 00000000 ____D C:\Program Files\Microsoft CAPICOM 2.1.0.2
    2015-12-14 20:32 - 2015-12-14 20:32 - 00000000 ____D C:\Users\Heather\AppData\Local\Logitech® Webcam Software
    2015-12-14 20:31 - 2015-12-14 20:31 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Adobe
    2015-12-14 20:30 - 2015-12-19 05:24 - 00109280 _____ C:\Users\Heather\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-12-14 20:30 - 2015-12-14 20:30 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Epson
    2015-12-14 20:29 - 2015-12-14 20:29 - 00001413 _____ C:\Users\Heather\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-12-14 20:28 - 2015-12-14 20:29 - 00000000 ____D C:\Users\Heather
    2015-12-14 20:28 - 2015-12-14 20:28 - 00000020 ___SH C:\Users\Heather\ntuser.ini
    2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\My Documents
    2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Videos
    2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Pictures
    2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Music
    2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 ____D C:\Users\Heather\AppData\Local\VirtualStore
    2015-12-14 20:28 - 2011-01-02 01:38 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Mozilla
    2015-12-14 20:28 - 2010-12-01 23:39 - 00000000 ____D C:\Users\Heather\Documents\Visual Studio 2008
    2015-12-14 20:28 - 2010-12-01 23:37 - 00000000 ____D C:\Users\Heather\AppData\Local\Microsoft Help
    2015-12-14 20:28 - 2010-12-01 00:02 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Macromedia
    2015-12-14 20:28 - 2009-07-14 02:49 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Media Center Programs
    2015-12-13 18:00 - 2011-03-11 00:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
    2015-12-13 18:00 - 2011-03-11 00:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
    2015-12-13 18:00 - 2011-03-11 00:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
    2015-12-13 18:00 - 2011-03-11 00:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
    2015-12-13 18:00 - 2011-03-11 00:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
    2015-12-13 18:00 - 2011-03-11 00:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
    2015-12-13 18:00 - 2011-03-10 23:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
    2015-12-13 17:37 - 2015-12-13 17:43 - 00000000 ____D C:\2358cb107be334e1dd8b5d10
    2015-12-13 17:29 - 2015-12-13 17:29 - 00000000 ____D C:\Users\Sue\AppData\Local\Logitech® Webcam Software
    2015-12-13 17:06 - 2015-12-13 17:07 - 00000000 ____D C:\037b0a5567cbb37b8153cf05
    2015-12-13 17:01 - 2015-12-20 08:53 - 00001945 _____ C:\Windows\epplauncher.mif
    2015-12-13 16:58 - 2015-12-20 08:52 - 00000000 ____D C:\Program Files\Microsoft Security Client
    2015-12-13 16:37 - 2015-12-13 16:37 - 00000000 ____D C:\Windows\system32\SPReview
    2015-12-13 16:36 - 2015-12-13 16:36 - 00000000 ____D C:\Windows\system32\EventProviders
    2015-12-13 15:04 - 2015-12-13 15:08 - 00000000 ____D C:\Windows\system32\MRT
    2015-12-13 14:52 - 2015-12-13 15:00 - 00001908 _____ C:\Windows\diagwrn.xml
    2015-12-13 14:52 - 2015-12-13 15:00 - 00001908 _____ C:\Windows\diagerr.xml
    2015-12-13 14:52 - 2015-12-13 15:00 - 00000000 ___HD C:\$WINDOWS.~BT
    2015-12-13 14:35 - 2015-12-13 14:35 - 00000000 ____D C:\ESD
    2015-12-13 14:10 - 2015-12-13 14:10 - 00000000 ___HD C:\$Windows.~WS
    2015-12-13 14:07 - 2015-12-13 14:07 - 00000000 ____D C:\Users\Sue\Documents\SightSpeed Recordings
    2015-12-13 14:01 - 2015-12-13 14:01 - 00000000 _____ C:\Windows\EEventManager.INI
    2015-12-13 11:32 - 2012-05-31 23:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
    2015-12-13 11:32 - 2012-05-31 23:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
    2015-12-13 11:32 - 2012-05-31 23:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
    2015-12-13 11:32 - 2012-05-31 23:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
    2015-12-13 11:32 - 2012-05-31 23:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
    2015-12-13 11:32 - 2012-05-31 23:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
    2015-11-20 08:05 - 2015-11-20 08:05 - 00031664 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsshimx.sys
     
    ==================== One Month Modified files and folders ========
     
    (If an entry is included in the fixlist, the file/folder will be moved.)
     
    2015-12-20 09:30 - 2010-12-04 17:24 - 00000000 ____D C:\ProgramData\PC Drivers HeadQuarters
    2015-12-20 09:17 - 2009-07-13 23:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2015-12-20 09:15 - 2009-07-13 23:34 - 00014160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-12-20 09:15 - 2009-07-13 23:34 - 00014160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-12-20 08:11 - 2009-07-13 21:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
    2015-12-19 23:47 - 2010-12-04 17:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2015-12-19 23:45 - 2010-11-27 18:15 - 00000000 ____D C:\ProgramData\Microsoft Help
    2015-12-19 20:15 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\rescache
    2015-12-19 17:08 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\PolicyDefinitions
    2015-12-19 17:08 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\inf
    2015-12-19 15:45 - 2009-07-13 21:37 - 00000000 ____D C:\Windows
    2015-12-19 15:31 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2015-12-19 14:17 - 2010-12-11 10:49 - 00000000 ____D C:\Users\Sue\AppData\Local\Google
    2015-12-19 09:55 - 2009-07-13 23:33 - 00406024 _____ C:\Windows\system32\FNTCACHE.DAT
    2015-12-19 09:17 - 2010-12-01 00:04 - 00000000 ____D C:\Program Files\Common Files\Adobe
    2015-12-19 09:15 - 2010-12-01 00:02 - 00000000 ____D C:\ProgramData\Adobe
    2015-12-19 09:15 - 2010-12-01 00:02 - 00000000 ____D C:\Program Files\Adobe
    2015-12-19 06:08 - 2010-11-28 19:05 - 00000000 ____D C:\Users\Sue\AppData\Local\Deployment
    2015-12-19 04:14 - 2010-11-27 19:04 - 00905808 _____ C:\Windows\system32\PerfStringBackup.INI
    2015-12-19 03:31 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\AppCompat
    2015-12-18 23:12 - 2010-11-28 18:51 - 00109280 _____ C:\Users\Sue\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-12-18 21:53 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\tracing
    2015-12-18 21:53 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
    2015-12-18 21:52 - 2009-07-14 02:50 - 00000000 ____D C:\Program Files\Windows Journal
    2015-12-18 21:52 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Dism
    2015-12-18 04:05 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\inetsrv
    2015-12-17 23:06 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Defender
    2015-12-13 17:26 - 2009-07-13 23:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
    2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Sidebar
    2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
    2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
    2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\DVD Maker
    2015-12-13 17:10 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\servicing
    2015-12-13 17:10 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\System
    2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\sysprep
    2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Setup
    2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\oobe
    2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\migwiz
    2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\manifeststore
    2015-12-13 16:51 - 2009-07-13 21:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
    2015-12-13 16:35 - 2010-11-27 18:47 - 00000000 ____D C:\Program Files\Microsoft Office
    2015-12-13 16:07 - 2010-11-28 15:00 - 00000000 ____D C:\Program Files\Common Files\logishrd
    2015-12-13 16:05 - 2010-11-28 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
    2015-12-13 15:57 - 2010-11-28 15:07 - 00000000 ____D C:\Windows\system32\logishrd
    2015-12-13 15:22 - 2009-07-13 21:04 - 00000478 _____ C:\Windows\win.ini
    2015-12-13 14:59 - 2010-11-27 18:37 - 00000000 ____D C:\Windows\Panther
    2015-12-13 13:49 - 2006-05-12 14:16 - 00000000 ____D C:\DownLoad
    2015-12-13 12:35 - 2011-01-01 18:46 - 00000000 ____D C:\Program Files\Archive_Setup
    2015-12-13 12:18 - 2010-11-27 18:19 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
    2015-12-13 12:17 - 2010-11-27 19:11 - 00000028 _____ C:\Windows\ODBC.INI
    2015-12-13 11:59 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\MSBuild
    2015-12-13 11:47 - 2010-11-27 18:17 - 00000000 ____D C:\Program Files\Microsoft Web Designer Tools
    2015-12-13 11:34 - 2011-04-02 08:26 - 00000000 ____D C:\Windows\Minidump
    2015-12-13 11:34 - 2009-07-13 23:52 - 00000000 ____D C:\Windows\Downloaded Program Files
    2015-12-13 10:59 - 2010-11-28 19:37 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
    2015-12-13 10:21 - 2010-11-30 21:32 - 00000000 ____D C:\Program Files\Telerik
    2015-12-13 09:46 - 2010-11-28 14:53 - 00000000 ____D C:\ProgramData\Skype
    2015-12-08 22:39 - 2010-11-27 17:53 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2015-11-23 19:09 - 2010-12-04 09:56 - 137798368 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
     
    ==================== Files in the root of some directories =======
     
    2010-11-28 14:55 - 2010-11-28 14:55 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
     
    Some files in TEMP:
    ====================
    C:\Users\Sue\AppData\Local\Temp\sqlite3.dll
     
     
    ==================== Bamital & volsnap =================
     
    (There is no automatic fix for files that do not pass verification.)
     
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
     
     
    LastRegBack: 2015-12-19 00:14
     
    ==================== End of FRST.txt ============================
    Additional scan result of Farbar Recovery Scan Tool (x86) Version:19-12-2015
    Ran by Sue (2015-12-20 09:42:36)
    Running from C:\Users\Sue\Desktop
    Microsoft Windows 7 Professional  Service Pack 1 (X86) (2010-11-27 22:36:08)
    Boot Mode: Normal
    ==========================================================
     
     
    ==================== Accounts: =============================
     
    Administrator (S-1-5-21-3100087442-411317864-4144688174-500 - Administrator - Disabled)
    Guest (S-1-5-21-3100087442-411317864-4144688174-501 - Limited - Disabled)
    Heather (S-1-5-21-3100087442-411317864-4144688174-1004 - Limited - Enabled) => C:\Users\Heather
    Sue (S-1-5-21-3100087442-411317864-4144688174-1000 - Administrator - Enabled) => C:\Users\Sue
     
    ==================== Security Center ========================
     
    (If an entry is included in the fixlist, it will be removed.)
     
    AV: AVG AntiVirus Free Edition (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
    AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: AVG AntiVirus Free Edition (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
     
    ==================== Installed Programs ======================
     
    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
     
    Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
    Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated)
    Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
    Adobe Reader X (10.1.16) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
    AVG (HKLM\...\AvgZen) (Version: 1.22.1.40089 - AVG Technologies)
    AVG (Version: 16.12.7303 - AVG Technologies) Hidden
    AVG 2016 (Version: 16.0.4489 - AVG Technologies) Hidden
    AVG Protection (HKLM\...\AVG) (Version: 2016.12.7303 - AVG Technologies)
    AVG Zen (Version: 1.22.1 - AVG Technologies) Hidden
    Bing Rewards Client Installer (Version: 16.0.345.0 - Microsoft Corporation) Hidden
    CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden
    C-Major Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 42xx - SigmaTel)
    Dell Driver Download Manager (HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\f031ef6ac137efc5) (Version: 2.1.0.0 - Dell Inc.)
    Epson Event Manager (HKLM\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
    EPSON NX420 Series Printer Uninstall (HKLM\...\EPSON NX420 Series) (Version:  - SEIKO EPSON Corporation)
    EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
    EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
    EpsonNet Setup 3.2 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.2a - SEIKO EPSON CORPORATION)
    erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
    FMW 1 (Version: 1.32.2 - AVG Technologies) Hidden
    Google Chrome (HKLM\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
    Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden
    Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7240) - Logitech Inc..)
    Logitech Webcam Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
    Microsoft .NET Compact Framework 2.0 SP2 (HKLM\...\{EDDF99D9-9FE3-4871-A7DB-D1522C51EE9A}) (Version: 2.0.7045 - Microsoft Corporation)
    Microsoft .NET Compact Framework 3.5 (HKLM\...\{291B3A3B-F808-45B8-8113-DF232FCB6C82}) (Version: 3.5.7283 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft ASP.NET 2.0 AJAX Extensions 1.0 (HKLM\...\{082BDF7B-4810-4599-BF0D-E3AC44EC8524}) (Version: 1.0.61025 - Microsoft Corporation)
    Microsoft Device Emulator version 3.0 - ENU (HKLM\...\{B32E7732-B2FB-3FD0-81AC-6025B1104C66}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Document Explorer 2008 (HKLM\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)
    Microsoft Office 2007 Service Pack 2 (SP2) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version:  - Microsoft)
    Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
    Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 ENU (HKLM\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 for Devices ENU (HKLM\...\{241F2BF7-69EB-42A4-9156-96B2426C7504}) (Version: 3.5.5386.0 - Microsoft Corporation)
    Microsoft SQL Server Database Publishing Wizard 1.2 (HKLM\...\{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}) (Version: 1.2.0.0 - Microsoft Corporation)
    Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)
    Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
    Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation)
    Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
    Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
    Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
    Visual Studio Tools for the Office system 3.0 Runtime (HKLM\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
     
    ==================== Custom CLSID (Whitelisted): ==========================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
     
    ==================== Restore Points =========================
     
    19-12-2015 16:52:52 Windows Update
    19-12-2015 18:55:38 Windows Update
    19-12-2015 23:40:50 Windows Update
    20-12-2015 09:27:18 JRT Pre-Junkware Removal
     
    ==================== Hosts content: ===============================
     
    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
     
    2009-07-13 21:04 - 2009-06-10 16:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
     
     
    ==================== Scheduled Tasks (Whitelisted) =============
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    Task: {4A1EE944-9F4A-4E90-A454-AF289152D06E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
    Task: {66EDCE08-470F-4B43-A574-BBBDAF53CE02} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-19] (Google Inc.)
    Task: {9DC255C4-9A0A-4D75-9551-6D6C0F4B8D70} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
    Task: {A56A7429-C978-4773-972D-51FF9AEC9922} - System32\Tasks\{2302C6AF-3FD7-470A-B197-5F267533F9E1} => C:\Program Files\Skype\\Phone\Skype.exe
    Task: {D876E759-E5EB-4964-8D0B-5B4F5F557E76} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
    Task: {E917AA90-B4CF-4B7A-AFCA-AFD3C0AA1B66} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-19] (Google Inc.)
     
    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
     
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
     
    ==================== Shortcuts =============================
     
    (The entries could be listed to be restored or removed.)
     
    ==================== Loaded Modules (Whitelisted) ==============
     
     
    ==================== Alternate Data Streams (Whitelisted) =========
     
    (If an entry is included in the fixlist, only the ADS will be removed.)
     
     
    ==================== Safe Mode (Whitelisted) ===================
     
    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
     
     
    ==================== EXE Association (Whitelisted) ===============
     
    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
     
     
    ==================== Internet Explorer trusted/restricted ===============
     
    (If an entry is included in the fixlist, it will be removed from the registry.)
     
     
    ==================== Other Areas ============================
     
    (Currently there is no automatic fix for this section.)
     
    HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Control Panel\Desktop\\Wallpaper -> 
    DNS Servers: 10.0.1.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.
     
    ==================== MSCONFIG/TASK MANAGER disabled items ==
     
    (Currently there is no automatic fix for this section.)
     
     
    ==================== FirewallRules (Whitelisted) ===============
     
    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
    FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
    FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
    FirewallRules: [{BA01D8BC-7E39-4A74-BBAE-B1C5E0CB22F5}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
    FirewallRules: [{BBCE40F2-A0E9-4CC3-93D4-428DA092E1DB}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
    FirewallRules: [{86B3D7F4-BF5C-49BC-A893-A5EDA0CE7181}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
    FirewallRules: [{DB3C333A-E046-4628-AC34-EDED7EF8D81B}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
    FirewallRules: [{E1E570E1-E357-41CF-88E2-4138FAD7D965}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe
    FirewallRules: [{A6B314DD-715C-4AAB-A0D9-A5818F586E2E}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe
    FirewallRules: [TCP Query User{E0A20793-7C99-4716-B761-4EF9E6E30FC1}C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe] => (Allow) C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe
    FirewallRules: [UDP Query User{1DE90FA4-5C56-4944-81A1-BDCF6E759AE8}C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe] => (Allow) C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe
    FirewallRules: [TCP Query User{F91C35B2-DDC4-4673-8104-FDE7AF8A3629}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe
    FirewallRules: [UDP Query User{3544D40D-6F98-42FC-A69F-08637E549836}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe
    FirewallRules: [{ACA1EC91-0292-4E9D-85D6-DB04081513E2}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
    FirewallRules: [{F47CC94B-1D8A-468B-A80A-2781EB9E44BA}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
    FirewallRules: [{09C9F009-0C6A-4DA3-838A-9FB62095C881}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
    FirewallRules: [{CD6BA82D-8309-43DB-B170-5874FA9D74AD}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
    FirewallRules: [{DAFCB248-3847-48E3-B937-240F44CA207B}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
    FirewallRules: [{A9C9DC52-5F9F-43A9-9AB0-F08D50F4ACE6}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
    FirewallRules: [{0FF5E8B8-44BC-44CE-98A2-782D7E9451AF}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
    FirewallRules: [{B4D0D458-0854-4504-AA5E-C73A5D1E3791}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
    FirewallRules: [{D4D6A692-44FB-4519-B3CD-BADE4EE1F63C}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
    FirewallRules: [{F87BBB49-34DE-4094-A69E-7977C84F98EF}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
    FirewallRules: [{FC91358F-4E3A-4654-9AB9-09A1A8352F84}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
    FirewallRules: [{5A7CDB30-7416-4DD9-A101-42455FAA14F8}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
     
    ==================== Faulty Device Manager Devices =============
     
     
    ==================== Event log errors: =========================
     
    Application errors:
    ==================
    Error: (12/19/2015 11:47:01 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
    Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.40728.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\SilverlightMSI.log.
     
    Error: (12/19/2015 11:46:57 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
    Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.
     
    Error: (12/19/2015 11:45:31 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
    Description: Product: Microsoft Office Enterprise 2007 - Update 'Update for Microsoft Office Outlook 2007 (KB2596598) 32-Bit Edition' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
     
    Error: (12/19/2015 11:45:01 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
    Description: Product: Microsoft Office Enterprise 2007 -- Error 1402.Setup cannot open the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE.  Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance.  For information about how to contact PSS, seePSS10R.CHM.
     
    Error: (12/19/2015 11:44:04 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
    Description: Product: Microsoft Office Enterprise 2007 - Update 'Security Update for Microsoft Office Groove 2007 (KB2552997)' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
     
    Error: (12/19/2015 11:43:07 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
    Description: Product: Microsoft Office Enterprise 2007 -- Error 1402.Setup cannot open the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE.  Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance.  For information about how to contact PSS, seePSS10R.CHM.
     
    Error: (12/19/2015 04:41:42 PM) (Source: MsiInstaller) (EventID: 1023) (User: Sue-PC)
    Description: Product: Microsoft Office Enterprise 2007 - Update 'Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition' could not be installed. Error code 1603. Additional information is available in the log file C:\Users\Sue\AppData\Local\Temp\outlook-x-none_MSPLOG.LOG.
     
    Error: (12/19/2015 04:41:20 PM) (Source: MsiInstaller) (EventID: 11402) (User: Sue-PC)
    Description: Product: Microsoft Office Enterprise 2007 -- Error 1402.Setup cannot open the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE.  Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance.  For information about how to contact PSS, seePSS10R.CHM.
     
    Error: (12/19/2015 04:29:22 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
    Description: Product: Microsoft Office Enterprise 2007 - Update 'Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
     
    Error: (12/19/2015 04:28:56 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
    Description: Product: Microsoft Office Enterprise 2007 -- Error 1402.Setup cannot open the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE.  Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance.  For information about how to contact PSS, seePSS10R.CHM.
     
     
    System errors:
    =============
    Error: (12/20/2015 09:28:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Ati External Event Utility service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/20/2015 09:20:40 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
    Description: The AVGIDSAgent service hung on starting.
     
    Error: (12/20/2015 09:18:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The SQL Server (SQLEXPRESS) service failed to start due to the following error: 
    %%1053
     
    Error: (12/20/2015 09:18:22 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the SQL Server (SQLEXPRESS) service to connect.
     
    Error: (12/20/2015 09:13:49 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
    Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: 
    %%1056
     
    Error: (12/20/2015 09:13:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.
     
    Error: (12/20/2015 09:13:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.
     
    Error: (12/20/2015 09:13:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The SQL Server (SQLEXPRESS) service terminated unexpectedly.  It has done this 1 time(s).
     
    Error: (12/20/2015 09:13:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Software Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.
     
    Error: (12/20/2015 09:13:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The SQL Server Browser service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
     
     
    ==================== Memory info =========================== 
     
    Processor: Intel® Pentium® M processor 1.86GHz
    Percentage of memory in use: 88%
    Total physical RAM: 1023.43 MB
    Available physical RAM: 116.38 MB
    Total Virtual: 2047.43 MB
    Available Virtual: 1019.34 MB
     
    ==================== Drives ================================
     
    Drive c: () (Fixed) (Total:55.82 GB) (Free:18.45 GB) NTFS ==>[drive with boot components (obtained from BCD)]
     
    ==================== MBR & Partition Table ==================
     
    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 879D879D)
    Partition 1: (Not Active) - (Size=71 MB) - (Type=DE)
    Partition 2: (Active) - (Size=55.8 GB) - (Type=07 NTFS)
     
    ==================== End of Addition.txt ============================
     
    Here is the AdwCleaner log:
    # AdwCleaner v5.025 - Logfile created 20/12/2015 at 09:13:21
    # Updated 13/12/2015 by Xplode
    # Database : 2015-12-13.2 [Server]
    # Operating system : Windows 7 Professional Service Pack 1 (x86)
    # Username : Sue - SUE-PC
    # Running from : C:\Users\Sue\Desktop\AdwCleaner.exe
    # Option : Cleaning
     
    ***** [ Services ] *****
     
     
    ***** [ Folders ] *****
     
    [-] Folder Deleted : C:\Program Files\tencent
    [-] Folder Deleted : C:\Program Files\Common Files\tencent
    [-] Folder Deleted : C:\ProgramData\Driver Boost
    [-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Detective
    [-] Folder Deleted : C:\Users\Sue\AppData\Local\tencent
    [-] Folder Deleted : C:\Users\Sue\AppData\Roaming\tencent
     
    ***** [ Files ] *****
     
     
    ***** [ DLLs ] *****
     
     
    ***** [ Shortcuts ] *****
     
     
    ***** [ Scheduled tasks ] *****
     
     
    ***** [ Registry ] *****
     
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\DriversHQ.DriverDetective.Client.exe
    [-] Key Deleted : HKLM\SOFTWARE\CLASSES\METNSD
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6517DD27-EA6F-4947-9DEA-F9C487BB1020}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6517DD27-EA6F-4947-9DEA-F9C487BB1020}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4640FDE1-B83A-4376-84ED-86F86BEE2D41}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1EDF0464A38B673448DE688FB6EED214
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\1EDF0464A38B673448DE688FB6EED214
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\1EDF0464A38B673448DE688FB6EED214
     
    ***** [ Web browsers ] *****
     
     
    *************************
     
    :: "Tracing" keys removed
    :: Winsock settings cleared
     
    ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2046 bytes] ##########
     
    And the Junkware Removal Tool log:
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.1 (11.24.2015)
    Operating System: Windows 7 Professional x86 
    Ran by Sue (Administrator) on Sun 12/20/2015 at  9:27:07.39
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
     
     
     
    File System: 2 
     
    Failed to delete: C:\ProgramData\pc drivers headquarters (Folder) 
    Successfully deleted: C:\Program Files\pc drivers headquarters (Folder) 
     
     
     
    Registry: 0 
     
     
     
     
     
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Sun 12/20/2015 at  9:32:37.37
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
    After Windows All-in-one Repair Tool, I was able to uninstall Silverlight.  I then attempted to proceed with other Windows Updates, but some of them have failed.
     
    I'll try your subsequent suggestions next. 
     

     


    • 0

    #4
    cgnolte

    cgnolte

      Member

    • Topic Starter
    • Member
    • PipPip
    • 23 posts

    The scan completed with the message:

    Windows Resource Protection did not find any integrity violations.

     

    VEW's output files are:

    Vino's Event Viewer v01c run on Windows 2008 in English
    Report run at 20/12/2015 5:59:03 PM
     
    Note: All dates below are in the format dd/mm/yyyy
     
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'System' Log - Critical Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'System' Log - Error Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Log: 'System' Date/Time: 20/12/2015 10:12:53 PM
    Type: Error Category: 0
    Event: 7009 Source: Service Control Manager
    A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
     
    Log: 'System' Date/Time: 20/12/2015 10:03:24 PM
    Type: Error Category: 0
    Event: 7043 Source: Service Control Manager
    The AVGIDSAgent service did not shut down properly after receiving a preshutdown control.
     
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'System' Log - Warning Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Log: 'System' Date/Time: 20/12/2015 10:06:17 PM
    Type: Warning Category: 0
    Event: 4 Source: b57nd60x
    Broadcom NetXtreme 57xx Gigabit Controller: The network link is down.  Check to make sure the network cable is properly connected.
     
    Log: 'System' Date/Time: 20/12/2015 10:03:57 PM
    Type: Warning Category: 0
    Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
    WLAN AutoConfig service has successfully stopped. 
     
    and for the Application log:
    Vino's Event Viewer v01c run on Windows 2008 in English
    Report run at 20/12/2015 6:00:02 PM
     
    Note: All dates below are in the format dd/mm/yyyy
     
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'Application' Log - Critical Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'Application' Log - Error Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    'Application' Log - Warning Type
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Log: 'Application' Date/Time: 20/12/2015 10:07:12 PM
    Type: Warning Category: 0
    Event: 3 Source: SQLBrowser
    The configuration of the AdminConnection\TCP protocol in the SQL instance SQLEXPRESS is not valid.
     
    Log: 'Application' Date/Time: 20/12/2015 10:01:53 PM
    Type: Warning Category: 0
    Event: 1530 Source: Microsoft-Windows-User Profiles Service
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   2 user registry handles leaked from \Registry\User\S-1-5-21-3100087442-411317864-4144688174-1000:
    Process 1348 (\Device\HarddiskVolume2\Program Files\AVG\Framework\Common\avgsvcx.exe) has opened key \REGISTRY\USER\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
    Process 1348 (\Device\HarddiskVolume2\Program Files\AVG\Framework\Common\avgsvcx.exe) has opened key \REGISTRY\USER\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
     
    ---
     
    So, can you tell: is my machine still infected with malware?
     
    Thanks!

    • 0

    #5
    RKinner

    RKinner

      Malware Expert

    • Expert
    • 20,024 posts
    • MVP

    The malware is no longer active.  Appears it was this one:

     

    http://home.mcafee.c...key=621700#none

     

    Under Virus Characteristics on the page they say it creates the following files:

     

    %PROGRAMFILES%\browser\ÊÀ½çÖ®´°.ini
    %TEMP%\nso3.tmp\MakeDll.dll
    %ALLUSERSPROFILE%\Desktop\Engine.dll
    %TEMP%\nso3.tmp\nsDialogs.dll
    %USERPROFILE%\Start Menu\Programs\Èí¼þ982\Èí¼þ9822011Õýʽ°æ.lnk
    %PROGRAMFILES%\browser\ÊÀ½çÖ®´°.exe
    %TEMP%\nso3.tmp\nsExec.dll
    %TEMP%\nso3.tmp\registry.dll
    %TEMP%\nso2.tmp
    %TEMP%\nso3.tmp\modern-wizard.bmp
    %ALLUSERSPROFILE%\Application Data\microsoft908\908.exe
    %TEMP%\nso3.tmp\StartMenu.dll
    %TEMP%\nso3.tmp\System.dll
    %PROGRAMFILES%\browser\Uninstall.exe
    %TEMP%\nso3.tmp\nsRandom.dll
    %ALLUSERSPROFILE%\Desktop\1698.exe
    %ALLUSERSPROFILE%\Application Data\Adobe\something.ini
    %ALLUSERSPROFILE%\Application Data\DAEMON Tools Lite\my908.dll
    %ALLUSERSPROFILE%\Application Data\microsoft908\Engine.dll
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internat Explorer.rnk225
    %TEMP%\nso3.tmp\ns14.tmp
    %PROGRAMFILES%\browser\oem.ini
     
     
    • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\.TEP\
    • HKEY_LOCAL_MACHINE\SOFTWARE\ÈͼÞ982\
     
    Anything that started with %TEMP% has been removed by the clear temp command in FRST.
     
    FRST also removed 
     
    2015-12-16 09:22 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\Tencent
    2015-12-16 09:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\microsoft908
    2015-12-16 08:43 - 2011-07-16 19:08 - 00000000 ____D C:\Program Files\browser
    2015-12-13 20:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
     
    So we have cleared all of the entries with strikethroughs.  Apparently FRST does not understand the % entries.  On mine they are:
    %PROGRAMFILES% is always: C:\Program Files so these were removed.
     
     
    %ALLUSERSPROFILE% is  C:\ProgramData on my PC so these were probably removed.
    %USERPROFILE% is C:\Users\YourUserName so either C:\Users\Heather or C:\Users\Sue
    %APPDATA% is C:\Users\YourUserName\AppData\Roaming so either C:\Users\Heather\AppData\Roaming or C:\Users\Sue\AppData\Roaming
     
     
    To check them on yours:
    Start, All Programs, Accessories, right click on Command Prompt and Run as Admin then type:
     
    cd  %ALLUSERSPROFILE%
     
    It should change the the %ALLUSERSPROFILE% folder.
     

    Repeat for

    cd   %USERPROFILE%
    cd  %APPDATA%

     If we are sure what they mean we can run another FRST fix list and make sure they are gone.  This is optional.

     

    Another optional thing is an ESET scan.  This takes about 3 hours or so but will make sure you have nothing else hiding.

    Use IE and go to http://eset.com/onlinescan and click on ESET online Scanner.  Accept the terms then press Start (If you get a warning from your browser tell it you want to run it).  
     
    # Check Scan Archives
    # Push the Start button.
    # ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    # When the scan completes, push LIST OF THREATS FOUND
    # Push EXPORT TO TEXT FILE , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    # Push the BACK button.
    # Push Finish
    # Once the scan is completed, you may close the window.
    # Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
    # Copy and paste that log as a reply.
     

     

     
    Looking at your errors it shows SQL Express is not running correctly.  If you use this then uninstall Microsoft SQL Server 2005 and reinstall  if you don't use it then uninstall it.
     
    Since Windows Repair All in One didn't work we probably need to go in to the registry to fix the Silverlight problem.  Have you ever used regedt?
     
     
     
     
     
     
     

    • 0

    #6
    cgnolte

    cgnolte

      Member

    • Topic Starter
    • Member
    • PipPip
    • 23 posts

    Thank you so much for your help.  I was able to rid my machine of the malware and eventually complete all the Windows 7 updates that were available (including Silverlight, which was always a symptom rather than being the actual problem).

     

    I have come to the conclusion that the computer is nonetheless too old to be worth giving to our daughter, but I appreciate the help and will likely try some of these tools on other Windows machines.

     


    • 0






    Similar Topics

    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users

    As Featured On:

    Microsoft Yahoo BBC MSN PC Magazine Washington Post HP