We recently took my wife's Dell Latitude D610 out of the drawer it had been in for a year or more, to see if it would be a usable laptop for our 12-year-old daughter. I soon noticed that IE was hijacked to set its homepage to a Chinese porn website. I installed AVG, which found a few trojans and claimed to have secured them. Since then, I have been performed numerous Windows Updates, trying to bring this Windows 7 machine up to date. The IE homepage is no longer hijacked.
However, some of my Windows Updates are failing. In particular, Microsoft Silverlight won't update--fails with an unknown error. Following the Microsoft Knowledge Base article, I went to the website and downloaded Silverlight manually, and the installation still failed. Next, I tried uninstalling from the Control Panel, and got an error saying I did not have access to a registry key. Googling that error led me to a thread on this site.
I installed FRST and did a scan. I do see some text about tencent and qq -- I think these are Chinese websites my wife may have visited, and likely are the source of the trojan. I would appreciate any advice and assistance.
Also, please opine whether this computer's specs are so hopelessly obsolete that we should just give up and buy our daughter a new computer!
Here are the scans:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:19-12-2015
Ran by Sue (administrator) on SUE-PC (19-12-2015 14:28:28)
Running from C:\Users\Sue\Desktop
Loaded Profiles: Sue (Available Profiles: Sue & Heather)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgemcx.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Av\avgui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Logitech Inc.) C:\Program Files\Logitech\Vid HD\Vid.exe
() C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIGCA.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [87] => C:\ProgramData\microsoft908\908.exe [124224 2011-04-22] (DT Soft Ltd)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguix.exe [1136552 2015-11-12] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\Av\avgui.exe [3855272 2015-12-09] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\Run: [Logitech Vid] => C:\Program Files\Logitech\Vid HD\Vid.exe [5915480 2010-10-29] (Logitech Inc.)
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\Run: [Epson Stylus NX420(Network)] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIGCA.EXE [200704 2009-09-14] (SEIKO EPSON CORPORATION)
Startup: C:\Users\Sue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2010-12-10]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicyScripts: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.1.1
Tcpip\..\Interfaces\{5C3721BE-2B24-4D25-A5BE-4487ABA3C258}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{63F8297F-CB29-469E-8C36-4B12FBFF658F}: [DhcpNameServer] 10.0.1.1
Internet Explorer:
==================
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?gws_rd=ssl
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/
SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> DefaultScope {60BDEE68-60CD-49A9-86E6-524668AACE9C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=BABTDF&PC=BBLN&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3100087442-411317864-4144688174-1000 -> {60BDEE68-60CD-49A9-86E6-524668AACE9C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12] (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-12] (Microsoft Corporation)
FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll [No File]
FF Plugin: @qq.com/npqscall,version=1.0.0 -> %commonprogramfiles%\tencent\NPQSCALL\npqscall.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-19] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://intranet.epa.gov/
CHR StartupUrls: Default -> ""
CHR Profile: C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-19]
CHR Extension: (Google Docs) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-19]
CHR Extension: (Google Drive) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-19]
CHR Extension: (YouTube) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-19]
CHR Extension: (Google Search) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-19]
CHR Extension: (Google Sheets) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-19]
CHR Extension: (Google Docs Offline) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-19]
CHR Extension: (Sudoku for Google Chrome™) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifaabgmcffhggbfgjknkgenljelbocin [2015-12-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-19]
CHR Extension: (Gmail) - C:\Users\Sue\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-19]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2010-12-10] (Adobe Systems) [File not signed]
S3 AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [615584 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [3857272 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [862632 2015-11-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\Av\avgwdsvcx.exe [579776 2015-12-09] (AVG Technologies CZ, s.r.o.)
R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [149936 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [255920 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [231344 2015-08-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-11-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [229296 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [308656 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [193968 2015-11-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [36784 2015-08-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [231856 2015-10-08] (AVG Technologies CZ, s.r.o.)
R3 GTIPCI21; C:\Windows\System32\DRIVERS\gtipci21.sys [88192 2006-09-14] (Texas Instruments)
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2599936 2007-08-12] (Intel® Corporation)
R3 STAC97; C:\Windows\System32\drivers\STAC97.sys [273168 2005-03-10] (SigmaTel, Inc.)
R3 VSTHWICH; C:\Windows\System32\DRIVERS\VSTICH3.SYS [242176 2009-07-13] (Conexant Systems, Inc.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-12-19 14:28 - 2015-12-19 14:31 - 00012239 _____ C:\Users\Sue\Desktop\FRST.txt
2015-12-19 14:24 - 2015-12-19 14:28 - 00000000 ____D C:\FRST
2015-12-19 14:22 - 2015-12-19 14:23 - 01721344 _____ (Farbar) C:\Users\Sue\Desktop\FRST.exe
2015-12-19 13:55 - 2015-12-19 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-19 13:49 - 2015-12-19 13:51 - 07022816 _____ (Microsoft Corporation) C:\Users\Sue\Downloads\Silverlight.exe
2015-12-19 13:47 - 2015-12-19 13:49 - 15692724 _____ C:\Users\Sue\Downloads\Silverlight.dmg
2015-12-19 10:07 - 2015-12-19 10:07 - 00000000 ____D C:\Users\Heather\AppData\Local\Google
2015-12-19 09:15 - 2015-12-19 09:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-12-19 09:15 - 2015-12-19 09:15 - 00001989 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-12-19 07:56 - 2015-10-08 18:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-19 07:56 - 2015-10-08 18:13 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-19 07:56 - 2015-10-08 14:13 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-19 06:48 - 2015-11-10 13:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-19 06:48 - 2015-11-10 13:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-19 06:48 - 2015-07-30 12:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-12-19 06:48 - 2015-02-03 21:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-12-19 06:48 - 2015-02-02 22:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-12-19 06:16 - 2015-12-19 06:16 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-19 06:16 - 2015-12-19 06:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-19 06:12 - 2015-12-19 14:17 - 00000880 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-19 06:12 - 2015-12-19 10:58 - 00000876 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-19 06:11 - 2015-12-19 06:14 - 00000000 ____D C:\Program Files\Google
2015-12-19 05:25 - 2015-12-19 05:25 - 00000000 ____D C:\Users\Heather\AppData\Roaming\AVG
2015-12-19 05:24 - 2015-12-19 05:24 - 00000000 ____D C:\Users\Heather\AppData\Local\Avg
2015-12-19 03:15 - 2015-12-19 03:15 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-19 03:15 - 2015-12-19 03:15 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-19 03:15 - 2015-12-19 03:15 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-19 03:15 - 2015-12-19 03:15 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-12-19 03:15 - 2015-12-19 03:15 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-19 03:15 - 2015-12-19 03:15 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-12-19 03:15 - 2015-12-19 03:15 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-12-19 03:15 - 2015-12-19 03:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-19 03:15 - 2015-12-19 03:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-19 03:14 - 2015-12-19 03:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-12-19 03:14 - 2015-12-19 03:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-12-19 03:14 - 2015-12-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2015-12-19 03:09 - 2015-12-19 03:09 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2015-12-19 03:08 - 2015-12-19 03:08 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2015-12-18 21:52 - 2015-12-18 22:36 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-18 17:33 - 2015-02-24 22:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-12-18 09:05 - 2013-10-03 20:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2015-12-18 09:05 - 2013-10-03 20:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-12-18 09:04 - 2015-01-08 21:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-12-18 09:04 - 2015-01-08 21:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-12-18 09:04 - 2015-01-08 21:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-12-18 08:35 - 2015-12-18 08:35 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-12-18 08:35 - 2015-12-18 08:35 - 00000000 ____D C:\Windows\system32\appraiser
2015-12-18 08:28 - 2015-05-08 22:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-12-18 08:28 - 2015-05-08 22:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-12-18 08:28 - 2015-05-08 22:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-12-18 08:28 - 2015-05-08 22:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-12-18 08:28 - 2015-05-08 22:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-12-18 08:28 - 2015-05-08 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-12-18 08:27 - 2015-05-08 22:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-12-18 08:27 - 2015-05-08 22:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-12-18 08:27 - 2015-05-08 20:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-12-18 08:26 - 2014-12-18 21:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-12-18 08:25 - 2013-04-25 18:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2015-12-18 08:23 - 2015-04-12 22:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-12-18 08:17 - 2015-10-01 12:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-12-18 08:16 - 2015-10-01 12:50 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-12-18 07:40 - 2014-04-04 21:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-12-18 07:40 - 2013-11-26 06:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-12-18 07:39 - 2015-06-01 18:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-12-18 07:39 - 2014-04-04 21:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-12-18 07:38 - 2015-11-10 13:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-18 07:38 - 2015-11-10 12:40 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-18 07:37 - 2014-10-24 20:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-12-18 07:22 - 2013-07-02 22:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2015-12-18 07:22 - 2013-07-02 22:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2015-12-18 07:19 - 2013-09-07 21:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-12-18 07:11 - 2015-01-28 22:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-12-18 07:06 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-12-18 07:06 - 2012-07-04 14:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-12-18 07:05 - 2013-10-03 20:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-12-18 07:05 - 2013-10-03 20:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-12-18 07:01 - 2015-07-10 12:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-12-18 07:01 - 2015-07-10 12:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-12-18 07:01 - 2015-07-10 12:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-12-18 07:00 - 2015-07-01 15:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-12-18 07:00 - 2015-07-01 15:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-12-18 07:00 - 2013-02-11 22:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-12-18 06:52 - 2015-11-11 13:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-18 06:52 - 2015-11-11 13:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-18 06:52 - 2012-11-02 00:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-12-18 06:51 - 2015-06-15 16:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-12-18 06:51 - 2015-06-15 16:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-12-18 06:51 - 2015-06-15 16:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-12-18 06:51 - 2015-06-15 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-12-18 06:50 - 2012-07-25 22:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-12-18 06:50 - 2012-07-25 22:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2015-12-18 06:50 - 2012-07-25 22:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-12-18 06:50 - 2012-07-25 22:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-12-18 06:50 - 2012-07-25 22:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2015-12-18 06:50 - 2012-07-25 21:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-12-18 06:50 - 2012-07-25 21:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-12-18 06:50 - 2012-06-02 09:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-12-18 06:49 - 2015-08-27 12:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-12-18 06:49 - 2015-08-27 12:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-12-18 06:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-12-18 06:49 - 2015-08-27 12:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-12-18 06:48 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-12-18 06:48 - 2015-07-09 12:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-12-18 06:48 - 2013-10-29 21:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-12-18 06:48 - 2013-01-23 23:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-12-18 06:47 - 2014-11-10 21:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-12-18 06:45 - 2015-08-05 12:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-12-18 06:45 - 2011-06-15 23:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-12-18 06:44 - 2013-10-18 20:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2015-12-18 06:44 - 2011-02-18 00:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-12-18 06:40 - 2014-06-30 17:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-12-18 06:40 - 2014-06-15 20:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-12-18 06:40 - 2014-06-15 20:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-12-18 06:40 - 2014-06-15 20:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2015-12-18 06:40 - 2014-03-09 16:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-12-18 06:39 - 2014-06-06 01:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-12-18 06:39 - 2014-03-09 16:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-12-18 06:37 - 2013-10-11 21:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2015-12-18 06:37 - 2013-10-11 21:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2015-12-18 06:37 - 2013-10-11 20:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2015-12-18 06:37 - 2013-10-11 20:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2015-12-18 06:36 - 2014-03-04 04:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-12-18 06:36 - 2014-03-04 04:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-12-18 06:34 - 2014-08-11 20:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-12-18 06:34 - 2012-03-01 00:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2015-12-18 06:34 - 2012-03-01 00:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2015-12-18 06:33 - 2012-08-21 15:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-12-18 06:29 - 2015-07-15 12:59 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-12-18 06:29 - 2015-07-15 12:55 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-12-18 06:28 - 2015-07-15 12:54 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-12-18 06:24 - 2015-10-29 12:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-12-18 06:24 - 2015-10-29 12:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-12-18 06:24 - 2015-10-29 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-12-18 06:24 - 2015-10-29 12:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-12-18 06:23 - 2015-10-19 19:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-12-18 06:23 - 2015-10-19 19:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-12-18 06:23 - 2015-10-19 19:52 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-12-18 06:23 - 2015-10-19 19:48 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-12-18 06:23 - 2015-10-19 19:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-12-18 06:23 - 2015-10-19 19:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-12-18 06:23 - 2015-10-19 18:29 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-12-18 06:23 - 2015-10-13 11:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-12-18 06:23 - 2015-10-13 11:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-12-18 06:22 - 2015-10-19 19:52 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-12-18 06:22 - 2015-10-19 19:45 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-12-18 06:22 - 2015-10-19 19:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-12-18 06:22 - 2015-10-19 19:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-12-18 06:22 - 2015-10-19 19:45 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-12-18 06:22 - 2015-10-19 19:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-12-18 06:22 - 2015-10-19 19:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-12-18 06:22 - 2015-10-19 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-12-18 06:22 - 2015-10-19 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-12-18 06:22 - 2015-10-19 19:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-12-18 06:22 - 2015-10-19 18:28 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-12-18 06:22 - 2015-10-19 18:28 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-12-18 06:19 - 2011-12-30 00:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-12-18 06:18 - 2013-05-09 22:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-12-18 06:16 - 2015-07-04 12:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-12-18 06:15 - 2015-09-01 21:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-12-18 06:15 - 2015-09-01 20:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-12-18 06:13 - 2015-10-12 23:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-12-18 06:12 - 2015-11-20 13:34 - 02956800 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-18 06:12 - 2015-11-20 13:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-18 06:12 - 2015-11-20 13:33 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-18 06:12 - 2015-11-20 13:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-18 06:12 - 2015-11-20 13:33 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-18 06:11 - 2014-01-27 21:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-12-18 06:11 - 2013-03-18 22:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2015-12-18 06:10 - 2015-11-03 13:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-18 06:10 - 2013-08-27 19:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-12-18 06:09 - 2015-04-10 22:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-12-18 06:09 - 2015-03-03 23:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-12-18 06:09 - 2015-03-03 23:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-12-18 06:09 - 2013-04-25 23:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-12-18 06:06 - 2013-05-12 22:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2015-12-18 06:06 - 2013-05-12 22:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2015-12-18 06:03 - 2014-09-04 00:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-12-18 06:02 - 2015-11-05 14:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-18 06:01 - 2011-05-03 23:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-12-18 06:01 - 2011-05-03 23:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-12-18 06:01 - 2011-05-03 23:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-12-18 06:01 - 2011-05-03 23:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-12-18 06:00 - 2011-05-03 23:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-12-18 06:00 - 2011-05-03 23:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-12-18 06:00 - 2011-05-03 23:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-12-18 06:00 - 2011-05-03 23:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-12-18 06:00 - 2011-05-03 23:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-12-18 05:59 - 2015-01-16 21:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-12-18 05:59 - 2012-06-06 00:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2015-12-18 05:58 - 2014-02-03 21:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-12-18 05:58 - 2014-02-03 21:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-12-18 05:58 - 2014-02-03 21:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-12-18 05:58 - 2014-02-03 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-12-18 05:56 - 2012-10-03 11:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-12-18 05:56 - 2012-10-03 11:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-12-18 05:56 - 2012-10-03 11:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-12-18 05:56 - 2012-10-03 10:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-12-18 05:49 - 2015-07-22 12:53 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-12-18 05:49 - 2015-07-22 12:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-12-18 05:49 - 2015-07-22 12:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-12-18 05:49 - 2015-07-22 11:38 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-12-18 05:44 - 2014-06-17 20:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-12-18 05:43 - 2015-07-09 12:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-12-18 05:43 - 2015-07-09 12:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-12-18 05:43 - 2015-06-17 12:39 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-12-18 05:42 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-12-18 05:42 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-12-18 05:42 - 2012-07-04 16:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2015-12-18 05:42 - 2012-07-04 16:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-12-18 05:42 - 2012-07-04 16:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2015-12-18 05:41 - 2015-04-17 21:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-12-18 05:34 - 2015-05-25 13:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-12-18 05:34 - 2015-05-25 13:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-12-18 05:34 - 2015-05-25 13:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-12-18 05:27 - 2014-01-23 21:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-12-18 05:27 - 2013-07-25 03:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-12-18 05:24 - 2015-11-03 13:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-18 05:24 - 2014-08-01 06:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-12-18 05:20 - 2015-04-27 14:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-12-18 05:20 - 2015-04-27 14:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-12-18 05:20 - 2015-04-27 14:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-12-18 05:20 - 2015-04-27 14:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-12-18 05:16 - 2014-06-06 04:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-12-18 05:14 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-12-18 05:14 - 2015-10-01 12:50 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-12-18 05:13 - 2015-10-01 11:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-12-18 05:01 - 2014-06-18 17:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-12-18 05:01 - 2014-06-18 17:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-12-18 05:01 - 2014-06-18 17:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-12-18 04:47 - 2012-12-07 07:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-12-18 04:47 - 2012-12-07 07:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-12-18 04:47 - 2012-12-07 05:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-12-18 04:47 - 2012-12-07 05:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-12-18 04:37 - 2014-12-11 12:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-12-18 00:48 - 2012-09-25 17:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2015-12-18 00:48 - 2011-12-16 02:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2015-12-18 00:31 - 2015-09-23 08:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-12-18 00:31 - 2015-09-23 08:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-12-18 00:28 - 2015-11-05 14:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-18 00:28 - 2015-11-05 04:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-18 00:28 - 2014-11-25 22:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-12-18 00:27 - 2014-07-16 20:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-12-18 00:27 - 2014-07-16 20:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-12-18 00:27 - 2014-07-16 20:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-12-18 00:27 - 2014-07-16 20:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-12-18 00:27 - 2014-07-16 20:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-12-18 00:27 - 2014-07-16 20:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-12-18 00:27 - 2012-04-25 23:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2015-12-18 00:27 - 2012-04-25 23:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2015-12-18 00:23 - 2015-09-18 12:47 - 00023384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-12-18 00:23 - 2015-09-18 12:44 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00587776 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-12-18 00:23 - 2015-09-18 12:44 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-12-18 00:23 - 2015-09-18 12:35 - 00999936 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-12-18 00:23 - 2015-06-03 15:17 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-12-18 00:23 - 2015-06-03 15:17 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-12-18 00:23 - 2013-10-11 21:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2015-12-18 00:23 - 2013-10-11 21:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2015-12-18 00:23 - 2013-10-11 21:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2015-12-18 00:20 - 2015-02-02 22:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-12-17 23:39 - 2015-06-25 04:48 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-12-17 23:39 - 2015-06-25 04:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-12-17 23:39 - 2015-06-25 04:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-12-17 23:39 - 2015-02-18 02:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-12-17 23:38 - 2013-08-04 20:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-12-17 23:37 - 2013-07-25 20:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-12-17 23:36 - 2014-10-29 20:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-12-17 23:31 - 2012-11-22 21:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2015-12-17 22:53 - 2015-12-17 22:54 - 00000000 ____D C:\b20138dfe1dda6a3b55664
2015-12-17 22:45 - 2011-11-17 00:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2015-12-17 22:24 - 2012-03-17 02:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2015-12-17 22:15 - 2012-10-09 12:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-12-17 22:15 - 2012-10-09 12:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-12-17 21:45 - 2012-05-13 23:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-12-17 21:16 - 2012-01-04 03:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-12-17 20:48 - 2015-07-14 21:55 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-12-17 20:43 - 2015-04-29 13:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-12-17 20:43 - 2015-04-29 13:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-12-17 20:43 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-12-17 20:43 - 2015-04-29 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-12-17 20:43 - 2015-04-29 13:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-12-17 20:43 - 2014-12-05 22:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-12-17 20:43 - 2012-10-03 11:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-12-17 20:43 - 2012-10-03 11:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-12-17 20:42 - 2014-12-18 20:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-12-17 20:42 - 2014-01-28 21:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-12-17 20:42 - 2013-07-12 05:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2015-12-17 17:59 - 2013-06-25 17:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-12-17 17:59 - 2012-11-28 17:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2015-12-17 17:59 - 2012-11-28 17:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2015-12-17 17:58 - 2012-11-28 17:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2015-12-17 17:56 - 2015-02-02 22:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-12-17 17:56 - 2015-02-02 22:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-12-17 17:56 - 2015-02-02 22:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-12-17 17:56 - 2015-02-02 22:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-12-17 17:55 - 2015-02-02 22:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-12-17 17:55 - 2015-02-02 22:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-12-17 17:55 - 2014-10-31 17:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-12-17 17:55 - 2014-06-27 19:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-12-17 17:55 - 2014-06-27 19:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-12-17 17:54 - 2015-02-02 22:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-12-17 17:54 - 2015-02-02 22:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-12-17 17:54 - 2015-02-02 22:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-12-17 17:54 - 2015-02-02 22:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-12-17 17:54 - 2015-02-02 22:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-12-17 17:46 - 2014-10-02 20:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-12-17 17:46 - 2014-10-02 20:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-12-17 06:45 - 2013-11-26 20:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-12-17 06:45 - 2013-11-26 20:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-12-17 06:37 - 2014-10-13 20:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-12-17 06:30 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-12-17 06:30 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-12-17 06:30 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-12-17 06:30 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-12-17 06:30 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-12-17 06:30 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-12-17 06:27 - 2015-04-24 12:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-12-17 06:27 - 2014-12-07 21:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-12-16 22:46 - 2012-02-17 00:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2015-12-16 22:45 - 2012-02-16 23:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2015-12-15 22:51 - 2015-12-15 22:51 - 00000000 ____D C:\Windows\Temp538DAC00-A74D-4F12-17FB-B8EB2C7E298D-Signatures
2015-12-14 23:57 - 2015-12-14 23:57 - 00000000 ____D C:\Users\Sue\AppData\Roaming\AVG
2015-12-14 23:55 - 2015-12-14 23:55 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-14 23:54 - 2015-12-14 23:54 - 00000000 ____D C:\Users\Sue\AppData\Roaming\TuneUp Software
2015-12-14 23:54 - 2015-12-14 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-12-14 23:45 - 2015-12-14 23:45 - 00000000 ___HD C:\$AVG
2015-12-14 23:33 - 2015-12-19 11:02 - 00000000 ____D C:\ProgramData\MFAData
2015-12-14 23:33 - 2015-12-14 23:33 - 00000000 ____D C:\Users\Sue\AppData\Local\MFAData
2015-12-14 23:31 - 2015-12-14 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2015-12-14 23:24 - 2015-12-14 23:45 - 00000000 ____D C:\ProgramData\Avg
2015-12-14 23:24 - 2015-12-14 23:39 - 00000000 ____D C:\Program Files\AVG
2015-12-14 23:21 - 2015-12-14 23:57 - 00000000 ____D C:\Users\Sue\AppData\Local\Avg
2015-12-14 23:21 - 2015-12-14 23:29 - 00000000 ____D C:\Users\Sue\AppData\Local\AvgSetupLog
2015-12-14 22:34 - 2015-12-14 22:34 - 00000000 ____D C:\Windows\Temp60135627-FB3C-F4AC-2CCD-4964BB1165C7-Signatures
2015-12-14 21:05 - 2015-12-14 21:05 - 00000000 ____D C:\Windows\Temp0ABEFD6F-A169-B8E3-DB98-4674184C94B6-Signatures
2015-12-14 21:03 - 2015-12-14 21:03 - 00000000 ____D C:\Program Files\Microsoft CAPICOM 2.1.0.2
2015-12-14 20:32 - 2015-12-14 20:32 - 00000000 ____D C:\Users\Heather\AppData\Local\Logitech® Webcam Software
2015-12-14 20:31 - 2015-12-14 20:31 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Adobe
2015-12-14 20:30 - 2015-12-19 05:24 - 00109280 _____ C:\Users\Heather\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-14 20:30 - 2015-12-14 20:30 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Epson
2015-12-14 20:29 - 2015-12-14 20:29 - 00001413 _____ C:\Users\Heather\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-14 20:28 - 2015-12-14 20:29 - 00000000 ____D C:\Users\Heather
2015-12-14 20:28 - 2015-12-14 20:28 - 00000020 ___SH C:\Users\Heather\ntuser.ini
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\My Documents
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Videos
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Pictures
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 _SHDL C:\Users\Heather\Documents\My Music
2015-12-14 20:28 - 2015-12-14 20:28 - 00000000 ____D C:\Users\Heather\AppData\Local\VirtualStore
2015-12-14 20:28 - 2011-01-02 01:38 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Mozilla
2015-12-14 20:28 - 2010-12-01 23:39 - 00000000 ____D C:\Users\Heather\Documents\Visual Studio 2008
2015-12-14 20:28 - 2010-12-01 23:37 - 00000000 ____D C:\Users\Heather\AppData\Local\Microsoft Help
2015-12-14 20:28 - 2010-12-01 00:02 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Macromedia
2015-12-14 20:28 - 2009-07-14 02:49 - 00000000 ____D C:\Users\Heather\AppData\Roaming\Media Center Programs
2015-12-13 18:00 - 2011-03-11 00:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-12-13 18:00 - 2011-03-11 00:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-12-13 18:00 - 2011-03-11 00:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-12-13 18:00 - 2011-03-11 00:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-12-13 18:00 - 2011-03-11 00:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-12-13 18:00 - 2011-03-11 00:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-12-13 18:00 - 2011-03-10 23:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-12-13 17:37 - 2015-12-13 17:43 - 00000000 ____D C:\2358cb107be334e1dd8b5d10
2015-12-13 17:29 - 2015-12-13 17:29 - 00000000 ____D C:\Users\Sue\AppData\Local\Logitech® Webcam Software
2015-12-13 17:06 - 2015-12-13 17:07 - 00000000 ____D C:\037b0a5567cbb37b8153cf05
2015-12-13 17:01 - 2015-12-17 02:11 - 00001945 _____ C:\Windows\epplauncher.mif
2015-12-13 17:00 - 2015-12-17 02:11 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-12-13 16:58 - 2015-12-17 02:07 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-12-13 16:37 - 2015-12-13 16:37 - 00000000 ____D C:\Windows\system32\SPReview
2015-12-13 16:36 - 2015-12-13 16:36 - 00000000 ____D C:\Windows\system32\EventProviders
2015-12-13 15:04 - 2015-12-13 15:08 - 00000000 ____D C:\Windows\system32\MRT
2015-12-13 14:52 - 2015-12-13 15:00 - 00001908 _____ C:\Windows\diagwrn.xml
2015-12-13 14:52 - 2015-12-13 15:00 - 00001908 _____ C:\Windows\diagerr.xml
2015-12-13 14:52 - 2015-12-13 15:00 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-13 14:35 - 2015-12-13 14:35 - 00000000 ____D C:\ESD
2015-12-13 14:10 - 2015-12-13 14:10 - 00000000 ___HD C:\$Windows.~WS
2015-12-13 14:07 - 2015-12-13 14:07 - 00000000 ____D C:\Users\Sue\Documents\SightSpeed Recordings
2015-12-13 14:01 - 2015-12-13 14:01 - 00000000 _____ C:\Windows\EEventManager.INI
2015-12-13 11:32 - 2012-05-31 23:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2015-12-13 11:32 - 2012-05-31 23:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2015-12-13 11:32 - 2012-05-31 23:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2015-12-13 11:32 - 2012-05-31 23:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2015-12-13 11:32 - 2012-05-31 23:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2015-12-13 11:32 - 2012-05-31 23:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2015-11-20 08:05 - 2015-11-20 08:05 - 00031664 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsshimx.sys
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-12-19 14:25 - 2009-07-13 21:37 - 00000000 ____D C:\Windows
2015-12-19 14:17 - 2010-12-11 10:49 - 00000000 ____D C:\Users\Sue\AppData\Local\Google
2015-12-19 14:16 - 2009-07-13 23:34 - 00014160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-19 14:16 - 2009-07-13 23:34 - 00014160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-19 13:55 - 2010-12-04 17:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-19 12:34 - 2010-11-27 18:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-19 12:34 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-19 10:56 - 2009-07-13 23:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-19 09:55 - 2009-07-13 23:33 - 00406024 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-19 09:17 - 2010-12-01 00:04 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-19 09:15 - 2010-12-01 00:02 - 00000000 ____D C:\ProgramData\Adobe
2015-12-19 09:15 - 2010-12-01 00:02 - 00000000 ____D C:\Program Files\Adobe
2015-12-19 09:07 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\rescache
2015-12-19 06:08 - 2010-11-28 19:05 - 00000000 ____D C:\Users\Sue\AppData\Local\Deployment
2015-12-19 04:14 - 2010-11-27 19:04 - 00905808 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-19 04:14 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\inf
2015-12-19 03:58 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-12-19 03:31 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\AppCompat
2015-12-18 23:12 - 2010-11-28 18:51 - 00109280 _____ C:\Users\Sue\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-18 21:53 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\tracing
2015-12-18 21:53 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-12-18 21:52 - 2009-07-14 02:50 - 00000000 ____D C:\Program Files\Windows Journal
2015-12-18 21:52 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Dism
2015-12-18 04:05 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\inetsrv
2015-12-17 23:06 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Defender
2015-12-16 09:22 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\Tencent
2015-12-16 09:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\microsoft908
2015-12-16 08:43 - 2011-07-16 19:08 - 00000000 ____D C:\Program Files\browser
2015-12-13 20:21 - 2011-07-16 19:08 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-12-13 17:26 - 2009-07-13 23:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Sidebar
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Portable Devices
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-12-13 17:10 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\DVD Maker
2015-12-13 17:10 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\servicing
2015-12-13 17:10 - 2009-07-13 21:37 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\sysprep
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\Setup
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\oobe
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\migwiz
2015-12-13 17:09 - 2009-07-13 21:37 - 00000000 ____D C:\Windows\system32\manifeststore
2015-12-13 16:51 - 2009-07-13 21:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2015-12-13 16:35 - 2010-11-27 18:47 - 00000000 ____D C:\Program Files\Microsoft Office
2015-12-13 16:07 - 2010-11-28 15:00 - 00000000 ____D C:\Program Files\Common Files\logishrd
2015-12-13 16:05 - 2010-11-28 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-12-13 15:57 - 2010-11-28 15:07 - 00000000 ____D C:\Windows\system32\logishrd
2015-12-13 15:22 - 2009-07-13 21:04 - 00000478 _____ C:\Windows\win.ini
2015-12-13 14:59 - 2010-11-27 18:37 - 00000000 ____D C:\Windows\Panther
2015-12-13 13:49 - 2006-05-12 14:16 - 00000000 ____D C:\DownLoad
2015-12-13 12:35 - 2011-01-01 18:46 - 00000000 ____D C:\Program Files\Archive_Setup
2015-12-13 12:18 - 2010-11-27 18:19 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2015-12-13 12:17 - 2010-11-27 19:11 - 00000028 _____ C:\Windows\ODBC.INI
2015-12-13 11:59 - 2009-07-13 23:52 - 00000000 ____D C:\Program Files\MSBuild
2015-12-13 11:47 - 2010-11-27 18:17 - 00000000 ____D C:\Program Files\Microsoft Web Designer Tools
2015-12-13 11:34 - 2011-04-02 08:26 - 00000000 ____D C:\Windows\Minidump
2015-12-13 11:34 - 2009-07-13 23:52 - 00000000 ____D C:\Windows\Downloaded Program Files
2015-12-13 11:12 - 2009-07-13 21:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-12-13 10:59 - 2010-11-28 19:37 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-12-13 10:21 - 2010-11-30 21:32 - 00000000 ____D C:\Program Files\Telerik
2015-12-13 09:46 - 2010-11-28 14:53 - 00000000 ____D C:\ProgramData\Skype
2015-12-08 22:39 - 2010-11-27 17:53 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-11-23 19:09 - 2010-12-04 09:56 - 137798368 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
==================== Files in the root of some directories =======
2010-11-28 14:55 - 2010-11-28 14:55 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
Some files in TEMP:
====================
C:\Users\Sue\AppData\Local\Temp\AMPing.exe
C:\Users\Sue\AppData\Local\Temp\InstallManager_BAB_BAB.exe
C:\Users\Sue\AppData\Local\Temp\_isF5AF.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-12-19 00:14
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x86) Version:19-12-2015
Ran by Sue (2015-12-19 14:32:16)
Running from C:\Users\Sue\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) (2010-11-27 22:36:08)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3100087442-411317864-4144688174-500 - Administrator - Disabled)
Guest (S-1-5-21-3100087442-411317864-4144688174-501 - Limited - Disabled)
Heather (S-1-5-21-3100087442-411317864-4144688174-1004 - Limited - Enabled) => C:\Users\Heather
Sue (S-1-5-21-3100087442-411317864-4144688174-1000 - Administrator - Enabled) => C:\Users\Sue
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.1.102.64 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Reader X (10.1.16) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
AVG (HKLM\...\AvgZen) (Version: 1.22.1.40089 - AVG Technologies)
AVG (Version: 16.12.7303 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4489 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.12.7303 - AVG Technologies)
AVG Zen (Version: 1.22.1 - AVG Technologies) Hidden
Bing Rewards Client Installer (Version: 16.0.345.0 - Microsoft Corporation) Hidden
CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden
C-Major Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 42xx - SigmaTel)
Dell Driver Download Manager (HKU\S-1-5-21-3100087442-411317864-4144688174-1000\...\f031ef6ac137efc5) (Version: 2.1.0.0 - Dell Inc.)
Driver Detective (HKLM\...\{4640FDE1-B83A-4376-84ED-86F86BEE2D41}) (Version: 8.0.1 - PC Drivers HeadQuarters)
Epson Event Manager (HKLM\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
EPSON NX420 Series Printer Uninstall (HKLM\...\EPSON NX420 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.2 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.2a - SEIKO EPSON CORPORATION)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FMW 1 (Version: 1.32.2 - AVG Technologies) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden
Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7240) - Logitech Inc..)
Logitech Webcam Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Microsoft .NET Compact Framework 2.0 SP2 (HKLM\...\{EDDF99D9-9FE3-4871-A7DB-D1522C51EE9A}) (Version: 2.0.7045 - Microsoft Corporation)
Microsoft .NET Compact Framework 3.5 (HKLM\...\{291B3A3B-F808-45B8-8113-DF232FCB6C82}) (Version: 3.5.7283 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET 2.0 AJAX Extensions 1.0 (HKLM\...\{082BDF7B-4810-4599-BF0D-E3AC44EC8524}) (Version: 1.0.61025 - Microsoft Corporation)
Microsoft Device Emulator version 3.0 - ENU (HKLM\...\{B32E7732-B2FB-3FD0-81AC-6025B1104C66}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Document Explorer 2008 (HKLM\...\Microsoft Document Explorer 2008) (Version: - Microsoft Corporation)
Microsoft Office 2007 Service Pack 2 (SP2) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 ENU (HKLM\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 for Devices ENU (HKLM\...\{241F2BF7-69EB-42A4-9156-96B2426C7504}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.2 (HKLM\...\{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}) (Version: 1.2.0.0 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.57\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{29A96789-9595-4947-BEDB-0FCC776F7DB8}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.2.183.39\goopdate.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.79\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
CustomCLSID: HKU\S-1-5-21-3100087442-411317864-4144688174-1000_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Users\Sue\AppData\Local\Google\Update\1.3.21.65\psuser.dll => No File
==================== Restore Points =========================
19-12-2015 10:30:17 Windows Update
19-12-2015 12:19:38 Windows Update
19-12-2015 13:37:44 Windows Update
19-12-2015 14:00:46 Removed Microsoft Silverlight
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:04 - 2009-06-10 16:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {4A1EE944-9F4A-4E90-A454-AF289152D06E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {66EDCE08-470F-4B43-A574-BBBDAF53CE02} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-19] (Google Inc.)
Task: {A56A7429-C978-4773-972D-51FF9AEC9922} - System32\Tasks\{2302C6AF-3FD7-470A-B197-5F267533F9E1} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {B3CCB1A3-9F50-42B6-8E3C-734676F2FF2D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {C1B025F3-3021-437A-81B8-FC8BFB988EEF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {E917AA90-B4CF-4B7A-AFCA-AFD3C0AA1B66} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-19] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2010-05-07 18:35 - 2010-05-07 18:35 - 02143576 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtCore4.dll
2010-05-07 18:35 - 2010-05-07 18:35 - 07954776 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtGui4.dll
2010-05-07 18:36 - 2010-05-07 18:36 - 00340824 _____ () C:\Program Files\Logitech\LWS\Webcam Software\QtXml4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00027480 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2010-05-07 18:37 - 2010-05-07 18:37 - 00126808 _____ () C:\Program Files\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-12-14 23:24 - 2015-12-14 23:22 - 40500224 _____ () C:\Program Files\AVG\UiDll\2171\libcef.dll
2009-04-09 18:04 - 2009-04-09 18:04 - 02141008 _____ () C:\Program Files\Logitech\Vid HD\QtCore4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 07704400 _____ () C:\Program Files\Logitech\Vid HD\QtGui4.dll
2009-04-22 16:53 - 2009-04-22 16:53 - 00969040 _____ () C:\Program Files\Logitech\Vid HD\QtNetwork4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00475472 _____ () C:\Program Files\Logitech\Vid HD\QtOpenGL4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00363856 _____ () C:\Program Files\Logitech\Vid HD\QtXml4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00200016 _____ () C:\Program Files\Logitech\Vid HD\QtSql4.dll
2010-10-29 15:01 - 2010-10-29 15:01 - 00027472 _____ () C:\Program Files\Logitech\Vid HD\SDL.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 11311952 _____ () C:\Program Files\Logitech\Vid HD\QtWebKit4.dll
2009-03-03 17:17 - 2009-03-03 17:17 - 00291664 _____ () C:\Program Files\Logitech\Vid HD\phonon4.dll
2010-10-29 15:02 - 2010-10-29 15:02 - 00751616 _____ () C:\Program Files\Logitech\Vid HD\vpxmd.dll
2009-03-03 17:18 - 2009-03-03 17:18 - 00029008 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qgif4.dll
2009-03-03 17:18 - 2009-03-03 17:18 - 00035152 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qico4.dll
2009-03-03 17:18 - 2009-03-03 17:18 - 00138064 _____ () C:\Program Files\Logitech\Vid HD\plugins\imageformats\qjpeg4.dll
2011-11-11 14:07 - 2011-11-11 14:07 - 00265240 _____ () C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2011-11-11 14:09 - 2011-11-11 14:09 - 00336408 _____ () C:\Program Files\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3100087442-411317864-4144688174-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 10.0.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{BA01D8BC-7E39-4A74-BBAE-B1C5E0CB22F5}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{BBCE40F2-A0E9-4CC3-93D4-428DA092E1DB}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{86B3D7F4-BF5C-49BC-A893-A5EDA0CE7181}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{DB3C333A-E046-4628-AC34-EDED7EF8D81B}] => (Allow) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{E1E570E1-E357-41CF-88E2-4138FAD7D965}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe
FirewallRules: [{A6B314DD-715C-4AAB-A0D9-A5818F586E2E}] => (Allow) C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe
FirewallRules: [TCP Query User{E0A20793-7C99-4716-B761-4EF9E6E30FC1}C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe] => (Allow) C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe
FirewallRules: [UDP Query User{1DE90FA4-5C56-4944-81A1-BDCF6E759AE8}C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe] => (Allow) C:\program files\telerik\radcontrols for asp.net ajax q1 2010\live demos\startexamples.exe
FirewallRules: [TCP Query User{F91C35B2-DDC4-4673-8104-FDE7AF8A3629}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{3544D40D-6F98-42FC-A69F-08637E549836}C:\program files\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files\epson software\event manager\eeventmanager.exe
FirewallRules: [{B3A59747-B1E0-4AE7-9221-16424C40A280}] => (Allow) C:\Program Files\Common Files\Tencent\QQDownload\107\Tencentdl.exe
FirewallRules: [{57C6C0C2-F414-4B5A-8E13-75C471508BCE}] => (Allow) C:\Program Files\Common Files\Tencent\QQDownload\107\Tencentdl.exe
FirewallRules: [{7D9D1B5A-5DEF-44CB-8F46-B69ECB505272}] => (Allow) C:\Program Files\Tencent\QQ\Bin\QQ.exe
FirewallRules: [{8DF12878-E3BF-47B2-958B-16CFD857BC61}] => (Allow) C:\Program Files\Tencent\QQ\Bin\QQ.exe
FirewallRules: [{F3B6BC67-1A51-46B6-B34D-BF6FAE63BC1E}] => (Allow) C:\Program Files\Tencent\QQ\Bin\auclt.exe
FirewallRules: [{E1B75C40-12D0-46F6-BBFB-3909B6701EBD}] => (Allow) C:\Program Files\Tencent\QQ\Bin\auclt.exe
FirewallRules: [{02B8C847-754D-4043-92B6-52D2200C04D9}] => (Allow) C:\Program Files\Tencent\QQ\Bin\SetupEx\QQSetupEx.exe
FirewallRules: [{247EC0AE-9FEE-4A90-9502-E386EBAEFF45}] => (Allow) C:\Program Files\Tencent\QQ\Bin\SetupEx\QQSetupEx.exe
FirewallRules: [TCP Query User{86A38E93-A8F2-4D2F-8BAF-04A1A922E1BB}C:\program files\tencent\qq\bin\qq.exe] => (Block) C:\program files\tencent\qq\bin\qq.exe
FirewallRules: [UDP Query User{A0C070DD-D3BA-40BE-84BC-0AAC22F4D6B1}C:\program files\tencent\qq\bin\qq.exe] => (Block) C:\program files\tencent\qq\bin\qq.exe
FirewallRules: [TCP Query User{328C348D-E2E2-42BD-B2DE-AB3F43DBB620}C:\program files\tencent\qq\bin\auclt.exe] => (Allow) C:\program files\tencent\qq\bin\auclt.exe
FirewallRules: [UDP Query User{3F9B87A1-5181-4A02-BF66-F7C6209B2F36}C:\program files\tencent\qq\bin\auclt.exe] => (Allow) C:\program files\tencent\qq\bin\auclt.exe
FirewallRules: [{ACA1EC91-0292-4E9D-85D6-DB04081513E2}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{F47CC94B-1D8A-468B-A80A-2781EB9E44BA}] => (Allow) C:\Program Files\Logitech\Vid HD\Vid.exe
FirewallRules: [{09C9F009-0C6A-4DA3-838A-9FB62095C881}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
FirewallRules: [{CD6BA82D-8309-43DB-B170-5874FA9D74AD}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe
FirewallRules: [{DAFCB248-3847-48E3-B937-240F44CA207B}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
FirewallRules: [{A9C9DC52-5F9F-43A9-9AB0-F08D50F4ACE6}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe
FirewallRules: [{0FF5E8B8-44BC-44CE-98A2-782D7E9451AF}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{B4D0D458-0854-4504-AA5E-C73A5D1E3791}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe
FirewallRules: [{D4D6A692-44FB-4519-B3CD-BADE4EE1F63C}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
FirewallRules: [{F87BBB49-34DE-4094-A69E-7977C84F98EF}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe
FirewallRules: [{FC91358F-4E3A-4654-9AB9-09A1A8352F84}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{5A7CDB30-7416-4DD9-A101-42455FAA14F8}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/19/2015 02:03:28 PM) (Source: MsiInstaller) (EventID: 11402) (User: Sue-PC)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION. System error 5. Verify that you have sufficient access to that key, or contact your support personnel.
Error: (12/19/2015 01:55:34 PM) (Source: MsiInstaller) (EventID: 1023) (User: Sue-PC)
Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.41105.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Users\Sue\AppData\Local\Temp\SilverlightMSI.log.
Error: (12/19/2015 01:55:15 PM) (Source: MsiInstaller) (EventID: 11402) (User: Sue-PC)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION. System error 5. Verify that you have sufficient access to that key, or contact your support personnel.
Error: (12/19/2015 01:41:42 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.41105.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\SilverlightMSI.log.
Error: (12/19/2015 01:41:31 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION. System error 5. Verify that you have sufficient access to that key, or contact your support personnel.
Error: (12/19/2015 12:36:28 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight - Update 'Microsoft Silverlight 5.1.41105.0' could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\TEMP\SilverlightMSI.log.
Error: (12/19/2015 12:36:22 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Silverlight -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SCRIPTURL_MITIGATION. System error 5. Verify that you have sufficient access to that key, or contact your support personnel.
Error: (12/19/2015 12:35:24 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Product: Microsoft Office Enterprise 2007 - Update 'Microsoft Office 2007 Service Pack 3 (SP3)' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
Error: (12/19/2015 12:30:08 PM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Product: Microsoft Office Enterprise 2007 -- Error 1402.Setup cannot open the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE. Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance. For information about how to contact PSS, seePSS10R.CHM.
Error: (12/19/2015 12:22:19 PM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Product: Microsoft Office Enterprise 2007 - Update 'Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft....k/?LinkId=23127
System errors:
=============
Error: (12/19/2015 01:55:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Silverlight (KB3106614).
Error: (12/19/2015 12:40:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Silverlight (KB3106614).
Error: (12/19/2015 12:35:30 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: The 2007 Microsoft Office Suite Service Pack 3 (SP3).
Error: (12/19/2015 12:22:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft Office Outlook 2007 (KB2687404).
Error: (12/19/2015 11:07:34 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Update service hung on starting.
Error: (12/19/2015 11:04:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
Error: (12/19/2015 11:00:27 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The AVGIDSAgent service hung on starting.
Error: (12/19/2015 10:45:58 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: The AVGIDSAgent service did not shut down properly after receiving a preshutdown control.
Error: (12/19/2015 10:45:25 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgwd service.
Error: (12/19/2015 10:44:52 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Silverlight (KB3106614).
==================== Memory info ===========================
Processor: Intel® Pentium® M processor 1.86GHz
Percentage of memory in use: 84%
Total physical RAM: 1023.43 MB
Available physical RAM: 158.79 MB
Total Virtual: 2950.6 MB
Available Virtual: 556.66 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:55.82 GB) (Free:16.65 GB) NTFS ==>[drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 55.9 GB) (Disk ID: 879D879D)
Partition 1: (Not Active) - (Size=71 MB) - (Type=DE)
Partition 2: (Active) - (Size=55.8 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Sign In
Create Account
