Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

MalwareBytten, ESet...just sat....I tried on my own? So I came to the

Started by MnSD , Dec 28 2015 07:14 PM

This topic is locked

#1
MnSD

Posted 28 December 2015 - 07:14 PM

New Member

Member
9 posts

Hello team,

running Windows 10 on a Dell laptop 64 bit....thought....I had all the protection I needed to go out and play in the snow...but I guess....my paid and up to date versions of Malwarebytes with exploit was no where to be found, Eset Smart Security....nope and I had just updated all my files with Secunia....

I have the malware that tells you with a pop up, call this number as your computer is about to die! blah blah blah.... I believe it is in my Chrome browser?

Here are the requested logs....Happy New Year..... Also just wanted to thank you all for the help you offer to people....like I said I tried a few suggestions here in site....and just felt to continue I could dp more harm then good. You folks are awesome....

FRST :

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-12-2015
Ran by Michael (administrator) on MICHAEL-PC (28-12-2015 16:58:48)
Running from C:\Users\Michael\Downloads
Loaded Profiles: Michael (Available Profiles: Michael & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Auslogics) C:\Program Files (x86)\Auslogics\Registry Defrag\RegistryDefrag.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-12] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4500640 2011-03-10] (Dell Inc.)
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [1802472 2011-01-25] ()
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-09] (Apple Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452272 2012-08-31] (CANON INC.)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2621240 2015-11-18] (Malwarebytes Corporation)
HKLM-x32\...\Run: [AntiLogger] => "C:\Program Files (x86)\AntiLogger\AntiLogger.exe" /minimized
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKLM Group Policy restriction on software: *.pdf*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: vssadmin.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.scr <====== ATTENTION
HKLM Group Policy restriction on software: scsvserv.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ATTENTION
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.pif <====== ATTENTION
HKLM Group Policy restriction on software: syskey.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.bat <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.js <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.com <====== ATTENTION
HKLM Group Policy restriction on software: ** <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.com <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.js <====== ATTENTION
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.pif <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.js <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.exe <====== ATTENTION
HKLM Group Policy restriction on software: cipher.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.wma*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.bmp*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.scr <====== ATTENTION
HKLM Group Policy restriction on software: lsassw86s.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.divx*.js <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.jpeg*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wmv*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.gif*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pub*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.pdf*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.rtf*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.rar*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.xls*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.mp3*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.bat <====== ATTENTION
HKLM Group Policy restriction on software: *.ppt*.com <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.jse <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: C:\Users\*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.7z*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ATTENTION
HKLM Group Policy restriction on software: *.jpg*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\*.js <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.doc*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.mp4*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.txt*.js <====== ATTENTION
HKLM Group Policy restriction on software: *.xlsx*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.zip*.cmd <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\*.pif <====== ATTENTION
HKLM Group Policy restriction on software: *.wav*.jse <====== ATTENTION
HKLM Group Policy restriction on software: *.pptx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.docx*.com <====== ATTENTION
HKLM Group Policy restriction on software: *.png*.exe <====== ATTENTION
HKLM Group Policy restriction on software: *.avi*.bat <====== ATTENTION
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== ATTENTION
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1079592 2015-06-26] (Apple Inc.)
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [349968 2015-10-21] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2015-12-18]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{565ad7d6-1c76-4a17-8930-71fcbfdba04a}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{65267836-78b0-466d-b4e7-7e1c73620721}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startpage.com/
SearchScopes: HKLM -> DefaultScope {23392EC5-488B-4C8F-BE7D-B591FEDF7497} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM -> {23392EC5-488B-4C8F-BE7D-B591FEDF7497} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {BB692C45-6F19-43E7-AE01-FB2B2FAA29BE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000 -> {23392EC5-488B-4C8F-BE7D-B591FEDF7497} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-18] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-18] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08] (Adblock Plus)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08] (Adblock Plus)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
DPF: HKLM-x32 {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} hxxp://www.support.dell.com/systemprofiler/SysProExe.CAB
DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://www.mydlink.com/8D/activeX//TunnelX.ocx
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1450513751827
DPF: HKLM-x32 {682C59F5-478C-4421-9070-AD170D143B77} hxxp://www.dell.com/support/troubleshooting/Content/Ode/pcd86.cab
DPF: HKLM-x32 {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} hxxp://xserv.dell.com/DellDriverScanner/DellSystem.CAB
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.5.0.cab

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-09] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
StartMenuInternet: FIREFOX.EXE -

Chrome:
=======
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-28]
CHR Extension: (YouTube) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-28]
CHR Extension: (Google Search) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-28]
CHR Extension: (Google Docs Offline) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-28]
CHR Extension: (Gmail) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-28]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-11-30] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET)
S4 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24888 2015-07-26] (Hewlett-Packard Company)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [739640 2015-11-18] (Malwarebytes Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S4 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2012-09-04] (Nalpeiron Ltd.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1572056 2015-12-01] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [839384 2015-12-01] (Secunia)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-29] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-29] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
S4 ZAMSvc; "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /service [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AntiLog32; C:\WINDOWS\system32\drivers\AntiLog64.sys [49752 2015-12-04] (Zemana Ltd.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-07-30] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [200192 2015-07-30] (ESET)
R0 edevmon; C:\Windows\SysWOW64\DRIVERS\edevmon.sys [239296 2013-09-17] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-07-30] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-07-30] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-07-30] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-07-30] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-07-30] (ESET)
S3 ESETCleanersDriver; C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys [170280 2015-12-11] (ESET)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-11] ()
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-11-18] ()
S3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt64.sys [76520 2014-12-30] (Zemana Ltd.)
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [109272 2015-06-18] (Malwarebytes Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-28] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R1 MpKsl6baaa227; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9CABF449-B37E-4715-9BF3-F61F4AA02A39}\MpKsl6baaa227.sys [44928 2015-12-28] (Microsoft Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2015-12-01] (Secunia)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-29] (Realtek )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30848 2015-12-12] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-29] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-29] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-29] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [199536 2015-12-10] (Zemana Ltd.)
S3 efavdrv; \??\C:\WINDOWS\system32\drivers\efavdrv.sys [X]
U3 idsvc; no ImagePath
S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-28 16:58 - 2015-12-28 16:59 - 00045764 _____ C:\Users\Michael\Downloads\FRST.txt
2015-12-28 16:58 - 2015-12-28 16:58 - 00000000 ____D C:\FRST
2015-12-28 16:55 - 2015-12-28 16:57 - 02370560 _____ (Farbar) C:\Users\Michael\Downloads\FRST64.exe
2015-12-28 10:27 - 2015-12-28 10:27 - 00109278 _____ C:\Users\Michael\Downloads\Extras.Txt
2015-12-28 10:26 - 2015-12-28 10:26 - 00273348 _____ C:\Users\Michael\Downloads\OTL.Txt
2015-12-28 10:14 - 2015-12-28 10:14 - 01114576 _____ C:\Users\Michael\Downloads\revosetup.exe
2015-12-28 10:09 - 2015-12-28 10:10 - 00602112 _____ (OldTimer Tools) C:\Users\Michael\Downloads\OTL.exe
2015-12-28 07:50 - 2015-12-28 07:50 - 00000827 _____ C:\Users\Michael\Desktop\JRT.txt
2015-12-28 07:45 - 2015-12-28 07:45 - 01599336 _____ (Malwarebytes) C:\Users\Michael\Downloads\JRT.exe
2015-12-28 07:39 - 2015-12-28 07:41 - 00003014 _____ C:\Users\Michael\Desktop\Rkill.txt
2015-12-28 07:38 - 2015-12-28 07:39 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\Michael\Downloads\rkill.com
2015-12-28 06:58 - 2015-12-28 06:58 - 00053248 _____ C:\WINDOWS\SysWOW64\zlib.dll
2015-12-28 06:58 - 2015-12-28 06:58 - 00001291 _____ C:\Users\Public\Desktop\CryptoPrevent.lnk
2015-12-28 06:58 - 2015-12-28 06:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT
2015-12-28 06:58 - 2015-12-28 06:58 - 00000000 ____D C:\ProgramData\Foolish IT
2015-12-28 06:58 - 2015-12-28 06:58 - 00000000 ____D C:\Program Files (x86)\Foolish IT
2015-12-28 06:57 - 2015-12-28 06:57 - 02618336 _____ (Foolish IT LLC ) C:\Users\Michael\Downloads\CryptoPreventSetup.exe
2015-12-28 06:55 - 2015-12-28 06:55 - 01743360 _____ C:\Users\Michael\Downloads\adwcleaner_5.026.exe
2015-12-28 06:34 - 2015-12-28 06:34 - 00002338 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-28 06:34 - 2015-12-28 06:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-28 06:32 - 2015-12-28 16:37 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-28 06:32 - 2015-12-28 07:08 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-28 06:32 - 2015-12-28 06:32 - 00003980 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-28 06:32 - 2015-12-28 06:32 - 00003748 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-27 03:36 - 2015-12-27 03:36 - 00000000 ____D C:\RegBackup
2015-12-27 02:31 - 2015-12-27 02:31 - 00003776 _____ C:\WINDOWS\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2015-12-27 02:31 - 2015-12-27 02:31 - 00002238 _____ C:\Users\Michael\Desktop\Tweaking.com - Windows Repair.lnk
2015-12-27 02:31 - 2015-12-27 02:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-12-27 02:31 - 2015-12-27 02:31 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-12-27 02:30 - 2015-12-27 02:31 - 00183470 _____ C:\WINDOWS\Tweaking.com - Windows Repair Setup Log.txt
2015-12-27 02:30 - 2015-12-27 02:30 - 21102368 _____ (Tweaking.com) C:\Users\Michael\Downloads\tweaking.com_windows_repair_aio_setup.exe
2015-12-27 02:09 - 2015-12-27 02:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2015-12-27 02:09 - 2015-12-27 02:12 - 00000000 ____D C:\ProgramData\Auslogics
2015-12-27 02:08 - 2015-12-27 02:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-12-27 02:08 - 2015-12-27 02:46 - 00000000 ____D C:\Program Files (x86)\Auslogics
2015-12-27 02:08 - 2015-12-27 02:08 - 00001404 _____ C:\Users\Michael\Desktop\Auslogics Registry Defrag.lnk
2015-12-27 02:07 - 2015-12-27 02:07 - 07549704 _____ (Auslogics Labs Pty Ltd ) C:\Users\Michael\Downloads\registry-defrag-setup.exe
2015-12-27 01:36 - 2015-12-27 06:25 - 00394960 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-26 01:10 - 2015-12-26 02:15 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Wise Disk Cleaner
2015-12-26 01:09 - 2015-12-26 01:09 - 04633944 _____ (WiseCleaner.com ) C:\Users\Michael\Downloads\WDCFree.exe
2015-12-26 01:09 - 2015-12-26 01:09 - 00001283 _____ C:\Users\Public\Desktop\Wise Disk Cleaner.lnk
2015-12-26 01:09 - 2015-12-26 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Disk Cleaner
2015-12-25 07:44 - 2015-12-25 07:44 - 07289160 _____ (touchbyte GmbH) C:\Users\Michael\Downloads\photosync_setup_en_307.exe
2015-12-25 07:41 - 2015-12-25 07:41 - 00015079 _____ C:\Users\Michael\Downloads\Action-Verbs-for-Resumes.pdf
2015-12-25 02:51 - 2015-12-25 02:55 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Wise Uninstaller
2015-12-25 02:51 - 2015-12-25 02:51 - 00000167 _____ C:\Users\Michael\AppData\Roaming\wpulog.txt
2015-12-25 02:46 - 2015-12-28 07:07 - 00000119 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2015-12-25 02:43 - 2015-12-26 01:09 - 00000000 ____D C:\Program Files (x86)\Wise
2015-12-25 02:43 - 2015-12-25 02:43 - 00001367 _____ C:\Users\Public\Desktop\Wise Program Uninstaller.lnk
2015-12-25 02:43 - 2015-12-25 02:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller
2015-12-25 02:42 - 2015-12-25 02:43 - 02300072 _____ (WiseCleaner.com ) C:\Users\Michael\Downloads\WPUSetup.exe
2015-12-24 21:59 - 2015-12-24 21:59 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2015-12-24 21:58 - 2015-12-24 21:58 - 02143832 _____ C:\Users\Michael\Downloads\instsf449.exe
2015-12-24 21:45 - 2015-12-24 21:46 - 06805328 _____ (Piriform Ltd) C:\Users\Michael\Downloads\ccsetup513.exe
2015-12-24 10:22 - 2015-12-24 10:22 - 00001757 _____ C:\Users\Michael\Desktop\WINWORD - Shortcut.lnk
2015-12-23 18:16 - 2015-12-23 18:16 - 00071344 _____ C:\Users\Michael\Downloads\netpass-x64.zip
2015-12-22 01:58 - 2015-12-22 03:45 - 00000000 ____D C:\Users\Michael\Downloads\2015
2015-12-21 04:26 - 2015-12-21 04:26 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2015-12-21 04:26 - 2015-12-21 04:26 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-12-21 04:24 - 2015-12-21 04:26 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2015-12-21 04:24 - 2015-12-21 04:26 - 00000000 ____D C:\ProgramData\IObit
2015-12-21 04:24 - 2015-12-21 04:25 - 00000000 ____D C:\Users\Michael\AppData\Roaming\IObit
2015-12-21 04:24 - 2015-12-21 04:24 - 00000000 ____D C:\Users\Michael\AppData\IObit
2015-12-21 01:37 - 2015-12-28 07:28 - 00000000 ____D C:\AdwCleaner
2015-12-20 14:43 - 2015-12-20 16:38 - 00009737 _____ C:\Users\Michael\Desktop\Clif Tattoo Shops.xlsx
2015-12-20 14:41 - 2015-12-20 14:41 - 00008746 _____ C:\Users\Michael\Desktop\New Microsoft Excel Worksheet.xlsx
2015-12-20 12:29 - 2015-12-20 12:29 - 01528320 _____ C:\Users\Michael\Downloads\msxml6.msi
2015-12-19 00:11 - 2015-12-19 00:12 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-19 00:11 - 2015-12-19 00:11 - 00002126 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-12-19 00:11 - 2015-12-19 00:11 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-18 23:43 - 2015-12-18 23:43 - 04010016 _____ (Secunia) C:\Users\Michael\Downloads\PSISetup.exe
2015-12-18 23:43 - 2015-12-18 23:43 - 00001148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2015-12-18 23:43 - 2015-12-18 23:43 - 00000000 ____D C:\Program Files (x86)\Secunia
2015-12-18 23:33 - 2015-12-18 23:33 - 00001916 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-12-18 23:33 - 2015-12-18 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-12-18 23:30 - 2015-12-18 23:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-18 23:30 - 2015-12-18 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-18 23:29 - 2015-12-18 23:29 - 00003248 _____ C:\WINDOWS\System32\Tasks\{2A68EA58-C97D-4449-AB84-F3BFF8B386E5}
2015-12-18 23:29 - 2015-12-18 23:29 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Sun
2015-12-18 23:29 - 2015-12-18 23:29 - 00000000 ____D C:\Users\Michael\.oracle_jre_usage
2015-12-18 23:28 - 2015-12-18 23:28 - 00000000 ____D C:\ProgramData\Oracle
2015-12-18 23:27 - 2015-12-18 23:27 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\Oracle
2015-12-18 23:21 - 2015-12-18 23:28 - 00000000 ____D C:\Users\Michael\Documents\My Filehippo Downloads
2015-12-18 22:30 - 2015-12-18 22:30 - 00001171 _____ C:\DelFix.txt
2015-12-18 07:13 - 2015-12-18 07:13 - 00003298 _____ C:\WINDOWS\System32\Tasks\{A351904D-00B2-48E9-8AF2-22125C683DF7}
2015-12-18 02:32 - 2015-12-18 02:38 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Geek Uninstaller
2015-12-17 18:07 - 2015-12-06 20:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-17 18:07 - 2015-12-06 20:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-17 18:07 - 2015-12-06 20:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-17 18:07 - 2015-12-06 20:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-17 18:07 - 2015-12-06 20:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-17 18:07 - 2015-12-06 20:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-17 18:07 - 2015-12-06 19:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-17 18:07 - 2015-12-06 19:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-17 18:07 - 2015-12-06 19:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-17 18:07 - 2015-12-06 19:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-17 18:07 - 2015-12-06 19:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-17 18:07 - 2015-12-06 19:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-17 18:07 - 2015-12-06 19:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-17 18:06 - 2015-12-06 20:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-17 18:06 - 2015-12-06 20:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-17 18:06 - 2015-12-06 20:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-17 18:06 - 2015-12-06 20:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-17 18:06 - 2015-12-06 20:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-17 18:06 - 2015-12-06 20:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-17 18:06 - 2015-12-06 20:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-17 18:06 - 2015-12-06 20:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-17 18:06 - 2015-12-06 20:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-17 18:06 - 2015-12-06 20:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-17 18:06 - 2015-12-06 20:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-17 18:06 - 2015-12-06 20:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-17 18:06 - 2015-12-06 20:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-17 18:06 - 2015-12-06 20:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-17 18:06 - 2015-12-06 20:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-17 18:06 - 2015-12-06 20:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-17 18:06 - 2015-12-06 20:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-17 18:06 - 2015-12-06 20:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-17 18:06 - 2015-12-06 20:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-17 18:06 - 2015-12-06 20:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-17 18:06 - 2015-12-06 20:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-17 18:06 - 2015-12-06 20:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-17 18:06 - 2015-12-06 20:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-17 18:06 - 2015-12-06 20:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-17 18:06 - 2015-12-06 20:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-17 18:06 - 2015-12-06 20:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-17 18:06 - 2015-12-06 19:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-17 18:06 - 2015-12-06 19:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-17 18:06 - 2015-12-06 19:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-17 18:06 - 2015-12-06 19:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-17 18:06 - 2015-12-06 19:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-17 18:06 - 2015-12-06 19:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 19:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-17 18:06 - 2015-12-06 19:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-17 18:06 - 2015-12-06 19:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-17 18:06 - 2015-12-06 19:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-17 18:06 - 2015-12-06 19:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 19:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-17 18:06 - 2015-12-06 19:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-17 18:06 - 2015-12-06 19:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-17 18:06 - 2015-12-06 19:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-17 18:06 - 2015-12-06 19:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-17 18:06 - 2015-12-06 19:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-17 18:06 - 2015-12-06 19:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-17 18:06 - 2015-12-06 19:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-17 18:06 - 2015-12-06 19:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-17 18:06 - 2015-12-06 19:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-17 18:06 - 2015-12-06 19:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-17 18:06 - 2015-12-06 19:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-17 18:06 - 2015-12-06 19:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-17 18:06 - 2015-12-06 19:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-17 18:06 - 2015-12-06 19:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-16 23:23 - 2015-12-16 23:23 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-MICHAEL-PC-Windows-10-Home-(64-bit).dat
2015-12-16 23:22 - 2015-12-16 23:22 - 04777232 _____ (Tweaking.com) C:\Users\Michael\Downloads\tweaking.com_registry_backup_setup.exe
2015-12-15 01:53 - 2015-12-15 01:53 - 00002112 _____ C:\MWB Text file.txt
2015-12-14 18:09 - 2015-12-14 18:09 - 00001824 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-12-14 18:09 - 2015-12-14 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-12-14 18:08 - 2015-12-14 18:09 - 00000000 ____D C:\Program Files\iTunes
2015-12-14 18:08 - 2015-12-14 18:08 - 00000000 ____D C:\Program Files\iPod
2015-12-14 18:08 - 2015-12-14 18:08 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-12-14 18:01 - 2015-12-14 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-12-12 09:14 - 2015-12-28 06:32 - 00000000 ____D C:\Users\Michael\AppData\Local\Deployment
2015-12-12 05:50 - 2015-12-12 05:50 - 02031992 _____ (Microsoft Corporation) C:\Users\Michael\Downloads\MGADiag.exe
2015-12-12 05:50 - 2015-12-12 05:50 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2015-12-12 05:05 - 2015-12-28 07:47 - 00000000 ____D C:\Users\Michael\AppData\Local\CrashDumps
2015-12-12 03:49 - 2015-12-25 01:25 - 00000000 ____D C:\Users\Michael\Downloads\Clif
2015-12-11 23:39 - 2015-12-11 23:39 - 00000000 _____ C:\autoexec.bat
2015-12-11 23:38 - 2015-12-11 23:38 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-11 23:19 - 2015-12-28 07:18 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
2015-12-11 23:19 - 2015-12-11 23:19 - 00000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2015-12-11 23:18 - 2015-12-11 23:23 - 00700584 _____ C:\Users\Michael\Downloads\Adware_Removal_Tool_by_TSA.exe
2015-12-08 13:06 - 2015-11-30 23:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-08 13:06 - 2015-11-24 04:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-08 13:06 - 2015-11-24 03:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-08 13:06 - 2015-11-24 02:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-08 13:06 - 2015-11-24 02:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-08 13:06 - 2015-11-24 01:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-08 13:06 - 2015-11-24 01:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-08 13:06 - 2015-11-24 01:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-08 13:06 - 2015-11-24 01:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-08 13:06 - 2015-11-24 01:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-08 13:06 - 2015-11-24 01:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-08 13:06 - 2015-11-24 01:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-08 13:06 - 2015-11-24 00:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-08 13:06 - 2015-11-24 00:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-08 13:06 - 2015-11-24 00:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-08 13:06 - 2015-11-24 00:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-08 13:06 - 2015-11-24 00:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-08 13:06 - 2015-11-24 00:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-08 13:06 - 2015-11-24 00:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-08 13:06 - 2015-11-23 23:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-08 13:06 - 2015-11-23 23:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-08 13:06 - 2015-11-23 23:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-08 13:06 - 2015-11-23 23:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-08 13:06 - 2015-11-23 23:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-08 13:06 - 2015-11-23 23:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-08 13:06 - 2015-11-23 23:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-08 13:06 - 2015-11-23 23:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-07 04:00 - 2015-12-12 04:03 - 00030848 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-12-07 04:00 - 2015-12-07 04:46 - 00000000 ____D C:\ProgramData\RogueKiller
2015-12-06 19:57 - 2015-12-06 19:57 - 00000000 ____D C:\Program Files\Bonjour
2015-12-06 19:57 - 2015-12-06 19:57 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-12-06 19:54 - 2015-12-06 19:54 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2015-12-06 19:54 - 2015-12-06 19:54 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-12-06 16:19 - 2015-12-06 16:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-12-05 01:20 - 2015-12-24 21:47 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-05 01:20 - 2015-12-05 01:20 - 00002864 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-12-05 01:20 - 2015-12-05 01:20 - 00000000 ____D C:\Program Files\CCleaner
2015-12-04 02:53 - 2015-12-28 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiLogger
2015-12-04 02:53 - 2015-12-04 02:53 - 00049752 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\AntiLog64.sys
2015-12-04 02:53 - 2014-12-30 13:31 - 07039960 _____ (Zemana Ltd.) C:\WINDOWS\SysWOW64\ZALSDKCore.dll
2015-12-04 02:53 - 2014-12-30 13:31 - 00076520 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\KeyCrypt64.sys
2015-12-04 01:47 - 2015-12-10 18:45 - 00199536 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2015-12-04 01:46 - 2015-12-04 02:53 - 00000000 ____D C:\Users\Michael\AppData\Local\Zemana
2015-12-03 03:02 - 2015-12-03 03:02 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-12-03 01:51 - 2015-12-03 02:43 - 00000000 ____D C:\Users\Michael\AppData\Roaming\FreeFixer
2015-12-03 01:51 - 2015-12-03 02:03 - 00000000 ____D C:\Users\Michael\AppData\Local\FreeFixer
2015-12-03 01:49 - 2015-12-03 01:49 - 02687418 _____ (Kephyr) C:\Users\Michael\Downloads\freefixersetup.exe
2015-12-03 01:26 - 2015-12-12 07:17 - 00000000 ____D C:\Program Files\FreeFixer
2015-12-03 01:25 - 2015-12-03 01:25 - 02687418 _____ (Kephyr) C:\Users\Michael\Desktop\freefixersetup.exe
2015-12-02 23:07 - 2015-11-22 02:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-02 23:07 - 2015-11-22 02:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-02 23:07 - 2015-11-22 02:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-02 23:07 - 2015-11-22 02:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-02 23:07 - 2015-11-22 02:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-02 23:07 - 2015-11-22 02:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-02 23:07 - 2015-11-22 02:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-02 23:07 - 2015-11-22 02:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-02 23:07 - 2015-11-22 02:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-02 23:07 - 2015-11-22 02:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-02 23:07 - 2015-11-22 02:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-02 23:07 - 2015-11-22 02:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-02 23:07 - 2015-11-22 02:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-02 23:07 - 2015-11-22 02:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-02 23:07 - 2015-11-22 02:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-02 23:07 - 2015-11-22 02:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-02 23:07 - 2015-11-22 02:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-02 23:07 - 2015-11-22 01:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-02 23:07 - 2015-11-22 01:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-02 23:07 - 2015-11-22 01:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-02 23:07 - 2015-11-22 01:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-02 23:07 - 2015-11-22 01:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-02 23:07 - 2015-11-22 01:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-02 23:07 - 2015-11-22 01:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-02 23:07 - 2015-11-22 01:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-02 23:07 - 2015-11-22 01:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-02 23:07 - 2015-11-22 01:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-02 23:07 - 2015-11-22 01:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-02 23:07 - 2015-11-22 01:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-02 23:07 - 2015-11-22 01:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-02 23:07 - 2015-11-22 01:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-02 23:07 - 2015-11-22 01:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-02 23:07 - 2015-11-22 01:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-02 23:07 - 2015-11-22 01:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-02 23:07 - 2015-11-22 01:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-02 23:07 - 2015-11-22 01:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-02 23:07 - 2015-11-22 01:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-02 23:07 - 2015-11-22 01:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-02 23:07 - 2015-11-22 01:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-02 23:07 - 2015-11-22 01:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-02 23:07 - 2015-11-22 01:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-02 23:07 - 2015-11-22 01:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-02 23:07 - 2015-11-22 01:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-02 23:07 - 2015-11-22 01:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-02 23:07 - 2015-11-22 01:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-02 23:07 - 2015-11-22 01:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-02 23:07 - 2015-11-22 01:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-02 23:07 - 2015-11-22 01:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-02 23:07 - 2015-11-22 01:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-02 23:07 - 2015-11-22 01:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-02 23:07 - 2015-11-22 01:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-02 23:07 - 2015-11-22 01:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-02 23:07 - 2015-11-22 01:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-02 23:07 - 2015-11-22 01:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-02 23:07 - 2015-11-22 01:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-02 23:07 - 2015-11-22 01:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-02 23:06 - 2015-11-22 02:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-02 23:06 - 2015-11-22 02:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-02 23:06 - 2015-11-22 01:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-02 23:06 - 2015-11-22 01:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-02 23:06 - 2015-11-22 01:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-02 23:06 - 2015-11-22 01:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-02 23:06 - 2015-11-22 01:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-02 23:06 - 2015-11-22 01:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-02 23:06 - 2015-11-22 01:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-02 23:06 - 2015-11-22 01:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-02 23:06 - 2015-11-22 01:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-02 23:06 - 2015-11-22 01:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-02 23:06 - 2015-11-22 01:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-02 23:06 - 2015-11-22 01:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-02 23:06 - 2015-11-22 01:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-02 23:06 - 2015-11-22 01:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-02 23:06 - 2015-11-22 01:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-02 23:06 - 2015-11-22 01:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-02 23:06 - 2015-11-22 01:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-02 23:06 - 2015-11-22 01:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-02 23:06 - 2015-11-22 01:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-02 23:06 - 2015-11-22 01:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-02 23:06 - 2015-11-22 01:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-02 23:06 - 2015-11-22 01:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-02 23:06 - 2015-11-22 01:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-02 23:06 - 2015-11-22 01:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-02 04:58 - 2015-12-02 04:58 - 00065232 _____ (Malwarebytes) C:\Users\Michael\Downloads\regassassin-setup-1.03.exe
2015-12-02 04:55 - 2015-12-02 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2015-12-02 04:54 - 2015-12-28 15:58 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2015-12-02 04:54 - 2015-12-02 04:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2015-12-02 04:53 - 2015-12-02 04:54 - 01846024 _____ (Malwarebytes ) C:\Users\Michael\Downloads\mbae-setup-1.08.1.1045.exe
2015-12-01 12:21 - 2015-12-01 12:21 - 00000000 ____D C:\CCSupport
2015-12-01 11:38 - 2015-12-01 11:38 - 00000022 _____ C:\Users\Michael\Downloads\ESETPoweliksCleaner.exe_20151201.113800.3004.zip
2015-12-01 11:37 - 2015-12-01 11:37 - 00224968 _____ (ESET) C:\Users\Michael\Downloads\ESETPoweliksCleaner.exe
2015-12-01 11:28 - 2015-12-01 11:29 - 02837704 _____ (ESET) C:\Users\Michael\Downloads\eset_smart_security_live_installer.exe
2015-12-01 11:12 - 2015-12-11 18:04 - 00170280 _____ (ESET) C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys
2015-12-01 05:10 - 2015-12-01 05:10 - 00018456 _____ (Secunia) C:\WINDOWS\system32\Drivers\psi_mf_amd64.sys
2015-11-30 20:45 - 2015-11-30 20:45 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-11-30 11:14 - 2015-11-30 11:14 - 00000000 ____D C:\Program Files\Windows Identity Foundation
2015-11-29 20:24 - 2015-11-29 20:24 - 00000000 ____D C:\Users\Michael\AppData\Local\ActiveSync
2015-11-29 20:22 - 2015-11-29 20:22 - 00000020 ___SH C:\Users\Michael\ntuser.ini
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\My Documents
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2015-11-29 20:14 - 2015-12-28 07:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-29 20:02 - 2015-11-29 20:02 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\Desktop\Play Games
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Rescue Calling Card
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\Desktop\Play Games
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Rescue Calling Card
2015-11-29 19:53 - 2015-11-29 19:53 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-11-29 19:52 - 2015-11-29 20:04 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-11-29 19:50 - 2015-12-27 02:16 - 00000000 ____D C:\Users\Michael
2015-11-29 19:50 - 2015-12-03 03:02 - 00000000 ____D C:\Users\DefaultAppPool
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\My Documents
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\Documents\My Videos
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\Documents\My Pictures
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\Documents\My Music
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\My Documents
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Videos
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Pictures
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Music
2015-11-29 19:49 - 2015-12-28 07:11 - 00883142 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-29 19:49 - 2015-12-27 05:47 - 00883142 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____D C:\Program Files\Realtek
2015-11-29 19:45 - 2015-11-29 19:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2015-11-29 19:45 - 2015-11-29 19:45 - 00000000 ____D C:\Program Files\DellTPad
2015-11-29 19:44 - 2015-10-29 23:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-11-29 19:40 - 2015-12-26 01:17 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-29 19:36 - 2015-11-29 19:36 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-29 19:36 - 2015-11-29 19:36 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-11-29 19:36 - 2015-11-29 19:36 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-11-29 19:36 - 2015-11-29 19:36 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-29 19:36 - 2015-11-29 19:36 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-11-29 19:36 - 2015-11-29 19:36 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-11-29 19:34 - 2015-11-29 19:34 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-11-29 19:31 - 2015-11-29 20:04 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\Program Files\MSBuild
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\inetpub
2015-11-29 19:30 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-11-29 19:30 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-11-29 19:30 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-11-29 19:30 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-29 19:30 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-29 19:30 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-28 16:58 - 2015-10-29 22:28 - 00000000 ____D C:\Windows
2015-12-28 16:34 - 2014-04-16 12:36 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-28 16:01 - 2012-09-28 13:47 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-28 13:00 - 2013-11-02 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-28 10:11 - 2014-02-16 20:23 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\Adblock Plus for IE
2015-12-28 07:54 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-28 07:24 - 2015-09-17 10:09 - 00002087 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2015-12-28 07:11 - 2015-10-29 23:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-28 06:34 - 2011-07-20 16:40 - 00000000 ____D C:\Users\Michael\AppData\Local\Google
2015-12-28 06:33 - 2012-03-15 16:15 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-27 06:46 - 2015-09-25 18:46 - 00000000 ___RD C:\Users\Michael\iCloudDrive
2015-12-27 06:08 - 2015-10-29 23:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-27 05:53 - 2015-11-11 05:28 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-12-27 05:10 - 2015-10-29 22:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-27 04:46 - 2009-07-13 18:34 - 00000855 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_752
2015-12-26 01:17 - 2013-01-23 20:29 - 00000000 ____D C:\ProgramData\AVG January 2013 Campaign
2015-12-26 01:17 - 2011-05-24 22:02 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2015-12-26 01:13 - 2015-10-29 23:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-12-26 01:13 - 2011-07-17 10:01 - 00000000 __RHD C:\MSOCache
2015-12-26 01:05 - 2011-05-31 12:32 - 00001244 _____ C:\Users\Michael\Desktop\Command Prompt.lnk
2015-12-25 07:45 - 2014-02-14 23:02 - 00002597 _____ C:\Users\Public\Desktop\PhotoSync.lnk
2015-12-25 07:45 - 2014-02-14 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoSync
2015-12-25 07:45 - 2012-03-10 12:15 - 00000000 ____D C:\Program Files (x86)\PhotoSync
2015-12-25 01:15 - 2015-10-29 22:28 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-12-22 03:39 - 2014-02-16 20:23 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-22 02:26 - 2014-10-02 22:11 - 00000000 ____D C:\Users\Michael\AppData\Local\C4D54CA6-B71B-4320-A374-DFAE9C7576C7.aplzod
2015-12-21 04:26 - 2011-10-12 13:11 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Apple Computer
2015-12-19 00:11 - 2015-05-15 13:08 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-19 00:11 - 2011-05-24 22:00 - 00000000 ____D C:\ProgramData\Adobe
2015-12-18 23:48 - 2011-07-18 12:41 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Skype
2015-12-18 23:33 - 2013-10-14 19:35 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-12-18 23:30 - 2011-05-24 22:08 - 00000000 ____D C:\ProgramData\Skype
2015-12-18 23:28 - 2013-11-02 02:17 - 00326752 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-12-18 23:28 - 2013-11-02 02:16 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-12-18 23:28 - 2011-05-24 21:48 - 00000000 ____D C:\Program Files\Java
2015-12-17 18:52 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-17 18:52 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-17 18:52 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-17 17:46 - 2012-05-16 01:21 - 00000000 ___SD C:\Users\Michael\AppData\LocalLow\Temp
2015-12-17 17:46 - 2009-07-13 18:34 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_602
2015-12-16 23:36 - 2011-05-24 21:48 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-15 05:45 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2015-12-15 02:21 - 2014-02-28 21:32 - 00000000 ____D C:\Users\Michael\Downloads\DIR-868L_FIRMWARE_1.02
2015-12-14 18:08 - 2011-10-12 13:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-12-12 09:19 - 2015-08-01 20:54 - 00000000 ___RD C:\Users\Michael\OneDrive
2015-12-12 04:58 - 2014-02-16 15:44 - 02991832 _____ (ESET) C:\Users\Michael\Desktop\ERARemover_x64.exe
2015-12-12 04:07 - 2015-07-12 19:49 - 00000000 ____D C:\Users\Michael\Downloads\StarStaX-0.70_win64
2015-12-12 03:25 - 2013-02-23 14:58 - 38490752 _____ C:\Users\Michael\Downloads\HDREfexPro2-pl-ver2.003all.exe
2015-12-10 16:04 - 2015-08-01 20:54 - 00002417 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-09 21:36 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-08 21:44 - 2012-05-24 02:02 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-08 21:44 - 2012-05-24 02:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-08 19:39 - 2011-07-17 09:16 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-08 17:59 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-08 16:32 - 2011-07-17 10:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-08 16:30 - 2012-05-24 02:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-08 16:26 - 2013-08-14 02:02 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-08 14:29 - 2011-07-17 09:03 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-06 20:03 - 2015-09-25 18:46 - 00000000 ____D C:\Users\Michael\AppData\Local\Apple Inc
2015-12-06 19:54 - 2011-10-12 13:10 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-05 20:43 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-04 14:16 - 2011-05-24 21:51 - 00000000 ____D C:\Program Files\Intel
2015-12-04 14:16 - 2011-05-24 21:49 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-12-03 00:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-11-30 16:33 - 2015-10-29 23:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-30 16:33 - 2015-10-29 23:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-30 03:58 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-11-29 20:48 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-11-29 20:25 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-11-29 20:25 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-11-29 20:24 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-11-29 20:23 - 2015-08-01 20:46 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-29 20:19 - 2015-08-01 19:16 - 00023788 _____ C:\WINDOWS\diagerr.xml
2015-11-29 20:19 - 2015-08-01 19:16 - 00022863 _____ C:\WINDOWS\diagwrn.xml
2015-11-29 20:16 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-11-29 20:16 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\Registration
2015-11-29 20:14 - 2015-08-01 20:36 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-11-29 20:14 - 2014-02-16 13:12 - 00002306 _____ C:\WINDOWS\System32\Tasks\{6AAF70DB-0961-4FC3-8741-1627DA144DE3}
2015-11-29 20:14 - 2013-12-15 20:35 - 00003434 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cefa18391140ae
2015-11-29 20:14 - 2012-09-28 13:47 - 00003110 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-11-29 20:14 - 2012-05-16 01:39 - 00002288 _____ C:\WINDOWS\System32\Tasks\{7305280B-A687-41FE-A4EC-7EDFBFDD3CA5}
2015-11-29 20:14 - 2012-05-13 09:20 - 00002332 _____ C:\WINDOWS\System32\Tasks\{3C99C252-58B8-4DE2-9321-6D9AAC20A7E6}
2015-11-29 20:14 - 2011-12-30 02:26 - 00002276 _____ C:\WINDOWS\System32\Tasks\{27154054-D7E0-49F5-B371-6EA65B5695F8}
2015-11-29 20:14 - 2011-12-30 01:10 - 00002280 _____ C:\WINDOWS\System32\Tasks\{70C29E42-1668-4327-AA43-2CBA9A566A99}
2015-11-29 20:14 - 2011-12-29 23:36 - 00002264 _____ C:\WINDOWS\System32\Tasks\{1FF31F46-DA19-4A59-A137-D6772CB3994D}
2015-11-29 20:14 - 2011-12-29 23:28 - 00002292 _____ C:\WINDOWS\System32\Tasks\{D226B8F4-89D3-4B57-9618-067857F42FED}
2015-11-29 20:14 - 2011-12-29 23:19 - 00002264 _____ C:\WINDOWS\System32\Tasks\{7E19D03F-9451-4EED-91FA-F27916D2FB3E}
2015-11-29 20:14 - 2011-12-29 23:15 - 00002264 _____ C:\WINDOWS\System32\Tasks\{74C4BFA2-7D9F-45EF-84DA-5A289494583B}
2015-11-29 20:14 - 2011-07-17 08:32 - 00002160 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2015-11-29 20:13 - 2015-10-29 23:24 - 00000000 __RSD C:\WINDOWS\Media
2015-11-29 20:13 - 2015-10-29 23:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-29 20:13 - 2015-10-29 23:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-11-29 20:05 - 2015-10-30 01:07 - 00000000 ____D C:\WINDOWS\ShellNew
2015-11-29 20:05 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-11-29 20:05 - 2014-05-21 17:01 - 00000000 ____D C:\WINDOWS\system32\STRING
2015-11-29 20:04 - 2015-09-17 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-11-29 20:04 - 2014-04-16 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-29 20:04 - 2014-02-15 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2013
2015-11-29 20:04 - 2013-12-24 11:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photomatix Pro 5.0
2015-11-29 20:04 - 2013-04-10 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2012
2015-11-29 20:04 - 2012-05-16 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photomatix Pro 4.2
2015-11-29 20:04 - 2012-02-27 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2011
2015-11-29 20:04 - 2011-07-17 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-11-29 20:04 - 2011-07-17 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-11-29 20:04 - 2011-05-31 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modem Diagnostic Tool
2015-11-29 20:04 - 2011-05-31 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwaiting
2015-11-29 20:04 - 2011-05-24 22:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Creator Starter
2015-11-29 20:04 - 2011-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online
2015-11-29 20:04 - 2011-05-24 22:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-11-29 20:04 - 2011-05-24 22:17 - 00000000 ____D C:\WINDOWS\en
2015-11-29 20:04 - 2011-05-24 22:11 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Stage
2015-11-29 20:04 - 2011-05-24 22:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam
2015-11-29 20:04 - 2011-05-24 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe
2015-11-29 20:02 - 2015-07-10 01:05 - 00000000 ____D C:\Users\Default.migrated
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-11-29 19:56 - 2012-05-16 01:27 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2015-11-29 19:56 - 2011-12-30 02:59 - 00000000 ____D C:\WINDOWS\SysWOW64\Dell
2015-11-29 19:56 - 2011-12-29 23:18 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-11-29 19:56 - 2011-07-18 11:33 - 00000000 ____D C:\WINDOWS\system32\SPReview
2015-11-29 19:56 - 2011-07-18 11:32 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\schemas
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-11-29 19:54 - 2011-12-29 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2015-11-29 19:54 - 2009-07-13 23:44 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-11-29 19:53 - 2015-11-04 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-11-29 19:53 - 2015-10-29 23:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-11-29 19:53 - 2015-10-29 23:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-11-29 19:53 - 2015-10-29 23:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-29 19:53 - 2015-07-24 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJI Product
2015-11-29 19:53 - 2014-02-13 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-11-29 19:53 - 2011-10-22 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2015-11-29 19:53 - 2011-05-24 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-11-29 19:53 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-11-29 19:52 - 2012-05-16 02:21 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2015-11-29 19:51 - 2015-08-01 20:46 - 00000000 ____D C:\Users\Michael\AppData\Local\Packages
2015-11-29 19:49 - 2015-10-29 22:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-11-29 19:42 - 2015-10-30 01:13 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-11-29 19:40 - 2015-10-29 23:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-11-29 19:37 - 2015-10-29 22:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-11-29 19:37 - 2015-10-29 22:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-11-29 19:31 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-11-29 19:31 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-11-29 19:30 - 2015-10-29 23:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-11-29 19:30 - 2015-10-29 23:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-11-29 19:30 - 2015-10-29 23:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-11-29 19:30 - 2015-10-29 23:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-11-29 19:30 - 2015-10-29 23:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-11-29 19:30 - 2015-10-29 23:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-11-29 19:30 - 2015-10-29 23:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof

==================== Files in the root of some directories =======

2015-11-22 03:03 - 2015-12-12 06:42 - 0000115 _____ () C:\Users\Michael\AppData\Roaming\LogFile.txt
2015-12-25 02:51 - 2015-12-25 02:51 - 0000167 _____ () C:\Users\Michael\AppData\Roaming\wpulog.txt
2015-08-04 21:20 - 2015-08-04 21:20 - 0003584 _____ () C:\Users\Michael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-18 14:12 - 2011-07-18 14:12 - 0028042 _____ () C:\Users\Michael\AppData\Local\IWDAudHelper.20110718.151210.txt
2012-05-16 02:19 - 2012-05-16 02:19 - 0002242 _____ () C:\Users\Michael\AppData\Local\IWDAudHelper.20120516.031925.txt
2011-12-30 17:30 - 2015-11-16 16:18 - 0007597 _____ () C:\Users\Michael\AppData\Local\resmon.resmoncfg
2012-05-16 02:17 - 2012-05-16 02:18 - 0005386 _____ () C:\Users\Michael\AppData\Local\WiDiSetupLog.20120516.031747.txt
2012-05-16 02:18 - 2012-05-16 02:20 - 0026650 _____ () C:\Users\Michael\AppData\Local\WiDiSetupLog.20120516.031838.txt
2015-09-17 09:30 - 2015-09-17 09:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-02-27 13:04 - 2014-02-15 19:35 - 0000935 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-12-21 20:30

==================== End of FRST.txt ============================

Additional scan notes:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by Michael (2015-12-28 17:00:48)
Running from C:\Users\Michael\Downloads
Windows 10 Home (X64) (2015-11-30 04:22:02)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2606919885-2507221499-1667024737-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2606919885-2507221499-1667024737-503 - Limited - Disabled)
Guest (S-1-5-21-2606919885-2507221499-1667024737-501 - Limited - Disabled)
Harps Account (S-1-5-21-2606919885-2507221499-1667024737-1003 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-2606919885-2507221499-1667024737-1002 - Limited - Enabled)
Michael (S-1-5-21-2606919885-2507221499-1667024737-1000 - Administrator - Enabled) => C:\Users\Michael

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.318.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Apple Application Support (32-bit) (HKLM-x32\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}) (Version: 4.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Auslogics Registry Defrag (HKLM-x32\...\{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1) (Version: 9.1.2.0 - Auslogics Labs Pty Ltd)
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.9.0.6 - Canon Inc.)
Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon RAW Codec (HKLM-x32\...\Canon RAW Codec) (Version: 1.9.0.73 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.8.0.17 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.31.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.0.1.32 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities WFT Utility (HKLM-x32\...\WFTK) (Version: 3.5.1.1 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.9.0.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: - Foolish IT LLC)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Marketplace Webslice IE8 (HKLM-x32\...\{CF67ED0C-F85D-4791-AED3-3FE882EDB45D}) (Version: 8.0 - Nextjump Inc)
Dell MusicStage (HKLM-x32\...\{3E8A1ADF-B72C-47FE-85F6-F7A73C487F6C}) (Version: 1.3.31.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.19 - ArcSoft)
Dell Stage (HKLM-x32\...\{D770F4B4-C422-45D9-8CEE-1B4C66E68CA8}) (Version: 1.4.173.0 - Fingertapps)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.204 - ALPS ELECTRIC CO., LTD.)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.0.1011 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.1.0.1011 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)
Digital Line Detect (HKLM-x32\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
DJI driver version 2.02 (HKLM-x32\...\{EDFDE5EE-84C7-4936-804C-6563943E5754}_is1) (Version: 2.02 - DJI)
DJI Phantom 2 Vision Assistant version 3.8 (HKLM-x32\...\{EDCE7221-F31F-407A-B348-30D011ED3126}_is1) (Version: 3.8 - DJI)
DJI RC System Assistant version 1.2 (HKLM-x32\...\{2849F48E-8A08-4C43-AC8D-97A367F0DCB6}_is1) (Version: 1.2 - DJI)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
ESET Smart Security (HKLM\...\{11994064-51F2-45DF-A83E-539B4BFE3F5A}) (Version: 9.0.318.0 - ESET, spol. s r.o.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GoPro Studio 2.0.1 (HKLM-x32\...\GoPro Studio) (Version: 2.0.1 - WoodmanLabs Inc. d.b.a. GoPro)
HDR Efex Pro 2 (HKLM-x32\...\HDR Efex Pro 2) (Version: 2.0.0.3 - Nik Software, Inc.)
HP ENVY 5530 series Basic Device Software (HKLM\...\{FE11AA0F-756F-4879-97A0-B1705E2DCABE}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP ENVY 5530 series Help (HKLM-x32\...\{97EAE055-1BE8-4775-8101-453E9715EC3F}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Support Solutions Framework (HKLM-x32\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.0.30.81 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2345 - Intel Corporation)
Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{5A80B0BA-79AF-4B11-B851-CCB9F7977AC0}) (Version: 1.0.1.0489 - Intel Corporation)
Intel® WiDi (HKLM-x32\...\{7FCB8D5D-9396-4D17-8CFA-349D6D49CD32}) (Version: 3.0.13.0 - Intel Corporation)
Intel® WiDi Widget (HKLM-x32\...\{CF84827D-6048-435B-80CD-4F6CAF5F99CF}) (Version: 1.2.0.0 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - )
Intel® PROSet/Wireless WiFi Software (HKLM\...\{BAA0BE9B-9E6D-4802-91CB-FB7ED5CD4BEF}) (Version: 15.01.1500.1034 - Intel Corporation)
Internet Explorer (x32 Version: 8 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{0D44E3A4-6C3D-45D7-B443-079509E5BE5D}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Exploit version 1.8.1.1045 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.8.1.1045 - Malwarebytes)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Modem Diagnostic Tool (HKLM\...\{0335701D-8E28-4A7F-B0EF-312974755BB2}) (Version: 1.0.28.0 - Dell)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Netwaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.59 - BVRP Software, Inc)
Photomatix Pro version 4.1.4 (HKLM\...\PhotomatixPro41x64_is1) (Version: 4.1.4 - HDRsoft Sarl)
Photomatix Pro version 4.2.7 (HKLM\...\PhotomatixPro42x64_is1) (Version: 4.2.7 - HDRsoft Ltd)
Photomatix Pro version 5.0.5a (HKLM\...\PhotomatixPro5x64_is1) (Version: 5.0.5a - HDRsoft Ltd)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
PhotoSync (HKLM\...\{CECDB976-FC3E-49E1-8A47-DF447D8B4DBC}) (Version: 3.0.7 - touchbyte GmbH)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.15 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.27.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.27.0 - Renesas Electronics Corporation) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Secunia PSI (3.0.0.11003) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.11003 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.104 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
System Requirements Lab for Intel (HKLM-x32\...\{C5DA59CF-2BB8-48D5-8E5B-17F2E0F0FEE4}) (Version: 4.5.5.0 - Husdawg, LLC)
TrustedID (HKLM-x32\...\{C16A92EF-017B-4839-9C75-FBADB5A1FA27}) (Version: 5.0 - TrustedID)
TurboTax 2011 (HKLM-x32\...\TurboTax 2011) (Version: - Intuit, Inc)
TurboTax 2012 (HKLM-x32\...\TurboTax 2012) (Version: 2012.0 - Intuit, Inc)
TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.7.3 - Tweaking.com)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Windows Driver Package - dji-innovations inc. (usbser) Ports (12/06/2012 5.1.2600.5512) (HKLM\...\F731C4A8B354FB9B7579C5D98402D2F988E8B95C) (Version: 12/06/2012 5.1.2600.5512 - dji-innovations inc.)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Wise Disk Cleaner 8.86 (HKLM-x32\...\Wise Disk Cleaner_is1) (Version: 8.86 - WiseCleaner.com, Inc.)
Wise Program Uninstaller 1.83 (HKLM-x32\...\Wise Program Uninstaller_is1) (Version: 1.83 - WiseCleaner.com, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Michael\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DDDCA5F-3138-4219-A298-67AAD3071763} - System32\Tasks\{2A68EA58-C97D-4449-AB84-F3BFF8B386E5} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.17.0.104/en/abandoninstall?source=lightinstaller&page=tsInstall
Task: {1112B31D-5EE2-4F9B-A777-7A9E9D9B6D03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {197B5A45-B6C9-4155-B07A-ACE963903CD3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {1F8D408B-DB55-490B-8C96-697F579C5D88} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {2CF19F81-4DE4-4C9C-BD8C-4DC1A61381AF} - System32\Tasks\GoogleUpdateTaskMachineUA1cefa18391140ae => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {2DA79D24-DB6A-4389-B902-5FCF138B707B} - System32\Tasks\{3C99C252-58B8-4DE2-9321-6D9AAC20A7E6} => pcalua.exe -a C:\Users\Michael\Downloads\USB3_Dell_WIN_A04_Setup-JTDY2_ZPE.exe -d C:\Users\Michael\Downloads
Task: {377C9869-EDCF-4081-BC7E-1363AAD11BBC} - System32\Tasks\{74C4BFA2-7D9F-45EF-84DA-5A289494583B} => pcalua.exe -a C:\dell\drivers\R292744\setup.exe -d C:\dell\drivers\R292744
Task: {46F14715-49AA-4506-99D2-50700AF0B5A2} - System32\Tasks\{27154054-D7E0-49F5-B371-6EA65B5695F8} => pcalua.exe -a C:\Users\Michael\Downloads\R311883.exe -d C:\Users\Michael\Desktop
Task: {4EA475D7-76DF-468B-98B1-E3709188806A} - System32\Tasks\{7305280B-A687-41FE-A4EC-7EDFBFDD3CA5} => pcalua.exe -a C:\Users\Michael\Downloads\Setup1.1.17.0.exe -d C:\Users\Michael\Desktop
Task: {6C0FF04D-7655-431B-AF0F-3A067DEF2A20} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {71C7DF2C-6CAA-481F-A8F5-2A65D183393A} - System32\Tasks\{D226B8F4-89D3-4B57-9618-067857F42FED} => pcalua.exe -a C:\Users\Michael\Downloads\0PDK4_A03_ZPE.exe -d C:\Users\Michael\Downloads
Task: {83236A48-DA48-422E-B76D-57C203D8397B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {8BCABF81-F7C3-4B8E-81DF-21A47AFA4D95} - System32\Tasks\Auslogics\Registry Defrag\Scheduled Registry Optimization => Rundll32.exe TaskSchedulerHelper.dll,RunTask "RegistryDefrag.exe" "-UseTray -Scheduler"
Task: {9431ECA1-0D76-4DA7-90FC-5D10BC706154} - System32\Tasks\{7E19D03F-9451-4EED-91FA-F27916D2FB3E} => pcalua.exe -a C:\dell\drivers\R156778\setup.exe -d C:\dell\drivers\R156778
Task: {9E379F98-B8FD-4D80-8A23-A624610DB86A} - System32\Tasks\{70C29E42-1668-4327-AA43-2CBA9A566A99} => pcalua.exe -a C:\Users\Michael\Downloads\R311884.exe -d C:\Users\Michael\Downloads
Task: {A085DDA3-FAC8-41CB-A7DC-8BB1BB2FCA30} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-08] (Microsoft Corporation)
Task: {A396506A-A607-4C96-B573-37FC0423D05B} - System32\Tasks\{6AAF70DB-0961-4FC3-8741-1627DA144DE3} => pcalua.exe -a C:\Users\Michael\Downloads\startuplite-setup-1.07.exe -d C:\Users\Michael\Desktop
Task: {B16904BA-8DD7-482D-A904-29A3EAE01C42} - System32\Tasks\{1FF31F46-DA19-4A59-A137-D6772CB3994D} => pcalua.exe -a C:\dell\drivers\R309029\Setup.exe -d C:\dell\drivers\R309029
Task: {B50DE703-037D-4FFA-BA39-8D9666069D33} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {C4FED24F-5BD5-4E87-A147-2639FB26FB02} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-11] (Tweaking.com)
Task: {D2C8541B-ACDD-4BF3-AB1C-4B990C2CF4BB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {D590F7D5-3207-4C17-AABD-7E92FA6D9EC7} - System32\Tasks\{A351904D-00B2-48E9-8AF2-22125C683DF7} => pcalua.exe -a "C:\Users\Michael\Downloads\msert (1).exe" -d C:\Users\Michael\Downloads

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-29 23:18 - 2015-10-29 23:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-02 23:07 - 2015-11-22 02:47 - 02653816 _____ () c:\windows\system32\CoreUIComponents.dll
2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-12-02 23:07 - 2015-11-22 02:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-02 23:07 - 2015-11-22 02:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 14:23 - 2010-10-20 14:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-20 14:45 - 2010-10-20 14:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\dell.com -> dell.com
IE trusted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\microsoft.com -> hxxps://www.microsoft.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\100sexlinks.com -> 100sexlinks.com

There are 5630 more sites.

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 18:34 - 2015-12-27 05:52 - 00000855 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AERTFilters => 2
MSCONFIG\Services: Apple Mobile Device Service => 3
MSCONFIG\Services: BBSvc => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HPSupportSolutionsFrameworkService => 3
MSCONFIG\Services: IntuitUpdateServiceV4 => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: nlsX86cc => 2
MSCONFIG\Services: NOBU => 2
MSCONFIG\Services: RoxMediaDB12OEM => 3
MSCONFIG\Services: RoxWatch12 => 2
MSCONFIG\Services: SftService => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: stllssvr => 3
MSCONFIG\Services: TurboBoost => 3
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: DellSystemDetect => C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
HKLM\...\StartupApproved\Run: => "DellStage"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "QuickSet"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "AntiLogger"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Michael\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "AppleIEDAV"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\...\StartupApproved\Run: => "Google Update"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{D43523C4-3B6D-47D9-BCDD-2A09A922469D}] => (Allow) C:\Program Files\HP\HP ENVY 5530 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{B46FF050-3020-4B4B-B394-EF8451EA192A}] => (Allow) LPort=5357
FirewallRules: [{6D207FC5-8BA3-4261-ABED-E0AABDCB5EEA}] => (Allow) C:\Program Files\HP\HP ENVY 5530 series\Bin\DeviceSetup.exe
FirewallRules: [{12775A0C-7B3E-44B1-AFFA-D325C52ED1F2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BE7E639E-0299-41C4-965C-C849CCF3E3E8}] => (Allow) c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe
FirewallRules: [{1A87722D-5C35-4D35-BB95-433DFD3B3A64}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{3CB763EC-627D-483E-B18F-951F86B31099}] => (Allow) LPort=2869
FirewallRules: [{FAEBC30B-67C7-440C-84E9-70E21DA5BC1F}] => (Allow) LPort=1900
FirewallRules: [{CDD6A595-18FA-4EAE-9CCD-19BBBF679475}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E3B0953F-C02D-40F7-B009-C10EFDFB9460}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{93029597-FFC7-4D57-8BC2-8A1F507159FC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{53A196F5-2312-4D85-BF57-622201613F13}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FE3369DA-C261-44F5-A638-20C6B01C21C0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5595E731-AA68-4B9C-893E-D1FC622E2CFF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{575E879A-0C4D-4088-86E8-555DDA6879A1}] => (Allow) LPort=35722
FirewallRules: [{A0880A55-628B-47FA-9DF1-E97782BE6C73}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe
FirewallRules: [{14A2696D-8749-4ABA-8A05-E9961C8BA149}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{C4F4F424-5D58-4D77-8A36-2B85A2DC0776}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{07E970B2-24B2-41B6-B223-CBB39BA4E585}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{E5B64D03-3328-4391-B168-0168D5DBB2B7}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{B297B07B-142F-4C64-A19E-EDE85681B674}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
FirewallRules: [{B9A22735-E0E6-4CB6-AF1A-D1F1E7DEC721}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2D0A6DA1-3AC4-4606-AB69-7D2EADEB06C4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{75EDF175-E3DC-4983-B21B-F7408AB86B35}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6B08C4E6-0B42-410C-A25D-1DE75A2510B6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7AA3CB2C-A706-4AAF-8BFF-17A3500A3F04}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{C3D209B3-1520-4744-B3DF-F32E4FD7142B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{63BC28C5-5BEA-4524-962B-1B365892591F}] => (Allow) C:\Users\Michael\AppData\Local\Temp\7zS5385\HPDiagnosticCoreUI.exe
FirewallRules: [{13C2FDDE-3D39-4CBF-8995-8F0BF318E933}] => (Allow) C:\Users\Michael\AppData\Local\Temp\7zS5385\HPDiagnosticCoreUI.exe

==================== Restore Points =========================

21-12-2015 01:00:03 Installed PhotoSync
22-12-2015 03:39:01 Adblock Plus for IE
26-12-2015 01:18:14 Created by Wise Disk Cleaner
27-12-2015 02:11:54 Auslogics Regisry Defrag - before defragmentation
27-12-2015 03:36:33 Tweaking.com - Windows Repair
28-12-2015 07:46:17 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (12/28/2015 07:47:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 10.0.10586.0, time stamp: 0x5632d4c0
Faulting module name: combase.dll, version: 10.0.10586.0, time stamp: 0x5632d3ca
Exception code: 0xc0000005
Fault offset: 0x0000000000056e39
Faulting process id: 0x8c8
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3
Faulting package full name: Explorer.EXE4
Faulting package-relative application ID: Explorer.EXE5

Error: (12/28/2015 07:47:16 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Explorer.EXE
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 00007FF840396E39

Error: (12/28/2015 06:48:57 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program iexplore.exe version 11.0.10586.20 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 107c

Start Time: 01d1417de721f462

Termination Time: 37

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: 18d44c8c-ad72-11e5-9c00-bc773789cd7a

Faulting package full name:

Faulting package-relative application ID:

Error: (12/27/2015 11:59:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 10.0.10586.0, time stamp: 0x5632d4c0
Faulting module name: ntdll.dll, version: 10.0.10586.20, time stamp: 0x56540c3b
Exception code: 0xc0000409
Fault offset: 0x00000000000a98a0
Faulting process id: 0x1828
Faulting application start time: 0xExplorer.EXE0
Faulting application path: Explorer.EXE1
Faulting module path: Explorer.EXE2
Report Id: Explorer.EXE3
Faulting package full name: Explorer.EXE4
Faulting package-relative application ID: Explorer.EXE5

Error: (12/27/2015 04:20:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (12/27/2015 04:20:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (12/27/2015 04:20:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (12/27/2015 04:20:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (12/27/2015 04:20:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (12/27/2015 04:20:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19

System errors:
=============
Error: (12/28/2015 04:41:26 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 10:00:36 AM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: application-specificLocalActivation{9E175B6D-F52A-11D8-B9A5-505054503030}{9E175B9C-F52A-11D8-B9A5-505054503030}Michael-PCMichaelS-1-5-21-2606919885-2507221499-1667024737-1000LocalHost (Using LRPC)UnavailableUnavailable

Error: (12/28/2015 08:33:44 AM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 08:31:44 AM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 08:23:49 AM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 08:21:59 AM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 08:13:58 AM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 08:11:29 AM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/28/2015 07:10:20 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Intel® Management and Security Application User Notification Service service depends on the Intel® Management and Security Application Local Management Service service which failed to start because of the following error:
%%1058

Error: (12/28/2015 07:07:34 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The HomeGroupListener service terminated with the following service-specific error:
%%2147944153

CodeIntegrity:
===================================
Date: 2015-12-28 09:27:53.806
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.786
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.732
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.712
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.660
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.645
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.558
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.475
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.428
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-12-28 09:27:53.333
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel® Core™ i5-2410M CPU @ 2.30GHz
Percentage of memory in use: 62%
Total physical RAM: 3990.16 MB
Available physical RAM: 1503.67 MB
Total Virtual: 4246.16 MB
Available Virtual: 1354 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:581.42 GB) (Free:480.72 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=581.4 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Edited by MnSD, 28 December 2015 - 09:36 PM.

#2
Satchfan

Posted 29 December 2015 - 12:46 AM

Trusted Helper

Malware Removal
624 posts

Hello MnSD and welcome to GeeksToGo .

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

please follow all instructions in the order posted
please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
if you don't understand something, please don't hesitate to ask for clarification before proceeding
the fixes are specific to your problem and should only be used for this issue on this machine.
please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

You need to move Farbar Recovery Scan Tool to your desktop otherwise fixes will not work.

go to your Downloads folder and locate Farbar Recovery Scan Tool
right click and select Cut
go to an empty spot on your desktop, right click and select Paste

Farbar Recovery Scan Tool should now be on your desktop.

===================================================

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.


S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
2015-12-21 04:24 - 2015-12-21 04:26 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2015-12-21 04:24 - 2015-12-21 04:26 - 00000000 ____D C:\ProgramData\IObit
2015-12-21 04:24 - 2015-12-21 04:25 - 00000000 ____D C:\Users\Michael\AppData\Roaming\IObit
2015-12-21 04:24 - 2015-12-21 04:24 - 00000000 ____D C:\Users\Michael\AppData\IObit
C:\Program Files (x86)\IObit
EmptyTemp:

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
run FRST64 then click Fix just once and wait
it will create a log on your desktop, (Fixlog.txt); please post it to your reply.

================================================

Run Security Check

Download Security Check by screen317 from here or here.

save it to your Desktop.
double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
a Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE: If you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED!, try rebooting the system and then run SecurityCheck again.

Logs to include with next post:

Fixlog.txt
checkup.txt

Thanks

Satchfan

#3
MnSD

Posted 29 December 2015 - 01:52 AM

New Member

Topic Starter
Member
9 posts

Hello Satchfan,

checkup.txt

here are the scans requested:

Results of screen317's Security Check version 1.009
   x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Windows Defender
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Secunia PSI (3.0.0.11003)
Wise Disk Cleaner 8.86
Java version 32-bit out of Date!
Google Chrome (47.0.2526.106)
````````Process Check: objlist.exe by Laurent````````
ESET NOD32 Antivirus egui.exe
ESET NOD32 Antivirus ekrn.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbam.exe
Malwarebytes Anti-Malware mbamscheduler.exe
Malwarebytes Anti-Exploit mbae-svc.exe
Malwarebytes Anti-Exploit mbae64.exe
Malwarebytes Anti-Exploit mbae.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

fixlog.txt

ix result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by Michael (2015-12-28 23:34:16) Run:1
Running from C:\Users\Michael\Desktop
Loaded Profiles: Michael (Available Profiles: Michael & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
2015-12-21 04:24 - 2015-12-21 04:26 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2015-12-21 04:24 - 2015-12-21 04:26 - 00000000 ____D C:\ProgramData\IObit
2015-12-21 04:24 - 2015-12-21 04:25 - 00000000 ____D C:\Users\Michael\AppData\Roaming\IObit
2015-12-21 04:24 - 2015-12-21 04:24 - 00000000 ____D C:\Users\Michael\AppData\IObit
C:\Program Files (x86)\IObit
EmptyTemp:
*****************

LiveUpdateSvc => service removed successfully
C:\Users\Michael\AppData\LocalLow\IObit => moved successfully
C:\ProgramData\IObit => moved successfully
C:\Users\Michael\AppData\Roaming\IObit => moved successfully
C:\Users\Michael\AppData\IObit => moved successfully
"C:\Program Files (x86)\IObit" => not found.
EmptyTemp: => 105.8 MB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 23:34:28 ====

Edited by MnSD, 29 December 2015 - 01:53 AM.

#4
Satchfan

Posted 29 December 2015 - 06:01 AM

Trusted Helper

Malware Removal
624 posts

Please uninstall ESET Smart Security.

Download zoek.exe to your Desktop:

Important: Disable your AntiVirus and AntiSpyware programs, so they do not interfere with the running of Zoek.exe. You can find instructions how to disable your security applications here.

on Windows Vista, 7, 8 and 10 right-click Zoek.exe and select: Run as Administrator
give it a few seconds to appear
copy/paste the entire script inside the codebox below into the input field of Zoek:
```
autoclean;
emptyalltemp;
emptyclsid;
```
close any open programs.
click the Run script button, and wait. It takes a few minutes to run.
when the tool finishes, the zoek-results.log is opened in Notepad: the log can also be found on the systemdrive, normally C:\
if a reboot is needed, the log will be opened after the reboot.

================================================

Please run FRST again and make sure there is a checkmark next to "addition.txt" before you hit “Scan”.

Logs to include with next post:

zoek-results.log
New Frst.txt
New Addition.txt

Thanks

Satchfan

#5
MnSD

Posted 29 December 2015 - 12:44 PM

New Member

Topic Starter
Member
9 posts

Hello Satchfan.

below are the scans requested: I ran both programs as the administrator also.

also uninstalled Eset smart security, turned off all other security tools and disabled MS security products. before the scans. I will re-engage them after I next hear from you. Also I have not opened by Chrome browser either as that seemed to produce the malware issue the most.

Zoek:

Zoek.exe v5.0.0.1 Updated 27-December-2015
Tool run by Michael on Tue 12/29/2015 at 10:05:21.00.
Microsoft Windows 10 Home 10.0.10586 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Michael\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

12/29/2015 10:08:52 AM Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\Cisco deleted successfully
C:\PROGRA~2\Malwarebytes' Anti-Malware deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\uTorrent deleted successfully
C:\Program Files\Google deleted successfully
C:\Program Files\My Dell deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\Cozi deleted successfully
C:\PROGRA~3\ZoomBrowser deleted successfully
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} deleted successfully
C:\Users\DefaultAppPool\AppData\LocalLow deleted successfully
C:\Users\Michael\AppData\Local\ActiveSync deleted successfully
C:\Users\Michael\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Michael\AppData\Local\EmieSiteList deleted successfully
C:\Users\Michael\AppData\Local\EmieUserList deleted successfully
C:\Users\Michael\AppData\Local\Intel WiDi deleted successfully
C:\Users\Michael\AppData\Local\Intel Wireless Display deleted successfully
C:\Users\Michael\AppData\Local\NetworkTiles deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2606919885-2507221499-1667024737-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Cisco not found
C:\PROGRA~2\uTorrent not found
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} not found
C:\PROGRA~2\GUMC1D8.tmp deleted
C:\install.exe deleted
C:\PROGRA~3\AVG January 2013 Campaign deleted
C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Michael\AppData\Local\Software deleted
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk" not deleted

==== Chromium Look ======================

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.startpage.com/"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Start Page Redirect Cache"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Start Page Redirect Cache"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft....k/?LinkId=54896"
"Start Page"="http://www.startpage.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft....k/?LinkId=54896"
"Search Bar"="http://go.microsoft....k/?LinkId=54896"
"Start Page Redirect Cache"="http://go.microsoft....k/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft....k/?LinkId=54896"
"Search Bar"="http://go.microsoft....k/?LinkId=54896"
"Start Page Redirect Cache"="http://go.microsoft....k/?LinkId=69157"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{23392EC5-488B-4C8F-BE7D-B591FEDF7497}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/...ms}&FORM=IE8SRC
HKLM\SearchScopes\{23392EC5-488B-4C8F-BE7D-B591FEDF7497} - http://www.bing.com/...rc=IE-SearchBox
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/...ms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} - http://www.google.co...{outputEncoding?}
HKLM\Wow6432Node\SearchScopes\{BB692C45-6F19-43E7-AE01-FB2B2FAA29BE} - http://www.bing.com/...rc=IE-SearchBox
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.co...?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/...=IESR02&pc=UE04
HKCU\SearchScopes\{23392EC5-488B-4C8F-BE7D-B591FEDF7497} - No_Url_Value

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonQuickMenu deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Michael\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Michael\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Michael\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Michael\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=93 folders=16 67314094 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Michael\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk" not found

==== EOF on Tue 12/29/2015 at 10:25:56.39 ======================

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-12-2015
Ran by Michael (administrator) on MICHAEL-PC (29-12-2015 10:32:59)
Running from C:\Users\Michael\Desktop
Loaded Profiles: Michael (Available Profiles: Michael & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2606919885-2507221499-1667024737-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startpage.com/
SearchScopes: HKLM -> DefaultScope {23392EC5-488B-4C8F-BE7D-B591FEDF7497} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM -> {23392EC5-488B-4C8F-BE7D-B591FEDF7497} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {BB692C45-6F19-43E7-AE01-FB2B2FAA29BE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000 -> {23392EC5-488B-4C8F-BE7D-B591FEDF7497} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-18] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-18] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08] (Adblock Plus)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08] (Adblock Plus)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKU\S-1-5-21-2606919885-2507221499-1667024737-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
DPF: HKLM-x32 {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} hxxp://www.support.dell.com/systemprofiler/SysProExe.CAB
DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://www.mydlink.com/8D/activeX//TunnelX.ocx
DPF: HKLM-x32 {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1450513751827
DPF: HKLM-x32 {682C59F5-478C-4421-9070-AD170D143B77} hxxp://www.dell.com/support/troubleshooting/Content/Ode/pcd86.cab
DPF: HKLM-x32 {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} hxxp://xserv.dell.com/DellDriverScanner/DellSystem.CAB
DPF: HKLM-x32 {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.5.0.cab

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-11-30] (Microsoft Corporation)
S4 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [24888 2015-07-26] (Hewlett-Packard Company)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [739640 2015-11-18] (Malwarebytes Corporation)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S4 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2012-09-04] (Nalpeiron Ltd.) [File not signed]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1572056 2015-12-01] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [839384 2015-12-01] (Secunia)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-29] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-29] (Microsoft Corporation)
S4 ZAMSvc; "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /service [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AntiLog32; C:\WINDOWS\system32\drivers\AntiLog64.sys [49752 2015-12-04] (Zemana Ltd.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-07-30] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [200192 2015-07-30] (ESET)
R0 edevmon; C:\Windows\SysWOW64\DRIVERS\edevmon.sys [239296 2013-09-17] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [14976 2015-07-30] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [186784 2015-07-30] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [206312 2015-07-30] (ESET)
R1 EpfwLWF; C:\Windows\system32\DRIVERS\EpfwLWF.sys [52872 2015-07-30] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-07-30] (ESET)
S3 ESETCleanersDriver; C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys [170280 2015-12-11] (ESET)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-11] ()
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-11-18] ()
S3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt64.sys [76520 2014-12-30] (Zemana Ltd.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2015-12-01] (Secunia)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-29] (Realtek )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30848 2015-12-12] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-29] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-29] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-29] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [199536 2015-12-10] (Zemana Ltd.)
S3 efavdrv; \??\C:\WINDOWS\system32\drivers\efavdrv.sys [X]
U3 idsvc; no ImagePath
S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-29 10:26 - 2015-12-29 10:26 - 00000000 ____D C:\Users\Michael\AppData\Local\ActiveSync
2015-12-29 10:23 - 2015-12-29 10:05 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-12-29 10:20 - 2015-12-29 10:25 - 00000000 ____D C:\zoek
2015-12-29 10:05 - 2015-12-29 10:21 - 00000000 ____D C:\zoek_backup
2015-12-29 10:00 - 2015-12-29 10:01 - 00000000 ____D C:\Users\Michael\Downloads\zoek
2015-12-29 10:00 - 2015-12-29 10:00 - 04186040 _____ C:\Users\Michael\Downloads\zoek.zip
2015-12-29 09:50 - 2015-12-29 09:51 - 01170558 _____ C:\Users\Michael\Downloads\eset stuff.xml
2015-12-28 23:48 - 2015-12-28 23:48 - 00001114 _____ C:\Users\Michael\Desktop\text.txt
2015-12-28 23:48 - 2015-12-28 23:48 - 00001114 _____ C:\Users\Michael\Desktop\checkup.txt
2015-12-28 23:47 - 2015-12-28 23:47 - 00000000 _____ C:\Users\Michael\Desktop\New Text Document (2).txt
2015-12-28 23:43 - 2015-12-28 23:44 - 00852720 _____ C:\Users\Michael\Desktop\SecurityCheck.exe
2015-12-28 23:34 - 2015-12-28 23:34 - 00001250 _____ C:\Users\Michael\Desktop\Fixlog.txt
2015-12-28 23:32 - 2015-12-28 23:33 - 00047014 _____ C:\Users\Michael\Desktop\Addition.txt
2015-12-28 23:30 - 2015-12-29 10:33 - 00044990 _____ C:\Users\Michael\Desktop\FRST.txt
2015-12-28 20:37 - 2015-12-28 20:37 - 02721280 _____ C:\Users\Michael\Downloads\msxml6_x64.msi
2015-12-28 20:27 - 2015-12-28 20:27 - 00001148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2015-12-28 18:50 - 2015-12-28 18:50 - 00000000 ____D C:\Users\Michael\AppData\Local\Sonic_Solutions
2015-12-28 18:11 - 2015-12-28 18:18 - 340670464 _____ C:\Users\Michael\Downloads\eset-sysrescue.1.0.9.0.enu.iso
2015-12-28 17:00 - 2015-12-28 17:02 - 00046926 _____ C:\Users\Michael\Downloads\Addition.txt
2015-12-28 16:58 - 2015-12-29 10:32 - 00000000 ____D C:\FRST
2015-12-28 16:58 - 2015-12-28 17:02 - 00126367 _____ C:\Users\Michael\Downloads\FRST.txt
2015-12-28 16:55 - 2015-12-28 16:57 - 02370560 _____ (Farbar) C:\Users\Michael\Desktop\FRST64.exe
2015-12-28 10:27 - 2015-12-28 10:27 - 00109278 _____ C:\Users\Michael\Downloads\Extras.Txt
2015-12-28 10:26 - 2015-12-28 10:26 - 00273348 _____ C:\Users\Michael\Downloads\OTL.Txt
2015-12-28 10:14 - 2015-12-28 10:14 - 01114576 _____ C:\Users\Michael\Downloads\revosetup.exe
2015-12-28 10:09 - 2015-12-28 10:10 - 00602112 _____ (OldTimer Tools) C:\Users\Michael\Downloads\OTL.exe
2015-12-28 07:50 - 2015-12-28 07:50 - 00000827 _____ C:\Users\Michael\Desktop\JRT.txt
2015-12-28 07:45 - 2015-12-28 07:45 - 01599336 _____ (Malwarebytes) C:\Users\Michael\Downloads\JRT.exe
2015-12-28 07:39 - 2015-12-28 07:41 - 00003014 _____ C:\Users\Michael\Desktop\Rkill.txt
2015-12-28 07:38 - 2015-12-28 07:39 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\Michael\Downloads\rkill.com
2015-12-28 06:58 - 2015-12-28 06:58 - 00053248 _____ C:\WINDOWS\SysWOW64\zlib.dll
2015-12-28 06:58 - 2015-12-28 06:58 - 00001291 _____ C:\Users\Public\Desktop\CryptoPrevent.lnk
2015-12-28 06:58 - 2015-12-28 06:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT
2015-12-28 06:58 - 2015-12-28 06:58 - 00000000 ____D C:\ProgramData\Foolish IT
2015-12-28 06:58 - 2015-12-28 06:58 - 00000000 ____D C:\Program Files (x86)\Foolish IT
2015-12-28 06:57 - 2015-12-28 06:57 - 02618336 _____ (Foolish IT LLC ) C:\Users\Michael\Downloads\CryptoPreventSetup.exe
2015-12-28 06:55 - 2015-12-28 06:55 - 01743360 _____ C:\Users\Michael\Downloads\adwcleaner_5.026.exe
2015-12-28 06:34 - 2015-12-28 06:34 - 00002338 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-28 06:34 - 2015-12-28 06:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-28 06:32 - 2015-12-29 10:25 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-28 06:32 - 2015-12-29 09:37 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-28 06:32 - 2015-12-28 06:32 - 00003980 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-28 06:32 - 2015-12-28 06:32 - 00003748 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-27 03:36 - 2015-12-27 03:36 - 00000000 ____D C:\RegBackup
2015-12-27 02:31 - 2015-12-27 02:31 - 00003776 _____ C:\WINDOWS\System32\Tasks\Tweaking.com - Windows Repair Tray Icon
2015-12-27 02:31 - 2015-12-27 02:31 - 00002238 _____ C:\Users\Michael\Desktop\Tweaking.com - Windows Repair.lnk
2015-12-27 02:31 - 2015-12-27 02:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-12-27 02:31 - 2015-12-27 02:31 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2015-12-27 02:30 - 2015-12-27 02:31 - 00183470 _____ C:\WINDOWS\Tweaking.com - Windows Repair Setup Log.txt
2015-12-27 02:30 - 2015-12-27 02:30 - 21102368 _____ (Tweaking.com) C:\Users\Michael\Downloads\tweaking.com_windows_repair_aio_setup.exe
2015-12-27 02:09 - 2015-12-27 02:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Auslogics
2015-12-27 02:09 - 2015-12-27 02:12 - 00000000 ____D C:\ProgramData\Auslogics
2015-12-27 02:08 - 2015-12-27 02:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-12-27 02:08 - 2015-12-27 02:46 - 00000000 ____D C:\Program Files (x86)\Auslogics
2015-12-27 02:08 - 2015-12-27 02:08 - 00001404 _____ C:\Users\Michael\Desktop\Auslogics Registry Defrag.lnk
2015-12-27 02:07 - 2015-12-27 02:07 - 07549704 _____ (Auslogics Labs Pty Ltd ) C:\Users\Michael\Downloads\registry-defrag-setup.exe
2015-12-27 01:36 - 2015-12-27 06:25 - 00394960 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-26 01:10 - 2015-12-26 02:15 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Wise Disk Cleaner
2015-12-26 01:09 - 2015-12-26 01:09 - 04633944 _____ (WiseCleaner.com ) C:\Users\Michael\Downloads\WDCFree.exe
2015-12-26 01:09 - 2015-12-26 01:09 - 00001283 _____ C:\Users\Public\Desktop\Wise Disk Cleaner.lnk
2015-12-26 01:09 - 2015-12-26 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Disk Cleaner
2015-12-25 07:44 - 2015-12-25 07:44 - 07289160 _____ (touchbyte GmbH) C:\Users\Michael\Downloads\photosync_setup_en_307.exe
2015-12-25 07:41 - 2015-12-25 07:41 - 00015079 _____ C:\Users\Michael\Downloads\Action-Verbs-for-Resumes.pdf
2015-12-25 02:51 - 2015-12-25 02:55 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Wise Uninstaller
2015-12-25 02:51 - 2015-12-25 02:51 - 00000167 _____ C:\Users\Michael\AppData\Roaming\wpulog.txt
2015-12-25 02:46 - 2015-12-29 10:23 - 00000119 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2015-12-25 02:43 - 2015-12-26 01:09 - 00000000 ____D C:\Program Files (x86)\Wise
2015-12-25 02:43 - 2015-12-25 02:43 - 00001367 _____ C:\Users\Public\Desktop\Wise Program Uninstaller.lnk
2015-12-25 02:43 - 2015-12-25 02:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller
2015-12-25 02:42 - 2015-12-25 02:43 - 02300072 _____ (WiseCleaner.com ) C:\Users\Michael\Downloads\WPUSetup.exe
2015-12-24 21:59 - 2015-12-24 21:59 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2015-12-24 21:58 - 2015-12-24 21:58 - 02143832 _____ C:\Users\Michael\Downloads\instsf449.exe
2015-12-24 10:22 - 2015-12-24 10:22 - 00001757 _____ C:\Users\Michael\Desktop\WINWORD - Shortcut.lnk
2015-12-23 18:16 - 2015-12-23 18:16 - 00071344 _____ C:\Users\Michael\Downloads\netpass-x64.zip
2015-12-22 01:58 - 2015-12-22 03:45 - 00000000 ____D C:\Users\Michael\Downloads\2015
2015-12-21 04:26 - 2015-12-21 04:26 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2015-12-21 01:37 - 2015-12-28 07:28 - 00000000 ____D C:\AdwCleaner
2015-12-20 14:43 - 2015-12-20 16:38 - 00009737 _____ C:\Users\Michael\Desktop\Clif Tattoo Shops.xlsx
2015-12-20 14:41 - 2015-12-20 14:41 - 00008746 _____ C:\Users\Michael\Desktop\New Microsoft Excel Worksheet.xlsx
2015-12-20 12:29 - 2015-12-20 12:29 - 01528320 _____ C:\Users\Michael\Downloads\msxml6.msi
2015-12-19 00:11 - 2015-12-19 00:12 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-19 00:11 - 2015-12-19 00:11 - 00002126 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-12-19 00:11 - 2015-12-19 00:11 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-18 23:43 - 2015-12-18 23:43 - 04010016 _____ (Secunia) C:\Users\Michael\Downloads\PSISetup.exe
2015-12-18 23:43 - 2015-12-18 23:43 - 00000000 ____D C:\Program Files (x86)\Secunia
2015-12-18 23:33 - 2015-12-18 23:33 - 00001916 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-12-18 23:33 - 2015-12-18 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-12-18 23:30 - 2015-12-18 23:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-18 23:30 - 2015-12-18 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-18 23:29 - 2015-12-18 23:29 - 00003248 _____ C:\WINDOWS\System32\Tasks\{2A68EA58-C97D-4449-AB84-F3BFF8B386E5}
2015-12-18 23:29 - 2015-12-18 23:29 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Sun
2015-12-18 23:29 - 2015-12-18 23:29 - 00000000 ____D C:\Users\Michael\.oracle_jre_usage
2015-12-18 23:28 - 2015-12-18 23:28 - 00000000 ____D C:\ProgramData\Oracle
2015-12-18 23:27 - 2015-12-18 23:27 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\Oracle
2015-12-18 23:21 - 2015-12-18 23:28 - 00000000 ____D C:\Users\Michael\Documents\My Filehippo Downloads
2015-12-18 22:30 - 2015-12-18 22:30 - 00001171 _____ C:\DelFix.txt
2015-12-18 07:13 - 2015-12-18 07:13 - 00003298 _____ C:\WINDOWS\System32\Tasks\{A351904D-00B2-48E9-8AF2-22125C683DF7}
2015-12-18 02:32 - 2015-12-18 02:38 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Geek Uninstaller
2015-12-17 18:07 - 2015-12-06 20:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-17 18:07 - 2015-12-06 20:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-17 18:07 - 2015-12-06 20:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-17 18:07 - 2015-12-06 20:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-17 18:07 - 2015-12-06 20:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-17 18:07 - 2015-12-06 20:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-17 18:07 - 2015-12-06 20:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-17 18:07 - 2015-12-06 19:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-17 18:07 - 2015-12-06 19:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-17 18:07 - 2015-12-06 19:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-17 18:07 - 2015-12-06 19:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-17 18:07 - 2015-12-06 19:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-17 18:07 - 2015-12-06 19:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-17 18:07 - 2015-12-06 19:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-17 18:06 - 2015-12-06 20:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-17 18:06 - 2015-12-06 20:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-17 18:06 - 2015-12-06 20:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-17 18:06 - 2015-12-06 20:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-17 18:06 - 2015-12-06 20:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-17 18:06 - 2015-12-06 20:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-17 18:06 - 2015-12-06 20:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-17 18:06 - 2015-12-06 20:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-17 18:06 - 2015-12-06 20:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-17 18:06 - 2015-12-06 20:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-17 18:06 - 2015-12-06 20:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-17 18:06 - 2015-12-06 20:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-17 18:06 - 2015-12-06 20:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-17 18:06 - 2015-12-06 20:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-17 18:06 - 2015-12-06 20:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-17 18:06 - 2015-12-06 20:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-17 18:06 - 2015-12-06 20:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-17 18:06 - 2015-12-06 20:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-17 18:06 - 2015-12-06 20:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-17 18:06 - 2015-12-06 20:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-17 18:06 - 2015-12-06 20:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-17 18:06 - 2015-12-06 20:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-17 18:06 - 2015-12-06 20:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-17 18:06 - 2015-12-06 20:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-17 18:06 - 2015-12-06 20:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-17 18:06 - 2015-12-06 20:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-17 18:06 - 2015-12-06 20:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-17 18:06 - 2015-12-06 20:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-17 18:06 - 2015-12-06 19:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-17 18:06 - 2015-12-06 19:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-17 18:06 - 2015-12-06 19:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-17 18:06 - 2015-12-06 19:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-17 18:06 - 2015-12-06 19:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-17 18:06 - 2015-12-06 19:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-17 18:06 - 2015-12-06 19:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 19:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-17 18:06 - 2015-12-06 19:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-17 18:06 - 2015-12-06 19:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-17 18:06 - 2015-12-06 19:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-17 18:06 - 2015-12-06 19:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-17 18:06 - 2015-12-06 19:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-17 18:06 - 2015-12-06 19:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-17 18:06 - 2015-12-06 19:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-17 18:06 - 2015-12-06 19:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-17 18:06 - 2015-12-06 19:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-17 18:06 - 2015-12-06 19:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-17 18:06 - 2015-12-06 19:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-17 18:06 - 2015-12-06 19:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-17 18:06 - 2015-12-06 19:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-17 18:06 - 2015-12-06 19:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-17 18:06 - 2015-12-06 19:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-17 18:06 - 2015-12-06 19:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-17 18:06 - 2015-12-06 19:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-17 18:06 - 2015-12-06 19:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-17 18:06 - 2015-12-06 19:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-16 23:23 - 2015-12-16 23:23 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-MICHAEL-PC-Windows-10-Home-(64-bit).dat
2015-12-16 23:22 - 2015-12-16 23:22 - 04777232 _____ (Tweaking.com) C:\Users\Michael\Downloads\tweaking.com_registry_backup_setup.exe
2015-12-15 01:53 - 2015-12-15 01:53 - 00002112 _____ C:\MWB Text file.txt
2015-12-14 18:09 - 2015-12-14 18:09 - 00001824 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-12-14 18:09 - 2015-12-14 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-12-14 18:08 - 2015-12-14 18:09 - 00000000 ____D C:\Program Files\iTunes
2015-12-14 18:08 - 2015-12-14 18:08 - 00000000 ____D C:\Program Files\iPod
2015-12-14 18:08 - 2015-12-14 18:08 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-12-14 18:01 - 2015-12-14 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-12-12 09:14 - 2015-12-28 06:32 - 00000000 ____D C:\Users\Michael\AppData\Local\Deployment
2015-12-12 05:50 - 2015-12-12 05:50 - 02031992 _____ (Microsoft Corporation) C:\Users\Michael\Downloads\MGADiag.exe
2015-12-12 05:50 - 2015-12-12 05:50 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2015-12-12 05:05 - 2015-12-28 07:47 - 00000000 ____D C:\Users\Michael\AppData\Local\CrashDumps
2015-12-12 03:49 - 2015-12-25 01:25 - 00000000 ____D C:\Users\Michael\Downloads\Clif
2015-12-11 23:39 - 2015-12-11 23:39 - 00000000 _____ C:\autoexec.bat
2015-12-11 23:38 - 2015-12-11 23:38 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-11 23:19 - 2015-12-28 07:18 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
2015-12-11 23:19 - 2015-12-11 23:19 - 00000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2015-12-11 23:18 - 2015-12-11 23:23 - 00700584 _____ C:\Users\Michael\Downloads\Adware_Removal_Tool_by_TSA.exe
2015-12-08 13:06 - 2015-11-30 23:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-08 13:06 - 2015-11-24 04:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-08 13:06 - 2015-11-24 03:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-08 13:06 - 2015-11-24 02:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-08 13:06 - 2015-11-24 02:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-08 13:06 - 2015-11-24 01:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-08 13:06 - 2015-11-24 01:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-08 13:06 - 2015-11-24 01:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-08 13:06 - 2015-11-24 01:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-08 13:06 - 2015-11-24 01:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-08 13:06 - 2015-11-24 01:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-08 13:06 - 2015-11-24 01:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-08 13:06 - 2015-11-24 00:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-08 13:06 - 2015-11-24 00:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-08 13:06 - 2015-11-24 00:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-08 13:06 - 2015-11-24 00:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-08 13:06 - 2015-11-24 00:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-08 13:06 - 2015-11-24 00:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-08 13:06 - 2015-11-24 00:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-08 13:06 - 2015-11-23 23:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-08 13:06 - 2015-11-23 23:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-08 13:06 - 2015-11-23 23:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-08 13:06 - 2015-11-23 23:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-08 13:06 - 2015-11-23 23:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-08 13:06 - 2015-11-23 23:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-08 13:06 - 2015-11-23 23:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-08 13:06 - 2015-11-23 23:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-07 04:00 - 2015-12-12 04:03 - 00030848 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2015-12-07 04:00 - 2015-12-07 04:46 - 00000000 ____D C:\ProgramData\RogueKiller
2015-12-06 19:57 - 2015-12-06 19:57 - 00000000 ____D C:\Program Files\Bonjour
2015-12-06 19:57 - 2015-12-06 19:57 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-12-06 19:54 - 2015-12-06 19:54 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2015-12-06 19:54 - 2015-12-06 19:54 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-12-06 16:19 - 2015-12-06 16:19 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-12-05 01:20 - 2015-12-24 21:47 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-05 01:20 - 2015-12-05 01:20 - 00002864 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-12-05 01:20 - 2015-12-05 01:20 - 00000000 ____D C:\Program Files\CCleaner
2015-12-04 02:53 - 2015-12-28 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiLogger
2015-12-04 02:53 - 2015-12-04 02:53 - 00049752 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\AntiLog64.sys
2015-12-04 02:53 - 2014-12-30 13:31 - 07039960 _____ (Zemana Ltd.) C:\WINDOWS\SysWOW64\ZALSDKCore.dll
2015-12-04 02:53 - 2014-12-30 13:31 - 00076520 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\KeyCrypt64.sys
2015-12-04 01:47 - 2015-12-10 18:45 - 00199536 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2015-12-04 01:46 - 2015-12-04 02:53 - 00000000 ____D C:\Users\Michael\AppData\Local\Zemana
2015-12-03 03:02 - 2015-12-03 03:02 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-12-03 01:51 - 2015-12-03 02:43 - 00000000 ____D C:\Users\Michael\AppData\Roaming\FreeFixer
2015-12-03 01:51 - 2015-12-03 02:03 - 00000000 ____D C:\Users\Michael\AppData\Local\FreeFixer
2015-12-03 01:49 - 2015-12-03 01:49 - 02687418 _____ (Kephyr) C:\Users\Michael\Downloads\freefixersetup.exe
2015-12-03 01:26 - 2015-12-12 07:17 - 00000000 ____D C:\Program Files\FreeFixer
2015-12-03 01:25 - 2015-12-03 01:25 - 02687418 _____ (Kephyr) C:\Users\Michael\Desktop\freefixersetup.exe
2015-12-02 23:07 - 2015-11-22 02:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-02 23:07 - 2015-11-22 02:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-02 23:07 - 2015-11-22 02:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-02 23:07 - 2015-11-22 02:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-02 23:07 - 2015-11-22 02:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-02 23:07 - 2015-11-22 02:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-02 23:07 - 2015-11-22 02:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-02 23:07 - 2015-11-22 02:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-02 23:07 - 2015-11-22 02:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-02 23:07 - 2015-11-22 02:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-02 23:07 - 2015-11-22 02:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-02 23:07 - 2015-11-22 02:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-02 23:07 - 2015-11-22 02:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-02 23:07 - 2015-11-22 02:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-02 23:07 - 2015-11-22 02:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-02 23:07 - 2015-11-22 02:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-02 23:07 - 2015-11-22 02:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-02 23:07 - 2015-11-22 01:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-02 23:07 - 2015-11-22 01:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-02 23:07 - 2015-11-22 01:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-02 23:07 - 2015-11-22 01:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-02 23:07 - 2015-11-22 01:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-02 23:07 - 2015-11-22 01:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-02 23:07 - 2015-11-22 01:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-02 23:07 - 2015-11-22 01:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-02 23:07 - 2015-11-22 01:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-02 23:07 - 2015-11-22 01:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-02 23:07 - 2015-11-22 01:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-02 23:07 - 2015-11-22 01:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-02 23:07 - 2015-11-22 01:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-02 23:07 - 2015-11-22 01:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-02 23:07 - 2015-11-22 01:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-02 23:07 - 2015-11-22 01:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-02 23:07 - 2015-11-22 01:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-02 23:07 - 2015-11-22 01:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-02 23:07 - 2015-11-22 01:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-02 23:07 - 2015-11-22 01:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-02 23:07 - 2015-11-22 01:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-02 23:07 - 2015-11-22 01:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-02 23:07 - 2015-11-22 01:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-02 23:07 - 2015-11-22 01:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-02 23:07 - 2015-11-22 01:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-02 23:07 - 2015-11-22 01:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-02 23:07 - 2015-11-22 01:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-02 23:07 - 2015-11-22 01:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-02 23:07 - 2015-11-22 01:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-02 23:07 - 2015-11-22 01:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-02 23:07 - 2015-11-22 01:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-02 23:07 - 2015-11-22 01:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-02 23:07 - 2015-11-22 01:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-02 23:07 - 2015-11-22 01:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-02 23:07 - 2015-11-22 01:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-02 23:07 - 2015-11-22 01:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-02 23:07 - 2015-11-22 01:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-02 23:07 - 2015-11-22 01:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-02 23:07 - 2015-11-22 01:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-02 23:07 - 2015-11-22 01:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-02 23:07 - 2015-11-22 01:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-02 23:07 - 2015-11-22 01:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-02 23:06 - 2015-11-22 02:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-02 23:06 - 2015-11-22 02:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-02 23:06 - 2015-11-22 01:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-02 23:06 - 2015-11-22 01:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-02 23:06 - 2015-11-22 01:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-02 23:06 - 2015-11-22 01:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-02 23:06 - 2015-11-22 01:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-02 23:06 - 2015-11-22 01:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-02 23:06 - 2015-11-22 01:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-02 23:06 - 2015-11-22 01:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-02 23:06 - 2015-11-22 01:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-02 23:06 - 2015-11-22 01:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-02 23:06 - 2015-11-22 01:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-02 23:06 - 2015-11-22 01:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-02 23:06 - 2015-11-22 01:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-02 23:06 - 2015-11-22 01:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-02 23:06 - 2015-11-22 01:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-02 23:06 - 2015-11-22 01:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-02 23:06 - 2015-11-22 01:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-02 23:06 - 2015-11-22 01:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-02 23:06 - 2015-11-22 01:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-02 23:06 - 2015-11-22 01:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-02 23:06 - 2015-11-22 01:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-02 23:06 - 2015-11-22 01:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-02 23:06 - 2015-11-22 01:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-02 23:06 - 2015-11-22 01:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-02 23:06 - 2015-11-22 01:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-02 23:06 - 2015-11-22 01:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-02 23:06 - 2015-11-22 01:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-02 23:06 - 2015-11-22 01:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-02 23:06 - 2015-11-22 01:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-02 23:06 - 2015-11-22 01:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-02 23:06 - 2015-11-22 01:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-02 23:06 - 2015-11-22 01:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-02 23:06 - 2015-11-22 01:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-02 23:06 - 2015-11-22 01:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-02 04:58 - 2015-12-02 04:58 - 00065232 _____ (Malwarebytes) C:\Users\Michael\Downloads\regassassin-setup-1.03.exe
2015-12-02 04:55 - 2015-12-28 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2015-12-02 04:54 - 2015-12-28 20:50 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2015-12-02 04:54 - 2015-12-28 20:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2015-12-02 04:54 - 2015-11-18 08:01 - 02621240 _____ (Malwarebytes Corporation) C:\Users\Michael\Desktop\mbae.exe
2015-12-02 04:53 - 2015-12-02 04:54 - 01846024 _____ (Malwarebytes ) C:\Users\Michael\Downloads\mbae-setup-1.08.1.1045.exe
2015-12-01 12:21 - 2015-12-01 12:21 - 00000000 ____D C:\CCSupport
2015-12-01 11:38 - 2015-12-01 11:38 - 00000022 _____ C:\Users\Michael\Downloads\ESETPoweliksCleaner.exe_20151201.113800.3004.zip
2015-12-01 11:37 - 2015-12-01 11:37 - 00224968 _____ (ESET) C:\Users\Michael\Downloads\ESETPoweliksCleaner.exe
2015-12-01 11:28 - 2015-12-01 11:29 - 02837704 _____ (ESET) C:\Users\Michael\Downloads\eset_smart_security_live_installer.exe
2015-12-01 11:12 - 2015-12-11 18:04 - 00170280 _____ (ESET) C:\WINDOWS\system32\Drivers\ESETCleanersDriver.sys
2015-12-01 05:10 - 2015-12-01 05:10 - 02335448 _____ (Secunia) C:\Users\Michael\Desktop\psi.exe
2015-12-01 05:10 - 2015-12-01 05:10 - 00018456 _____ (Secunia) C:\WINDOWS\system32\Drivers\psi_mf_amd64.sys
2015-11-30 20:45 - 2015-11-30 20:45 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-11-30 11:14 - 2015-11-30 11:14 - 00000000 ____D C:\Program Files\Windows Identity Foundation
2015-11-29 20:22 - 2015-11-29 20:22 - 00000020 ___SH C:\Users\Michael\ntuser.ini
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\My Documents
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\Documents\My Videos
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default\Documents\My Music
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures
2015-11-29 20:21 - 2015-11-29 20:21 - 00000000 _SHDL C:\Users\Default User\Documents\My Music
2015-11-29 20:14 - 2015-12-29 10:24 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-29 20:02 - 2015-11-29 20:02 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\Desktop\Play Games
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Rescue Calling Card
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\Desktop\Play Games
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-11-29 20:02 - 2015-11-29 20:02 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Rescue Calling Card
2015-11-29 19:53 - 2015-11-29 19:53 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-11-29 19:52 - 2015-11-29 20:04 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-11-29 19:50 - 2015-12-27 02:16 - 00000000 ____D C:\Users\Michael
2015-11-29 19:50 - 2015-12-03 03:02 - 00000000 ____D C:\Users\DefaultAppPool
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\My Documents
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\Documents\My Videos
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\Documents\My Pictures
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\Michael\Documents\My Music
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\My Documents
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Videos
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Pictures
2015-11-29 19:50 - 2015-11-29 19:50 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\My Music
2015-11-29 19:49 - 2015-12-29 10:28 - 00883270 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-29 19:49 - 2015-12-27 05:47 - 00883142 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2015-11-29 19:46 - 2015-11-29 19:46 - 00000000 ____D C:\Program Files\Realtek
2015-11-29 19:45 - 2015-11-29 19:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2015-11-29 19:45 - 2015-11-29 19:45 - 00000000 ____D C:\Program Files\DellTPad
2015-11-29 19:44 - 2015-10-29 23:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-11-29 19:40 - 2015-12-26 01:17 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-29 19:36 - 2015-11-29 19:36 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-29 19:36 - 2015-11-29 19:36 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-11-29 19:36 - 2015-11-29 19:36 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-11-29 19:36 - 2015-11-29 19:36 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-29 19:36 - 2015-11-29 19:36 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-11-29 19:36 - 2015-11-29 19:36 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-29 19:36 - 2015-11-29 19:36 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-11-29 19:36 - 2015-11-29 19:36 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-11-29 19:34 - 2015-11-29 19:34 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-11-29 19:31 - 2015-11-29 20:04 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\Program Files\MSBuild
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-11-29 19:31 - 2015-11-29 19:31 - 00000000 ____D C:\inetpub
2015-11-29 19:30 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-11-29 19:30 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-11-29 19:30 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-11-29 19:30 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-29 19:30 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-29 19:30 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-29 10:31 - 2015-10-29 23:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-29 10:28 - 2015-10-29 23:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-29 10:25 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-29 10:23 - 2015-10-29 22:28 - 00000000 ____D C:\Windows
2015-12-29 10:05 - 2003-01-24 00:11 - 01309184 _____ C:\Users\Michael\Desktop\zoek.exe
2015-12-29 10:01 - 2015-10-03 01:49 - 01448141 _____ C:\Users\Michael\Desktop\zoek.com
2015-12-29 10:01 - 2012-09-28 13:47 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-29 10:00 - 2015-10-03 01:49 - 01448141 _____ C:\Users\Michael\Desktop\zoek.scr
2015-12-29 09:57 - 2013-11-03 15:49 - 00000000 ____D C:\ProgramData\ESET
2015-12-29 09:54 - 2014-04-16 12:36 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-29 09:45 - 2014-02-16 20:23 - 00000000 ____D C:\Users\Michael\AppData\LocalLow\Adblock Plus for IE
2015-12-28 18:51 - 2011-05-31 12:37 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Roxio
2015-12-28 18:50 - 2011-05-24 22:22 - 00000000 ____D C:\ProgramData\Sonic
2015-12-28 13:00 - 2013-11-02 02:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-28 07:24 - 2015-09-17 10:09 - 00002087 _____ C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2015-12-28 06:34 - 2011-07-20 16:40 - 00000000 ____D C:\Users\Michael\AppData\Local\Google
2015-12-28 06:33 - 2012-03-15 16:15 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-27 06:46 - 2015-09-25 18:46 - 00000000 ___RD C:\Users\Michael\iCloudDrive
2015-12-27 05:53 - 2015-11-11 05:28 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-12-27 05:10 - 2015-10-29 22:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-27 04:46 - 2009-07-13 18:34 - 00000855 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_752
2015-12-26 01:17 - 2011-05-24 22:02 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2015-12-26 01:13 - 2015-10-29 23:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-12-26 01:13 - 2011-07-17 10:01 - 00000000 __RHD C:\MSOCache
2015-12-26 01:05 - 2011-05-31 12:32 - 00001244 _____ C:\Users\Michael\Desktop\Command Prompt.lnk
2015-12-25 07:45 - 2014-02-14 23:02 - 00002597 _____ C:\Users\Public\Desktop\PhotoSync.lnk
2015-12-25 07:45 - 2014-02-14 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoSync
2015-12-25 07:45 - 2012-03-10 12:15 - 00000000 ____D C:\Program Files (x86)\PhotoSync
2015-12-25 01:15 - 2015-10-29 22:28 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-12-22 02:26 - 2014-10-02 22:11 - 00000000 ____D C:\Users\Michael\AppData\Local\C4D54CA6-B71B-4320-A374-DFAE9C7576C7.aplzod
2015-12-21 04:26 - 2011-10-12 13:11 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Apple Computer
2015-12-19 00:11 - 2015-05-15 13:08 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-19 00:11 - 2011-05-24 22:00 - 00000000 ____D C:\ProgramData\Adobe
2015-12-18 23:48 - 2011-07-18 12:41 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Skype
2015-12-18 23:33 - 2013-10-14 19:35 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-12-18 23:30 - 2011-05-24 22:08 - 00000000 ____D C:\ProgramData\Skype
2015-12-18 23:28 - 2013-11-02 02:17 - 00326752 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-12-18 23:28 - 2013-11-02 02:16 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-12-18 23:28 - 2011-05-24 21:48 - 00000000 ____D C:\Program Files\Java
2015-12-17 18:52 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-17 18:52 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-17 18:52 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-17 17:46 - 2012-05-16 01:21 - 00000000 ___SD C:\Users\Michael\AppData\LocalLow\Temp
2015-12-17 17:46 - 2009-07-13 18:34 - 00000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_602
2015-12-16 23:36 - 2011-05-24 21:48 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-15 05:45 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2015-12-15 02:21 - 2014-02-28 21:32 - 00000000 ____D C:\Users\Michael\Downloads\DIR-868L_FIRMWARE_1.02
2015-12-14 18:08 - 2011-10-12 13:10 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-12-12 09:19 - 2015-08-01 20:54 - 00000000 ___RD C:\Users\Michael\OneDrive
2015-12-12 04:58 - 2014-02-16 15:44 - 02991832 _____ (ESET) C:\Users\Michael\Desktop\ERARemover_x64.exe
2015-12-12 04:07 - 2015-07-12 19:49 - 00000000 ____D C:\Users\Michael\Downloads\StarStaX-0.70_win64
2015-12-12 03:25 - 2013-02-23 14:58 - 38490752 _____ C:\Users\Michael\Downloads\HDREfexPro2-pl-ver2.003all.exe
2015-12-10 16:04 - 2015-08-01 20:54 - 00002417 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-09 21:36 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-08 21:44 - 2012-05-24 02:02 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-08 21:44 - 2012-05-24 02:02 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-08 19:39 - 2011-07-17 09:16 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-08 17:59 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-08 16:32 - 2011-07-17 10:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-08 16:30 - 2012-05-24 02:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-08 16:26 - 2013-08-14 02:02 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-08 14:29 - 2011-07-17 09:03 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-06 20:03 - 2015-09-25 18:46 - 00000000 ____D C:\Users\Michael\AppData\Local\Apple Inc
2015-12-06 19:54 - 2011-10-12 13:10 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-05 20:43 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-04 14:16 - 2011-05-24 21:51 - 00000000 ____D C:\Program Files\Intel
2015-12-04 14:16 - 2011-05-24 21:49 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-12-03 00:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-11-30 16:33 - 2015-10-29 23:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-30 16:33 - 2015-10-29 23:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-30 03:58 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-11-29 20:48 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-11-29 20:25 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-11-29 20:25 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-11-29 20:24 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-11-29 20:23 - 2015-08-01 20:46 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-29 20:19 - 2015-08-01 19:16 - 00023788 _____ C:\WINDOWS\diagerr.xml
2015-11-29 20:19 - 2015-08-01 19:16 - 00022863 _____ C:\WINDOWS\diagwrn.xml
2015-11-29 20:16 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-11-29 20:16 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\Registration
2015-11-29 20:14 - 2015-08-01 20:36 - 00022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-11-29 20:14 - 2014-02-16 13:12 - 00002306 _____ C:\WINDOWS\System32\Tasks\{6AAF70DB-0961-4FC3-8741-1627DA144DE3}
2015-11-29 20:14 - 2013-12-15 20:35 - 00003434 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cefa18391140ae
2015-11-29 20:14 - 2012-09-28 13:47 - 00003110 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-11-29 20:14 - 2012-05-16 01:39 - 00002288 _____ C:\WINDOWS\System32\Tasks\{7305280B-A687-41FE-A4EC-7EDFBFDD3CA5}
2015-11-29 20:14 - 2012-05-13 09:20 - 00002332 _____ C:\WINDOWS\System32\Tasks\{3C99C252-58B8-4DE2-9321-6D9AAC20A7E6}
2015-11-29 20:14 - 2011-12-30 02:26 - 00002276 _____ C:\WINDOWS\System32\Tasks\{27154054-D7E0-49F5-B371-6EA65B5695F8}
2015-11-29 20:14 - 2011-12-30 01:10 - 00002280 _____ C:\WINDOWS\System32\Tasks\{70C29E42-1668-4327-AA43-2CBA9A566A99}
2015-11-29 20:14 - 2011-12-29 23:36 - 00002264 _____ C:\WINDOWS\System32\Tasks\{1FF31F46-DA19-4A59-A137-D6772CB3994D}
2015-11-29 20:14 - 2011-12-29 23:28 - 00002292 _____ C:\WINDOWS\System32\Tasks\{D226B8F4-89D3-4B57-9618-067857F42FED}
2015-11-29 20:14 - 2011-12-29 23:19 - 00002264 _____ C:\WINDOWS\System32\Tasks\{7E19D03F-9451-4EED-91FA-F27916D2FB3E}
2015-11-29 20:14 - 2011-12-29 23:15 - 00002264 _____ C:\WINDOWS\System32\Tasks\{74C4BFA2-7D9F-45EF-84DA-5A289494583B}
2015-11-29 20:14 - 2011-07-17 08:32 - 00002160 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2015-11-29 20:13 - 2015-10-29 23:24 - 00000000 __RSD C:\WINDOWS\Media
2015-11-29 20:13 - 2015-10-29 23:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-29 20:13 - 2015-10-29 23:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-11-29 20:05 - 2015-10-30 01:07 - 00000000 ____D C:\WINDOWS\ShellNew
2015-11-29 20:05 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-11-29 20:05 - 2014-05-21 17:01 - 00000000 ____D C:\WINDOWS\system32\STRING
2015-11-29 20:04 - 2015-09-17 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-11-29 20:04 - 2014-04-16 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-29 20:04 - 2014-02-15 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2013
2015-11-29 20:04 - 2013-12-24 11:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photomatix Pro 5.0
2015-11-29 20:04 - 2013-04-10 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2012
2015-11-29 20:04 - 2012-05-16 17:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photomatix Pro 4.2
2015-11-29 20:04 - 2012-02-27 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2011
2015-11-29 20:04 - 2011-07-17 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-11-29 20:04 - 2011-07-17 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-11-29 20:04 - 2011-05-31 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modem Diagnostic Tool
2015-11-29 20:04 - 2011-05-31 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netwaiting
2015-11-29 20:04 - 2011-05-24 22:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Creator Starter
2015-11-29 20:04 - 2011-05-24 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe Online
2015-11-29 20:04 - 2011-05-24 22:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-11-29 20:04 - 2011-05-24 22:17 - 00000000 ____D C:\WINDOWS\en
2015-11-29 20:04 - 2011-05-24 22:11 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Stage
2015-11-29 20:04 - 2011-05-24 22:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam
2015-11-29 20:04 - 2011-05-24 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell DataSafe
2015-11-29 20:02 - 2015-07-10 01:05 - 00000000 ____D C:\Users\Default.migrated
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-11-29 19:56 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-11-29 19:56 - 2012-05-16 01:27 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2015-11-29 19:56 - 2011-12-30 02:59 - 00000000 ____D C:\WINDOWS\SysWOW64\Dell
2015-11-29 19:56 - 2011-12-29 23:18 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-11-29 19:56 - 2011-07-18 11:33 - 00000000 ____D C:\WINDOWS\system32\SPReview
2015-11-29 19:56 - 2011-07-18 11:32 - 00000000 ____D C:\WINDOWS\system32\EventProviders
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\schemas
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-29 19:54 - 2015-10-29 23:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-11-29 19:54 - 2011-12-29 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2015-11-29 19:54 - 2009-07-13 23:44 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-11-29 19:53 - 2015-10-29 23:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-11-29 19:53 - 2015-10-29 23:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-11-29 19:53 - 2015-10-29 23:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-29 19:53 - 2015-07-24 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJI Product
2015-11-29 19:53 - 2014-02-13 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
2015-11-29 19:53 - 2011-10-22 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2015-11-29 19:53 - 2011-05-24 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2015-11-29 19:53 - 2009-07-13 21:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-11-29 19:52 - 2012-05-16 02:21 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel Corporation
2015-11-29 19:51 - 2015-08-01 20:46 - 00000000 ____D C:\Users\Michael\AppData\Local\Packages
2015-11-29 19:49 - 2015-10-29 22:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-11-29 19:42 - 2015-10-30 01:13 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-11-29 19:40 - 2015-10-29 23:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-11-29 19:37 - 2015-10-29 22:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-11-29 19:37 - 2015-10-29 22:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-11-29 19:31 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-11-29 19:31 - 2015-10-29 23:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-11-29 19:30 - 2015-10-29 23:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-11-29 19:30 - 2015-10-29 23:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-11-29 19:30 - 2015-10-29 23:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-11-29 19:30 - 2015-10-29 23:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-11-29 19:30 - 2015-10-29 23:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-11-29 19:30 - 2015-10-29 23:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-11-29 19:30 - 2015-10-29 23:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-11-29 19:30 - 2015-10-29 23:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-11-29 19:30 - 2015-10-29 23:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-11-29 19:30 - 2015-10-29 23:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-11-29 19:30 - 2015-10-29 23:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof

==================== Files in the root of some directories =======

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2015-12-21 20:30

==================== End of FRST.txt ============================

Addition file:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by Michael (2015-12-29 10:34:23)
Running from C:\Users\Michael\Desktop
Windows 10 Home (X64) (2015-11-30 04:22:02)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2606919885-2507221499-1667024737-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2606919885-2507221499-1667024737-503 - Limited - Disabled)
Guest (S-1-5-21-2606919885-2507221499-1667024737-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2606919885-2507221499-1667024737-1002 - Limited - Enabled)
Michael (S-1-5-21-2606919885-2507221499-1667024737-1000 - Administrator - Enabled) => C:\Users\Michael

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Apple Application Support (32-bit) (HKLM-x32\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}) (Version: 4.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Auslogics Registry Defrag (HKLM-x32\...\{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1) (Version: 9.1.2.0 - Auslogics Labs Pty Ltd)
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.9.0.6 - Canon Inc.)
Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon RAW Codec (HKLM-x32\...\Canon RAW Codec) (Version: 1.9.0.73 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.8.0.17 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.31.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.0.1.32 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities WFT Utility (HKLM-x32\...\WFTK) (Version: 3.5.1.1 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.9.0.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version: - Foolish IT LLC)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Marketplace Webslice IE8 (HKLM-x32\...\{CF67ED0C-F85D-4791-AED3-3FE882EDB45D}) (Version: 8.0 - Nextjump Inc)
Dell MusicStage (HKLM-x32\...\{3E8A1ADF-B72C-47FE-85F6-F7A73C487F6C}) (Version: 1.3.31.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.19 - ArcSoft)
Dell Stage (HKLM-x32\...\{D770F4B4-C422-45D9-8CEE-1B4C66E68CA8}) (Version: 1.4.173.0 - Fingertapps)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.204 - ALPS ELECTRIC CO., LTD.)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.0.1011 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.1.0.1011 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)
Digital Line Detect (HKLM-x32\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
DJI driver version 2.02 (HKLM-x32\...\{EDFDE5EE-84C7-4936-804C-6563943E5754}_is1) (Version: 2.02 - DJI)
DJI Phantom 2 Vision Assistant version 3.8 (HKLM-x32\...\{EDCE7221-F31F-407A-B348-30D011ED3126}_is1) (Version: 3.8 - DJI)
DJI RC System Assistant version 1.2 (HKLM-x32\...\{2849F48E-8A08-4C43-AC8D-97A367F0DCB6}_is1) (Version: 1.2 - DJI)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GoPro Studio 2.0.1 (HKLM-x32\...\GoPro Studio) (Version: 2.0.1 - WoodmanLabs Inc. d.b.a. GoPro)
HDR Efex Pro 2 (HKLM-x32\...\HDR Efex Pro 2) (Version: 2.0.0.3 - Nik Software, Inc.)
HP ENVY 5530 series Basic Device Software (HKLM\...\{FE11AA0F-756F-4879-97A0-B1705E2DCABE}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP ENVY 5530 series Help (HKLM-x32\...\{97EAE055-1BE8-4775-8101-453E9715EC3F}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Support Solutions Framework (HKLM-x32\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.0.30.81 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2345 - Intel Corporation)
Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{5A80B0BA-79AF-4B11-B851-CCB9F7977AC0}) (Version: 1.0.1.0489 - Intel Corporation)
Intel® WiDi (HKLM-x32\...\{7FCB8D5D-9396-4D17-8CFA-349D6D49CD32}) (Version: 3.0.13.0 - Intel Corporation)
Intel® WiDi Widget (HKLM-x32\...\{CF84827D-6048-435B-80CD-4F6CAF5F99CF}) (Version: 1.2.0.0 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - )
Intel® PROSet/Wireless WiFi Software (HKLM\...\{BAA0BE9B-9E6D-4802-91CB-FB7ED5CD4BEF}) (Version: 15.01.1500.1034 - Intel Corporation)
Internet Explorer (x32 Version: 8 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{0D44E3A4-6C3D-45D7-B443-079509E5BE5D}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.17 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Exploit version 1.8.1.1045 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.8.1.1045 - Malwarebytes)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Modem Diagnostic Tool (HKLM\...\{0335701D-8E28-4A7F-B0EF-312974755BB2}) (Version: 1.0.28.0 - Dell)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Netwaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.59 - BVRP Software, Inc)
Photomatix Pro version 4.1.4 (HKLM\...\PhotomatixPro41x64_is1) (Version: 4.1.4 - HDRsoft Sarl)
Photomatix Pro version 4.2.7 (HKLM\...\PhotomatixPro42x64_is1) (Version: 4.2.7 - HDRsoft Ltd)
Photomatix Pro version 5.0.5a (HKLM\...\PhotomatixPro5x64_is1) (Version: 5.0.5a - HDRsoft Ltd)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
PhotoSync (HKLM\...\{CECDB976-FC3E-49E1-8A47-DF447D8B4DBC}) (Version: 3.0.7 - touchbyte GmbH)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.15 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.27.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.27.0 - Renesas Electronics Corporation) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Secunia PSI (3.0.0.11003) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.11003 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.104 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
System Requirements Lab for Intel (HKLM-x32\...\{C5DA59CF-2BB8-48D5-8E5B-17F2E0F0FEE4}) (Version: 4.5.5.0 - Husdawg, LLC)
TrustedID (HKLM-x32\...\{C16A92EF-017B-4839-9C75-FBADB5A1FA27}) (Version: 5.0 - TrustedID)
TurboTax 2011 (HKLM-x32\...\TurboTax 2011) (Version: - Intuit, Inc)
TurboTax 2012 (HKLM-x32\...\TurboTax 2012) (Version: 2012.0 - Intuit, Inc)
TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.7.3 - Tweaking.com)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Windows Driver Package - dji-innovations inc. (usbser) Ports (12/06/2012 5.1.2600.5512) (HKLM\...\F731C4A8B354FB9B7579C5D98402D2F988E8B95C) (Version: 12/06/2012 5.1.2600.5512 - dji-innovations inc.)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Wise Disk Cleaner 8.86 (HKLM-x32\...\Wise Disk Cleaner_is1) (Version: 8.86 - WiseCleaner.com, Inc.)
Wise Program Uninstaller 1.83 (HKLM-x32\...\Wise Program Uninstaller_is1) (Version: 1.83 - WiseCleaner.com, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DDDCA5F-3138-4219-A298-67AAD3071763} - System32\Tasks\{2A68EA58-C97D-4449-AB84-F3BFF8B386E5} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.17.0.104/en/abandoninstall?source=lightinstaller&page=tsInstall
Task: {1112B31D-5EE2-4F9B-A777-7A9E9D9B6D03} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {197B5A45-B6C9-4155-B07A-ACE963903CD3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {1F8D408B-DB55-490B-8C96-697F579C5D88} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {2CF19F81-4DE4-4C9C-BD8C-4DC1A61381AF} - System32\Tasks\GoogleUpdateTaskMachineUA1cefa18391140ae => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {2DA79D24-DB6A-4389-B902-5FCF138B707B} - System32\Tasks\{3C99C252-58B8-4DE2-9321-6D9AAC20A7E6} => pcalua.exe -a C:\Users\Michael\Downloads\USB3_Dell_WIN_A04_Setup-JTDY2_ZPE.exe -d C:\Users\Michael\Downloads
Task: {377C9869-EDCF-4081-BC7E-1363AAD11BBC} - System32\Tasks\{74C4BFA2-7D9F-45EF-84DA-5A289494583B} => pcalua.exe -a C:\dell\drivers\R292744\setup.exe -d C:\dell\drivers\R292744
Task: {46F14715-49AA-4506-99D2-50700AF0B5A2} - System32\Tasks\{27154054-D7E0-49F5-B371-6EA65B5695F8} => pcalua.exe -a C:\Users\Michael\Downloads\R311883.exe -d C:\Users\Michael\Desktop
Task: {4EA475D7-76DF-468B-98B1-E3709188806A} - System32\Tasks\{7305280B-A687-41FE-A4EC-7EDFBFDD3CA5} => pcalua.exe -a C:\Users\Michael\Downloads\Setup1.1.17.0.exe -d C:\Users\Michael\Desktop
Task: {6C0FF04D-7655-431B-AF0F-3A067DEF2A20} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-28] (Google Inc.)
Task: {71C7DF2C-6CAA-481F-A8F5-2A65D183393A} - System32\Tasks\{D226B8F4-89D3-4B57-9618-067857F42FED} => pcalua.exe -a C:\Users\Michael\Downloads\0PDK4_A03_ZPE.exe -d C:\Users\Michael\Downloads
Task: {83236A48-DA48-422E-B76D-57C203D8397B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {8BCABF81-F7C3-4B8E-81DF-21A47AFA4D95} - System32\Tasks\Auslogics\Registry Defrag\Scheduled Registry Optimization => Rundll32.exe TaskSchedulerHelper.dll,RunTask "RegistryDefrag.exe" "-UseTray -Scheduler"
Task: {9431ECA1-0D76-4DA7-90FC-5D10BC706154} - System32\Tasks\{7E19D03F-9451-4EED-91FA-F27916D2FB3E} => pcalua.exe -a C:\dell\drivers\R156778\setup.exe -d C:\dell\drivers\R156778
Task: {9E379F98-B8FD-4D80-8A23-A624610DB86A} - System32\Tasks\{70C29E42-1668-4327-AA43-2CBA9A566A99} => pcalua.exe -a C:\Users\Michael\Downloads\R311884.exe -d C:\Users\Michael\Downloads
Task: {A396506A-A607-4C96-B573-37FC0423D05B} - System32\Tasks\{6AAF70DB-0961-4FC3-8741-1627DA144DE3} => pcalua.exe -a C:\Users\Michael\Downloads\startuplite-setup-1.07.exe -d C:\Users\Michael\Desktop
Task: {AAA30C5C-EEAD-4A4B-811A-058C04505E62} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-08] (Microsoft Corporation)
Task: {B16904BA-8DD7-482D-A904-29A3EAE01C42} - System32\Tasks\{1FF31F46-DA19-4A59-A137-D6772CB3994D} => pcalua.exe -a C:\dell\drivers\R309029\Setup.exe -d C:\dell\drivers\R309029
Task: {B50DE703-037D-4FFA-BA39-8D9666069D33} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {C4FED24F-5BD5-4E87-A147-2639FB26FB02} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-11] (Tweaking.com)
Task: {D2C8541B-ACDD-4BF3-AB1C-4B990C2CF4BB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {D590F7D5-3207-4C17-AABD-7E92FA6D9EC7} - System32\Tasks\{A351904D-00B2-48E9-8AF2-22125C683DF7} => pcalua.exe -a "C:\Users\Michael\Downloads\msert (1).exe" -d C:\Users\Michael\Downloads