Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Suspicious over-active disk and slowing computer


  • Please log in to reply

#1
Spitfire Red

Spitfire Red

    New Member

  • Member
  • Pip
  • 3 posts

Spitfire Red 54e055ff6d322bf
Spitfire Red ac94d4a9d19f1a8


Dialogue from Spitfire Red:  (David)
    Windows 7 Home Premium Service Pack 1
    TouchSmart 520-1040a 00359-OEM-8992687-00010
    64 bit.

It appears there is a lot of disk activy not previously encounted.

Nortons "appeared" so i used it. Didn't cure the problem.

Software I did not ask for appearing on startup
    Plumbytes Anti-Malware (runs and informs of 105 Threats)
        that is: Adware.Yula 4 kinds
            PUP-FixMyPC  too many to count.

Also:    MegaBackup asking to Enable Cloud Backup.

Even Norton Security Scan and Tweekbit Driver Update 2015!????



Please help I am 60 something years and don't know what's going on.

P.S. Any further advice I would appreciate.

 

_____________________________________________________________________________

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:25-01-2016
Ran by GollyGeeTickleMyKnee (administrator) on DAVID (27-01-2016 09:47:41)
Running from C:\Users\GollyGeeTickleMyKnee\Desktop
Loaded Profiles: GollyGeeTickleMyKnee (Available Profiles: GollyGeeTickleMyKnee)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(MegaBackup Corp) C:\Program Files\MegaBackup Corp\MegaBackup\DokanMb\mounter.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(PLUMBYTES) C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(CyberLink) C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\beats64.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\Plumbytes.exe
(© 2015 Microsoft Corporation) C:\Users\GollyGeeTickleMyKnee\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(MegaBackup Corp) C:\Program Files\MegaBackup Corp\MegaBackup\Current\App.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
(Portrait Displays, Inc) C:\Program Files (x86)\Hewlett-Packard\HP My Display TouchSmart Edition\OSDManager.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(TweakBit) C:\Program Files (x86)\TweakBit\PCStatusMonitor\PCStatusMonitor.exe
(TweakBit) C:\Program Files (x86)\TweakBit\Driver Updater\DriverUpdater.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2010-10-22] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-06-25] (IDT, Inc.)
HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-21] (Hewlett-Packard)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [Plumbytes Anti-Malware] => C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\plumbytes.exe [2237216 2016-01-15] ()
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-01-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Software Update] => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Remote Solution] => %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [DT HPO] => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [121648 2011-06-18] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-05-06] (PDF Complete Inc)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-10-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [InstaLAN] => C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe [2015136 2011-05-27] (Affinegy, Inc.)
HKU\S-1-5-21-644772877-877055466-1409272510-1001\...\Run: [BingSvc] => C:\Users\GollyGeeTickleMyKnee\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-01-10] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-644772877-877055466-1409272510-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1445648 2016-01-25] (Lavasoft)
ShellIconOverlayIdentifiers: [0.IconShell32] -> {94763686-13FB-47B5-A193-A9CD37391BAC} => C:\Program Files\MegaBackup Corp\MegaBackup\Current\OverlayIconShell64.dll [2015-10-22] (MegaBackup Corp)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MegaBackup.lnk [2016-01-25]
ShortcutTarget: MegaBackup.lnk -> C:\Program Files\MegaBackup Corp\MegaBackup\Current\App.exe (MegaBackup Corp)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog9 01 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9 02 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9 03 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9 04 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9 15 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [425744 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [425744 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [425744 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [425744 2016-01-25] (Lavasoft Limited)
Winsock: Catalog9-x64 15 C:\Windows\system32\LavasoftTcpService64.dll [425744 2016-01-25] (Lavasoft Limited)
Tcpip\Parameters: [DhcpNameServer] 10.1.1.1
Tcpip\..\Interfaces\{10F382D5-49FA-49C8-B32F-80491CE2FF0C}: [DhcpNameServer] 10.1.1.1

Internet Explorer:
==================
HKU\S-1-5-21-644772877-877055466-1409272510-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.firefox.com/
HKU\S-1-5-21-644772877-877055466-1409272510-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.jp.msn.com/HPALL/51
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-644772877-877055466-1409272510-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D012516-A05EDB67DED&form=CONBDF&conlogo=CT3334508&q={searchTerms}
SearchScopes: HKU\S-1-5-21-644772877-877055466-1409272510-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?pc=COSP&ptag=D012516-A05EDB67DED&form=CONBDF&conlogo=CT3334508&q={searchTerms}
SearchScopes: HKU\S-1-5-21-644772877-877055466-1409272510-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKU\S-1-5-21-644772877-877055466-1409272510-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://au.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKU\S-1-5-21-644772877-877055466-1409272510-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22] (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22] (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-644772877-877055466-1409272510-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

FireFox:
========
FF ProfilePath: C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Mozilla\Firefox\Profiles\2suiz81n.default-1453703993151
FF DefaultSearchEngine: DuckDuckGo
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 -> c:\Program Files (x86)\Virtual Earth 3D\ [] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-18] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/VirtualEarth3D,version=4.0 -> c:\Program Files (x86)\Virtual Earth 3D\ [] ()
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-31] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] ()
FF Extension: Clear History - C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Mozilla\Firefox\Profiles\2suiz81n.default-1453703993151\extensions\[email protected] [2016-01-26]

Chrome:
=======
CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR Profile: C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-31]
CHR Extension: (Google Docs) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-31]
CHR Extension: (Google Drive) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (YouTube) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Google Search) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (Google Sheets) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-31]
CHR Extension: (Google Docs Offline) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-31]
CHR Extension: (Color Enhancer) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipkjmjaledkapilfdigkgfmpekpfnkih [2016-01-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-31]
CHR Extension: (Gmail) - C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR HKU\S-1-5-21-644772877-877055466-1409272510-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AffinegyService; C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe [562592 2011-05-27] (Affinegy, Inc.)
R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-01-13] (Advanced Micro Devices, Inc.) [File not signed]
R2 AMD Reservation Manager; c:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
S2 CLKMSVC10_38F51D56; c:\Program Files (x86)\Cyberlink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-02-25] (CyberLink)
R2 DokanMbMounter; C:\Program Files\MegaBackup Corp\MegaBackup\DokanMb\mounter.exe [36176 2015-07-28] (MegaBackup Corp)
R2 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [129840 2011-06-18] (Portrait Displays, Inc.)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent)
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2751760 2016-01-25] (Lavasoft Limited)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 pbamw_service; C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\AmwService.exe [88352 2016-01-15] (PLUMBYTES)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-05-06] (PDF Complete Inc)
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [17168 2016-01-25] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AVerAVF2; C:\Windows\System32\DRIVERS\AVerAVF2.sys [1212416 2010-11-11] (AVerMedia TECHNOLOGIES, Inc.)
R2 DokanMb; C:\Windows\System32\DRIVERS\dokanMb.sys [65616 2015-07-28] (MegaBackup Corp)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-11] (Broadcom Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2016-01-24] (Symantec Corporation)
R3 FintekCIR; C:\Windows\system32\drivers\FintekCIR.sys [30248 2009-11-13] (Fintek)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NWVoltron; C:\Windows\system32\drivers\NWVoltron.sys [28440 2011-06-24] ()
S3 NWWakeFilterV; C:\Windows\system32\drivers\NWWakeFilterV.sys [16152 2011-06-24] (n/a)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-27 09:47 - 2016-01-27 09:48 - 00020862 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\FRST.txt
2016-01-27 09:46 - 2016-01-27 09:47 - 00000000 ____D C:\FRST
2016-01-27 08:56 - 2016-01-27 08:56 - 02370560 _____ (Farbar) C:\Users\GollyGeeTickleMyKnee\Desktop\FRST64.exe
2016-01-26 17:09 - 2016-01-26 17:18 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\{698D0BA5-6E4B-44BD-9F9A-AA32F2E98D9A}
2016-01-26 17:09 - 2016-01-26 17:09 - 00001118 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\Plumbytes Anti-Malware.lnk
2016-01-26 17:09 - 2016-01-26 17:09 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plumbytes Anti-Malware
2016-01-26 17:08 - 2016-01-26 17:08 - 00000000 ____D C:\Program Files\Plumbytes Software
2016-01-26 17:06 - 2016-01-26 17:07 - 09148656 _____ (Plumbytes Software) C:\Users\GollyGeeTickleMyKnee\Downloads\antimalwaresetup.exe
2016-01-25 14:39 - 2016-01-25 14:39 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\Desktop\Old Firefox Data
2016-01-25 14:30 - 2016-01-26 08:39 - 00002840 _____ C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2016-01-25 14:30 - 2016-01-26 08:39 - 00002840 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2016-01-25 14:30 - 2016-01-25 15:33 - 00000000 ____D C:\ProgramData\BSD
2016-01-25 14:30 - 2016-01-25 14:30 - 00425744 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00345360 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00001207 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\TweakBit Driver Updater.lnk
2016-01-25 14:30 - 2016-01-25 14:30 - 00000250 _____ C:\Prefs.js
2016-01-25 14:30 - 2016-01-25 14:30 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Lavasoft
2016-01-25 14:30 - 2016-01-25 14:30 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Lavasoft
2016-01-25 14:30 - 2016-01-25 14:30 - 00000000 ____D C:\searchplugins
2016-01-25 14:30 - 2016-01-25 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2016-01-25 14:30 - 2016-01-25 14:30 - 00000000 ____D C:\Program Files (x86)\Lavasoft
2016-01-25 14:29 - 2016-01-25 14:29 - 00003454 _____ C:\Windows\System32\Tasks\MegaBackupUpdater
2016-01-25 14:29 - 2016-01-25 14:29 - 00003248 _____ C:\Windows\System32\Tasks\MegaBackupSystemIsIdleChecker
2016-01-25 14:29 - 2016-01-25 14:29 - 00002136 _____ C:\Users\Public\Desktop\MegaBackup.lnk
2016-01-25 14:29 - 2016-01-25 14:29 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\IsolatedStorage
2016-01-25 14:29 - 2016-01-25 14:29 - 00000000 ____D C:\ProgramData\Package Cache
2016-01-25 14:29 - 2016-01-25 14:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaBackup
2016-01-25 14:29 - 2016-01-25 14:29 - 00000000 ____D C:\ProgramData\MegaBackup Corp
2016-01-25 14:29 - 2016-01-25 14:29 - 00000000 ____D C:\ProgramData\Lavasoft
2016-01-25 14:29 - 2016-01-25 14:29 - 00000000 ____D C:\Program Files\MegaBackup Corp
2016-01-25 14:28 - 2016-01-25 14:30 - 00000000 ____D C:\Windows\System32\Tasks\TweakBit
2016-01-25 14:28 - 2016-01-25 14:30 - 00000000 ____D C:\ProgramData\TweakBit
2016-01-25 14:28 - 2016-01-25 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakBit
2016-01-25 14:28 - 2016-01-25 14:30 - 00000000 ____D C:\Program Files (x86)\TweakBit
2016-01-25 14:28 - 2016-01-25 14:28 - 00001267 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\TweakBit Speedtest Optimizer.lnk
2016-01-25 14:24 - 2016-01-25 14:24 - 00213760 _____ (TweakBit) C:\Users\GollyGeeTickleMyKnee\Downloads\speedtest-optimizer-setup.exe
2016-01-24 21:00 - 2016-01-24 21:00 - 00002594 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\Joe Somebody.html
2016-01-24 16:33 - 2016-01-24 16:33 - 00005350 _____ C:\Users\GollyGeeTickleMyKnee\Documents\Mouse Maintenance.txt
2016-01-24 16:33 - 2016-01-24 16:33 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\Naturalsoft
2016-01-24 16:31 - 2016-01-24 16:31 - 00001987 _____ C:\Users\Public\Desktop\NaturalReader Free.lnk
2016-01-24 16:31 - 2016-01-24 16:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Naturalsoft
2016-01-24 16:31 - 2016-01-24 16:31 - 00000000 ____D C:\Program Files (x86)\Naturalsoft
2016-01-24 16:30 - 2016-01-24 16:30 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Downloaded Installations
2016-01-24 16:14 - 2016-01-26 12:18 - 00000482 ____H C:\Windows\Tasks\Norton Security Scan for GollyGeeTickleMyKnee.job
2016-01-24 16:14 - 2016-01-24 16:14 - 00003664 _____ C:\Windows\System32\Tasks\Norton Security Scan for GollyGeeTickleMyKnee
2016-01-24 16:14 - 2016-01-24 16:14 - 00001455 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK
2016-01-24 16:14 - 2016-01-24 16:14 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64
2016-01-24 16:14 - 2016-01-24 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
2016-01-24 16:14 - 2016-01-24 16:14 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan
2016-01-24 16:13 - 2016-01-24 16:13 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-01-24 16:12 - 2016-01-24 16:12 - 00781848 _____ (Symantec) C:\Users\GollyGeeTickleMyKnee\Downloads\Setup.exe
2016-01-24 16:03 - 2016-01-24 16:06 - 32430256 _____ (Naturalsoft ) C:\Users\GollyGeeTickleMyKnee\Downloads\standardsetup.exe
2016-01-24 15:52 - 2016-01-24 15:52 - 00018401 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\Replace Mouse.pdf
2016-01-22 15:09 - 2016-01-22 15:09 - 00003282 _____ C:\Windows\System32\Tasks\{01C78BCD-7F88-46A1-8094-ED2A36BC71E8}
2016-01-22 15:06 - 2016-01-22 15:06 - 00000000 ____D C:\ProgramData\Affinegy
2016-01-22 13:52 - 2016-01-22 16:20 - 00002173 _____ C:\Users\GollyGeeTickleMyKnee\Desktop\BelkinUserLog.txt
2016-01-22 13:29 - 2016-01-22 13:57 - 00000000 ____D C:\ProgramData\Adobe
2016-01-22 13:29 - 2016-01-22 13:29 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
2016-01-22 13:29 - 2016-01-22 13:29 - 00002016 _____ C:\Users\Public\Desktop\Adobe Reader 9.lnk
2016-01-22 13:28 - 2016-01-22 15:06 - 00000051 _____ C:\Windows\system32\Drivers\etc\lmhosts
2016-01-22 13:28 - 2016-01-22 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belkin
2016-01-22 13:28 - 2016-01-22 13:28 - 00000000 ____D C:\Program Files (x86)\Belkin
2016-01-21 15:22 - 2016-01-21 15:22 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\GWX
2016-01-20 21:51 - 2016-01-20 21:51 - 00000016 _____ C:\Users\GollyGeeTickleMyKnee\Documents\Mimick.txt
2016-01-19 22:12 - 2015-01-09 11:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2016-01-19 22:12 - 2015-01-09 11:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2016-01-19 22:12 - 2015-01-09 11:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2016-01-19 22:12 - 2015-01-09 10:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2016-01-19 20:47 - 2016-01-19 20:56 - 00000000 ___SD C:\Windows\system32\GWX
2016-01-19 20:47 - 2016-01-19 20:47 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-01-19 19:55 - 2015-01-09 07:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2016-01-19 19:55 - 2015-01-09 07:43 - 00419936 _____ C:\Windows\system32\locale.nls
2016-01-19 19:28 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2016-01-19 19:22 - 2016-01-19 19:22 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-01-19 19:22 - 2016-01-19 19:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-01-19 19:22 - 2016-01-19 19:22 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-01-19 19:22 - 2016-01-19 19:22 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-01-19 19:22 - 2016-01-19 19:22 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2016-01-19 19:22 - 2016-01-19 19:22 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2016-01-19 19:22 - 2016-01-19 19:22 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-01-19 19:22 - 2016-01-19 19:22 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-01-19 19:22 - 2016-01-19 19:22 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-01-19 19:22 - 2016-01-19 19:22 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2016-01-19 19:22 - 2016-01-19 19:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2016-01-19 19:22 - 2016-01-19 19:22 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2016-01-19 19:22 - 2016-01-19 19:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-19 19:10 - 2016-01-19 19:10 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-01-19 17:10 - 2016-01-19 17:10 - 00000068 _____ C:\Users\GollyGeeTickleMyKnee\Documents\HP Info.txt
2016-01-19 16:46 - 2016-01-19 16:57 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Windows Live
2016-01-19 16:45 - 2016-01-19 16:47 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\{EF2D80E4-A656-4A11-BA32-6CADDDB53193}
2016-01-19 16:45 - 2016-01-19 16:46 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\{12B4B8EC-ED52-4012-A44F-0E5C3C37FB8B}
2016-01-19 16:28 - 2012-07-26 11:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2016-01-19 16:28 - 2012-07-26 11:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2016-01-19 16:28 - 2012-07-26 11:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-01-19 16:28 - 2012-07-26 11:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2016-01-19 16:28 - 2012-07-26 11:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2016-01-19 16:28 - 2012-07-26 10:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2016-01-19 16:28 - 2012-07-26 10:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2016-01-19 16:28 - 2012-06-02 22:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-01-19 16:09 - 2012-03-01 14:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2016-01-19 16:09 - 2012-03-01 14:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2016-01-19 16:09 - 2012-03-01 13:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2016-01-19 15:51 - 2014-07-01 06:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2016-01-19 15:51 - 2014-07-01 06:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2016-01-19 15:51 - 2014-06-06 14:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-01-19 15:51 - 2014-06-06 14:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-01-19 15:51 - 2014-03-10 05:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2016-01-19 15:51 - 2014-03-10 05:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2016-01-19 15:51 - 2014-03-10 05:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2016-01-19 15:51 - 2014-03-10 05:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2016-01-19 15:48 - 2015-07-16 02:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-01-19 15:48 - 2015-07-16 02:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-01-19 15:48 - 2015-07-16 02:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-01-19 15:48 - 2015-02-25 11:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-01-19 15:47 - 2015-07-18 21:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-01-19 15:47 - 2015-07-18 21:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-01-19 15:47 - 2015-07-11 01:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-01-19 15:47 - 2015-07-11 01:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-01-19 15:47 - 2015-07-11 01:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2016-01-19 15:47 - 2015-07-11 01:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-01-19 15:47 - 2015-07-11 01:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2016-01-19 15:47 - 2015-07-11 01:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-01-19 15:46 - 2015-12-09 05:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2016-01-19 15:46 - 2015-12-09 05:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-01-19 15:46 - 2015-12-09 05:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-01-19 15:46 - 2015-12-09 05:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-01-19 15:46 - 2015-12-09 05:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-01-19 15:46 - 2015-12-09 05:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-01-19 15:46 - 2015-12-09 05:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-01-19 15:46 - 2015-12-09 05:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll
2016-01-19 15:46 - 2015-12-09 05:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-01-19 15:46 - 2015-12-09 03:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-01-19 15:46 - 2015-12-09 03:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-01-19 15:46 - 2015-12-09 03:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-01-19 15:46 - 2015-12-09 03:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-01-19 15:46 - 2015-12-09 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-01-19 15:46 - 2015-12-09 03:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-01-19 15:46 - 2015-12-09 02:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-01-19 15:46 - 2015-12-09 02:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-01-19 15:46 - 2015-12-09 02:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-01-19 15:46 - 2015-10-13 12:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-01-19 15:46 - 2015-06-16 05:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-01-19 15:46 - 2015-06-16 05:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-01-19 15:46 - 2015-06-16 05:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-01-19 15:46 - 2015-06-16 05:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-01-19 15:46 - 2015-06-16 05:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-01-19 15:46 - 2015-06-16 05:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-01-19 15:46 - 2015-06-16 05:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-01-19 15:46 - 2015-06-16 05:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-01-19 15:46 - 2015-04-13 11:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-01-19 15:46 - 2015-02-03 11:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-01-19 15:46 - 2015-02-03 11:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-01-19 15:46 - 2015-02-03 11:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-01-19 15:46 - 2015-02-03 11:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-01-19 15:46 - 2015-02-03 11:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-01-19 15:46 - 2015-02-03 11:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-01-19 15:46 - 2015-02-03 11:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-01-19 15:46 - 2015-02-03 11:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-01-19 15:46 - 2015-02-03 11:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-01-19 15:46 - 2015-02-03 11:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-01-19 15:46 - 2015-02-03 11:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-01-19 15:46 - 2015-02-03 11:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-01-19 15:46 - 2015-02-03 11:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-01-19 15:46 - 2013-07-03 12:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-01-19 15:46 - 2013-07-03 12:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-01-19 15:45 - 2015-05-26 02:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-01-19 15:45 - 2015-05-26 02:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-01-19 15:45 - 2015-05-26 02:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2016-01-19 15:45 - 2015-05-26 02:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2016-01-19 15:45 - 2015-05-26 02:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2016-01-19 15:45 - 2015-05-26 02:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2016-01-19 15:45 - 2015-05-26 02:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-01-19 15:45 - 2015-05-26 02:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-01-19 15:45 - 2015-05-26 02:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2016-01-19 15:45 - 2015-05-26 02:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2016-01-19 15:45 - 2015-05-26 02:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2016-01-19 15:45 - 2015-05-26 02:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2016-01-19 15:44 - 2015-11-21 02:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-01-19 15:44 - 2015-11-21 02:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-01-19 15:44 - 2015-11-21 02:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-01-19 15:44 - 2015-11-21 02:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-01-19 15:44 - 2015-11-21 02:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-01-19 15:44 - 2015-11-21 02:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-01-19 15:44 - 2015-11-21 02:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-01-19 15:44 - 2015-11-21 02:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-01-19 15:44 - 2015-11-21 02:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-01-19 15:44 - 2015-07-23 08:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-01-19 15:44 - 2015-07-23 08:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-01-19 15:44 - 2015-07-23 01:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-01-19 15:44 - 2015-07-23 00:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-01-19 15:44 - 2014-07-17 10:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-01-19 15:43 - 2014-10-14 10:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-01-19 15:43 - 2014-07-17 10:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-01-19 15:43 - 2014-07-17 10:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-01-19 15:43 - 2014-07-17 10:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2016-01-19 15:43 - 2014-07-17 09:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-01-19 15:43 - 2014-07-17 09:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-01-19 15:43 - 2014-07-17 09:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2016-01-19 15:43 - 2014-07-17 09:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-01-19 15:43 - 2012-12-07 21:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2016-01-19 15:43 - 2012-12-07 21:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-01-19 15:43 - 2012-12-07 20:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2016-01-19 15:43 - 2012-12-07 20:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-01-19 15:43 - 2012-12-07 19:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2016-01-19 15:43 - 2012-12-07 19:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2016-01-19 15:43 - 2012-12-07 19:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2016-01-19 15:43 - 2012-12-07 19:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2016-01-19 15:43 - 2012-12-07 19:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2016-01-19 15:43 - 2012-12-07 19:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2016-01-19 15:43 - 2012-12-07 19:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2016-01-19 15:43 - 2012-12-07 19:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2016-01-19 15:43 - 2012-12-07 18:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2016-01-19 15:43 - 2012-04-26 13:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2016-01-19 15:43 - 2012-04-26 13:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2016-01-19 15:42 - 2015-04-30 02:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-01-19 15:42 - 2015-04-30 02:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-01-19 15:42 - 2015-04-30 02:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-01-19 15:42 - 2015-04-30 02:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-01-19 15:42 - 2015-04-30 02:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-01-19 15:42 - 2015-04-30 02:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-01-19 15:42 - 2015-04-30 02:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-01-19 15:42 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-01-19 15:42 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-01-19 15:42 - 2015-04-30 02:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-01-19 15:42 - 2011-08-17 13:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2016-01-19 15:42 - 2011-08-17 13:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2016-01-19 15:42 - 2011-08-17 12:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2016-01-19 15:42 - 2011-08-17 12:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2016-01-19 15:41 - 2015-06-25 18:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-01-19 15:41 - 2015-06-25 18:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-01-19 15:41 - 2015-06-25 18:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-01-19 15:41 - 2015-06-25 17:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-01-19 15:41 - 2013-11-27 09:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-01-19 15:41 - 2013-11-27 09:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-01-19 15:41 - 2013-11-27 09:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-01-19 15:41 - 2013-11-27 09:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-01-19 15:41 - 2013-11-27 09:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-01-19 15:41 - 2013-11-27 09:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-01-19 15:41 - 2013-10-04 10:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2016-01-19 15:41 - 2013-10-04 10:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2016-01-19 15:41 - 2013-10-04 09:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2016-01-19 15:41 - 2013-10-04 09:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2016-01-19 15:41 - 2013-02-12 12:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-01-19 15:41 - 2012-01-04 18:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-01-19 15:41 - 2012-01-04 16:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-01-19 15:40 - 2014-03-04 17:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-01-19 15:40 - 2014-03-04 17:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2016-01-19 15:40 - 2014-03-04 17:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2016-01-19 15:40 - 2014-03-04 17:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2016-01-19 15:40 - 2014-03-04 17:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2016-01-19 15:40 - 2014-03-04 17:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2016-01-19 15:40 - 2014-03-04 17:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-01-19 15:40 - 2014-03-04 17:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2016-01-19 15:39 - 2015-10-02 02:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-01-19 15:39 - 2015-10-02 02:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-01-19 15:39 - 2015-10-02 02:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-01-19 15:39 - 2015-10-02 02:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-01-19 15:39 - 2015-10-02 02:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-01-19 15:39 - 2015-10-02 02:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-01-19 15:39 - 2015-10-02 02:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-01-19 15:39 - 2015-10-02 01:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-01-19 15:39 - 2015-10-02 01:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-01-19 15:39 - 2015-06-04 04:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-01-19 15:39 - 2015-06-04 04:16 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-01-19 15:39 - 2015-06-04 04:16 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-01-19 15:39 - 2015-04-18 11:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-01-19 15:39 - 2015-04-18 10:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-01-19 15:39 - 2013-12-04 10:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2016-01-19 15:39 - 2013-12-04 10:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2016-01-19 15:39 - 2013-12-04 10:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2016-01-19 15:39 - 2013-12-04 10:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2016-01-19 15:39 - 2013-12-04 10:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-01-19 15:39 - 2013-12-04 10:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2016-01-19 15:39 - 2013-12-04 10:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2016-01-19 15:39 - 2013-12-04 10:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2016-01-19 15:39 - 2013-12-04 10:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2016-01-19 15:39 - 2013-12-04 10:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2016-01-19 15:39 - 2013-12-04 10:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2016-01-19 15:39 - 2013-12-04 10:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2016-01-19 15:39 - 2013-12-04 10:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2016-01-19 15:39 - 2013-12-04 10:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-01-19 15:39 - 2013-12-04 09:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2016-01-19 15:39 - 2013-12-04 09:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2016-01-19 15:39 - 2013-12-04 09:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2016-01-19 15:39 - 2013-12-04 09:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2016-01-19 15:38 - 2014-11-11 11:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-01-19 15:38 - 2014-11-11 10:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-01-19 15:38 - 2013-05-13 13:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2016-01-19 15:38 - 2013-05-13 11:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-01-19 15:38 - 2013-05-13 11:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-01-19 15:38 - 2013-05-13 11:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2016-01-19 15:38 - 2013-04-26 07:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-01-19 15:38 - 2013-04-01 06:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-01-19 15:38 - 2012-10-04 01:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2016-01-19 15:38 - 2012-10-04 01:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-01-19 15:38 - 2012-10-04 01:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-01-19 15:38 - 2012-10-04 01:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2016-01-19 15:38 - 2012-10-04 01:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-01-19 15:38 - 2012-10-04 00:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2016-01-19 15:38 - 2012-10-04 00:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2016-01-19 15:38 - 2012-10-04 00:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-01-19 15:37 - 2015-10-02 02:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-01-19 15:37 - 2015-10-02 02:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-01-19 15:37 - 2015-10-02 01:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-01-19 15:37 - 2015-08-28 02:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-01-19 15:37 - 2015-08-28 02:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-01-19 15:37 - 2015-08-28 02:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-01-19 15:37 - 2015-08-28 02:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-01-19 15:37 - 2015-08-28 01:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-01-19 15:37 - 2015-08-28 01:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-01-19 15:37 - 2015-08-28 01:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-01-19 15:37 - 2015-08-28 01:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-01-19 15:37 - 2015-08-07 02:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-01-19 15:37 - 2015-08-07 02:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-01-19 15:37 - 2015-08-07 01:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-01-19 15:37 - 2015-08-07 01:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-01-19 15:37 - 2015-08-06 01:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-01-19 15:37 - 2015-07-02 04:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-01-19 15:37 - 2015-07-02 04:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-01-19 15:37 - 2015-07-02 04:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-01-19 15:37 - 2015-07-02 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-01-19 15:37 - 2015-04-28 03:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-01-19 15:37 - 2015-04-28 03:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-01-19 15:37 - 2015-04-28 03:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-01-19 15:37 - 2015-04-28 03:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-01-19 15:37 - 2015-04-28 03:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-01-19 15:37 - 2015-04-28 03:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-01-19 15:37 - 2015-04-28 03:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-01-19 15:37 - 2015-04-28 03:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-01-19 15:37 - 2014-06-19 06:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-01-19 15:37 - 2014-06-19 06:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-01-19 15:37 - 2014-06-19 06:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2016-01-19 15:37 - 2014-06-19 06:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2016-01-19 15:37 - 2014-06-19 06:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2016-01-19 15:37 - 2014-06-19 06:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2016-01-19 15:37 - 2014-06-18 10:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-01-19 15:37 - 2014-06-18 09:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-01-19 15:37 - 2013-10-19 10:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-01-19 15:37 - 2013-10-19 09:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-01-19 15:37 - 2013-07-26 10:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-01-19 15:37 - 2013-07-26 09:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-01-19 15:37 - 2013-05-10 13:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-01-19 15:37 - 2013-05-10 11:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-01-19 15:37 - 2012-10-10 02:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-01-19 15:37 - 2012-10-10 02:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2016-01-19 15:37 - 2012-10-10 01:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-01-19 15:37 - 2012-10-10 01:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2016-01-19 15:37 - 2012-09-26 06:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2016-01-19 15:37 - 2012-09-26 06:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2016-01-19 15:37 - 2011-11-17 14:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-01-19 15:37 - 2011-11-17 13:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-01-19 15:37 - 2011-05-24 19:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2016-01-19 15:37 - 2011-05-24 18:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2016-01-19 15:37 - 2011-05-24 18:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2016-01-19 15:37 - 2011-05-24 18:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2016-01-19 15:37 - 2011-05-24 18:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2016-01-19 15:36 - 2015-12-09 05:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-01-19 15:36 - 2015-12-09 05:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-01-19 15:36 - 2015-12-09 03:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-01-19 15:36 - 2015-12-09 03:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-01-19 15:36 - 2015-11-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-01-19 15:36 - 2015-11-06 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-01-19 15:36 - 2015-07-05 02:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-01-19 15:36 - 2015-07-05 01:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-01-19 15:35 - 2015-12-31 03:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-01-19 15:35 - 2015-12-31 03:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-01-19 15:35 - 2015-12-31 03:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-01-19 15:35 - 2015-12-31 03:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-01-19 15:35 - 2015-12-31 02:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-01-19 15:35 - 2015-12-31 02:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-01-19 15:35 - 2015-12-31 02:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-01-19 15:35 - 2015-12-31 02:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-01-19 15:35 - 2015-12-31 02:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-01-19 15:35 - 2015-12-31 02:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-01-19 15:35 - 2015-12-31 02:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-01-19 15:35 - 2015-12-09 05:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-01-19 15:35 - 2015-12-09 03:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-01-19 15:35 - 2015-12-09 01:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-01-19 15:35 - 2015-11-14 07:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-01-19 15:35 - 2015-11-14 07:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-01-19 15:35 - 2015-11-14 07:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-01-19 15:35 - 2015-11-14 06:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll
2016-01-19 15:35 - 2015-11-14 06:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll
2016-01-19 15:35 - 2015-11-14 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe
2016-01-19 15:35 - 2015-11-11 02:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-01-19 15:35 - 2015-11-11 02:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-01-19 15:35 - 2015-11-04 03:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-01-19 15:35 - 2015-11-04 02:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2016-01-19 15:35 - 2015-10-30 01:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-01-19 15:35 - 2015-10-30 01:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-01-19 15:35 - 2015-10-30 01:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-01-19 15:35 - 2015-10-30 01:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-01-19 15:35 - 2015-10-30 01:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-01-19 15:35 - 2015-10-30 01:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-01-19 15:35 - 2015-10-30 01:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-01-19 15:35 - 2015-02-18 15:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-01-19 15:35 - 2015-02-18 15:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-01-19 15:35 - 2014-12-12 01:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-01-19 15:35 - 2014-12-06 12:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-01-19 15:35 - 2014-12-06 11:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2016-01-19 15:35 - 2014-12-06 11:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-01-19 15:35 - 2014-10-03 10:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-01-19 15:35 - 2014-10-03 10:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-01-19 15:35 - 2014-10-03 10:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-01-19 15:35 - 2014-10-03 10:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-01-19 15:35 - 2014-10-03 10:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-01-19 15:35 - 2014-10-03 09:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-01-19 15:35 - 2014-10-03 09:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-01-19 15:35 - 2014-10-03 09:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-01-19 15:35 - 2014-10-03 09:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-01-19 15:35 - 2014-10-03 09:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-01-19 15:35 - 2014-08-01 19:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2016-01-19 15:35 - 2014-08-01 19:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2016-01-19 15:35 - 2014-01-24 10:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-01-19 15:35 - 2013-09-08 10:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-01-19 15:35 - 2013-09-08 10:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-01-19 15:35 - 2013-06-26 06:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-01-19 15:35 - 2012-11-29 06:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-01-19 15:35 - 2012-11-29 06:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2016-01-19 15:35 - 2012-11-29 06:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-01-19 15:35 - 2011-05-04 13:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-01-19 15:35 - 2011-05-04 13:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-01-19 15:35 - 2011-05-04 13:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-01-19 15:35 - 2011-05-04 13:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-01-19 15:35 - 2011-05-04 13:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2016-01-19 15:35 - 2011-05-04 13:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-01-19 15:35 - 2011-05-04 13:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-01-19 15:35 - 2011-05-04 13:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-01-19 15:35 - 2011-05-04 13:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-01-19 15:35 - 2011-05-04 12:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-01-19 15:35 - 2011-05-04 12:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-01-19 15:35 - 2011-05-04 12:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-01-19 15:35 - 2011-05-04 12:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-01-19 15:35 - 2011-05-04 12:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-01-19 15:35 - 2011-05-04 12:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2016-01-19 15:35 - 2011-05-04 12:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-01-19 15:35 - 2011-05-04 12:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-01-19 15:35 - 2011-05-04 12:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-01-19 15:34 - 2015-12-31 03:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-01-19 15:34 - 2015-12-31 03:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-01-19 15:34 - 2015-12-31 03:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-01-19 15:34 - 2015-12-31 03:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-01-19 15:34 - 2015-12-31 03:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-01-19 15:34 - 2015-12-31 03:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-01-19 15:34 - 2015-12-31 03:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-01-19 15:34 - 2015-12-31 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-01-19 15:34 - 2015-12-31 03:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-01-19 15:34 - 2015-12-31 03:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-01-19 15:34 - 2015-12-31 03:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-01-19 15:34 - 2015-12-31 03:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-01-19 15:34 - 2015-12-31 03:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-01-19 15:34 - 2015-12-31 03:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-01-19 15:34 - 2015-12-31 02:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-01-19 15:34 - 2015-12-31 02:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-01-19 15:34 - 2015-12-31 02:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-01-19 15:34 - 2015-12-31 02:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-01-19 15:34 - 2015-12-31 02:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-01-19 15:34 - 2015-12-31 02:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-01-19 15:34 - 2015-12-31 02:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-01-19 15:34 - 2015-12-31 02:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-01-19 15:34 - 2015-12-31 02:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-01-19 15:34 - 2015-12-31 02:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-01-19 15:34 - 2015-12-31 02:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-01-19 15:34 - 2015-12-31 02:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-01-19 15:34 - 2015-12-31 02:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-01-19 15:34 - 2015-12-31 02:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-01-19 15:34 - 2015-12-31 02:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 02:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 01:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-01-19 15:34 - 2015-12-31 01:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-01-19 15:34 - 2015-12-31 01:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-01-19 15:34 - 2015-12-31 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-01-19 15:34 - 2015-12-31 01:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-01-19 15:34 - 2015-12-31 01:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-01-19 15:34 - 2015-12-31 01:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-01-19 15:34 - 2015-12-31 01:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-01-19 15:34 - 2015-12-31 01:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-01-19 15:34 - 2015-12-31 01:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-01-19 15:34 - 2015-12-31 01:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-01-19 15:34 - 2015-12-31 01:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-01-19 15:34 - 2015-12-31 01:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-01-19 15:34 - 2015-12-31 01:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-01-19 15:34 - 2015-12-31 01:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 01:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 01:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-01-19 15:34 - 2015-12-31 01:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-01-19 15:34 - 2015-11-12 02:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-01-19 15:34 - 2015-11-12 02:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-01-19 15:34 - 2015-11-12 02:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-01-19 15:34 - 2015-11-12 02:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-01-19 15:34 - 2015-11-04 03:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-01-19 15:34 - 2015-11-04 02:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-01-19 15:34 - 2015-10-14 00:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-01-19 15:34 - 2015-10-14 00:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-01-19 15:34 - 2015-09-23 21:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-01-19 15:34 - 2015-09-23 21:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-01-19 15:34 - 2015-09-23 21:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-01-19 15:34 - 2015-07-10 01:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-01-19 15:34 - 2015-07-10 01:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-01-19 15:34 - 2015-07-10 01:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-01-19 15:34 - 2015-07-10 01:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-01-19 15:34 - 2015-07-10 01:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-01-19 15:34 - 2015-07-10 01:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-01-19 15:34 - 2015-07-10 01:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-01-19 15:34 - 2015-06-02 08:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2016-01-19 15:34 - 2015-06-02 07:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2016-01-19 15:34 - 2015-04-25 02:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-01-19 15:34 - 2015-04-25 01:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-01-19 15:34 - 2015-04-11 11:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2016-01-19 15:34 - 2015-02-03 11:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-01-19 15:34 - 2015-02-03 11:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-01-19 15:34 - 2015-01-29 11:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-01-19 15:34 - 2015-01-29 11:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-01-19 15:34 - 2015-01-17 10:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-01-19 15:34 - 2015-01-17 10:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-01-19 15:34 - 2014-12-19 11:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-01-19 15:34 - 2014-12-19 09:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-01-19 15:34 - 2014-10-30 10:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2016-01-19 15:34 - 2014-10-30 09:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2016-01-19 15:34 - 2014-10-25 09:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-01-19 15:34 - 2014-10-25 09:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-01-19 15:34 - 2014-09-04 13:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-01-19 15:34 - 2014-09-04 13:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-01-19 15:34 - 2014-06-16 10:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-01-19 15:34 - 2014-01-29 10:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-01-19 15:34 - 2014-01-29 10:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-01-19 15:34 - 2014-01-28 10:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-01-19 15:34 - 2013-10-30 10:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-01-19 15:34 - 2013-10-30 10:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-01-19 15:34 - 2013-10-12 10:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-01-19 15:34 - 2013-10-12 10:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-01-19 15:34 - 2013-10-12 10:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2016-01-19 15:34 - 2013-10-12 10:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-01-19 15:34 - 2013-10-12 09:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2016-01-19 15:34 - 2013-10-12 09:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-01-19 15:34 - 2013-10-12 09:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2016-01-19 15:34 - 2013-10-12 09:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-01-19 15:34 - 2013-08-05 10:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2016-01-19 15:34 - 2013-07-12 18:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2016-01-19 15:34 - 2013-07-12 18:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-01-19 15:34 - 2013-04-26 13:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-01-19 15:34 - 2013-04-26 12:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2016-01-19 15:34 - 2013-04-10 14:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-01-19 15:34 - 2013-03-19 13:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2016-01-19 15:34 - 2013-01-24 14:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-01-19 15:34 - 2012-08-22 05:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2016-01-19 15:34 - 2012-07-05 06:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2016-01-19 15:34 - 2012-07-05 06:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2016-01-19 15:34 - 2012-07-05 06:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2016-01-19 15:34 - 2012-07-05 05:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2016-01-19 15:34 - 2012-07-05 05:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2016-01-19 15:34 - 2012-07-05 04:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2016-01-19 15:34 - 2012-02-17 14:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-01-19 15:34 - 2012-02-17 13:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-01-19 15:34 - 2012-02-17 12:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2016-01-19 15:34 - 2011-12-30 14:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-01-19 15:34 - 2011-12-30 13:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2016-01-19 15:34 - 2011-12-16 16:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2016-01-19 15:34 - 2011-12-16 15:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2016-01-19 15:34 - 2011-06-16 13:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2016-01-19 15:34 - 2011-06-16 12:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2016-01-19 15:34 - 2011-02-03 19:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-01-19 15:33 - 2012-11-23 11:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-01-19 15:29 - 2015-07-15 11:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-01-19 15:28 - 2015-09-02 11:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-01-19 15:28 - 2015-09-02 11:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-01-19 15:28 - 2015-09-02 11:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-01-19 15:28 - 2015-09-02 11:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-01-19 15:28 - 2015-09-02 10:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-01-19 15:28 - 2015-09-02 10:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-01-19 15:28 - 2015-09-02 10:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-01-19 15:28 - 2015-09-02 10:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-01-19 15:28 - 2015-09-02 09:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-01-19 15:28 - 2015-09-02 09:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-01-19 15:26 - 2013-10-12 10:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-01-19 15:26 - 2013-10-12 10:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-01-19 15:26 - 2013-10-12 10:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-01-19 15:26 - 2013-10-12 10:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-01-19 15:26 - 2013-10-12 10:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-01-19 15:19 - 2015-03-04 12:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-01-19 15:19 - 2015-03-04 12:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-01-19 15:19 - 2015-03-04 12:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-01-19 15:19 - 2012-06-06 14:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2016-01-19 15:19 - 2012-06-06 13:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2016-01-19 15:18 - 2014-12-08 11:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-01-19 15:18 - 2014-12-08 10:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-01-19 15:18 - 2014-08-12 10:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2016-01-19 15:18 - 2014-08-12 09:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2016-01-19 15:18 - 2014-02-04 10:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-01-19 15:18 - 2014-02-04 10:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-01-19 15:18 - 2014-02-04 10:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2016-01-19 15:18 - 2014-02-04 10:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2016-01-19 15:18 - 2014-02-04 10:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2016-01-19 15:18 - 2013-08-28 09:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-01-19 15:18 - 2012-11-02 13:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2016-01-19 15:18 - 2012-11-02 13:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2016-01-19 15:18 - 2012-05-14 13:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-01-19 15:18 - 2011-06-15 18:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2016-01-19 15:18 - 2011-06-15 18:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2016-01-19 15:18 - 2011-06-15 18:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2016-01-19 15:18 - 2011-06-15 18:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2016-01-19 15:18 - 2011-06-15 16:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2016-01-19 15:18 - 2011-06-15 16:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2016-01-19 15:18 - 2011-06-15 16:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2016-01-19 15:18 - 2011-06-15 16:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2016-01-19 15:18 - 2011-06-15 16:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2016-01-19 15:18 - 2011-02-23 12:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-01-19 15:17 - 2015-11-06 03:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-01-19 15:17 - 2015-11-06 03:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2016-01-19 15:17 - 2015-11-05 17:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-01-19 15:16 - 2014-04-05 10:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-01-19 15:16 - 2014-04-05 10:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-01-19 15:16 - 2013-11-26 19:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-01-19 15:16 - 2012-03-17 15:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2016-01-19 15:16 - 2011-10-15 14:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-01-19 15:16 - 2011-10-15 13:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-01-19 15:15 - 2014-11-26 11:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-01-19 15:15 - 2014-11-26 11:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-01-19 15:15 - 2011-08-27 13:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2016-01-19 15:15 - 2011-08-27 12:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2016-01-18 12:32 - 2016-01-18 13:15 - 00000018 _____ C:\Users\GollyGeeTickleMyKnee\Documents\Bankwest.txt
2016-01-18 12:04 - 2016-01-18 12:04 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-01-18 12:04 - 2016-01-18 12:04 - 00000000 ____D C:\Windows\system32\Macromed
2016-01-18 12:04 - 2016-01-18 12:04 - 00000000 ____D C:\ProgramData\McAfee
2016-01-17 14:39 - 2016-01-17 14:39 - 00001945 _____ C:\Windows\epplauncher.mif
2016-01-17 14:28 - 2016-01-17 14:28 - 00002119 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-01-17 14:28 - 2016-01-17 14:28 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-01-17 14:28 - 2016-01-17 14:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-01-17 14:26 - 2016-01-17 14:27 - 14243008 _____ (Microsoft Corporation) C:\Users\GollyGeeTickleMyKnee\Downloads\mseinstall.exe
2016-01-17 10:21 - 2016-01-17 10:21 - 00000000 ____D C:\0ac0bbacf8fe7c70864fbc
2016-01-15 15:25 - 2016-01-15 15:25 - 00000032 _____ C:\Users\GollyGeeTickleMyKnee\Documents\Spitfire.txt
2016-01-11 17:59 - 2016-01-11 17:59 - 01818528 _____ (LogMeIn, Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\Support-LogMeInRescue (4).exe
2016-01-11 17:58 - 2016-01-11 17:59 - 01818528 _____ (LogMeIn, Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\Support-LogMeInRescue (3).exe
2016-01-11 17:58 - 2016-01-11 17:58 - 01818528 _____ (LogMeIn, Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\Support-LogMeInRescue (2).exe
2016-01-10 10:15 - 2016-01-19 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-10 10:14 - 2016-01-10 10:15 - 13171424 _____ (Microsoft Corporation) C:\Users\GollyGeeTickleMyKnee\Downloads\Silverlight_x64.exe
2016-01-09 18:27 - 2016-01-09 18:27 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-01-09 10:50 - 2016-01-19 17:46 - 00000000 ____D C:\Windows\system32\MRT
2016-01-09 10:50 - 2016-01-19 17:41 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-01-07 19:18 - 2016-01-07 19:18 - 08268800 _____ C:\Users\GollyGeeTickleMyKnee\Downloads\The_Everything_Seed.ppt
2016-01-07 19:18 - 2016-01-07 19:18 - 08268800 _____ C:\Users\GollyGeeTickleMyKnee\Downloads\The_Everything_Seed (1).ppt
2016-01-07 09:34 - 2016-01-07 21:09 - 00000032 _____ C:\Users\GollyGeeTickleMyKnee\Documents\Modem.txt
2016-01-06 02:48 - 2016-01-19 20:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-05 20:47 - 2016-01-05 20:47 - 00000000 ____D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2016-01-05 20:46 - 2016-01-05 20:47 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\hpqLog
2016-01-05 20:16 - 2016-01-05 20:16 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\HP Support Assistant
2016-01-05 19:09 - 2016-01-05 19:09 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-01-05 19:09 - 2015-12-22 17:02 - 01026304 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-01-05 19:09 - 2015-12-22 17:02 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-01-05 19:04 - 2016-01-05 19:05 - 09871455 _____ C:\Users\GollyGeeTickleMyKnee\Downloads\0013-Install_Win7_7097_12232015.zip
2016-01-05 18:02 - 2016-01-05 18:03 - 54437409 _____ C:\Users\GollyGeeTickleMyKnee\Downloads\PROWinx64.exe
2016-01-05 17:30 - 2016-01-22 12:41 - 00000745 _____ C:\Users\GollyGeeTickleMyKnee\Documents\Talk with iinet.txt
2016-01-05 16:49 - 2016-01-05 16:49 - 01818528 _____ (LogMeIn, Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\Support-LogMeInRescue (1).exe
2016-01-05 16:47 - 2016-01-05 16:47 - 01818528 _____ (LogMeIn, Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\Support-LogMeInRescue.exe
2016-01-05 12:38 - 2016-01-05 12:38 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\WildTangent
2016-01-05 12:38 - 2016-01-05 12:38 - 00000000 ____D C:\ProgramData\BlueStacks
2016-01-04 14:11 - 2016-01-04 14:11 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\PowerCinema
2016-01-04 14:11 - 2016-01-04 14:11 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\CyberLink
2016-01-04 14:08 - 2016-01-04 14:08 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\CyberLink
2016-01-02 10:33 - 2016-01-05 19:52 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2016-01-02 10:33 - 2016-01-02 10:33 - 00000000 ____D C:\Program Files\Common Files\AV
2016-01-01 18:08 - 2016-01-01 18:15 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Mozilla
2016-01-01 18:08 - 2016-01-01 18:08 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Mozilla
2016-01-01 18:07 - 2016-01-09 18:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-01 18:07 - 2016-01-01 18:07 - 00000938 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-01 18:07 - 2016-01-01 18:07 - 00000926 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-01 18:04 - 2016-01-01 18:06 - 47604512 _____ C:\Users\GollyGeeTickleMyKnee\Downloads\Firefox Setup 43.0.3.exe
2016-01-01 17:40 - 2016-01-16 18:56 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\CrashDumps
2016-01-01 17:31 - 2016-01-22 13:56 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Adobe
2016-01-01 17:29 - 2016-01-10 10:15 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Apple Computer
2016-01-01 17:29 - 2016-01-01 17:39 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Apple Computer
2016-01-01 17:29 - 2016-01-01 17:29 - 00002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2016-01-01 17:29 - 2016-01-01 17:29 - 00000000 ____D C:\ProgramData\Apple Computer
2016-01-01 17:29 - 2016-01-01 17:29 - 00000000 ____D C:\Program Files (x86)\Safari
2016-01-01 17:28 - 2016-01-01 17:28 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-01-01 17:28 - 2016-01-01 17:28 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Apple
2016-01-01 17:28 - 2016-01-01 17:28 - 00000000 ____D C:\ProgramData\Apple
2016-01-01 17:28 - 2016-01-01 17:28 - 00000000 ____D C:\Program Files\Bonjour
2016-01-01 17:28 - 2016-01-01 17:28 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-01-01 17:28 - 2016-01-01 17:28 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-01-01 17:24 - 2016-01-01 17:26 - 38494576 _____ (Apple Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\SafariSetup (1).exe
2016-01-01 16:59 - 2016-01-01 17:01 - 38494576 _____ (Apple Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\SafariSetup.exe
2016-01-01 13:07 - 2016-01-01 13:07 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\hpremote
2016-01-01 08:10 - 2016-01-20 02:44 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForDAVID$
2016-01-01 08:10 - 2016-01-20 02:44 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForDAVID$.job
2015-12-31 17:56 - 2015-12-31 17:56 - 00927824 _____ (Google Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\ChromeSetup (2).exe
2015-12-31 17:54 - 2015-12-31 17:54 - 00927824 _____ (Google Inc.) C:\Users\GollyGeeTickleMyKnee\Downloads\ChromeSetup (1).exe
2015-12-31 17:01 - 2016-01-15 07:05 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-31 17:01 - 2015-12-31 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-31 16:59 - 2016-01-27 09:09 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-31 16:59 - 2016-01-27 09:04 - 00000926 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-31 16:59 - 2015-12-31 19:07 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Google
2015-12-31 16:59 - 2015-12-31 17:01 - 00000000 ____D C:\Program Files (x86)\Google
2015-12-31 16:59 - 2015-12-31 16:59 - 00003922 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-31 16:59 - 2015-12-31 16:59 - 00003670 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-31 16:58 - 2015-12-31 16:59 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Deployment
2015-12-31 16:58 - 2015-12-31 16:58 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Apps\2.0
2015-12-31 16:54 - 2016-01-22 13:56 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Adobe
2015-12-31 15:10 - 2016-01-05 20:16 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\HpUpdate
2015-12-31 08:19 - 2015-12-31 08:19 - 00000000 ____D C:\Windows\sysnative
2015-12-31 01:53 - 2015-12-30 06:57 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
2015-12-31 01:52 - 2015-12-30 06:57 - 00000000 __RSH C:\Windows\SysWOW64\Drivers\103C_HP_cPC_520-1040a_Y53316J_0U_Q3CR149_E11AP3ARW603_4A_I2ACB_SPEGATRON CORPORATION_V1.03_B7.10_T111102_W73-1_L409_M8177_J2000_7AMD_8F10_92.40_#120130_N10EC8168_Z_G100268C7.MRK
2015-12-31 01:52 - 2015-12-30 06:57 - 00000000 __RSH C:\Windows\system32\Drivers\103C_HP_cPC_520-1040a_Y53316J_0U_Q3CR149_E11AP3ARW603_4A_I2ACB_SPEGATRON CORPORATION_V1.03_B7.10_T111102_W73-1_L409_M8177_J2000_7AMD_8F10_92.40_#120130_N10EC8168_Z_G100268C7.MRK
2015-12-30 14:06 - 2016-01-05 21:31 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\ElevatedDiagnostics
2015-12-30 13:20 - 2015-12-30 13:20 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\ATI
2015-12-30 13:20 - 2015-12-30 13:20 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\ATI
2015-12-30 13:20 - 2015-12-30 13:20 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\AMD
2015-12-30 13:19 - 2016-01-26 18:47 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{FCBA1027-4BFF-4ED4-AF93-921597D2130E}
2015-12-30 13:19 - 2016-01-24 15:53 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\PDFC
2015-12-30 13:19 - 2016-01-19 20:58 - 00001415 _____ C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-30 13:18 - 2016-01-27 09:08 - 00000392 _____ C:\Windows\Tasks\HPCeeScheduleForGollyGeeTickleMyKnee.job
2015-12-30 13:18 - 2016-01-27 07:57 - 00003276 _____ C:\Windows\System32\Tasks\HPCeeScheduleForGollyGeeTickleMyKnee
2015-12-30 13:18 - 2015-12-30 13:18 - 00003540 _____ C:\Windows\System32\Tasks\Registration
2015-12-30 13:18 - 2015-12-30 13:18 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\RemEngine
2015-12-30 13:17 - 2016-01-24 16:32 - 00063576 _____ C:\Users\GollyGeeTickleMyKnee\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-30 06:58 - 2015-12-30 06:58 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\TouchSmartData
2015-12-30 06:57 - 2016-01-24 16:33 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee
2015-12-30 06:57 - 2016-01-24 11:56 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\VirtualStore
2015-12-30 06:57 - 2016-01-04 14:20 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Hewlett-Packard
2015-12-30 06:57 - 2016-01-04 14:08 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Hewlett-Packard
2015-12-30 06:57 - 2015-12-30 13:19 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Local\Hewlett-Packard_Company
2015-12-30 06:57 - 2015-12-30 06:57 - 00001787 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warranty.lnk
2015-12-30 06:57 - 2015-12-30 06:57 - 00000020 ___SH C:\Users\GollyGeeTickleMyKnee\ntuser.ini
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 _SHDL C:\Users\GollyGeeTickleMyKnee\My Documents
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 _SHDL C:\Users\GollyGeeTickleMyKnee\Documents\My Videos
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 _SHDL C:\Users\GollyGeeTickleMyKnee\Documents\My Pictures
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 _SHDL C:\Users\GollyGeeTickleMyKnee\Documents\My Music
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mathematics
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP User Manuals
2015-12-30 06:57 - 2015-12-30 06:57 - 00000000 ____D C:\Program Files (x86)\Microsoft Mathematics
2015-12-30 06:57 - 2011-10-11 07:27 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Macromedia
2015-12-30 06:57 - 2010-11-21 15:16 - 00000000 ____D C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Media Center Programs

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-27 09:46 - 2009-07-14 11:20 - 00000000 ____D C:\Windows
2016-01-27 09:29 - 2009-07-14 12:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-27 09:29 - 2009-07-14 12:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-27 09:15 - 2009-07-14 13:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-27 09:15 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\inf
2016-01-27 09:15 - 2009-07-14 10:34 - 00000466 _____ C:\Windows\win.ini
2016-01-27 09:09 - 2011-10-11 07:30 - 00000000 ____D C:\ProgramData\PDFC
2016-01-27 09:08 - 2009-07-14 13:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-25 08:28 - 2009-07-14 12:45 - 00279280 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-24 16:14 - 2011-10-11 07:34 - 00000000 ____D C:\ProgramData\Norton
2016-01-22 16:55 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\system32\NDF
2016-01-22 13:29 - 2011-10-11 07:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-01-20 08:04 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\tracing
2016-01-19 23:07 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\rescache
2016-01-19 20:51 - 2011-10-11 07:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-19 20:48 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-01-19 20:48 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\system32\Dism
2016-01-19 20:48 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-01-19 20:48 - 2009-07-14 11:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-01-19 20:47 - 2010-11-21 15:17 - 00000000 ____D C:\Program Files\Windows Journal
2016-01-19 20:47 - 2009-07-14 13:32 - 00000000 ____D C:\Program Files\Windows Defender
2016-01-19 20:47 - 2009-07-14 13:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-01-19 20:47 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-01-19 17:58 - 2011-02-12 01:15 - 00765992 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-01-18 12:04 - 2011-10-11 07:22 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-10 23:33 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\registration
2016-01-10 01:16 - 2011-10-11 07:05 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-10 01:16 - 2009-07-14 11:20 - 00000000 __RSD C:\Windows\Media
2016-01-10 01:16 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\servicing
2016-01-10 01:16 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\Help
2016-01-10 01:16 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\AppCompat
2016-01-05 20:47 - 2011-10-11 07:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2016-01-05 20:47 - 2011-10-11 07:04 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2016-01-05 20:46 - 2011-10-11 07:04 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-01-05 20:46 - 2011-02-12 00:32 - 00000000 ____D C:\SWSETUP
2016-01-05 20:36 - 2009-07-14 11:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-01-05 12:38 - 2011-10-11 07:22 - 00002338 ____N C:\Users\Public\Desktop\WildTangent Games App - hp.lnk
2016-01-05 12:38 - 2011-10-11 07:22 - 00000000 ____D C:\ProgramData\WildTangent
2016-01-05 12:38 - 2011-10-11 07:22 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2016-01-05 12:38 - 2009-07-14 13:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-04 14:41 - 2010-11-21 15:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-01-04 09:19 - 2009-07-14 13:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-12-31 02:32 - 2009-07-14 13:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-12-31 01:52 - 2009-07-14 11:20 - 00000000 ____D C:\Windows\system32\sysprep
2015-12-30 13:18 - 2011-02-12 00:32 - 00000000 __RHD C:\SYSTEM.SAV
2015-12-30 06:57 - 2011-10-11 07:33 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-12-30 06:57 - 2011-10-11 07:27 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eReaders and Document Viewers
2015-12-30 06:57 - 2011-10-11 07:25 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-12-30 06:57 - 2011-10-11 07:22 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-12-30 06:57 - 2011-10-11 07:22 - 00000000 ___RD C:\Program Files (x86)\Online Services
2015-12-30 06:57 - 2011-02-12 01:00 - 00000000 ____D C:\Windows\Panther
2015-12-30 06:57 - 2009-07-14 13:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2015-12-30 06:57 - 2009-07-14 13:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar

Some files in TEMP:
====================
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\BingSvc.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\DefaultPack.EXE
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\driver-updater-setup.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\MegaBackup.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\pc-status-monitor-setup.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\sp64126.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\GollyGeeTickleMyKnee\AppData\Local\Temp\webcompanioninstaller.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-01-19 23:00

==================== End of FRST.txt ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:25-01-2016
Ran by GollyGeeTickleMyKnee (2016-01-27 09:48:40)
Running from C:\Users\GollyGeeTickleMyKnee\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2015-12-29 22:57:10)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-644772877-877055466-1409272510-500 - Administrator - Disabled)
GollyGeeTickleMyKnee (S-1-5-21-644772877-877055466-1409272510-1001 - Administrator - Enabled) => C:\Users\GollyGeeTickleMyKnee
Guest (S-1-5-21-644772877-877055466-1409272510-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-644772877-877055466-1409272510-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

802.11n Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 3.01.18.0 - Ralink)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{DCC90D9D-4F8D-4A06-9050-ADDB284FF9FA}) (Version: 10.3.181.14 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Reader 9.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A92000000001}) (Version: 9.2.0 - Adobe Systems Incorporated)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
Airport Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{73AC89D8-5AFD-72F4-5266-03327E392C85}) (Version: 3.0.812.0 - ATI Technologies, Inc.)
AVerMedia MiniCard Hybrid TV Tuner 1.1.64.56 (HKLM-x32\...\AVerMedia MiniCard Hybrid TV Tuner) (Version: 1.1.64.56 - AVerMedia TECHNOLOGIES, Inc.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Belkin Setup and Router Monitor (HKLM-x32\...\Belkin Setup and Router Monitor_is1) (Version:  - )
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Bing Maps 3D (HKLM\...\{6ACE7F46-FACE-4125-AE86-672F4F2A6A28}) (Version: 4.0.903.16005 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bounce Symphony (x32 Version: 2.2.0.97 - WildTangent) Hidden
Build-a-lot (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
ccc-core-static (x32 Version: 2011.0112.2151.39168 - ATI) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
CyberLink Media Suite Premium (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3928 - CyberLink Corp.)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.2925 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
DokanSetup (Version: 0.6.40.0 - MegaBackup Corp) Hidden
DVD Menu Pack for HP TouchSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4412 - Hewlett-Packard)
DVD Menu Pack for HP TouchSmart Video (x32 Version: 4.1.4412 - Hewlett-Packard) Hidden
Facebook for HP TouchSmart (HKLM-x32\...\{8AE50893-3A87-4439-9A57-942ED43F7189}) (Version: 1.1.0004 - Hewlett-Packard)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent)
HP LinkUp (HKLM-x32\...\{DB3147AB-4024-4773-8EC0-A1FE5B44933D}) (Version: 2.01.028 - Hewlett-Packard)
HP My Display TouchSmart Edition (HKLM-x32\...\{1F4DDC90-5923-4E49-A4C7-F3CCC954DCA0}) (Version: 1.04.022 - Portrait Displays, Inc.)
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
HP Remote Solution (HKLM-x32\...\HP Remote Solution) (Version: 1.1.14.0 - Hewlett-Packard)
HP Setup (HKLM-x32\...\{D35B72B6-F0E4-462B-BDEB-E08032B3B681}) (Version: 8.7.4747.3786 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13880.3792 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}) (Version: 10.1.1000 - Hewlett-Packard)
HP TouchSmart (HKLM-x32\...\{C8EC351F-7A2A-4853-B24B-99EB6F77D8A4}) (Version: 5.0.15.0 - Hewlett-Packard)
HP TouchSmart Ben10 Comic Book Reader (HKLM-x32\...\{9EFD323B-6ADB-4B3A-9253-EA1A75E00F25}_is1) (Version: 4.0.0.0 - Turner Entertainment Networks Asia, Inc.)
HP TouchSmart Browser (HKLM-x32\...\{7561C05C-FE30-4D0E-9B8D-5218734E3986}) (Version: 5.1.4167.12664 - Hewlett-Packard)
HP TouchSmart Bubble Wrap (HKLM-x32\...\{5BFFDDEB-AFD7-499F-BB13-7A6EAD927CDA}_is1) (Version: 1.0.0.0 - Hewlett-Packard)
HP TouchSmart Calendar (HKLM-x32\...\{2B38E0FA-D8A5-4EBF-A018-E3C1C8E7A2E2}) (Version: 5.1.4171.15168 - Hewlett-Packard)
HP TouchSmart Canvas (HKLM-x32\...\{00F15573-18BB-4FAD-A763-F29401609C2F}) (Version: 5.1.4160.26759 - Hewlett-Packard)
HP TouchSmart Clock (HKLM-x32\...\{692D3BE1-0BD9-4B4C-A974-CB2EAEA99304}) (Version: 5.1.3882.1 - Hewlett-Packard)
HP TouchSmart eBay (HKLM-x32\...\{F12C6162-10D4-444A-9182-05CC3DB2456E}) (Version: 1.0.4098.28440 - Hewlett-Packard)
HP TouchSmart Get Updated! (HKLM-x32\...\{2B720998-2E26-4DD6-8AC8-A1FCA4B58384}_is1) (Version: 4.0.0.0 - Turner Entertainment Networks Asia, Inc.)
HP TouchSmart Metric Converter (HKLM-x32\...\{D0661463-50F7-4A1E-83CB-37CC590589AE}_is1) (Version: 1.0.0.0 - Hewlett-Packard)
HP TouchSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.2.5414 - Hewlett-Packard)
HP TouchSmart Notes (HKLM-x32\...\{86BAB08A-5E66-4C53-82E3-C1E91673C7CA}) (Version: 5.1.4183.22239 - Hewlett-Packard)
HP TouchSmart Paint Blast (HKLM-x32\...\{FBB0C095-4FF0-4AF6-8CD5-A80A390FB101}_is1) (Version: 4.0.0.0 - Turner Entertainment Networks Asia, Inc.)
HP TouchSmart Photo (HKLM-x32\...\InstallShield_{C9DCE03F-8CB7-4146-A99C-0612D75177EA}) (Version: 4.2.5414 - Hewlett-Packard)
HP TouchSmart RecipeBox (HKLM-x32\...\{20714B53-FC73-4F9C-9687-49EB237D6FD7}) (Version: 3.0.3830.27730 - Hewlett-Packard)
HP TouchSmart Rss (HKLM-x32\...\{2F1EB600-5E67-4AAA-9D5F-84430CDA4E47}) (Version: 5.1.4170.22458 - Hewlett-Packard)
HP TouchSmart Spot (HKLM-x32\...\{3D171340-B528-42E0-92E4-BDA7AEEF6F32}_is1) (Version: 1.0.0.0 - Hewlett-Packard)
HP TouchSmart Tap Tap Bear (HKLM-x32\...\{A393CDFF-BEB8-48EA-990D-2EB35B311D23}_is1) (Version: 1.0.0.0 - Hewlett-Packard)
HP TouchSmart Tutorials (HKLM-x32\...\{858FCB65-7C6D-4BA4-AD80-A3CB3744CE09}_is1) (Version: 4.0.0.4 - Hewlett-Packard)
HP TouchSmart Twitter (HKLM-x32\...\{75781594-73D9-4D7B-997F-14D41BF1514D}) (Version: 3.0.4162.32190 - Hewlett-Packard)
HP TouchSmart Video (HKLM-x32\...\InstallShield_{F04BFADD-C8CA-4C86-8F20-B1D7F4F8C66C}) (Version: 4.2.5414 - Hewlett-Packard)
HP TouchSmart Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.2.4214 - Hewlett-Packard)
HP Update (HKLM-x32\...\{DE77FE3F-A33D-499A-87AD-5FC406617B40}) (Version: 5.002.003.003 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.9.0.0 - Hewlett-Packard)
HydraVision (x32 Version: 4.2.184.0 - ATI Technologies Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6349.0 - IDT)
Jewel Quest: The Sleepless Star - Collector's Edition (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kobo (HKLM-x32\...\Kobo) (Version: 1.6 - Kobo Inc.)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3925 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.3925 - CyberLink Corp.) Hidden
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
MegaBackup (HKLM-x32\...\{75244ce8-d3de-4ddf-bc6b-6e33fede64d1}) (Version: 1.0.1006.0 - MegaBackup Corp)
MegaBackup (Version: 1.0.1006.0 - MegaBackup Corp) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Mathematics (HKLM-x32\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Touch Pack for Windows 7 (HKLM-x32\...\{8FF90DB8-6DED-44A3-B182-244FEC09012F}) (Version: 1.0.40517.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Movie Theme Pack for HP TouchSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4412 - Hewlett-Packard)
Movie Theme Pack for HP TouchSmart Video (x32 Version: 4.1.4412 - Hewlett-Packard) Hidden
Mozilla Firefox 43.0.4 (x64 en-US) (HKLM\...\Mozilla Firefox 43.0.4 (x64 en-US)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
MusicStation (HKLM-x32\...\MusicStationNetstaller) (Version: 1.0.1.25 - Hewlett-Packard)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.97 - WildTangent) Hidden
Namco All-Stars: PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
NaturalReader 14 Free (HKLM-x32\...\{773ED0E5-538E-4E86-8E00-719630613290}) (Version: 1.00.0000 - Naturalsoft)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Norton Security Scan (HKLM-x32\...\NSS) (Version: 4.3.0.43 - Symantec Corporation)
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.54 - PDF Complete, Inc)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.7717 - CyberLink Corp.) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Plumbytes Anti-Malware 2016 (HKLM\...\Plumbytes Anti-Malware 2016) (Version:  - Plumbytes Software)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.5331 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.5331 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.4020 - CyberLink Corp.)
PowerDirector (x32 Version: 8.0.4020 - CyberLink Corp.) Hidden
PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-132318649765}) (Version: 5.10.1217.0 -  NewspaperDirect Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.97.1001.2015 - Realtek)
Recovery Manager (x32 Version: 5.5.0.4222 - CyberLink Corp.) Hidden
Remote Graphics Receiver (HKLM-x32\...\{16FC3056-90C0-4757-8A68-64D8DA846ADA}) (Version: 5.4.5 - Hewlett-Packard)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
SDK (x32 Version: 2.26.005 - Portrait Displays, Inc.) Hidden
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
TweakBit Driver Updater (HKLM-x32\...\{62D64B30-6E10-4C49-95FE-EDD8F8165DED}_is1) (Version: 1.6.10.5 - Auslogics Labs Pty Ltd)
TweakBit PCStatusMonitor (HKLM-x32\...\{509C255B-2FB1-4E26-BFA7-056EE7E08AB4}_is1) (Version: 1.0.0.12 - Auslogics Labs Pty Ltd)
TweakBit Speedtest Optimizer (HKLM-x32\...\{BF32D91B-C96C-4DEC-9ADE-7E37FCB40145}_is1) (Version: 1.0.2.3 - Auslogics Labs Pty Ltd)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vacation Quest - The Hawaiian Islands (x32 Version: 2.2.0.97 - WildTangent) Hidden
Virtual Villagers 5 - New Believers (x32 Version: 2.2.0.97 - WildTangent) Hidden
Web Companion (HKLM-x32\...\{429db21b-0292-418e-9b6c-1f32cf327d56}) (Version: 2.1.1265.2535 - Lavasoft)
WildTangent Games App for HP (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B6E18B7-E937-4D69-9F66-E91EA0C91709} - System32\Tasks\MegaBackupUpdater => C:\Program Files\MegaBackup Corp\MegaBackup\Current\Installer.exe [2015-10-09] (MegaBackup Corp)
Task: {183BCB97-D45B-42E6-8B4D-A6E87D155184} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-06-16] ()
Task: {24138519-154E-4BC6-8FC8-80B538A6DC4D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2015-11-30] (Hewlett-Packard)
Task: {29406662-D9B8-49D6-A8A8-41A2258754F1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-31] (Google Inc.)
Task: {383421F2-8626-4B99-88B8-B8303C20941F} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe [2011-05-31] (CyberLink)
Task: {570A16F7-40D3-4B92-8B55-4510CC8AB30D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {5FFE3F67-A21A-4FA6-8518-CB9E29C4D41F} - System32\Tasks\TweakBit\Driver Updater\Start Driver Updater оn logon => C:\Program Files (x86)\TweakBit\Driver Updater\DriverUpdater.exe [2015-11-25] (TweakBit) <==== ATTENTION
Task: {688438F1-3747-46C4-848F-6F34D762F951} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-31] (Google Inc.)
Task: {68E64697-C6E3-459B-BC3A-41B8159EA174} - System32\Tasks\TweakBit\Driver Updater\Start Driver Updater automatic scanning => C:\Program Files (x86)\TweakBit\Driver Updater\DriverUpdater.exe [2015-11-25] (TweakBit) <==== ATTENTION
Task: {6D6EE8D1-DF3E-40FD-959C-1709E7F88B1A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {737F6080-FFEE-4D2A-9FFE-A4A739FF5D05} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFReport.exe [2016-01-12] (Hewlett-Packard Company)
Task: {C2D16F50-C61A-4CB5-BC62-BC5D6BEDCAC9} - System32\Tasks\MegaBackupSystemIsIdleChecker => Rundll32.exe "C:\Program Files\MegaBackup Corp\MegaBackup\Current\InstallUtil.dll" ComputerIsIdle
Task: {D00541BB-9177-4D1C-8E05-1FBD9E35FBD7} - System32\Tasks\Norton Security Scan for GollyGeeTickleMyKnee => C:\Program Files (x86)\Norton Security Scan\Engine\4.3.0.43\Nss.exe [2015-07-07] (Symantec Corporation)
Task: {DA8C14D3-BBE8-422D-9AD7-FA8DC2987DB7} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {EA70BD9D-4CD8-47DC-B098-65D4EE49B4D2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {EB21CE94-98C5-4901-B51A-25F742251245} - System32\Tasks\TweakBit\PCStatusMonitor\PCStatusMonitorAutoRun => C:\Program Files (x86)\TweakBit\PCStatusMonitor\PCStatusMonitor.exe [2015-10-16] (TweakBit) <==== ATTENTION
Task: {ECCC7387-DDC5-45B5-9C83-704B3A0F73FE} - System32\Tasks\{01C78BCD-7F88-46A1-8094-ED2A36BC71E8} => pcalua.exe -a "C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe" -d "C:\Program Files (x86)\Belkin\Router Setup and Monitor"
Task: {F6FE5633-3A60-4A6F-B159-679260AA9F32} - System32\Tasks\HPCeeScheduleForGollyGeeTickleMyKnee => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {F71A5A03-251D-4E58-B21C-105E3D07A000} - System32\Tasks\HPCeeScheduleForDAVID$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {FCD6A711-EF78-4CAC-8071-F69957DFAA3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForDAVID$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForGollyGeeTickleMyKnee.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\Norton Security Scan for GollyGeeTickleMyKnee.job => C:\PROGRA~2\NORTON~2\Engine\430~1.43\Nss.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-01-25 14:30 - 2016-01-25 14:30 - 00017168 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
2016-01-25 14:30 - 2016-01-25 14:30 - 00008976 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Service.Logger.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00028432 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WcfService.dll
2011-01-13 13:02 - 2011-01-13 13:02 - 00079872 _____ () c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Services.dll
2016-01-15 20:55 - 2016-01-15 20:55 - 02237216 _____ () C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\Plumbytes.exe
2016-01-08 18:07 - 2016-01-08 18:07 - 00015872 _____ () C:\Program Files\Plumbytes Software\Plumbytes Anti-Malware\Plumbytes.Common.dll
2015-10-22 15:39 - 2015-10-22 15:39 - 02161488 _____ () C:\Program Files\MegaBackup Corp\MegaBackup\Current\Backup.dll
2015-10-22 15:39 - 2015-10-22 15:39 - 00201920 _____ () C:\Program Files\MegaBackup Corp\MegaBackup\Current\Localization.dll
2015-10-09 13:33 - 2015-10-09 13:33 - 00043904 _____ () C:\Program Files\MegaBackup Corp\MegaBackup\Current\LocalizationHelpers.dll
2011-01-13 13:03 - 2011-01-13 13:03 - 00102912 _____ () c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2011-01-13 12:49 - 2011-01-13 12:49 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-04-13 06:59 - 2010-04-13 06:59 - 00098304 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-12-23 00:54 - 2010-12-23 00:54 - 00028672 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll
2016-01-22 13:28 - 2011-05-27 15:57 - 00022944 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinServicePS.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00113424 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00044304 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Common.Platform.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00010000 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.UpdateComponents.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00272656 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00022288 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.AvastWrapper.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00046864 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.adblocker.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00012560 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.SqlLite.dll
2016-01-25 14:30 - 2016-01-25 14:30 - 00120080 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.PUP.Management.dll
2011-10-11 07:25 - 2011-02-16 02:59 - 00015624 _____ () C:\Program Files (x86)\Hewlett-Packard\HP My Display TouchSmart Edition\ACPIDll.dll
2016-01-22 13:28 - 2010-08-22 21:01 - 00325632 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtXml4.dll
2016-01-22 13:28 - 2010-08-22 21:01 - 01954304 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtCore4.dll
2016-01-22 13:28 - 2010-08-22 21:01 - 07187456 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtGui4.dll
2016-01-22 13:28 - 2010-08-22 21:01 - 00847360 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtNetwork4.dll
2016-01-22 15:06 - 2010-08-22 20:32 - 00119808 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\imageformats\qjpeg4.dll
2016-01-22 15:06 - 2011-05-27 15:08 - 00660480 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\gateways\GenericBelkinGatewayLOC.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-644772877-877055466-1409272510-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-644772877-877055466-1409272510-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 10:34 - 2016-01-21 11:37 - 00000826 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-644772877-877055466-1409272510-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\GollyGeeTickleMyKnee\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.1.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{F5D0A8F6-AC15-4596-9A05-7578D6AAD393}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe
FirewallRules: [{EBB2CEA4-400A-48E2-BAD9-EA800C3C3CD0}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Photo\HPTouchSmartPhoto.exe
FirewallRules: [{F94346E6-534F-49E7-969A-E4B35C7D0BF1}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Photo\PhotoAgent.exe
FirewallRules: [{7587DFB0-90B6-42E7-BCF8-6E48BADE5A6D}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Video\HPTouchSmartMusic.exe
FirewallRules: [{59F30AA6-805B-4F1B-9EA8-9FE3FD804226}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Video\HPTouchSmartPhoto.exe
FirewallRules: [{DEC93443-85D3-48C7-A21B-16AFAB81DFFE}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Video\HPTouchSmartVideo.exe
FirewallRules: [{314A2158-85B8-464F-9B89-3AA275B9A173}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Video\TSMAgent.exe
FirewallRules: [{EDC029CD-389E-459C-BACF-A43A418157E2}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Video\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{173888EB-4DDD-4A46-B1AA-6EBD68DF9CDB}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE
FirewallRules: [{5CF4DD8F-101E-4051-B609-7EE5097DD4E6}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe
FirewallRules: [{57EC212A-02DE-4FC0-9996-E619146FD48E}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe
FirewallRules: [{8AB90297-2A59-4E85-8771-1935C87119B9}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
FirewallRules: [{54DEB71F-F00A-455D-8E45-8A5FBAE7077A}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
FirewallRules: [{26D540D3-07A5-4182-82B4-463071B4B587}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{B34564A4-A97A-4AEF-9015-5C849E392F40}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{D83074F3-690D-460D-8663-8566DD967E9F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{715552EA-3C75-4134-89C4-60E692D442EA}] => (Allow) LPort=2869
FirewallRules: [{6C1DAC03-5122-4F28-95D5-3882D3D20476}] => (Allow) LPort=1900
FirewallRules: [{35D1E601-6A80-4F84-9EE9-5B21088CD6CD}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{A5457721-5370-4839-9D92-C265E83881B3}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{45441089-DAFF-4C89-BD7E-45786C041975}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F0EA62FE-EF30-4788-B449-C98278FFCE8B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4740DF61-D94E-464C-80C1-EE706780BCDB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5554852C-D5E8-4453-8C6B-2FED164630DF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6B7283E7-C2FF-45FD-9C0A-BB9F231698FB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{72842CEB-A984-4A5C-8939-4A57F41E007F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{05B5ECB7-C208-47B5-8901-863ED4DEF59A}C:\users\gollygeeticklemyknee\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Block) C:\users\gollygeeticklemyknee\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
FirewallRules: [UDP Query User{CE2F15B4-D5F8-4372-AFE5-EAC576CAE9B7}C:\users\gollygeeticklemyknee\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Block) C:\users\gollygeeticklemyknee\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
FirewallRules: [{F8E3D3BC-A563-46EC-BD17-E33AA37846D9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{5BE126A1-684B-4733-AC71-D2F27A3AB183}] => (Allow) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
FirewallRules: [{4AAF1EEB-22C3-4F53-8602-AB63E8D8BC0A}] => (Allow) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
FirewallRules: [{AF6DB98E-0BDF-4373-B213-DF64E620A954}] => (Allow) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
FirewallRules: [{3347CAF1-88CB-4542-81B7-6B6EA1785A1C}] => (Allow) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
FirewallRules: [{751D4C1D-810B-48E8-9019-47FAD1D018A4}] => (Allow) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe

==================== Restore Points =========================

19-01-2016 22:13:01 Windows Update
23-01-2016 08:30:37 Windows Update
24-01-2016 11:00:06 Windows Backup
24-01-2016 16:30:46 Installed NaturalReader 14 Free.
24-01-2016 19:00:04 Windows Backup
26-01-2016 19:50:40 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/26/2016 07:08:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8206

Error: (01/26/2016 07:08:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8206

Error: (01/26/2016 07:08:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/26/2016 07:08:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7208

Error: (01/26/2016 07:08:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7208

Error: (01/26/2016 07:08:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/26/2016 07:08:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6209

Error: (01/26/2016 07:08:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6209

Error: (01/26/2016 07:08:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/26/2016 07:08:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5211


System errors:
=============
Error: (01/26/2016 05:09:44 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The AMW Service service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Error: (01/24/2016 11:23:20 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/22/2016 05:04:40 PM) (Source: Microsoft-Windows-Diagnostics-Networking) (EventID: 5300) (User: NT AUTHORITY)
Description: An error occurred. The Network Diagnostics Framework failed to complete the repair phase of operation. A Windows Error Report was generated. [2147942487]

Error: (01/19/2016 09:36:57 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: The Windows Update service did not shut down properly after receiving a preshutdown control.

Error: (01/19/2016 09:01:20 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80242016: Cumulative Security Update for Internet Explorer 9 for Windows 7 for x64-based Systems (KB3124275).

Error: (01/19/2016 08:58:21 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Windows Modules Installer service terminated with the following error:
%%16405

Error: (01/19/2016 08:57:06 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Windows Modules Installer service terminated with the following error:
%%16405

Error: (01/19/2016 08:54:37 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Windows Update service terminated with the following error:
%%-2147467243

Error: (01/19/2016 08:50:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The CalendarSynchService service terminated unexpectedly.  It has done this 1 time(s).

Error: (01/19/2016 08:50:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The SeaPort service terminated unexpectedly.  It has done this 1 time(s).


==================== Memory info ===========================

Processor: AMD A8-3800 APU with Radeon™ HD Graphics
Percentage of memory in use: 33%
Total physical RAM: 8176.63 MB
Available physical RAM: 5411.97 MB
Total Virtual: 16351.46 MB
Available Virtual: 12990.16 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:1846.81 GB) (Free:1787.87 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (HP_RECOVERY) (Fixed) (Total:16.1 GB) (Free:2 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: (SPARE) (Removable) (Total:7.45 GB) (Free:4.03 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 459EBA3B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1846.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,012 posts
  • MVP
Uninstall  (Start, Control Panel, Programs and Features) any of the following that will uninstall: 
 
Bing Bar 
Bonjour 
MegaBackup
Norton Online Backup
Norton Security Scan
Plumbytes Anti-Malware 2016
TweakBit Driver Updater
TweakBit PCStatusMonitor
TweakBit Speedtest Optimizer 
Web Companion
 
You can use a separate Reply for each log.

 
Download : ADWCleaner to your desktop.  Make sure you get the correct Download button.  Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @BleepingComputer
 
NOTE: If using Internet Explorer and you get an alert that stops the program downloading, click on the warning and allow the download to complete.
 
Close  all programs, pause your anti-virus and run AdwCleaner (Vista or Win 7 => right click and Run As Administrator).
 
scan-results.jpg
 
Click on Scan  and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.
 
The report will be saved in the C:\AdwCleaner folder.
 
 
 
Junkware-Removal-Tool
 
Please download Junkware Removal Tool to your desktop.  Make sure you get the correct Download button.  Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @Author's site
  • Pause your anti-virus.  Close all browsers.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  •  
     
    Then run a new FRST scan (check the Addition.txt box) and post both logs.  
     
     
    Get Process Explorer
     
    Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).  
     
    View, Select Column, check Verified Signer, OK
    Options, Verify Image Signatures
     
     
    Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  
     
    Wait a full minute then:
     
    File, Save As, Save.  Open the file Procexp.txt on your desktop and copy and paste the text to a reply.
     
     
    Get the free version of Speccy:
     
    http://www.filehippo...download_speccy (Look in the upper right for the Download
    Latest Version button  - Do NOT press the large Start Download button on the upper left!)  Download, Save and Install it.  
     
    Close all browsers and open progrms before running Speccy.  Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  (It will be near the top about 10 lines down.)  Save the file and close notepad  Attach the file to your next post as it is usually too large for the forum (Click on More Reply Options then Choose file, select the file, Open, Attach this File) Uninstall Speccy.

    • 0






    Similar Topics

    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users

    As Featured On:

    Microsoft Yahoo BBC MSN PC Magazine Washington Post HP