Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I have been directed here from another Blee[ing Computer Forum...still Malware


  • This topic is locked This topic is locked
3 replies to this topic

#1 NikolaTesla

NikolaTesla

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Local time:02:37 AM

Posted 02 November 2015 - 04:59 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
Ran by Jennifer (administrator) on JENNIFER-PC (02-11-2015 16:52:32)
Running from C:\Users\Jennifer\Downloads
Loaded Profiles: Jennifer (Available Profiles: Jennifer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(SlySoft, Inc.) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
(Dropbox, Inc.) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [] => [X]
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [497504 2009-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711000 2009-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2009-09-17] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [34648 2009-10-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2009-10-28] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1482080 2009-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-07-20] (Synaptics Incorporated)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)
HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-07-29] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [909624 2009-08-05] (TOSHIBA Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-31] (AVAST Software)
HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648 2009-08-11] (TOSHIBA CORPORATION.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-08-17] (TOSHIBA Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-10-13] (Apple Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-31] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorVisionStartup.lnk [2012-12-26]
ShortcutTarget: ColorVisionStartup.lnk -> C:\Program Files (x86)\PANTONE COLORVISION\Utility\ColorVisionStartup.exe (ColorVision Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D4A207C2-68DC-4300-A649-6811537B53BC}: [DhcpNameServer] 192.168.1.1
 
Internet Explorer:
==================
HKU\S-1-5-21-2790885812-1499487206-891857003-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
SearchScopes: HKLM -> {72A080B9-3EBA-4B8E-B95E-F9ADB840F3CA} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKLM-x32 -> {876AE5BD-39C5-4219-BF7E-D84427067C55} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {44816E91-C68A-2FF3-3D8F-8970062E5600} URL = hxxp://www.bing.com/search?q={searchTerms}&pc=ZUGO&form=ZGAIDF
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {72A080B9-3EBA-4B8E-B95E-F9ADB840F3CA} URL = 
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {808342F2-E6B2-4439-A66F-E6DBB06F0075} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {876AE5BD-39C5-4219-BF7E-D84427067C55} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA_enUS397US397
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-31] (AVAST Software)
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-31] (AVAST Software)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} hxxp://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
 
FireFox:
========
FF ProfilePath: C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default
FF Homepage: hxxps://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\windows\SysWOW64\npdeployJava1.dll [2012-07-04] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-11-01] (Apple Inc.)
FF Extension: Widevine Media Optimizer - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2014-07-23] [not signed]
FF Extension: Flashblock - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2015-05-31]
FF Extension: WOT - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-11]
FF Extension: YouTube to MP3 - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\youtube2mp3@mondayx.de.xpi [2015-05-31]
FF Extension: Adblock Plus - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-31] [not signed]
 
Chrome: 
=======
CHR Profile: C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-31]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-31] (AVAST Software)
R2 FlipShare Service; C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe [455944 2010-05-14] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 nlsX86cc; C:\windows\SysWOW64\nlssrv32.exe [66560 2012-06-06] (Nalpeiron Ltd.) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138360 2012-03-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138360 2012-03-26] (SlySoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-31] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-31] (AVAST Software)
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-12-12] (Brother Industries Ltd.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 epp64; C:\EEK\bin\epp64.sys [136456 2015-11-01] (Emsisoft GmbH)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-10-31] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-02 16:52 - 2015-11-02 16:53 - 00017728 _____ C:\Users\Jennifer\Downloads\FRST.txt
2015-11-02 16:51 - 2015-11-02 16:52 - 00000000 ____D C:\FRST
2015-11-02 16:51 - 2015-11-02 16:51 - 02198016 _____ (Farbar) C:\Users\Jennifer\Downloads\FRST64.exe
2015-11-02 16:50 - 2015-11-02 16:50 - 02198016 _____ (Farbar) C:\Users\Jennifer\Downloads\Unconfirmed 32155.crdownload
2015-11-01 21:36 - 2015-11-02 00:00 - 00002912 _____ C:\windows\setupact.log
2015-11-01 21:36 - 2015-11-01 21:36 - 00000000 _____ C:\windows\setuperr.log
2015-11-01 19:11 - 2015-11-01 19:11 - 00014542 _____ C:\Users\Jennifer\Documents\uninstall.txt
2015-11-01 19:08 - 2015-11-01 19:08 - 00006348 _____ C:\Users\Jennifer\Documents\Windows.txt
2015-11-01 19:08 - 2015-11-01 19:08 - 00003306 _____ C:\Users\Jennifer\Documents\Scheduled.txt
2015-11-01 19:07 - 2015-11-01 19:07 - 00003306 _____ C:\Users\Jennifer\Documents\startup.txt
2015-11-01 18:52 - 2015-11-01 18:52 - 00002802 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2015-11-01 18:52 - 2015-11-01 18:52 - 00000793 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-11-01 18:52 - 2015-11-01 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-01 18:52 - 2015-11-01 18:52 - 00000000 ____D C:\Program Files\CCleaner
2015-11-01 18:50 - 2015-11-01 18:51 - 06762072 _____ (Piriform Ltd) C:\Users\Jennifer\Downloads\ccsetup511.exe
2015-11-01 18:18 - 2015-11-01 18:23 - 169524160 _____ C:\Users\Jennifer\Downloads\EmsisoftEmergencyKit(1).exe
2015-11-01 18:18 - 2015-11-01 18:18 - 00029300 _____ C:\Users\Jennifer\Desktop\download.htm
2015-11-01 17:40 - 2015-11-01 21:14 - 00000000 ____D C:\EEK
2015-11-01 17:40 - 2015-11-01 21:13 - 00000754 _____ C:\Users\Jennifer\Desktop\Start Emsisoft Emergency Kit.lnk
2015-11-01 17:33 - 2015-11-01 17:37 - 169524160 _____ C:\Users\Jennifer\Downloads\EmsisoftEmergencyKit.exe
2015-11-01 14:16 - 2015-11-01 14:16 - 00001724 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-11-01 14:16 - 2015-11-01 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-11-01 14:15 - 2015-11-01 14:16 - 00000000 ____D C:\Program Files\iTunes
2015-11-01 14:15 - 2015-11-01 14:15 - 00000000 ____D C:\Program Files\iPod
2015-11-01 14:15 - 2015-11-01 14:15 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-11-01 14:12 - 2015-11-01 14:12 - 00000000 ____D C:\Program Files\Bonjour
2015-11-01 14:12 - 2015-11-01 14:12 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-11-01 14:11 - 2015-11-01 14:11 - 00000000 ____D C:\windows\System32\Tasks\Apple
2015-11-01 14:11 - 2015-11-01 14:11 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-11-01 14:05 - 2015-11-01 14:05 - 00001856 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-11-01 14:05 - 2015-11-01 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-11-01 14:05 - 2015-11-01 14:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-11-01 12:41 - 2015-11-01 12:41 - 01694208 _____ C:\Users\Jennifer\Downloads\adwcleaner_5.015.exe
2015-11-01 12:40 - 2015-11-01 12:40 - 01691648 _____ C:\Users\Jennifer\Downloads\AdwCleaner (2).exe
2015-11-01 12:22 - 2015-11-01 12:22 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-11-01 12:22 - 2015-11-01 12:22 - 00000000 ____D C:\windows\system32\DAX2
2015-11-01 11:36 - 2015-11-01 11:36 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (4).exe
2015-11-01 11:34 - 2015-11-01 11:34 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (3).exe
2015-11-01 11:34 - 2015-11-01 11:34 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (2).exe
2015-11-01 07:26 - 2015-11-01 07:27 - 00000000 ___HD C:\$Windows.~BT
2015-10-31 20:07 - 2015-10-31 20:07 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\AVAST Software
2015-10-31 20:04 - 2015-10-31 20:04 - 00001893 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-31 20:04 - 2015-10-31 20:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-31 20:03 - 2015-10-31 20:03 - 01049880 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00448968 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00378880 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2015-10-31 20:03 - 2015-10-31 20:03 - 00274808 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00153744 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00093528 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00090968 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00065224 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00043112 _____ (AVAST Software) C:\windows\avastSS.scr
2015-10-31 20:03 - 2015-10-31 20:03 - 00028656 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2015-10-31 19:59 - 2015-10-31 19:59 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-31 19:55 - 2015-10-31 19:55 - 05500000 _____ (Avast Software s.r.o.) C:\Users\Jennifer\Downloads\avast_free_antivirus_setup_online.exe
2015-10-31 19:11 - 2015-10-31 19:11 - 00467462 _____ C:\Users\Jennifer\Downloads\Admin (2) (1).zip
2015-10-31 19:10 - 2015-10-31 19:10 - 00467462 _____ C:\Users\Jennifer\Downloads\Admin (2).zip
2015-10-31 19:09 - 2015-10-31 19:09 - 00467462 _____ C:\Users\Jennifer\Documents\Admin (2).zip
2015-10-31 18:53 - 2015-06-18 17:45 - 04496600 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys
2015-10-31 18:53 - 2015-06-18 16:59 - 02862488 _____ C:\windows\system32\Drivers\RTAIODAT.DAT
2015-10-31 18:53 - 2015-06-17 18:47 - 02930904 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RltkAPO64.dll
2015-10-31 18:53 - 2015-06-17 18:47 - 02585816 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RltkAPO.dll
2015-10-31 18:53 - 2015-06-17 13:45 - 03234520 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkApi64.dll
2015-10-31 18:53 - 2015-06-11 18:40 - 03157796 _____ C:\windows\system32\Drivers\rtkSSTsetting.dat
2015-10-31 18:53 - 2015-05-26 10:59 - 00166616 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCfg64.dll
2015-10-31 18:53 - 2015-05-18 13:47 - 02702040 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTSnMg64.cpl
2015-10-31 18:53 - 2015-05-15 18:27 - 02918104 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtPgEx64.dll
2015-10-31 18:53 - 2015-05-15 15:32 - 01316056 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTCOM64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00858256 _____ (Sound Research, Corp.) C:\windows\system32\SEHDRA64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00684176 _____ (Sound Research, Corp.) C:\windows\system32\SECOMN64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00435856 _____ (Sound Research, Corp.) C:\windows\system32\SEAPO64.dll
2015-10-31 18:53 - 2015-04-24 04:41 - 00555664 _____ (Sound Research, Corp.) C:\windows\SysWOW64\SECOMN32.DLL
2015-10-31 18:53 - 2015-04-13 15:25 - 03262184 _____ (Yamaha Corporation) C:\windows\system32\YamahaAE2.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 01413776 _____ (Synopsys, Inc.) C:\windows\system32\SRRPTR64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00454288 _____ (Synopsys, Inc.) C:\windows\system32\SRAPO64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00369296 _____ (Synopsys, Inc.) C:\windows\system32\SRCOM64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00329360 _____ (Synopsys, Inc.) C:\windows\SysWOW64\SRCOM.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00329360 _____ (Synopsys, Inc.) C:\windows\system32\SRCOM.dll
2015-10-31 18:53 - 2015-01-23 17:16 - 00213432 _____ (TOSHIBA Corporation) C:\windows\system32\tossaemaxapo64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 01104040 _____ (SRS Labs, Inc.) C:\windows\system32\slcnt64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00943784 _____ (DTS, Inc.) C:\windows\system32\sl3apo64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00734376 _____ (DTS, Inc.) C:\windows\system32\sltech64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00250536 _____ (TODO: <Company name>) C:\windows\system32\slprp64.dll
2015-10-31 18:53 - 2014-11-11 12:44 - 00631000 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtDataProc64.dll
2015-10-31 18:53 - 2014-08-14 18:16 - 05804772 _____ C:\windows\system32\Drivers\rtvienna.dat
2015-10-31 18:53 - 2014-06-17 18:17 - 00856992 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo264.dll
2015-10-31 18:53 - 2014-04-10 11:19 - 02101848 _____ (Waves Audio Ltd.) C:\windows\system32\WavesGUILib64.dll
2015-10-31 18:53 - 2014-02-27 19:02 - 02162992 _____ (Yamaha Corporation) C:\windows\system32\YamahaAE.dll
2015-10-31 18:53 - 2013-10-11 10:31 - 00947760 _____ (Sony Corporation) C:\windows\system32\SFSS_APO.dll
2015-10-31 18:53 - 2013-06-25 11:47 - 00871856 _____ (TOSHIBA Corporation) C:\windows\system32\tossaeapo64.dll
2015-10-31 18:53 - 2013-06-25 11:47 - 00162224 _____ (TOSHIBA Corporation) C:\windows\system32\toseaeapo64.dll
2015-10-31 18:53 - 2013-06-25 11:46 - 00582056 _____ (TOSHIBA Corporation) C:\windows\system32\tosasfapo64.dll
2015-10-31 18:53 - 2012-01-10 09:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\windows\system32\tepeqapo64.dll
2015-10-31 18:53 - 2011-12-20 14:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtlCPAPI64.dll
2015-10-31 18:53 - 2011-11-22 15:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCoLDR64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00221024 _____ (Synopsys, Inc.) C:\windows\system32\SFNHK64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00081248 _____ (Synopsys, Inc.) C:\windows\system32\SFCOM64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00078688 _____ (Synopsys, Inc.) C:\windows\system32\SFAPO64.dll
2015-10-31 18:53 - 2011-03-17 11:17 - 01361336 _____ (TOSHIBA Corporation) C:\windows\system32\tosade.dll
2015-10-31 18:53 - 2011-03-07 16:11 - 00148416 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEP64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DHT64.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DAA64.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEED64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEL64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEG64A.dll
2015-10-31 18:53 - 2010-07-22 15:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\windows\SysWOW64\SFCOM.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00518896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSX64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00211184 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSH64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00198896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSHP64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00155888 _____ (SRS Labs, Inc.) C:\windows\system32\SRSWOW64.dll
2015-10-31 18:52 - 2015-06-15 16:39 - 01748184 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoInstII64.dll
2015-10-31 18:52 - 2015-06-10 12:20 - 03129672 _____ (Intel Corporation) C:\windows\system32\IntelSSTAPO.dll
2015-10-31 18:52 - 2015-06-10 12:20 - 00728392 _____ (Intel Corporation) C:\windows\system32\IntelSstCApoPropPage.dll
2015-10-31 18:52 - 2015-06-09 10:17 - 05708736 _____ (Nahimic Inc) C:\windows\system32\NAHIMICV2apo.dll
2015-10-31 18:52 - 2015-06-02 18:25 - 01576976 _____ (Conexant Systems Inc.) C:\windows\system32\CX64APO.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 02461016 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOv211.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 02393432 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOv201.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 00944984 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOProp.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 00349528 _____ (Dolby Laboratories) C:\windows\system32\HiFiDAX2API.dll
2015-10-31 18:52 - 2015-05-25 14:18 - 03195416 _____ (Fortemedia Corporation) C:\windows\system32\FMAPO64.dll
2015-10-31 18:52 - 2015-05-11 17:53 - 12996528 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO3064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01374640 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO6064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01192368 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO5064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01145264 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO4064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 00980400 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO2064.dll
2015-10-31 18:52 - 2015-04-27 15:09 - 00328816 _____ (ICEpower a/s) C:\windows\system32\ICEsoundAPO64.dll
2015-10-31 18:52 - 2015-02-05 16:48 - 12834736 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO4064.dll
2015-10-31 18:52 - 2015-02-05 16:48 - 02789808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO7064.dll
2015-10-31 18:52 - 2015-01-19 17:10 - 72113152 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoRes64.dat
2015-10-31 18:52 - 2014-11-04 12:42 - 06242576 _____ (Dolby Laboratories) C:\windows\system32\DDPP64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 01933584 _____ (Dolby Laboratories) C:\windows\system32\DDPD64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 00336144 _____ (Dolby Laboratories) C:\windows\system32\DDPO64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 00284944 _____ (Dolby Laboratories) C:\windows\system32\DDPA64F3.dll
2015-10-31 18:52 - 2014-10-24 09:12 - 05234952 _____ (Nahimic Inc) C:\windows\system32\NAHIMICAPOlfx.dll
2015-10-31 18:52 - 2014-10-24 09:12 - 00995120 _____ (Nahimic Inc) C:\windows\system32\NahimicAPONSControl.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 07087448 _____ (Dolby Laboratories) C:\windows\system32\DDPP64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 01939800 _____ (Dolby Laboratories) C:\windows\system32\DDPD64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 00315736 _____ (Dolby Laboratories) C:\windows\system32\DDPO64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 00261464 _____ (Dolby Laboratories) C:\windows\system32\DDPA64.dll
2015-10-31 18:52 - 2014-06-09 09:59 - 00560328 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAC64.dll
2015-10-31 18:52 - 2014-05-22 15:24 - 00096568 _____ C:\windows\system32\audioLibVc.dll
2015-10-31 18:52 - 2014-04-10 11:19 - 02041432 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioEQ64.dll
2015-10-31 18:52 - 2014-01-31 16:27 - 01313904 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxSpeechAPO64.dll
2015-10-31 18:52 - 2013-10-11 11:47 - 00113576 _____ (Real Sound Lab SIA) C:\windows\system32\CONEQMSAPOGUILibrary.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00501184 _____ (DTS) C:\windows\system32\DTSU2PLFX64.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00487360 _____ (DTS) C:\windows\system32\DTSU2PGFX64.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00415680 _____ (DTS) C:\windows\system32\DTSU2PREC64.dll
2015-10-31 18:52 - 2013-08-14 14:36 - 00662784 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVolumeSDAPO.dll
2015-10-31 18:52 - 2013-08-14 14:35 - 00663296 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO30.dll
2015-10-31 18:52 - 2013-07-23 14:39 - 14048512 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioRealtek64.dll
2015-10-31 18:52 - 2013-07-23 14:39 - 00922880 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPOShell64.dll
2015-10-31 18:52 - 2013-06-21 10:01 - 00109848 _____ C:\windows\system32\AcpiServiceVnA64.dll
2015-10-31 18:52 - 2013-04-03 13:13 - 00906800 _____ (Sony Corporation) C:\windows\system32\MISS_APO.dll
2015-10-31 18:52 - 2012-08-31 18:18 - 07164176 _____ (Dolby Laboratories) C:\windows\system32\R4EEP64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00434960 _____ (Dolby Laboratories) C:\windows\system32\R4EED64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00141584 _____ (Dolby Laboratories) C:\windows\system32\R4EEL64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00124176 _____ (Dolby Laboratories) C:\windows\system32\R4EEA64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00075024 _____ (Dolby Laboratories) C:\windows\system32\R4EEG64A.dll
2015-10-31 18:52 - 2012-03-08 10:47 - 00108640 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAR64.dll
2015-10-31 18:52 - 2011-08-23 16:00 - 00603984 _____ (Knowles Acoustics ) C:\windows\system32\KAAPORT64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01756264 _____ (DTS) C:\windows\system32\DTSS2SpeakerDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01568360 _____ (DTS) C:\windows\system32\DTSS2HeadphoneDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01486952 _____ (DTS) C:\windows\system32\DTSBoostDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00728680 _____ (DTS) C:\windows\system32\DTSBassEnhancementDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00712296 _____ (DTS) C:\windows\system32\DTSSymmetryDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00693352 _____ (DTS) C:\windows\system32\DTSVoiceClarityDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00491112 _____ (DTS) C:\windows\system32\DTSNeoPCDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00432744 _____ (DTS) C:\windows\system32\DTSLimiterDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00428648 _____ (DTS) C:\windows\system32\DTSGainCompensatorDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00242792 _____ (DTS) C:\windows\system32\DTSLFXAPO64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00242792 _____ (DTS) C:\windows\system32\DTSGFXAPO64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00241768 _____ (DTS) C:\windows\system32\DTSGFXAPONS64.dll
2015-10-31 18:52 - 2010-09-27 08:34 - 00318808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO20.dll
2015-10-31 18:46 - 2015-10-31 18:50 - 131494359 _____ (Realtek Semiconductor Corp.) C:\Users\Jennifer\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279.exe
2015-10-31 17:32 - 2015-11-01 21:36 - 00000000 ____D C:\windows\pss
2015-10-31 11:06 - 2015-10-31 19:09 - 04263936 _____ C:\Users\Jennifer\Documents\Admin.evtx
2015-10-31 11:06 - 2015-10-31 11:06 - 00454891 _____ C:\Users\Jennifer\Documents\Admin.zip
2015-10-22 16:23 - 2015-10-22 16:23 - 00006435 _____ C:\Users\Jennifer\Downloads\Attached Message Part
2015-10-21 18:57 - 2015-10-31 18:35 - 00000000 ____D C:\aaa10216c4c7ddd9ed6d2e
2015-10-21 15:04 - 2015-10-31 18:34 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-19 22:34 - 2015-10-31 18:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 19:20 - 2015-09-18 14:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-10-14 19:20 - 2015-09-18 14:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-10-14 19:20 - 2015-09-18 14:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-10-13 19:03 - 2015-09-18 14:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-10-13 19:03 - 2015-09-18 13:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-10-13 19:03 - 2015-09-15 23:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-10-13 19:03 - 2015-09-15 23:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-10-13 19:03 - 2015-09-15 23:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-10-13 19:03 - 2015-09-15 23:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-10-13 19:03 - 2015-09-15 23:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-10-13 19:03 - 2015-09-15 23:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-10-13 19:03 - 2015-09-15 23:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-10-13 19:03 - 2015-09-15 23:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-10-13 19:03 - 2015-09-15 23:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-10-13 19:03 - 2015-09-15 23:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-10-13 19:03 - 2015-09-15 23:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-10-13 19:03 - 2015-09-15 22:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-10-13 19:03 - 2015-09-15 22:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-10-13 19:03 - 2015-09-15 22:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-10-13 19:03 - 2015-09-15 22:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-10-13 19:03 - 2015-09-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-10-13 19:03 - 2015-09-15 22:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-10-13 19:03 - 2015-09-15 22:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-10-13 19:03 - 2015-09-15 22:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-10-13 19:03 - 2015-09-15 22:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-10-13 19:03 - 2015-09-15 22:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-10-13 19:03 - 2015-09-15 22:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-10-13 19:03 - 2015-09-15 22:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-10-13 19:03 - 2015-09-15 22:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-10-13 19:03 - 2015-09-15 22:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-10-13 19:03 - 2015-09-15 22:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-10-13 19:03 - 2015-09-15 22:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-10-13 19:03 - 2015-09-15 22:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-10-13 19:03 - 2015-09-15 22:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-10-13 19:03 - 2015-09-15 22:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-10-13 19:03 - 2015-09-15 22:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-10-13 19:03 - 2015-09-15 22:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-10-13 19:03 - 2015-09-15 22:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-10-13 19:03 - 2015-09-15 22:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-10-13 19:03 - 2015-09-15 22:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-10-13 19:03 - 2015-09-15 22:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-10-13 19:03 - 2015-09-15 22:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-10-13 19:03 - 2015-09-15 22:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-10-13 19:03 - 2015-09-15 22:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-10-13 19:03 - 2015-09-15 22:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-13 19:03 - 2015-09-15 22:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-10-13 19:03 - 2015-09-15 22:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-10-13 19:03 - 2015-09-15 22:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-10-13 19:03 - 2015-09-15 22:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-10-13 19:03 - 2015-09-15 22:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-10-13 19:03 - 2015-09-15 21:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-10-13 19:03 - 2015-09-15 21:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-10-13 19:03 - 2015-09-15 21:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-10-13 19:03 - 2015-09-15 21:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-10-13 19:03 - 2015-09-15 21:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-10-13 19:03 - 2015-09-15 21:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-10-13 19:03 - 2015-09-15 21:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-10-13 19:03 - 2015-09-15 21:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-10-13 19:03 - 2015-09-15 21:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-10-13 19:03 - 2015-09-15 21:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-10-13 19:01 - 2015-08-06 13:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-10-13 19:00 - 2015-08-06 13:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2015-10-13 19:00 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-10-13 19:00 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-10-13 18:58 - 2015-09-25 13:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-10-13 18:58 - 2015-09-25 13:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-10-13 18:58 - 2015-09-25 13:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-10-13 18:58 - 2015-09-25 13:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-10-13 18:58 - 2015-09-25 12:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-10-13 18:57 - 2015-09-28 22:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-10-13 18:57 - 2015-09-28 22:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-10-13 18:57 - 2015-09-28 22:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-10-13 18:57 - 2015-09-28 22:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-10-13 18:57 - 2015-09-28 22:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-10-13 18:57 - 2015-09-28 22:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-10-13 18:57 - 2015-09-28 22:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-10-13 18:57 - 2015-09-28 22:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-10-13 18:57 - 2015-09-28 21:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-10-13 18:57 - 2015-09-28 21:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-10-13 18:57 - 2015-09-28 21:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-10-13 18:57 - 2015-09-28 21:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-10-13 18:57 - 2015-09-28 21:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-10-13 18:57 - 2015-09-28 21:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-10-13 18:57 - 2015-09-28 20:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-10-13 18:57 - 2015-09-28 20:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-10-13 18:57 - 2015-09-28 20:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-10-13 18:57 - 2015-09-28 20:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-10-13 18:57 - 2015-09-28 20:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-13 18:57 - 2015-09-15 13:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-10-13 18:57 - 2015-09-15 13:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-10-13 18:57 - 2015-09-15 13:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-10-13 18:57 - 2015-09-15 13:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-10-13 18:57 - 2015-09-15 12:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-10-13 18:57 - 2015-09-15 12:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-10-13 18:57 - 2015-09-15 12:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-10-13 18:57 - 2015-09-15 12:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-10-13 18:56 - 2015-10-01 13:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-10-13 18:56 - 2015-10-01 13:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-10-13 18:56 - 2015-10-01 13:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-10-13 18:56 - 2015-10-01 13:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-10-13 18:56 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-10-13 18:56 - 2015-10-01 12:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-10-13 18:54 - 2015-07-18 08:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-02 16:44 - 2010-07-29 16:53 - 01437054 _____ C:\windows\WindowsUpdate.log
2015-11-02 16:38 - 2010-09-19 09:00 - 00000898 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-02 16:35 - 2015-06-19 16:10 - 00000930 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA.job
2015-11-02 16:31 - 2009-07-13 23:45 - 00018736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-02 16:31 - 2009-07-13 23:45 - 00018736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-02 16:26 - 2010-10-06 22:56 - 00000000 ____D C:\Users\Jennifer\AppData\Local\Adobe
2015-11-02 16:25 - 2012-04-21 20:45 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-11-01 22:14 - 2012-02-12 08:55 - 00000000 ____D C:\ProgramData\Yahoo!
2015-11-01 22:14 - 2012-02-12 08:53 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-11-01 21:37 - 2010-09-19 09:00 - 00000894 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-01 18:55 - 2012-02-27 21:04 - 00000000 ____D C:\windows\Minidump
2015-11-01 18:55 - 2009-11-13 13:12 - 00000000 ____D C:\windows\Panther
2015-11-01 18:35 - 2015-06-19 16:10 - 00000878 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core.job
2015-11-01 18:18 - 2009-07-14 00:13 - 00006214 _____ C:\windows\system32\PerfStringBackup.INI
2015-11-01 18:16 - 2012-11-04 21:09 - 00000000 ___RD C:\Users\Jennifer\Dropbox
2015-11-01 18:16 - 2012-11-04 21:07 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Dropbox
2015-11-01 18:12 - 2009-07-14 00:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-11-01 14:15 - 2014-02-09 22:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-11-01 14:15 - 2010-10-06 19:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-11-01 14:11 - 2010-10-06 19:48 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-11-01 13:17 - 2009-07-13 22:20 - 00000000 ____D C:\windows\rescache
2015-11-01 12:44 - 2015-02-04 14:00 - 00000000 ____D C:\AdwCleaner
2015-11-01 12:44 - 2012-02-12 08:55 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Yahoo!
2015-11-01 12:44 - 2012-02-12 08:55 - 00000000 ____D C:\Users\Jennifer\AppData\LocalLow\Yahoo!
2015-11-01 12:28 - 2013-11-12 20:05 - 00004184 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-11-01 12:21 - 2010-07-29 17:11 - 00000000 ____D C:\windows\SysWOW64\RTCOM
2015-10-31 19:26 - 2015-02-06 22:01 - 00113880 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-31 19:11 - 2011-04-27 21:25 - 00111104 ___SH C:\Users\Jennifer\Documents\Thumbs.db
2015-10-31 18:55 - 2010-07-29 17:11 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-10-31 18:35 - 2012-12-26 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PANTONE COLORVISION
2015-10-31 18:35 - 2012-12-26 17:51 - 00000000 ____D C:\Program Files (x86)\PANTONE COLORVISION
2015-10-31 18:35 - 2012-04-26 21:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-31 18:35 - 2010-09-19 09:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-31 18:35 - 2009-11-12 21:50 - 00000000 ____D C:\ProgramData\Toshiba
2015-10-31 18:35 - 2009-07-13 22:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-10-31 18:34 - 2015-04-19 19:35 - 00000000 ___SD C:\windows\SysWOW64\GWX
2015-10-31 18:34 - 2015-04-19 19:35 - 00000000 ___SD C:\windows\system32\GWX
2015-10-31 18:34 - 2014-12-10 21:03 - 00000000 ____D C:\windows\system32\appraiser
2015-10-31 18:34 - 2014-08-27 22:41 - 00000000 ___SD C:\windows\system32\CompatTel
2015-10-31 18:34 - 2010-09-11 19:53 - 00000000 ____D C:\Users\Jennifer
2015-10-31 18:34 - 2009-07-13 22:20 - 00000000 ____D C:\windows\system32\NDF
2015-10-31 18:34 - 2009-07-13 22:20 - 00000000 ____D C:\windows\registration
2015-10-31 18:04 - 2009-07-14 00:08 - 00032612 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-10-23 19:32 - 2010-09-19 09:00 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-21 19:10 - 2013-08-19 22:58 - 00000000 ____D C:\windows\system32\MRT
2015-10-21 19:10 - 2011-06-16 23:18 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-10-21 19:07 - 2010-07-29 16:58 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-18 18:14 - 2009-07-14 00:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2015-10-16 22:01 - 2012-04-21 20:45 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 22:01 - 2012-04-21 20:45 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 22:01 - 2011-06-08 19:37 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
 
==================== Files in the root of some directories =======
 
2014-10-09 19:01 - 2014-10-09 19:01 - 0000038 _____ () C:\Users\Jennifer\AppData\Roaming\mbam.context.scan
2011-07-21 06:35 - 2013-07-09 17:54 - 0010752 _____ () C:\Users\Jennifer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-05-18 06:41 - 2013-07-06 13:31 - 0000083 ___SH () C:\ProgramData\.zreglib
2015-11-01 12:22 - 2015-11-01 12:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 
Some files in TEMP:
====================
C:\Users\Jennifer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3uy8v.dll
C:\Users\Jennifer\AppData\Local\Temp\GLB1A2B.EXE
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-11-01 13:09
 
==================== End of FRST.txt ============================
 
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-10-2015
Ran by Jennifer (2015-11-02 16:53:53)
Running from C:\Users\Jennifer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2010-09-12 00:53:52)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2790885812-1499487206-891857003-500 - Administrator - Disabled)
Guest (S-1-5-21-2790885812-1499487206-891857003-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2790885812-1499487206-891857003-1002 - Limited - Enabled)
Jennifer (S-1-5-21-2790885812-1499487206-891857003-1000 - Administrator - Enabled) => C:\Users\Jennifer
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Amazon Links (HKLM-x32\...\{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}) (Version: 2.02 - TOSHIBA Corporation)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.0.4.0 - SlySoft)
Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{A0880F03-8480-482E-1606-BC91669B0882}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Black River Imaging (HKU\S-1-5-21-2790885812-1499487206-891857003-1000\...\Black River Imaging) (Version:  - Black River Imaging)
Blackhawk Striker 2 (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
ccc-core-static (x32 Version: 2009.0729.2238.38827 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dropbox (HKU\S-1-5-21-2790885812-1499487206-891857003-1000\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Faerie Solitaire (x32 Version: 2.2.0.82 - WildTangent) Hidden
FATE Undiscovered Realms (x32 Version: 2.2.0.82 - WildTangent) Hidden
FlipShare (HKLM-x32\...\{B1C0D829-FE30-059E-E93F-CDC7A48235C0}) (Version: 5.6.35.0 - Flip Video)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Halsoft Virtual Places Chat (HKLM-x32\...\Halsoft Virtual Places Chat) (Version:  - Halsoft.com, Inc)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Label@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Monopoly (x32 Version: 2.2.0.82 - WildTangent) Hidden
Mozilla Firefox 41.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
Mystery P.I. - The Vegas Heist (x32 Version: 2.2.0.82 - WildTangent) Hidden
NetZero Launcher (HKLM-x32\...\{9AEAF9CC-390B-49C0-8F7F-14092BF163B6}) (Version: 2.01 - TOSHIBA Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{ED23E382-E5E3-4E21-B616-01FC59A40916}) (Version: 3.3.9567 - OpenOffice.org)
OverDrive Media Console (HKLM-x32\...\{D4AFC7AD-F637-4EDD-BC76-767E4AF78CE1}) (Version: 3.2.5 - OverDrive, Inc.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoTools 2.6.5 Professional Edition (HKLM-x32\...\{4744A01E-4B17-4643-A1FA-44FF83CB316D}) (Version: 2.6.5 - onOne Software)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Polar Bowler (x32 Version: 2.2.0.82 - WildTangent) Hidden
Quickbooks Financial Center (HKLM-x32\...\{3B843B38-04B1-4CE6-8888-586273E0F289}) (Version: 2.02 - TOSHIBA Corporation)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Realtek Ethernet Controller  Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30101 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0006 - Realtek)
Skype Launcher (HKLM-x32\...\{DA84ECBF-4B79-47F2-B34C-95C38484C058}) (Version: 2.01 - TOSHIBA Corporation)
Spyder2PRO (HKLM-x32\...\Spyder2PRO) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.6.1 - Synaptics Incorporated)
TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.0 - TOSHIBA)
TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.10 - TOSHIBA)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{F64684A0-754B-4637-B7F9-6E8DAA8CD5CD}) (Version: 1.5.05.64 - TOSHIBA Corporation)
TOSHIBA ConfigFree (HKLM-x32\...\{F3529665-D75E-4D6D-98F0-745C78C68E9B}) (Version: 8.0.21 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.1 for x64 - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.01.0.07-A - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.1.7.64 - TOSHIBA Corporation)
TOSHIBA Extended Tiles for Windows Mobility Center (HKLM-x32\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version:  - )
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.0.64 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM-x32\...\{D0387727-C89D-4774-B643-B9333EAA09DE}) (Version: 2.00.11 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.2 - TOSHIBA Corporation)
TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.65 - TOSHIBA CORPORATION)
Toshiba Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.38 - Toshiba)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.4.1.64 - TOSHIBA Corporation)
TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{5BCC94A1-DEF1-4AB4-8046-BC13048E929A}) (Version: 1.5.07.64 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.33 - TOSHIBA)
TOSHIBA Speech System Applications (HKLM-x32\...\{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version: 1.00.2518 - )
TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM-x32\...\{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version:  - )
TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM-x32\...\{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version:  - )
TOSHIBA Supervisor Password (HKLM-x32\...\{A208044D-A88B-4ACF-AE95-E4F213E6EDC0}) (Version: 2.00.09 - TOSHIBA Corporation)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.2.26.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.4 - TOSHIBA Corporation)
ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.3 - Toshiba)
TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Virtual Families (x32 Version: 2.2.0.82 - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.82 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.80 - WildTangent)
WildTangent ORB Game Console (x32 Version:  - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
 
==================== Restore Points =========================
 
29-10-2015 19:59:30 Windows Update
31-10-2015 18:02:30 Windows Update
31-10-2015 18:25:14 Restore Operation
31-10-2015 18:52:22 Installed Realtek High Definition Audio Driver
01-11-2015 22:15:57 Removed Adobe Media Player
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
 
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {487DF39A-ECF7-444A-95BC-0CA7E3563E5E} - System32\Tasks\{8971C5F8-8E85-4EC8-A46A-6924E4C7FBBF} => Chrome.exe 
Task: {523BF8AC-221B-415C-AFCE-10CA4E8C7572} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {623E74D8-0EBC-4381-83CA-036FE8D891B6} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16] (Adobe Systems Incorporated)
Task: {63524A19-00C5-4EB5-9BFD-5C1A8718942C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {6359AC1C-627F-4B92-8B24-BA6190782CFC} - System32\Tasks\avastBCLRestartS-1-5-21-2790885812-1499487206-891857003-1000 => Firefox.exe 
Task: {654DD55F-5508-4965-AD7E-C0C9C6456A0F} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2009-07-13] (TOSHIBA CORPORATION)
Task: {835A1FE4-9D76-4994-96BB-85D3420B370F} - System32\Tasks\{29DE8120-9E3D-4DC9-B24F-D5EC43B69DEB} => Chrome.exe 
Task: {92EFC611-0817-4FB7-8E7F-5BC3880BC562} - System32\Tasks\{07C77219-B427-48B8-87CE-A8B1E872CC6B} => Chrome.exe 
Task: {9DB21286-A47E-403D-BA44-C4E7B02F70ED} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {A2EBFC0B-3218-4914-AB13-16DB8A0028EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {A9898A07-F9C3-444A-858C-F729C19C2CDA} - System32\Tasks\AdobeAAMUpdater-1.0-Jennifer-PC-Jennifer => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {AC739587-7BD3-41BC-B2A9-D4968C468043} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {AF519074-5348-4B6B-9602-6BDE20294B1F} - System32\Tasks\{8BB1F361-08CA-493E-892C-E770FB83AF1F} => pcalua.exe -a C:\Users\Jennifer\Downloads\irfanview_plugins_433_setup.exe -d C:\Users\Jennifer\Downloads
Task: {B5946300-09F2-4D69-A788-C885301F53AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe
Task: {BED9568A-7FFE-44B6-B529-CE2ACF590DEA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core.job => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA.job => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2010-05-14 11:59 - 2010-05-14 11:59 - 00455944 _____ () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
2010-02-03 08:36 - 2010-02-03 08:36 - 00087488 _____ () C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
2009-09-17 14:41 - 2009-09-17 14:41 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-11-01 12:30 - 2015-11-01 12:30 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110101\algo.dll
2015-11-02 16:27 - 2015-11-02 16:27 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110201\algo.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 01581056 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll
2010-05-14 11:49 - 2010-05-14 11:49 - 02519040 _____ () C:\Program Files (x86)\Flip Video\FlipShare\Core.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 00188416 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 00356352 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 06443008 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll
2010-05-14 11:41 - 2010-05-14 11:41 - 00708608 _____ () C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll
2015-11-01 18:14 - 2015-11-01 18:14 - 00071168 _____ () c:\users\jennifer\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3uy8v.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00012800 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-06-19 16:12 - 2015-09-23 18:07 - 00779776 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00056320 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00012288 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2011-01-17 15:19 - 2011-04-21 20:17 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 16493384 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Windows:nlsPreferences
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2790885812-1499487206-891857003-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jennifer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\Services: avast! Antivirus => 2
MSCONFIG\Services: AvastVBoxSvc => 3
MSCONFIG\startupfolder: C:^Users^Jennifer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Jennifer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeBridge => "C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe" -stealth
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AnyDVD => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
MSCONFIG\startupreg: AvastUI.exe => "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" UNATTENDED
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{D6A680DC-CD7F-4F65-A2B5-1D77EE1B4630}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{04DE2063-CDF9-46D0-A2B6-57FF03B9C51F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{BA7D41C0-7F2C-4B1E-9E17-B24D900AF785}] => (Allow) svchost.exe
FirewallRules: [{360A97C1-7022-4AF2-8830-B32EB56D7910}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{1CAAC2DA-2FC8-4F31-94F6-F20B7D94F8CA}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{04E73A95-302B-4680-8CD8-F24E2E62443B}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{E4894E97-0E7D-4B8C-91E5-8DB2E07148B1}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Block) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{B6455A4F-8BC3-44E3-8C84-F98CB51A582E}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Block) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{63B4344A-6F21-4496-AA48-4A6BC7990F47}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{D74958C3-9BA7-473E-937F-EE305D86A074}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{F19DC113-991D-40CB-934D-0C2CC7CCE854}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{DF3F7002-0A62-4899-9316-A41DA038AF9C}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{4455B994-F557-4795-B879-869186065D99}] => (Allow) C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{13A2BC17-D86F-4676-BDDC-E488F4A087D9}] => (Allow) C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{6FCC32BB-1134-41EF-91BB-8CECBF4CC01E}] => (Allow) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F5DFA6EC-26A8-4899-BCC1-609D185C5FCA}] => (Allow) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{5EABF6EB-F853-40A8-9C81-8373853F7E03}C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{A4BA9E9B-51D3-4CD9-9D04-1D6817950741}C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{E534E364-FA53-4623-9EEB-2D135D9AD350}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{89114C12-FAD1-4ED6-8BA2-E2ABB3F8FCFD}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{10D8F934-C168-447F-8A8D-68B729938E8F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B0FD4A5-AAC9-4967-93B6-3FFA270E402E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54BD4142-C1F6-4602-83F3-F795AF57639C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8046226B-FFF0-4A6C-9BF2-1BF349F8E6C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9B6F040D-7334-4E8F-A7CB-CFC0584EFB28}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{28BE8F39-B9F0-4521-A7DC-051E917403E5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D2EC093A-923E-43FE-B011-E0DD7B722753}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{61331AA0-5B1E-4E81-8B7D-116BEAEDBDF2}] => (Allow) C:\Program Files\iTunes\iTunes.exe
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 06:18:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (11/01/2015 06:18:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (11/01/2015 05:37:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (11/01/2015 05:37:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (11/01/2015 12:51:33 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
 
System errors:
=============
Error: (11/02/2015 04:25:42 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 09:09:51 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 06:20:58 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort1.
 
Error: (11/01/2015 06:12:18 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 06:12:18 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
 
==================== Memory info =========================== 
 
Processor: AMD Turion™ II Dual-Core Mobile M500
Percentage of memory in use: 57%
Total physical RAM: 3836.17 MB
Available physical RAM: 1644.94 MB
Total Virtual: 7670.54 MB
Available Virtual: 5176.83 MB
 
==================== Drives ================================
 
Drive c: (TI105736W0B) (Fixed) (Total:281.25 GB) (Free:183.13 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: () (Removable) (Total:7.39 GB) (Free:7.05 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 00F66ECC)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=281.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.4 GB) - (Type=17)
 
========================================================
Disk: 1 (Size: 7.4 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================
 
 


BC AdBot (Login to Remove)

 


#2 NikolaTesla

NikolaTesla
  • Topic Starter

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Local time:02:37 AM

Posted 02 November 2015 - 04:59 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
Ran by Jennifer (administrator) on JENNIFER-PC (02-11-2015 16:52:32)
Running from C:\Users\Jennifer\Downloads
Loaded Profiles: Jennifer (Available Profiles: Jennifer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(SlySoft, Inc.) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
(Dropbox, Inc.) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [] => [X]
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [497504 2009-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711000 2009-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2009-09-17] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [34648 2009-10-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2009-10-28] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1482080 2009-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-07-20] (Synaptics Incorporated)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)
HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-07-29] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [909624 2009-08-05] (TOSHIBA Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-31] (AVAST Software)
HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648 2009-08-11] (TOSHIBA CORPORATION.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-08-17] (TOSHIBA Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-10-13] (Apple Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-31] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorVisionStartup.lnk [2012-12-26]
ShortcutTarget: ColorVisionStartup.lnk -> C:\Program Files (x86)\PANTONE COLORVISION\Utility\ColorVisionStartup.exe (ColorVision Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D4A207C2-68DC-4300-A649-6811537B53BC}: [DhcpNameServer] 192.168.1.1
 
Internet Explorer:
==================
HKU\S-1-5-21-2790885812-1499487206-891857003-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
SearchScopes: HKLM -> {72A080B9-3EBA-4B8E-B95E-F9ADB840F3CA} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKLM-x32 -> {876AE5BD-39C5-4219-BF7E-D84427067C55} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {44816E91-C68A-2FF3-3D8F-8970062E5600} URL = hxxp://www.bing.com/search?q={searchTerms}&pc=ZUGO&form=ZGAIDF
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {72A080B9-3EBA-4B8E-B95E-F9ADB840F3CA} URL = 
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {808342F2-E6B2-4439-A66F-E6DBB06F0075} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {876AE5BD-39C5-4219-BF7E-D84427067C55} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA_enUS397US397
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-31] (AVAST Software)
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-31] (AVAST Software)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} hxxp://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
 
FireFox:
========
FF ProfilePath: C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default
FF Homepage: hxxps://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\windows\SysWOW64\npdeployJava1.dll [2012-07-04] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-11-01] (Apple Inc.)
FF Extension: Widevine Media Optimizer - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2014-07-23] [not signed]
FF Extension: Flashblock - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2015-05-31]
FF Extension: WOT - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-11]
FF Extension: YouTube to MP3 - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\youtube2mp3@mondayx.de.xpi [2015-05-31]
FF Extension: Adblock Plus - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-31] [not signed]
 
Chrome: 
=======
CHR Profile: C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-31]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-31] (AVAST Software)
R2 FlipShare Service; C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe [455944 2010-05-14] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 nlsX86cc; C:\windows\SysWOW64\nlssrv32.exe [66560 2012-06-06] (Nalpeiron Ltd.) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138360 2012-03-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138360 2012-03-26] (SlySoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-31] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-31] (AVAST Software)
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-12-12] (Brother Industries Ltd.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 epp64; C:\EEK\bin\epp64.sys [136456 2015-11-01] (Emsisoft GmbH)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-10-31] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-02 16:52 - 2015-11-02 16:53 - 00017728 _____ C:\Users\Jennifer\Downloads\FRST.txt
2015-11-02 16:51 - 2015-11-02 16:52 - 00000000 ____D C:\FRST
2015-11-02 16:51 - 2015-11-02 16:51 - 02198016 _____ (Farbar) C:\Users\Jennifer\Downloads\FRST64.exe
2015-11-02 16:50 - 2015-11-02 16:50 - 02198016 _____ (Farbar) C:\Users\Jennifer\Downloads\Unconfirmed 32155.crdownload
2015-11-01 21:36 - 2015-11-02 00:00 - 00002912 _____ C:\windows\setupact.log
2015-11-01 21:36 - 2015-11-01 21:36 - 00000000 _____ C:\windows\setuperr.log
2015-11-01 19:11 - 2015-11-01 19:11 - 00014542 _____ C:\Users\Jennifer\Documents\uninstall.txt
2015-11-01 19:08 - 2015-11-01 19:08 - 00006348 _____ C:\Users\Jennifer\Documents\Windows.txt
2015-11-01 19:08 - 2015-11-01 19:08 - 00003306 _____ C:\Users\Jennifer\Documents\Scheduled.txt
2015-11-01 19:07 - 2015-11-01 19:07 - 00003306 _____ C:\Users\Jennifer\Documents\startup.txt
2015-11-01 18:52 - 2015-11-01 18:52 - 00002802 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2015-11-01 18:52 - 2015-11-01 18:52 - 00000793 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-11-01 18:52 - 2015-11-01 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-01 18:52 - 2015-11-01 18:52 - 00000000 ____D C:\Program Files\CCleaner
2015-11-01 18:50 - 2015-11-01 18:51 - 06762072 _____ (Piriform Ltd) C:\Users\Jennifer\Downloads\ccsetup511.exe
2015-11-01 18:18 - 2015-11-01 18:23 - 169524160 _____ C:\Users\Jennifer\Downloads\EmsisoftEmergencyKit(1).exe
2015-11-01 18:18 - 2015-11-01 18:18 - 00029300 _____ C:\Users\Jennifer\Desktop\download.htm
2015-11-01 17:40 - 2015-11-01 21:14 - 00000000 ____D C:\EEK
2015-11-01 17:40 - 2015-11-01 21:13 - 00000754 _____ C:\Users\Jennifer\Desktop\Start Emsisoft Emergency Kit.lnk
2015-11-01 17:33 - 2015-11-01 17:37 - 169524160 _____ C:\Users\Jennifer\Downloads\EmsisoftEmergencyKit.exe
2015-11-01 14:16 - 2015-11-01 14:16 - 00001724 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-11-01 14:16 - 2015-11-01 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-11-01 14:15 - 2015-11-01 14:16 - 00000000 ____D C:\Program Files\iTunes
2015-11-01 14:15 - 2015-11-01 14:15 - 00000000 ____D C:\Program Files\iPod
2015-11-01 14:15 - 2015-11-01 14:15 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-11-01 14:12 - 2015-11-01 14:12 - 00000000 ____D C:\Program Files\Bonjour
2015-11-01 14:12 - 2015-11-01 14:12 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-11-01 14:11 - 2015-11-01 14:11 - 00000000 ____D C:\windows\System32\Tasks\Apple
2015-11-01 14:11 - 2015-11-01 14:11 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-11-01 14:05 - 2015-11-01 14:05 - 00001856 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-11-01 14:05 - 2015-11-01 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-11-01 14:05 - 2015-11-01 14:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-11-01 12:41 - 2015-11-01 12:41 - 01694208 _____ C:\Users\Jennifer\Downloads\adwcleaner_5.015.exe
2015-11-01 12:40 - 2015-11-01 12:40 - 01691648 _____ C:\Users\Jennifer\Downloads\AdwCleaner (2).exe
2015-11-01 12:22 - 2015-11-01 12:22 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-11-01 12:22 - 2015-11-01 12:22 - 00000000 ____D C:\windows\system32\DAX2
2015-11-01 11:36 - 2015-11-01 11:36 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (4).exe
2015-11-01 11:34 - 2015-11-01 11:34 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (3).exe
2015-11-01 11:34 - 2015-11-01 11:34 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (2).exe
2015-11-01 07:26 - 2015-11-01 07:27 - 00000000 ___HD C:\$Windows.~BT
2015-10-31 20:07 - 2015-10-31 20:07 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\AVAST Software
2015-10-31 20:04 - 2015-10-31 20:04 - 00001893 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-31 20:04 - 2015-10-31 20:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-31 20:03 - 2015-10-31 20:03 - 01049880 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00448968 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00378880 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2015-10-31 20:03 - 2015-10-31 20:03 - 00274808 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00153744 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00093528 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00090968 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00065224 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00043112 _____ (AVAST Software) C:\windows\avastSS.scr
2015-10-31 20:03 - 2015-10-31 20:03 - 00028656 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2015-10-31 19:59 - 2015-10-31 19:59 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-31 19:55 - 2015-10-31 19:55 - 05500000 _____ (Avast Software s.r.o.) C:\Users\Jennifer\Downloads\avast_free_antivirus_setup_online.exe
2015-10-31 19:11 - 2015-10-31 19:11 - 00467462 _____ C:\Users\Jennifer\Downloads\Admin (2) (1).zip
2015-10-31 19:10 - 2015-10-31 19:10 - 00467462 _____ C:\Users\Jennifer\Downloads\Admin (2).zip
2015-10-31 19:09 - 2015-10-31 19:09 - 00467462 _____ C:\Users\Jennifer\Documents\Admin (2).zip
2015-10-31 18:53 - 2015-06-18 17:45 - 04496600 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys
2015-10-31 18:53 - 2015-06-18 16:59 - 02862488 _____ C:\windows\system32\Drivers\RTAIODAT.DAT
2015-10-31 18:53 - 2015-06-17 18:47 - 02930904 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RltkAPO64.dll
2015-10-31 18:53 - 2015-06-17 18:47 - 02585816 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RltkAPO.dll
2015-10-31 18:53 - 2015-06-17 13:45 - 03234520 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkApi64.dll
2015-10-31 18:53 - 2015-06-11 18:40 - 03157796 _____ C:\windows\system32\Drivers\rtkSSTsetting.dat
2015-10-31 18:53 - 2015-05-26 10:59 - 00166616 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCfg64.dll
2015-10-31 18:53 - 2015-05-18 13:47 - 02702040 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTSnMg64.cpl
2015-10-31 18:53 - 2015-05-15 18:27 - 02918104 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtPgEx64.dll
2015-10-31 18:53 - 2015-05-15 15:32 - 01316056 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTCOM64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00858256 _____ (Sound Research, Corp.) C:\windows\system32\SEHDRA64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00684176 _____ (Sound Research, Corp.) C:\windows\system32\SECOMN64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00435856 _____ (Sound Research, Corp.) C:\windows\system32\SEAPO64.dll
2015-10-31 18:53 - 2015-04-24 04:41 - 00555664 _____ (Sound Research, Corp.) C:\windows\SysWOW64\SECOMN32.DLL
2015-10-31 18:53 - 2015-04-13 15:25 - 03262184 _____ (Yamaha Corporation) C:\windows\system32\YamahaAE2.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 01413776 _____ (Synopsys, Inc.) C:\windows\system32\SRRPTR64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00454288 _____ (Synopsys, Inc.) C:\windows\system32\SRAPO64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00369296 _____ (Synopsys, Inc.) C:\windows\system32\SRCOM64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00329360 _____ (Synopsys, Inc.) C:\windows\SysWOW64\SRCOM.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00329360 _____ (Synopsys, Inc.) C:\windows\system32\SRCOM.dll
2015-10-31 18:53 - 2015-01-23 17:16 - 00213432 _____ (TOSHIBA Corporation) C:\windows\system32\tossaemaxapo64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 01104040 _____ (SRS Labs, Inc.) C:\windows\system32\slcnt64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00943784 _____ (DTS, Inc.) C:\windows\system32\sl3apo64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00734376 _____ (DTS, Inc.) C:\windows\system32\sltech64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00250536 _____ (TODO: <Company name>) C:\windows\system32\slprp64.dll
2015-10-31 18:53 - 2014-11-11 12:44 - 00631000 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtDataProc64.dll
2015-10-31 18:53 - 2014-08-14 18:16 - 05804772 _____ C:\windows\system32\Drivers\rtvienna.dat
2015-10-31 18:53 - 2014-06-17 18:17 - 00856992 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo264.dll
2015-10-31 18:53 - 2014-04-10 11:19 - 02101848 _____ (Waves Audio Ltd.) C:\windows\system32\WavesGUILib64.dll
2015-10-31 18:53 - 2014-02-27 19:02 - 02162992 _____ (Yamaha Corporation) C:\windows\system32\YamahaAE.dll
2015-10-31 18:53 - 2013-10-11 10:31 - 00947760 _____ (Sony Corporation) C:\windows\system32\SFSS_APO.dll
2015-10-31 18:53 - 2013-06-25 11:47 - 00871856 _____ (TOSHIBA Corporation) C:\windows\system32\tossaeapo64.dll
2015-10-31 18:53 - 2013-06-25 11:47 - 00162224 _____ (TOSHIBA Corporation) C:\windows\system32\toseaeapo64.dll
2015-10-31 18:53 - 2013-06-25 11:46 - 00582056 _____ (TOSHIBA Corporation) C:\windows\system32\tosasfapo64.dll
2015-10-31 18:53 - 2012-01-10 09:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\windows\system32\tepeqapo64.dll
2015-10-31 18:53 - 2011-12-20 14:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtlCPAPI64.dll
2015-10-31 18:53 - 2011-11-22 15:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCoLDR64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00221024 _____ (Synopsys, Inc.) C:\windows\system32\SFNHK64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00081248 _____ (Synopsys, Inc.) C:\windows\system32\SFCOM64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00078688 _____ (Synopsys, Inc.) C:\windows\system32\SFAPO64.dll
2015-10-31 18:53 - 2011-03-17 11:17 - 01361336 _____ (TOSHIBA Corporation) C:\windows\system32\tosade.dll
2015-10-31 18:53 - 2011-03-07 16:11 - 00148416 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEP64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DHT64.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DAA64.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEED64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEL64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEG64A.dll
2015-10-31 18:53 - 2010-07-22 15:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\windows\SysWOW64\SFCOM.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00518896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSX64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00211184 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSH64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00198896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSHP64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00155888 _____ (SRS Labs, Inc.) C:\windows\system32\SRSWOW64.dll
2015-10-31 18:52 - 2015-06-15 16:39 - 01748184 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoInstII64.dll
2015-10-31 18:52 - 2015-06-10 12:20 - 03129672 _____ (Intel Corporation) C:\windows\system32\IntelSSTAPO.dll
2015-10-31 18:52 - 2015-06-10 12:20 - 00728392 _____ (Intel Corporation) C:\windows\system32\IntelSstCApoPropPage.dll
2015-10-31 18:52 - 2015-06-09 10:17 - 05708736 _____ (Nahimic Inc) C:\windows\system32\NAHIMICV2apo.dll
2015-10-31 18:52 - 2015-06-02 18:25 - 01576976 _____ (Conexant Systems Inc.) C:\windows\system32\CX64APO.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 02461016 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOv211.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 02393432 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOv201.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 00944984 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOProp.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 00349528 _____ (Dolby Laboratories) C:\windows\system32\HiFiDAX2API.dll
2015-10-31 18:52 - 2015-05-25 14:18 - 03195416 _____ (Fortemedia Corporation) C:\windows\system32\FMAPO64.dll
2015-10-31 18:52 - 2015-05-11 17:53 - 12996528 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO3064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01374640 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO6064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01192368 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO5064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01145264 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO4064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 00980400 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO2064.dll
2015-10-31 18:52 - 2015-04-27 15:09 - 00328816 _____ (ICEpower a/s) C:\windows\system32\ICEsoundAPO64.dll
2015-10-31 18:52 - 2015-02-05 16:48 - 12834736 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO4064.dll
2015-10-31 18:52 - 2015-02-05 16:48 - 02789808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO7064.dll
2015-10-31 18:52 - 2015-01-19 17:10 - 72113152 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoRes64.dat
2015-10-31 18:52 - 2014-11-04 12:42 - 06242576 _____ (Dolby Laboratories) C:\windows\system32\DDPP64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 01933584 _____ (Dolby Laboratories) C:\windows\system32\DDPD64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 00336144 _____ (Dolby Laboratories) C:\windows\system32\DDPO64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 00284944 _____ (Dolby Laboratories) C:\windows\system32\DDPA64F3.dll
2015-10-31 18:52 - 2014-10-24 09:12 - 05234952 _____ (Nahimic Inc) C:\windows\system32\NAHIMICAPOlfx.dll
2015-10-31 18:52 - 2014-10-24 09:12 - 00995120 _____ (Nahimic Inc) C:\windows\system32\NahimicAPONSControl.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 07087448 _____ (Dolby Laboratories) C:\windows\system32\DDPP64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 01939800 _____ (Dolby Laboratories) C:\windows\system32\DDPD64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 00315736 _____ (Dolby Laboratories) C:\windows\system32\DDPO64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 00261464 _____ (Dolby Laboratories) C:\windows\system32\DDPA64.dll
2015-10-31 18:52 - 2014-06-09 09:59 - 00560328 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAC64.dll
2015-10-31 18:52 - 2014-05-22 15:24 - 00096568 _____ C:\windows\system32\audioLibVc.dll
2015-10-31 18:52 - 2014-04-10 11:19 - 02041432 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioEQ64.dll
2015-10-31 18:52 - 2014-01-31 16:27 - 01313904 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxSpeechAPO64.dll
2015-10-31 18:52 - 2013-10-11 11:47 - 00113576 _____ (Real Sound Lab SIA) C:\windows\system32\CONEQMSAPOGUILibrary.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00501184 _____ (DTS) C:\windows\system32\DTSU2PLFX64.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00487360 _____ (DTS) C:\windows\system32\DTSU2PGFX64.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00415680 _____ (DTS) C:\windows\system32\DTSU2PREC64.dll
2015-10-31 18:52 - 2013-08-14 14:36 - 00662784 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVolumeSDAPO.dll
2015-10-31 18:52 - 2013-08-14 14:35 - 00663296 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO30.dll
2015-10-31 18:52 - 2013-07-23 14:39 - 14048512 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioRealtek64.dll
2015-10-31 18:52 - 2013-07-23 14:39 - 00922880 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPOShell64.dll
2015-10-31 18:52 - 2013-06-21 10:01 - 00109848 _____ C:\windows\system32\AcpiServiceVnA64.dll
2015-10-31 18:52 - 2013-04-03 13:13 - 00906800 _____ (Sony Corporation) C:\windows\system32\MISS_APO.dll
2015-10-31 18:52 - 2012-08-31 18:18 - 07164176 _____ (Dolby Laboratories) C:\windows\system32\R4EEP64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00434960 _____ (Dolby Laboratories) C:\windows\system32\R4EED64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00141584 _____ (Dolby Laboratories) C:\windows\system32\R4EEL64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00124176 _____ (Dolby Laboratories) C:\windows\system32\R4EEA64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00075024 _____ (Dolby Laboratories) C:\windows\system32\R4EEG64A.dll
2015-10-31 18:52 - 2012-03-08 10:47 - 00108640 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAR64.dll
2015-10-31 18:52 - 2011-08-23 16:00 - 00603984 _____ (Knowles Acoustics ) C:\windows\system32\KAAPORT64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01756264 _____ (DTS) C:\windows\system32\DTSS2SpeakerDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01568360 _____ (DTS) C:\windows\system32\DTSS2HeadphoneDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01486952 _____ (DTS) C:\windows\system32\DTSBoostDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00728680 _____ (DTS) C:\windows\system32\DTSBassEnhancementDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00712296 _____ (DTS) C:\windows\system32\DTSSymmetryDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00693352 _____ (DTS) C:\windows\system32\DTSVoiceClarityDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00491112 _____ (DTS) C:\windows\system32\DTSNeoPCDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00432744 _____ (DTS) C:\windows\system32\DTSLimiterDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00428648 _____ (DTS) C:\windows\system32\DTSGainCompensatorDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00242792 _____ (DTS) C:\windows\system32\DTSLFXAPO64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00242792 _____ (DTS) C:\windows\system32\DTSGFXAPO64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00241768 _____ (DTS) C:\windows\system32\DTSGFXAPONS64.dll
2015-10-31 18:52 - 2010-09-27 08:34 - 00318808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO20.dll
2015-10-31 18:46 - 2015-10-31 18:50 - 131494359 _____ (Realtek Semiconductor Corp.) C:\Users\Jennifer\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279.exe
2015-10-31 17:32 - 2015-11-01 21:36 - 00000000 ____D C:\windows\pss
2015-10-31 11:06 - 2015-10-31 19:09 - 04263936 _____ C:\Users\Jennifer\Documents\Admin.evtx
2015-10-31 11:06 - 2015-10-31 11:06 - 00454891 _____ C:\Users\Jennifer\Documents\Admin.zip
2015-10-22 16:23 - 2015-10-22 16:23 - 00006435 _____ C:\Users\Jennifer\Downloads\Attached Message Part
2015-10-21 18:57 - 2015-10-31 18:35 - 00000000 ____D C:\aaa10216c4c7ddd9ed6d2e
2015-10-21 15:04 - 2015-10-31 18:34 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-19 22:34 - 2015-10-31 18:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 19:20 - 2015-09-18 14:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-10-14 19:20 - 2015-09-18 14:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-10-14 19:20 - 2015-09-18 14:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-10-13 19:03 - 2015-09-18 14:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-10-13 19:03 - 2015-09-18 13:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-10-13 19:03 - 2015-09-15 23:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-10-13 19:03 - 2015-09-15 23:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-10-13 19:03 - 2015-09-15 23:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-10-13 19:03 - 2015-09-15 23:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-10-13 19:03 - 2015-09-15 23:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-10-13 19:03 - 2015-09-15 23:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-10-13 19:03 - 2015-09-15 23:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-10-13 19:03 - 2015-09-15 23:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-10-13 19:03 - 2015-09-15 23:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-10-13 19:03 - 2015-09-15 23:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-10-13 19:03 - 2015-09-15 23:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-10-13 19:03 - 2015-09-15 22:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-10-13 19:03 - 2015-09-15 22:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-10-13 19:03 - 2015-09-15 22:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-10-13 19:03 - 2015-09-15 22:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-10-13 19:03 - 2015-09-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-10-13 19:03 - 2015-09-15 22:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-10-13 19:03 - 2015-09-15 22:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-10-13 19:03 - 2015-09-15 22:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-10-13 19:03 - 2015-09-15 22:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-10-13 19:03 - 2015-09-15 22:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-10-13 19:03 - 2015-09-15 22:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-10-13 19:03 - 2015-09-15 22:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-10-13 19:03 - 2015-09-15 22:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-10-13 19:03 - 2015-09-15 22:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-10-13 19:03 - 2015-09-15 22:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-10-13 19:03 - 2015-09-15 22:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-10-13 19:03 - 2015-09-15 22:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-10-13 19:03 - 2015-09-15 22:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-10-13 19:03 - 2015-09-15 22:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-10-13 19:03 - 2015-09-15 22:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-10-13 19:03 - 2015-09-15 22:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-10-13 19:03 - 2015-09-15 22:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-10-13 19:03 - 2015-09-15 22:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-10-13 19:03 - 2015-09-15 22:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-10-13 19:03 - 2015-09-15 22:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-10-13 19:03 - 2015-09-15 22:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-10-13 19:03 - 2015-09-15 22:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-10-13 19:03 - 2015-09-15 22:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-10-13 19:03 - 2015-09-15 22:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-13 19:03 - 2015-09-15 22:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-10-13 19:03 - 2015-09-15 22:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-10-13 19:03 - 2015-09-15 22:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-10-13 19:03 - 2015-09-15 22:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-10-13 19:03 - 2015-09-15 22:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-10-13 19:03 - 2015-09-15 21:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-10-13 19:03 - 2015-09-15 21:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-10-13 19:03 - 2015-09-15 21:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-10-13 19:03 - 2015-09-15 21:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-10-13 19:03 - 2015-09-15 21:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-10-13 19:03 - 2015-09-15 21:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-10-13 19:03 - 2015-09-15 21:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-10-13 19:03 - 2015-09-15 21:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-10-13 19:03 - 2015-09-15 21:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-10-13 19:03 - 2015-09-15 21:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-10-13 19:01 - 2015-08-06 13:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-10-13 19:00 - 2015-08-06 13:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2015-10-13 19:00 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-10-13 19:00 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-10-13 18:58 - 2015-09-25 13:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-10-13 18:58 - 2015-09-25 13:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-10-13 18:58 - 2015-09-25 13:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-10-13 18:58 - 2015-09-25 13:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-10-13 18:58 - 2015-09-25 12:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-10-13 18:57 - 2015-09-28 22:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-10-13 18:57 - 2015-09-28 22:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-10-13 18:57 - 2015-09-28 22:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-10-13 18:57 - 2015-09-28 22:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-10-13 18:57 - 2015-09-28 22:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-10-13 18:57 - 2015-09-28 22:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-10-13 18:57 - 2015-09-28 22:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-10-13 18:57 - 2015-09-28 22:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-10-13 18:57 - 2015-09-28 21:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-10-13 18:57 - 2015-09-28 21:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-10-13 18:57 - 2015-09-28 21:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-10-13 18:57 - 2015-09-28 21:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-10-13 18:57 - 2015-09-28 21:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-10-13 18:57 - 2015-09-28 21:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-10-13 18:57 - 2015-09-28 20:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-10-13 18:57 - 2015-09-28 20:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-10-13 18:57 - 2015-09-28 20:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-10-13 18:57 - 2015-09-28 20:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-10-13 18:57 - 2015-09-28 20:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-13 18:57 - 2015-09-15 13:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-10-13 18:57 - 2015-09-15 13:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-10-13 18:57 - 2015-09-15 13:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-10-13 18:57 - 2015-09-15 13:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-10-13 18:57 - 2015-09-15 12:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-10-13 18:57 - 2015-09-15 12:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-10-13 18:57 - 2015-09-15 12:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-10-13 18:57 - 2015-09-15 12:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-10-13 18:56 - 2015-10-01 13:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-10-13 18:56 - 2015-10-01 13:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-10-13 18:56 - 2015-10-01 13:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-10-13 18:56 - 2015-10-01 13:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-10-13 18:56 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-10-13 18:56 - 2015-10-01 12:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-10-13 18:54 - 2015-07-18 08:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-02 16:44 - 2010-07-29 16:53 - 01437054 _____ C:\windows\WindowsUpdate.log
2015-11-02 16:38 - 2010-09-19 09:00 - 00000898 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-02 16:35 - 2015-06-19 16:10 - 00000930 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA.job
2015-11-02 16:31 - 2009-07-13 23:45 - 00018736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-02 16:31 - 2009-07-13 23:45 - 00018736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-02 16:26 - 2010-10-06 22:56 - 00000000 ____D C:\Users\Jennifer\AppData\Local\Adobe
2015-11-02 16:25 - 2012-04-21 20:45 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-11-01 22:14 - 2012-02-12 08:55 - 00000000 ____D C:\ProgramData\Yahoo!
2015-11-01 22:14 - 2012-02-12 08:53 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-11-01 21:37 - 2010-09-19 09:00 - 00000894 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-01 18:55 - 2012-02-27 21:04 - 00000000 ____D C:\windows\Minidump
2015-11-01 18:55 - 2009-11-13 13:12 - 00000000 ____D C:\windows\Panther
2015-11-01 18:35 - 2015-06-19 16:10 - 00000878 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core.job
2015-11-01 18:18 - 2009-07-14 00:13 - 00006214 _____ C:\windows\system32\PerfStringBackup.INI
2015-11-01 18:16 - 2012-11-04 21:09 - 00000000 ___RD C:\Users\Jennifer\Dropbox
2015-11-01 18:16 - 2012-11-04 21:07 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Dropbox
2015-11-01 18:12 - 2009-07-14 00:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-11-01 14:15 - 2014-02-09 22:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-11-01 14:15 - 2010-10-06 19:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-11-01 14:11 - 2010-10-06 19:48 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-11-01 13:17 - 2009-07-13 22:20 - 00000000 ____D C:\windows\rescache
2015-11-01 12:44 - 2015-02-04 14:00 - 00000000 ____D C:\AdwCleaner
2015-11-01 12:44 - 2012-02-12 08:55 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Yahoo!
2015-11-01 12:44 - 2012-02-12 08:55 - 00000000 ____D C:\Users\Jennifer\AppData\LocalLow\Yahoo!
2015-11-01 12:28 - 2013-11-12 20:05 - 00004184 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-11-01 12:21 - 2010-07-29 17:11 - 00000000 ____D C:\windows\SysWOW64\RTCOM
2015-10-31 19:26 - 2015-02-06 22:01 - 00113880 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-31 19:11 - 2011-04-27 21:25 - 00111104 ___SH C:\Users\Jennifer\Documents\Thumbs.db
2015-10-31 18:55 - 2010-07-29 17:11 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-10-31 18:35 - 2012-12-26 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PANTONE COLORVISION
2015-10-31 18:35 - 2012-12-26 17:51 - 00000000 ____D C:\Program Files (x86)\PANTONE COLORVISION
2015-10-31 18:35 - 2012-04-26 21:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-31 18:35 - 2010-09-19 09:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-31 18:35 - 2009-11-12 21:50 - 00000000 ____D C:\ProgramData\Toshiba
2015-10-31 18:35 - 2009-07-13 22:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-10-31 18:34 - 2015-04-19 19:35 - 00000000 ___SD C:\windows\SysWOW64\GWX
2015-10-31 18:34 - 2015-04-19 19:35 - 00000000 ___SD C:\windows\system32\GWX
2015-10-31 18:34 - 2014-12-10 21:03 - 00000000 ____D C:\windows\system32\appraiser
2015-10-31 18:34 - 2014-08-27 22:41 - 00000000 ___SD C:\windows\system32\CompatTel
2015-10-31 18:34 - 2010-09-11 19:53 - 00000000 ____D C:\Users\Jennifer
2015-10-31 18:34 - 2009-07-13 22:20 - 00000000 ____D C:\windows\system32\NDF
2015-10-31 18:34 - 2009-07-13 22:20 - 00000000 ____D C:\windows\registration
2015-10-31 18:04 - 2009-07-14 00:08 - 00032612 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-10-23 19:32 - 2010-09-19 09:00 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-21 19:10 - 2013-08-19 22:58 - 00000000 ____D C:\windows\system32\MRT
2015-10-21 19:10 - 2011-06-16 23:18 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-10-21 19:07 - 2010-07-29 16:58 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-18 18:14 - 2009-07-14 00:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2015-10-16 22:01 - 2012-04-21 20:45 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 22:01 - 2012-04-21 20:45 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 22:01 - 2011-06-08 19:37 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
 
==================== Files in the root of some directories =======
 
2014-10-09 19:01 - 2014-10-09 19:01 - 0000038 _____ () C:\Users\Jennifer\AppData\Roaming\mbam.context.scan
2011-07-21 06:35 - 2013-07-09 17:54 - 0010752 _____ () C:\Users\Jennifer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-05-18 06:41 - 2013-07-06 13:31 - 0000083 ___SH () C:\ProgramData\.zreglib
2015-11-01 12:22 - 2015-11-01 12:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 
Some files in TEMP:
====================
C:\Users\Jennifer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3uy8v.dll
C:\Users\Jennifer\AppData\Local\Temp\GLB1A2B.EXE
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-11-01 13:09
 
==================== End of FRST.txt ============================
 
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-10-2015
Ran by Jennifer (2015-11-02 16:53:53)
Running from C:\Users\Jennifer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2010-09-12 00:53:52)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2790885812-1499487206-891857003-500 - Administrator - Disabled)
Guest (S-1-5-21-2790885812-1499487206-891857003-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2790885812-1499487206-891857003-1002 - Limited - Enabled)
Jennifer (S-1-5-21-2790885812-1499487206-891857003-1000 - Administrator - Enabled) => C:\Users\Jennifer
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Amazon Links (HKLM-x32\...\{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}) (Version: 2.02 - TOSHIBA Corporation)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.0.4.0 - SlySoft)
Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{A0880F03-8480-482E-1606-BC91669B0882}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Black River Imaging (HKU\S-1-5-21-2790885812-1499487206-891857003-1000\...\Black River Imaging) (Version:  - Black River Imaging)
Blackhawk Striker 2 (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
ccc-core-static (x32 Version: 2009.0729.2238.38827 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dropbox (HKU\S-1-5-21-2790885812-1499487206-891857003-1000\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Faerie Solitaire (x32 Version: 2.2.0.82 - WildTangent) Hidden
FATE Undiscovered Realms (x32 Version: 2.2.0.82 - WildTangent) Hidden
FlipShare (HKLM-x32\...\{B1C0D829-FE30-059E-E93F-CDC7A48235C0}) (Version: 5.6.35.0 - Flip Video)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Halsoft Virtual Places Chat (HKLM-x32\...\Halsoft Virtual Places Chat) (Version:  - Halsoft.com, Inc)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Label@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Monopoly (x32 Version: 2.2.0.82 - WildTangent) Hidden
Mozilla Firefox 41.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
Mystery P.I. - The Vegas Heist (x32 Version: 2.2.0.82 - WildTangent) Hidden
NetZero Launcher (HKLM-x32\...\{9AEAF9CC-390B-49C0-8F7F-14092BF163B6}) (Version: 2.01 - TOSHIBA Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{ED23E382-E5E3-4E21-B616-01FC59A40916}) (Version: 3.3.9567 - OpenOffice.org)
OverDrive Media Console (HKLM-x32\...\{D4AFC7AD-F637-4EDD-BC76-767E4AF78CE1}) (Version: 3.2.5 - OverDrive, Inc.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoTools 2.6.5 Professional Edition (HKLM-x32\...\{4744A01E-4B17-4643-A1FA-44FF83CB316D}) (Version: 2.6.5 - onOne Software)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Polar Bowler (x32 Version: 2.2.0.82 - WildTangent) Hidden
Quickbooks Financial Center (HKLM-x32\...\{3B843B38-04B1-4CE6-8888-586273E0F289}) (Version: 2.02 - TOSHIBA Corporation)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Realtek Ethernet Controller  Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30101 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0006 - Realtek)
Skype Launcher (HKLM-x32\...\{DA84ECBF-4B79-47F2-B34C-95C38484C058}) (Version: 2.01 - TOSHIBA Corporation)
Spyder2PRO (HKLM-x32\...\Spyder2PRO) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.6.1 - Synaptics Incorporated)
TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.0 - TOSHIBA)
TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.10 - TOSHIBA)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{F64684A0-754B-4637-B7F9-6E8DAA8CD5CD}) (Version: 1.5.05.64 - TOSHIBA Corporation)
TOSHIBA ConfigFree (HKLM-x32\...\{F3529665-D75E-4D6D-98F0-745C78C68E9B}) (Version: 8.0.21 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.1 for x64 - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.01.0.07-A - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.1.7.64 - TOSHIBA Corporation)
TOSHIBA Extended Tiles for Windows Mobility Center (HKLM-x32\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version:  - )
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.0.64 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM-x32\...\{D0387727-C89D-4774-B643-B9333EAA09DE}) (Version: 2.00.11 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.2 - TOSHIBA Corporation)
TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.65 - TOSHIBA CORPORATION)
Toshiba Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.38 - Toshiba)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.4.1.64 - TOSHIBA Corporation)
TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{5BCC94A1-DEF1-4AB4-8046-BC13048E929A}) (Version: 1.5.07.64 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.33 - TOSHIBA)
TOSHIBA Speech System Applications (HKLM-x32\...\{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version: 1.00.2518 - )
TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM-x32\...\{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version:  - )
TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM-x32\...\{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version:  - )
TOSHIBA Supervisor Password (HKLM-x32\...\{A208044D-A88B-4ACF-AE95-E4F213E6EDC0}) (Version: 2.00.09 - TOSHIBA Corporation)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.2.26.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.4 - TOSHIBA Corporation)
ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.3 - Toshiba)
TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Virtual Families (x32 Version: 2.2.0.82 - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.82 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.80 - WildTangent)
WildTangent ORB Game Console (x32 Version:  - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
 
==================== Restore Points =========================
 
29-10-2015 19:59:30 Windows Update
31-10-2015 18:02:30 Windows Update
31-10-2015 18:25:14 Restore Operation
31-10-2015 18:52:22 Installed Realtek High Definition Audio Driver
01-11-2015 22:15:57 Removed Adobe Media Player
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
 
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {487DF39A-ECF7-444A-95BC-0CA7E3563E5E} - System32\Tasks\{8971C5F8-8E85-4EC8-A46A-6924E4C7FBBF} => Chrome.exe 
Task: {523BF8AC-221B-415C-AFCE-10CA4E8C7572} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {623E74D8-0EBC-4381-83CA-036FE8D891B6} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16] (Adobe Systems Incorporated)
Task: {63524A19-00C5-4EB5-9BFD-5C1A8718942C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {6359AC1C-627F-4B92-8B24-BA6190782CFC} - System32\Tasks\avastBCLRestartS-1-5-21-2790885812-1499487206-891857003-1000 => Firefox.exe 
Task: {654DD55F-5508-4965-AD7E-C0C9C6456A0F} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2009-07-13] (TOSHIBA CORPORATION)
Task: {835A1FE4-9D76-4994-96BB-85D3420B370F} - System32\Tasks\{29DE8120-9E3D-4DC9-B24F-D5EC43B69DEB} => Chrome.exe 
Task: {92EFC611-0817-4FB7-8E7F-5BC3880BC562} - System32\Tasks\{07C77219-B427-48B8-87CE-A8B1E872CC6B} => Chrome.exe 
Task: {9DB21286-A47E-403D-BA44-C4E7B02F70ED} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {A2EBFC0B-3218-4914-AB13-16DB8A0028EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {A9898A07-F9C3-444A-858C-F729C19C2CDA} - System32\Tasks\AdobeAAMUpdater-1.0-Jennifer-PC-Jennifer => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {AC739587-7BD3-41BC-B2A9-D4968C468043} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {AF519074-5348-4B6B-9602-6BDE20294B1F} - System32\Tasks\{8BB1F361-08CA-493E-892C-E770FB83AF1F} => pcalua.exe -a C:\Users\Jennifer\Downloads\irfanview_plugins_433_setup.exe -d C:\Users\Jennifer\Downloads
Task: {B5946300-09F2-4D69-A788-C885301F53AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe
Task: {BED9568A-7FFE-44B6-B529-CE2ACF590DEA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core.job => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA.job => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2010-05-14 11:59 - 2010-05-14 11:59 - 00455944 _____ () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
2010-02-03 08:36 - 2010-02-03 08:36 - 00087488 _____ () C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
2009-09-17 14:41 - 2009-09-17 14:41 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-11-01 12:30 - 2015-11-01 12:30 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110101\algo.dll
2015-11-02 16:27 - 2015-11-02 16:27 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110201\algo.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 01581056 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll
2010-05-14 11:49 - 2010-05-14 11:49 - 02519040 _____ () C:\Program Files (x86)\Flip Video\FlipShare\Core.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 00188416 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 00356352 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 06443008 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll
2010-05-14 11:41 - 2010-05-14 11:41 - 00708608 _____ () C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll
2015-11-01 18:14 - 2015-11-01 18:14 - 00071168 _____ () c:\users\jennifer\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3uy8v.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00012800 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-06-19 16:12 - 2015-09-23 18:07 - 00779776 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00056320 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00012288 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2011-01-17 15:19 - 2011-04-21 20:17 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 16493384 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Windows:nlsPreferences
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2790885812-1499487206-891857003-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jennifer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\Services: avast! Antivirus => 2
MSCONFIG\Services: AvastVBoxSvc => 3
MSCONFIG\startupfolder: C:^Users^Jennifer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Jennifer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeBridge => "C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe" -stealth
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AnyDVD => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
MSCONFIG\startupreg: AvastUI.exe => "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" UNATTENDED
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{D6A680DC-CD7F-4F65-A2B5-1D77EE1B4630}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{04DE2063-CDF9-46D0-A2B6-57FF03B9C51F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{BA7D41C0-7F2C-4B1E-9E17-B24D900AF785}] => (Allow) svchost.exe
FirewallRules: [{360A97C1-7022-4AF2-8830-B32EB56D7910}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{1CAAC2DA-2FC8-4F31-94F6-F20B7D94F8CA}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{04E73A95-302B-4680-8CD8-F24E2E62443B}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{E4894E97-0E7D-4B8C-91E5-8DB2E07148B1}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Block) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{B6455A4F-8BC3-44E3-8C84-F98CB51A582E}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Block) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{63B4344A-6F21-4496-AA48-4A6BC7990F47}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{D74958C3-9BA7-473E-937F-EE305D86A074}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{F19DC113-991D-40CB-934D-0C2CC7CCE854}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{DF3F7002-0A62-4899-9316-A41DA038AF9C}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{4455B994-F557-4795-B879-869186065D99}] => (Allow) C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{13A2BC17-D86F-4676-BDDC-E488F4A087D9}] => (Allow) C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{6FCC32BB-1134-41EF-91BB-8CECBF4CC01E}] => (Allow) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F5DFA6EC-26A8-4899-BCC1-609D185C5FCA}] => (Allow) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{5EABF6EB-F853-40A8-9C81-8373853F7E03}C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{A4BA9E9B-51D3-4CD9-9D04-1D6817950741}C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{E534E364-FA53-4623-9EEB-2D135D9AD350}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{89114C12-FAD1-4ED6-8BA2-E2ABB3F8FCFD}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{10D8F934-C168-447F-8A8D-68B729938E8F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B0FD4A5-AAC9-4967-93B6-3FFA270E402E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54BD4142-C1F6-4602-83F3-F795AF57639C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8046226B-FFF0-4A6C-9BF2-1BF349F8E6C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9B6F040D-7334-4E8F-A7CB-CFC0584EFB28}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{28BE8F39-B9F0-4521-A7DC-051E917403E5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D2EC093A-923E-43FE-B011-E0DD7B722753}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{61331AA0-5B1E-4E81-8B7D-116BEAEDBDF2}] => (Allow) C:\Program Files\iTunes\iTunes.exe
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 06:18:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (11/01/2015 06:18:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (11/01/2015 05:37:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (11/01/2015 05:37:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (11/01/2015 12:51:33 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
 
System errors:
=============
Error: (11/02/2015 04:25:42 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 09:09:51 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 06:20:58 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort1.
 
Error: (11/01/2015 06:12:18 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 06:12:18 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
 
==================== Memory info =========================== 
 
Processor: AMD Turion™ II Dual-Core Mobile M500
Percentage of memory in use: 57%
Total physical RAM: 3836.17 MB
Available physical RAM: 1644.94 MB
Total Virtual: 7670.54 MB
Available Virtual: 5176.83 MB
 
==================== Drives ================================
 
Drive c: (TI105736W0B) (Fixed) (Total:281.25 GB) (Free:183.13 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: () (Removable) (Total:7.39 GB) (Free:7.05 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 00F66ECC)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=281.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.4 GB) - (Type=17)
 
========================================================
Disk: 1 (Size: 7.4 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================
 
 


#3 NikolaTesla

NikolaTesla
  • Topic Starter

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Local time:02:37 AM

Posted 02 November 2015 - 05:00 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
Ran by Jennifer (administrator) on JENNIFER-PC (02-11-2015 16:52:32)
Running from C:\Users\Jennifer\Downloads
Loaded Profiles: Jennifer (Available Profiles: Jennifer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(SlySoft, Inc.) C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
(Dropbox, Inc.) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [] => [X]
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [497504 2009-08-21] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711000 2009-08-04] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2009-09-17] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [34648 2009-10-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [595816 2009-10-28] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1482080 2009-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2009-07-20] (Synaptics Incorporated)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [508216 2009-07-28] (TOSHIBA Corporation)
HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-07-29] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [909624 2009-08-05] (TOSHIBA Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-31] (AVAST Software)
HKLM-x32\...\Run: [TWebCamera] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2446648 2009-08-11] (TOSHIBA CORPORATION.)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-08-17] (TOSHIBA Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-10-13] (Apple Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-31] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorVisionStartup.lnk [2012-12-26]
ShortcutTarget: ColorVisionStartup.lnk -> C:\Program Files (x86)\PANTONE COLORVISION\Utility\ColorVisionStartup.exe (ColorVision Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D4A207C2-68DC-4300-A649-6811537B53BC}: [DhcpNameServer] 192.168.1.1
 
Internet Explorer:
==================
HKU\S-1-5-21-2790885812-1499487206-891857003-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
SearchScopes: HKLM -> {72A080B9-3EBA-4B8E-B95E-F9ADB840F3CA} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKLM-x32 -> {876AE5BD-39C5-4219-BF7E-D84427067C55} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {44816E91-C68A-2FF3-3D8F-8970062E5600} URL = hxxp://www.bing.com/search?q={searchTerms}&pc=ZUGO&form=ZGAIDF
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {72A080B9-3EBA-4B8E-B95E-F9ADB840F3CA} URL = 
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {808342F2-E6B2-4439-A66F-E6DBB06F0075} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA
SearchScopes: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> {876AE5BD-39C5-4219-BF7E-D84427067C55} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNA_enUS397US397
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-10-31] (AVAST Software)
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-31] (AVAST Software)
BHO-x32: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKU\S-1-5-21-2790885812-1499487206-891857003-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} hxxp://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
 
FireFox:
========
FF ProfilePath: C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default
FF Homepage: hxxps://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\windows\SysWOW64\npdeployJava1.dll [2012-07-04] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-11-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-11-01] (Apple Inc.)
FF Extension: Widevine Media Optimizer - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d} [2014-07-23] [not signed]
FF Extension: Flashblock - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2015-05-31]
FF Extension: WOT - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-11]
FF Extension: YouTube to MP3 - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\youtube2mp3@mondayx.de.xpi [2015-05-31]
FF Extension: Adblock Plus - C:\Users\Jennifer\AppData\Roaming\Mozilla\Firefox\Profiles\ikfy6ccc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-24]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-31] [not signed]
 
Chrome: 
=======
CHR Profile: C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jennifer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-31]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-31] (AVAST Software)
R2 FlipShare Service; C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe [455944 2010-05-14] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 nlsX86cc; C:\windows\SysWOW64\nlssrv32.exe [66560 2012-06-06] (Nalpeiron Ltd.) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138360 2012-03-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138360 2012-03-26] (SlySoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-31] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-31] (AVAST Software)
S3 BrSerIf; C:\Windows\System32\DRIVERS\BrSerIf.sys [97280 2006-12-12] (Brother Industries Ltd.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 epp64; C:\EEK\bin\epp64.sys [136456 2015-11-01] (Emsisoft GmbH)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-10-31] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-02 16:52 - 2015-11-02 16:53 - 00017728 _____ C:\Users\Jennifer\Downloads\FRST.txt
2015-11-02 16:51 - 2015-11-02 16:52 - 00000000 ____D C:\FRST
2015-11-02 16:51 - 2015-11-02 16:51 - 02198016 _____ (Farbar) C:\Users\Jennifer\Downloads\FRST64.exe
2015-11-02 16:50 - 2015-11-02 16:50 - 02198016 _____ (Farbar) C:\Users\Jennifer\Downloads\Unconfirmed 32155.crdownload
2015-11-01 21:36 - 2015-11-02 00:00 - 00002912 _____ C:\windows\setupact.log
2015-11-01 21:36 - 2015-11-01 21:36 - 00000000 _____ C:\windows\setuperr.log
2015-11-01 19:11 - 2015-11-01 19:11 - 00014542 _____ C:\Users\Jennifer\Documents\uninstall.txt
2015-11-01 19:08 - 2015-11-01 19:08 - 00006348 _____ C:\Users\Jennifer\Documents\Windows.txt
2015-11-01 19:08 - 2015-11-01 19:08 - 00003306 _____ C:\Users\Jennifer\Documents\Scheduled.txt
2015-11-01 19:07 - 2015-11-01 19:07 - 00003306 _____ C:\Users\Jennifer\Documents\startup.txt
2015-11-01 18:52 - 2015-11-01 18:52 - 00002802 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2015-11-01 18:52 - 2015-11-01 18:52 - 00000793 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-11-01 18:52 - 2015-11-01 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-01 18:52 - 2015-11-01 18:52 - 00000000 ____D C:\Program Files\CCleaner
2015-11-01 18:50 - 2015-11-01 18:51 - 06762072 _____ (Piriform Ltd) C:\Users\Jennifer\Downloads\ccsetup511.exe
2015-11-01 18:18 - 2015-11-01 18:23 - 169524160 _____ C:\Users\Jennifer\Downloads\EmsisoftEmergencyKit(1).exe
2015-11-01 18:18 - 2015-11-01 18:18 - 00029300 _____ C:\Users\Jennifer\Desktop\download.htm
2015-11-01 17:40 - 2015-11-01 21:14 - 00000000 ____D C:\EEK
2015-11-01 17:40 - 2015-11-01 21:13 - 00000754 _____ C:\Users\Jennifer\Desktop\Start Emsisoft Emergency Kit.lnk
2015-11-01 17:33 - 2015-11-01 17:37 - 169524160 _____ C:\Users\Jennifer\Downloads\EmsisoftEmergencyKit.exe
2015-11-01 14:16 - 2015-11-01 14:16 - 00001724 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-11-01 14:16 - 2015-11-01 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-11-01 14:15 - 2015-11-01 14:16 - 00000000 ____D C:\Program Files\iTunes
2015-11-01 14:15 - 2015-11-01 14:15 - 00000000 ____D C:\Program Files\iPod
2015-11-01 14:15 - 2015-11-01 14:15 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-11-01 14:12 - 2015-11-01 14:12 - 00000000 ____D C:\Program Files\Bonjour
2015-11-01 14:12 - 2015-11-01 14:12 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-11-01 14:11 - 2015-11-01 14:11 - 00000000 ____D C:\windows\System32\Tasks\Apple
2015-11-01 14:11 - 2015-11-01 14:11 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-11-01 14:05 - 2015-11-01 14:05 - 00001856 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-11-01 14:05 - 2015-11-01 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-11-01 14:05 - 2015-11-01 14:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-11-01 12:41 - 2015-11-01 12:41 - 01694208 _____ C:\Users\Jennifer\Downloads\adwcleaner_5.015.exe
2015-11-01 12:40 - 2015-11-01 12:40 - 01691648 _____ C:\Users\Jennifer\Downloads\AdwCleaner (2).exe
2015-11-01 12:22 - 2015-11-01 12:22 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-11-01 12:22 - 2015-11-01 12:22 - 00000000 ____D C:\windows\system32\DAX2
2015-11-01 11:36 - 2015-11-01 11:36 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (4).exe
2015-11-01 11:34 - 2015-11-01 11:34 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (3).exe
2015-11-01 11:34 - 2015-11-01 11:34 - 02870984 _____ (ESET) C:\Users\Jennifer\Downloads\esetsmartinstaller_enu (2).exe
2015-11-01 07:26 - 2015-11-01 07:27 - 00000000 ___HD C:\$Windows.~BT
2015-10-31 20:07 - 2015-10-31 20:07 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\AVAST Software
2015-10-31 20:04 - 2015-10-31 20:04 - 00001893 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-10-31 20:04 - 2015-10-31 20:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-31 20:03 - 2015-10-31 20:03 - 01049880 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00448968 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00378880 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2015-10-31 20:03 - 2015-10-31 20:03 - 00274808 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00153744 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00093528 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00090968 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00065224 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2015-10-31 20:03 - 2015-10-31 20:03 - 00043112 _____ (AVAST Software) C:\windows\avastSS.scr
2015-10-31 20:03 - 2015-10-31 20:03 - 00028656 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2015-10-31 19:59 - 2015-10-31 19:59 - 00000000 ____D C:\Program Files\AVAST Software
2015-10-31 19:55 - 2015-10-31 19:55 - 05500000 _____ (Avast Software s.r.o.) C:\Users\Jennifer\Downloads\avast_free_antivirus_setup_online.exe
2015-10-31 19:11 - 2015-10-31 19:11 - 00467462 _____ C:\Users\Jennifer\Downloads\Admin (2) (1).zip
2015-10-31 19:10 - 2015-10-31 19:10 - 00467462 _____ C:\Users\Jennifer\Downloads\Admin (2).zip
2015-10-31 19:09 - 2015-10-31 19:09 - 00467462 _____ C:\Users\Jennifer\Documents\Admin (2).zip
2015-10-31 18:53 - 2015-06-18 17:45 - 04496600 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys
2015-10-31 18:53 - 2015-06-18 16:59 - 02862488 _____ C:\windows\system32\Drivers\RTAIODAT.DAT
2015-10-31 18:53 - 2015-06-17 18:47 - 02930904 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RltkAPO64.dll
2015-10-31 18:53 - 2015-06-17 18:47 - 02585816 _____ (Realtek Semiconductor Corp.) C:\windows\SysWOW64\RltkAPO.dll
2015-10-31 18:53 - 2015-06-17 13:45 - 03234520 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkApi64.dll
2015-10-31 18:53 - 2015-06-11 18:40 - 03157796 _____ C:\windows\system32\Drivers\rtkSSTsetting.dat
2015-10-31 18:53 - 2015-05-26 10:59 - 00166616 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCfg64.dll
2015-10-31 18:53 - 2015-05-18 13:47 - 02702040 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTSnMg64.cpl
2015-10-31 18:53 - 2015-05-15 18:27 - 02918104 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtPgEx64.dll
2015-10-31 18:53 - 2015-05-15 15:32 - 01316056 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTCOM64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00858256 _____ (Sound Research, Corp.) C:\windows\system32\SEHDRA64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00684176 _____ (Sound Research, Corp.) C:\windows\system32\SECOMN64.dll
2015-10-31 18:53 - 2015-04-24 04:42 - 00435856 _____ (Sound Research, Corp.) C:\windows\system32\SEAPO64.dll
2015-10-31 18:53 - 2015-04-24 04:41 - 00555664 _____ (Sound Research, Corp.) C:\windows\SysWOW64\SECOMN32.DLL
2015-10-31 18:53 - 2015-04-13 15:25 - 03262184 _____ (Yamaha Corporation) C:\windows\system32\YamahaAE2.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 01413776 _____ (Synopsys, Inc.) C:\windows\system32\SRRPTR64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00454288 _____ (Synopsys, Inc.) C:\windows\system32\SRAPO64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00369296 _____ (Synopsys, Inc.) C:\windows\system32\SRCOM64.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00329360 _____ (Synopsys, Inc.) C:\windows\SysWOW64\SRCOM.dll
2015-10-31 18:53 - 2015-02-03 23:38 - 00329360 _____ (Synopsys, Inc.) C:\windows\system32\SRCOM.dll
2015-10-31 18:53 - 2015-01-23 17:16 - 00213432 _____ (TOSHIBA Corporation) C:\windows\system32\tossaemaxapo64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 01104040 _____ (SRS Labs, Inc.) C:\windows\system32\slcnt64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00943784 _____ (DTS, Inc.) C:\windows\system32\sl3apo64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00734376 _____ (DTS, Inc.) C:\windows\system32\sltech64.dll
2015-10-31 18:53 - 2014-12-11 07:10 - 00250536 _____ (TODO: <Company name>) C:\windows\system32\slprp64.dll
2015-10-31 18:53 - 2014-11-11 12:44 - 00631000 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtDataProc64.dll
2015-10-31 18:53 - 2014-08-14 18:16 - 05804772 _____ C:\windows\system32\Drivers\rtvienna.dat
2015-10-31 18:53 - 2014-06-17 18:17 - 00856992 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo264.dll
2015-10-31 18:53 - 2014-04-10 11:19 - 02101848 _____ (Waves Audio Ltd.) C:\windows\system32\WavesGUILib64.dll
2015-10-31 18:53 - 2014-02-27 19:02 - 02162992 _____ (Yamaha Corporation) C:\windows\system32\YamahaAE.dll
2015-10-31 18:53 - 2013-10-11 10:31 - 00947760 _____ (Sony Corporation) C:\windows\system32\SFSS_APO.dll
2015-10-31 18:53 - 2013-06-25 11:47 - 00871856 _____ (TOSHIBA Corporation) C:\windows\system32\tossaeapo64.dll
2015-10-31 18:53 - 2013-06-25 11:47 - 00162224 _____ (TOSHIBA Corporation) C:\windows\system32\toseaeapo64.dll
2015-10-31 18:53 - 2013-06-25 11:46 - 00582056 _____ (TOSHIBA Corporation) C:\windows\system32\tosasfapo64.dll
2015-10-31 18:53 - 2012-01-10 09:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\windows\system32\tepeqapo64.dll
2015-10-31 18:53 - 2011-12-20 14:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtlCPAPI64.dll
2015-10-31 18:53 - 2011-11-22 15:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCoLDR64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00221024 _____ (Synopsys, Inc.) C:\windows\system32\SFNHK64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00081248 _____ (Synopsys, Inc.) C:\windows\system32\SFCOM64.dll
2015-10-31 18:53 - 2011-09-02 13:21 - 00078688 _____ (Synopsys, Inc.) C:\windows\system32\SFAPO64.dll
2015-10-31 18:53 - 2011-03-17 11:17 - 01361336 _____ (TOSHIBA Corporation) C:\windows\system32\tosade.dll
2015-10-31 18:53 - 2011-03-07 16:11 - 00148416 _____ (TOSHIBA Corporation) C:\windows\system32\tadefxapo.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEP64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DHT64.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DAA64.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEED64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEL64A.dll
2015-10-31 18:53 - 2010-11-08 06:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEG64A.dll
2015-10-31 18:53 - 2010-07-22 15:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\windows\SysWOW64\SFCOM.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00518896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSX64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00211184 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSH64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00198896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSHP64.dll
2015-10-31 18:53 - 2009-11-24 08:55 - 00155888 _____ (SRS Labs, Inc.) C:\windows\system32\SRSWOW64.dll
2015-10-31 18:52 - 2015-06-15 16:39 - 01748184 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoInstII64.dll
2015-10-31 18:52 - 2015-06-10 12:20 - 03129672 _____ (Intel Corporation) C:\windows\system32\IntelSSTAPO.dll
2015-10-31 18:52 - 2015-06-10 12:20 - 00728392 _____ (Intel Corporation) C:\windows\system32\IntelSstCApoPropPage.dll
2015-10-31 18:52 - 2015-06-09 10:17 - 05708736 _____ (Nahimic Inc) C:\windows\system32\NAHIMICV2apo.dll
2015-10-31 18:52 - 2015-06-02 18:25 - 01576976 _____ (Conexant Systems Inc.) C:\windows\system32\CX64APO.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 02461016 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOv211.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 02393432 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOv201.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 00944984 _____ (Dolby Laboratories) C:\windows\system32\DolbyDAX2APOProp.dll
2015-10-31 18:52 - 2015-05-27 17:51 - 00349528 _____ (Dolby Laboratories) C:\windows\system32\HiFiDAX2API.dll
2015-10-31 18:52 - 2015-05-25 14:18 - 03195416 _____ (Fortemedia Corporation) C:\windows\system32\FMAPO64.dll
2015-10-31 18:52 - 2015-05-11 17:53 - 12996528 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO3064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01374640 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO6064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01192368 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO5064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 01145264 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO4064.dll
2015-10-31 18:52 - 2015-05-11 12:08 - 00980400 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO2064.dll
2015-10-31 18:52 - 2015-04-27 15:09 - 00328816 _____ (ICEpower a/s) C:\windows\system32\ICEsoundAPO64.dll
2015-10-31 18:52 - 2015-02-05 16:48 - 12834736 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVoiceAPO4064.dll
2015-10-31 18:52 - 2015-02-05 16:48 - 02789808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO7064.dll
2015-10-31 18:52 - 2015-01-19 17:10 - 72113152 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoRes64.dat
2015-10-31 18:52 - 2014-11-04 12:42 - 06242576 _____ (Dolby Laboratories) C:\windows\system32\DDPP64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 01933584 _____ (Dolby Laboratories) C:\windows\system32\DDPD64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 00336144 _____ (Dolby Laboratories) C:\windows\system32\DDPO64AF3.dll
2015-10-31 18:52 - 2014-11-04 12:42 - 00284944 _____ (Dolby Laboratories) C:\windows\system32\DDPA64F3.dll
2015-10-31 18:52 - 2014-10-24 09:12 - 05234952 _____ (Nahimic Inc) C:\windows\system32\NAHIMICAPOlfx.dll
2015-10-31 18:52 - 2014-10-24 09:12 - 00995120 _____ (Nahimic Inc) C:\windows\system32\NahimicAPONSControl.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 07087448 _____ (Dolby Laboratories) C:\windows\system32\DDPP64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 01939800 _____ (Dolby Laboratories) C:\windows\system32\DDPD64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 00315736 _____ (Dolby Laboratories) C:\windows\system32\DDPO64A.dll
2015-10-31 18:52 - 2014-09-24 10:31 - 00261464 _____ (Dolby Laboratories) C:\windows\system32\DDPA64.dll
2015-10-31 18:52 - 2014-06-09 09:59 - 00560328 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAC64.dll
2015-10-31 18:52 - 2014-05-22 15:24 - 00096568 _____ C:\windows\system32\audioLibVc.dll
2015-10-31 18:52 - 2014-04-10 11:19 - 02041432 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioEQ64.dll
2015-10-31 18:52 - 2014-01-31 16:27 - 01313904 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxSpeechAPO64.dll
2015-10-31 18:52 - 2013-10-11 11:47 - 00113576 _____ (Real Sound Lab SIA) C:\windows\system32\CONEQMSAPOGUILibrary.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00501184 _____ (DTS) C:\windows\system32\DTSU2PLFX64.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00487360 _____ (DTS) C:\windows\system32\DTSU2PGFX64.dll
2015-10-31 18:52 - 2013-10-06 23:26 - 00415680 _____ (DTS) C:\windows\system32\DTSU2PREC64.dll
2015-10-31 18:52 - 2013-08-14 14:36 - 00662784 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVolumeSDAPO.dll
2015-10-31 18:52 - 2013-08-14 14:35 - 00663296 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO30.dll
2015-10-31 18:52 - 2013-07-23 14:39 - 14048512 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioRealtek64.dll
2015-10-31 18:52 - 2013-07-23 14:39 - 00922880 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPOShell64.dll
2015-10-31 18:52 - 2013-06-21 10:01 - 00109848 _____ C:\windows\system32\AcpiServiceVnA64.dll
2015-10-31 18:52 - 2013-04-03 13:13 - 00906800 _____ (Sony Corporation) C:\windows\system32\MISS_APO.dll
2015-10-31 18:52 - 2012-08-31 18:18 - 07164176 _____ (Dolby Laboratories) C:\windows\system32\R4EEP64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00434960 _____ (Dolby Laboratories) C:\windows\system32\R4EED64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00141584 _____ (Dolby Laboratories) C:\windows\system32\R4EEL64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00124176 _____ (Dolby Laboratories) C:\windows\system32\R4EEA64A.dll
2015-10-31 18:52 - 2012-08-31 18:17 - 00075024 _____ (Dolby Laboratories) C:\windows\system32\R4EEG64A.dll
2015-10-31 18:52 - 2012-03-08 10:47 - 00108640 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAR64.dll
2015-10-31 18:52 - 2011-08-23 16:00 - 00603984 _____ (Knowles Acoustics ) C:\windows\system32\KAAPORT64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01756264 _____ (DTS) C:\windows\system32\DTSS2SpeakerDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01568360 _____ (DTS) C:\windows\system32\DTSS2HeadphoneDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 01486952 _____ (DTS) C:\windows\system32\DTSBoostDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00728680 _____ (DTS) C:\windows\system32\DTSBassEnhancementDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00712296 _____ (DTS) C:\windows\system32\DTSSymmetryDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00693352 _____ (DTS) C:\windows\system32\DTSVoiceClarityDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00491112 _____ (DTS) C:\windows\system32\DTSNeoPCDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00432744 _____ (DTS) C:\windows\system32\DTSLimiterDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00428648 _____ (DTS) C:\windows\system32\DTSGainCompensatorDLL64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00242792 _____ (DTS) C:\windows\system32\DTSLFXAPO64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00242792 _____ (DTS) C:\windows\system32\DTSGFXAPO64.dll
2015-10-31 18:52 - 2011-05-31 08:42 - 00241768 _____ (DTS) C:\windows\system32\DTSGFXAPONS64.dll
2015-10-31 18:52 - 2010-09-27 08:34 - 00318808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO20.dll
2015-10-31 18:46 - 2015-10-31 18:50 - 131494359 _____ (Realtek Semiconductor Corp.) C:\Users\Jennifer\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279.exe
2015-10-31 17:32 - 2015-11-01 21:36 - 00000000 ____D C:\windows\pss
2015-10-31 11:06 - 2015-10-31 19:09 - 04263936 _____ C:\Users\Jennifer\Documents\Admin.evtx
2015-10-31 11:06 - 2015-10-31 11:06 - 00454891 _____ C:\Users\Jennifer\Documents\Admin.zip
2015-10-22 16:23 - 2015-10-22 16:23 - 00006435 _____ C:\Users\Jennifer\Downloads\Attached Message Part
2015-10-21 18:57 - 2015-10-31 18:35 - 00000000 ____D C:\aaa10216c4c7ddd9ed6d2e
2015-10-21 15:04 - 2015-10-31 18:34 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-19 22:34 - 2015-10-31 18:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 19:20 - 2015-09-18 14:22 - 00025432 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-10-14 19:20 - 2015-09-18 14:19 - 01291264 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00766464 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00700416 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-10-14 19:20 - 2015-09-18 14:19 - 00073216 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-10-14 19:20 - 2015-09-18 14:09 - 01163776 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-10-13 19:03 - 2015-09-18 14:31 - 00391784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-10-13 19:03 - 2015-09-18 13:58 - 00345688 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-10-13 19:03 - 2015-09-15 23:48 - 25851904 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-10-13 19:03 - 2015-09-15 23:36 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-10-13 19:03 - 2015-09-15 23:36 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-10-13 19:03 - 2015-09-15 23:22 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 02886656 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00585728 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-10-13 19:03 - 2015-09-15 23:21 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-10-13 19:03 - 2015-09-15 23:21 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-10-13 19:03 - 2015-09-15 23:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-10-13 19:03 - 2015-09-15 23:13 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-10-13 19:03 - 2015-09-15 23:10 - 00616960 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-10-13 19:03 - 2015-09-15 23:09 - 05990912 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-10-13 19:03 - 2015-09-15 23:08 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-10-13 19:03 - 2015-09-15 23:08 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-10-13 19:03 - 2015-09-15 23:01 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-10-13 19:03 - 2015-09-15 22:58 - 20357632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-10-13 19:03 - 2015-09-15 22:58 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-10-13 19:03 - 2015-09-15 22:50 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-10-13 19:03 - 2015-09-15 22:46 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-10-13 19:03 - 2015-09-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-10-13 19:03 - 2015-09-15 22:45 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-10-13 19:03 - 2015-09-15 22:43 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-10-13 19:03 - 2015-09-15 22:41 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-10-13 19:03 - 2015-09-15 22:33 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-10-13 19:03 - 2015-09-15 22:33 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-10-13 19:03 - 2015-09-15 22:32 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-10-13 19:03 - 2015-09-15 22:32 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-10-13 19:03 - 2015-09-15 22:31 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-10-13 19:03 - 2015-09-15 22:31 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-10-13 19:03 - 2015-09-15 22:29 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-10-13 19:03 - 2015-09-15 22:29 - 00720896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-10-13 19:03 - 2015-09-15 22:28 - 02279936 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-10-13 19:03 - 2015-09-15 22:28 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-10-13 19:03 - 2015-09-15 22:26 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-10-13 19:03 - 2015-09-15 22:26 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-10-13 19:03 - 2015-09-15 22:26 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-10-13 19:03 - 2015-09-15 22:24 - 00480256 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-10-13 19:03 - 2015-09-15 22:23 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-10-13 19:03 - 2015-09-15 22:22 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-10-13 19:03 - 2015-09-15 22:22 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-10-13 19:03 - 2015-09-15 22:22 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-10-13 19:03 - 2015-09-15 22:15 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-10-13 19:03 - 2015-09-15 22:11 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-10-13 19:03 - 2015-09-15 22:10 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-13 19:03 - 2015-09-15 22:07 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-10-13 19:03 - 2015-09-15 22:06 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-10-13 19:03 - 2015-09-15 22:05 - 04527616 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-10-13 19:03 - 2015-09-15 22:05 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-10-13 19:03 - 2015-09-15 22:04 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-10-13 19:03 - 2015-09-15 21:59 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-10-13 19:03 - 2015-09-15 21:58 - 12853760 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-10-13 19:03 - 2015-09-15 21:58 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-10-13 19:03 - 2015-09-15 21:56 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-10-13 19:03 - 2015-09-15 21:55 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-10-13 19:03 - 2015-09-15 21:55 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-10-13 19:03 - 2015-09-15 21:48 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-10-13 19:03 - 2015-09-15 21:37 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-10-13 19:03 - 2015-09-15 21:34 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-10-13 19:03 - 2015-09-15 21:32 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-10-13 19:01 - 2015-08-06 13:04 - 14176768 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-10-13 19:00 - 2015-08-06 13:03 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2015-10-13 19:00 - 2015-08-06 12:44 - 12875776 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2015-10-13 19:00 - 2015-08-06 12:44 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 03168768 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 02607104 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-10-13 18:58 - 2015-09-25 13:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-10-13 18:58 - 2015-09-25 13:06 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-10-13 18:58 - 2015-09-25 13:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-10-13 18:58 - 2015-09-25 13:06 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-10-13 18:58 - 2015-09-25 13:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-10-13 18:58 - 2015-09-25 12:59 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-10-13 18:58 - 2015-09-25 12:58 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-10-13 18:57 - 2015-09-28 22:16 - 05569472 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-10-13 18:57 - 2015-09-28 22:13 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-10-13 18:57 - 2015-09-28 22:11 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-10-13 18:57 - 2015-09-28 22:10 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-10-13 18:57 - 2015-09-28 22:10 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-10-13 18:57 - 2015-09-28 22:10 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-10-13 18:57 - 2015-09-28 22:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-10-13 18:57 - 2015-09-28 22:09 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 03990976 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 03936192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-10-13 18:57 - 2015-09-28 22:05 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-10-13 18:57 - 2015-09-28 22:05 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-10-13 18:57 - 2015-09-28 22:02 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 22:01 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-10-13 18:57 - 2015-09-28 21:59 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-10-13 18:57 - 2015-09-28 21:58 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-10-13 18:57 - 2015-09-28 21:58 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-10-13 18:57 - 2015-09-28 21:58 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-10-13 18:57 - 2015-09-28 21:58 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-10-13 18:57 - 2015-09-28 21:57 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-10-13 18:57 - 2015-09-28 21:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-10-13 18:57 - 2015-09-28 21:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 21:49 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:50 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-10-13 18:57 - 2015-09-28 20:49 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-10-13 18:57 - 2015-09-28 20:49 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-10-13 18:57 - 2015-09-28 20:43 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-10-13 18:57 - 2015-09-28 20:43 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-10-13 18:57 - 2015-09-28 20:40 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-13 18:57 - 2015-09-28 20:40 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-13 18:57 - 2015-09-15 13:17 - 00157016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-10-13 18:57 - 2015-09-15 13:17 - 00097112 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-10-13 18:57 - 2015-09-15 13:11 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-10-13 18:57 - 2015-09-15 13:11 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-10-13 18:57 - 2015-09-15 13:10 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-10-13 18:57 - 2015-09-15 12:36 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-10-13 18:57 - 2015-09-15 12:36 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-10-13 18:57 - 2015-09-15 12:36 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-10-13 18:57 - 2015-09-15 12:35 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-10-13 18:56 - 2015-10-01 13:06 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-10-13 18:56 - 2015-10-01 13:04 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-10-13 18:56 - 2015-10-01 13:00 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-10-13 18:56 - 2015-10-01 13:00 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-10-13 18:56 - 2015-10-01 13:00 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-10-13 18:56 - 2015-10-01 12:50 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-10-13 18:56 - 2015-10-01 12:00 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-10-13 18:54 - 2015-07-18 08:08 - 00984448 _____ (Microsoft Corporation) C:\windows\system32\ucrtbase.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00901264 _____ (Microsoft Corporation) C:\windows\SysWOW64\ucrtbase.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00066400 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00063840 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00022368 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00020832 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00019808 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00017760 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00016224 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00015712 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00014176 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00013664 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012640 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00012128 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-13 18:54 - 2015-07-18 08:08 - 00011616 _____ (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-2-0.dll
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-02 16:44 - 2010-07-29 16:53 - 01437054 _____ C:\windows\WindowsUpdate.log
2015-11-02 16:38 - 2010-09-19 09:00 - 00000898 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-02 16:35 - 2015-06-19 16:10 - 00000930 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA.job
2015-11-02 16:31 - 2009-07-13 23:45 - 00018736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-02 16:31 - 2009-07-13 23:45 - 00018736 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-02 16:26 - 2010-10-06 22:56 - 00000000 ____D C:\Users\Jennifer\AppData\Local\Adobe
2015-11-02 16:25 - 2012-04-21 20:45 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-11-01 22:14 - 2012-02-12 08:55 - 00000000 ____D C:\ProgramData\Yahoo!
2015-11-01 22:14 - 2012-02-12 08:53 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-11-01 21:37 - 2010-09-19 09:00 - 00000894 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-01 18:55 - 2012-02-27 21:04 - 00000000 ____D C:\windows\Minidump
2015-11-01 18:55 - 2009-11-13 13:12 - 00000000 ____D C:\windows\Panther
2015-11-01 18:35 - 2015-06-19 16:10 - 00000878 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core.job
2015-11-01 18:18 - 2009-07-14 00:13 - 00006214 _____ C:\windows\system32\PerfStringBackup.INI
2015-11-01 18:16 - 2012-11-04 21:09 - 00000000 ___RD C:\Users\Jennifer\Dropbox
2015-11-01 18:16 - 2012-11-04 21:07 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Dropbox
2015-11-01 18:12 - 2009-07-14 00:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-11-01 14:15 - 2014-02-09 22:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-11-01 14:15 - 2010-10-06 19:48 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-11-01 14:11 - 2010-10-06 19:48 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-11-01 13:17 - 2009-07-13 22:20 - 00000000 ____D C:\windows\rescache
2015-11-01 12:44 - 2015-02-04 14:00 - 00000000 ____D C:\AdwCleaner
2015-11-01 12:44 - 2012-02-12 08:55 - 00000000 ____D C:\Users\Jennifer\AppData\Roaming\Yahoo!
2015-11-01 12:44 - 2012-02-12 08:55 - 00000000 ____D C:\Users\Jennifer\AppData\LocalLow\Yahoo!
2015-11-01 12:28 - 2013-11-12 20:05 - 00004184 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-11-01 12:21 - 2010-07-29 17:11 - 00000000 ____D C:\windows\SysWOW64\RTCOM
2015-10-31 19:26 - 2015-02-06 22:01 - 00113880 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-31 19:11 - 2011-04-27 21:25 - 00111104 ___SH C:\Users\Jennifer\Documents\Thumbs.db
2015-10-31 18:55 - 2010-07-29 17:11 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-10-31 18:35 - 2012-12-26 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PANTONE COLORVISION
2015-10-31 18:35 - 2012-12-26 17:51 - 00000000 ____D C:\Program Files (x86)\PANTONE COLORVISION
2015-10-31 18:35 - 2012-04-26 21:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-31 18:35 - 2010-09-19 09:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-31 18:35 - 2009-11-12 21:50 - 00000000 ____D C:\ProgramData\Toshiba
2015-10-31 18:35 - 2009-07-13 22:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-10-31 18:34 - 2015-04-19 19:35 - 00000000 ___SD C:\windows\SysWOW64\GWX
2015-10-31 18:34 - 2015-04-19 19:35 - 00000000 ___SD C:\windows\system32\GWX
2015-10-31 18:34 - 2014-12-10 21:03 - 00000000 ____D C:\windows\system32\appraiser
2015-10-31 18:34 - 2014-08-27 22:41 - 00000000 ___SD C:\windows\system32\CompatTel
2015-10-31 18:34 - 2010-09-11 19:53 - 00000000 ____D C:\Users\Jennifer
2015-10-31 18:34 - 2009-07-13 22:20 - 00000000 ____D C:\windows\system32\NDF
2015-10-31 18:34 - 2009-07-13 22:20 - 00000000 ____D C:\windows\registration
2015-10-31 18:04 - 2009-07-14 00:08 - 00032612 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-10-23 19:32 - 2010-09-19 09:00 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-21 19:10 - 2013-08-19 22:58 - 00000000 ____D C:\windows\system32\MRT
2015-10-21 19:10 - 2011-06-16 23:18 - 143481208 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-10-21 19:07 - 2010-07-29 16:58 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-18 18:14 - 2009-07-14 00:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2015-10-16 22:01 - 2012-04-21 20:45 - 00780488 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 22:01 - 2012-04-21 20:45 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 22:01 - 2011-06-08 19:37 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
 
==================== Files in the root of some directories =======
 
2014-10-09 19:01 - 2014-10-09 19:01 - 0000038 _____ () C:\Users\Jennifer\AppData\Roaming\mbam.context.scan
2011-07-21 06:35 - 2013-07-09 17:54 - 0010752 _____ () C:\Users\Jennifer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-05-18 06:41 - 2013-07-06 13:31 - 0000083 ___SH () C:\ProgramData\.zreglib
2015-11-01 12:22 - 2015-11-01 12:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 
Some files in TEMP:
====================
C:\Users\Jennifer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3uy8v.dll
C:\Users\Jennifer\AppData\Local\Temp\GLB1A2B.EXE
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-11-01 13:09
 
==================== End of FRST.txt ============================
 
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-10-2015
Ran by Jennifer (2015-11-02 16:53:53)
Running from C:\Users\Jennifer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2010-09-12 00:53:52)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2790885812-1499487206-891857003-500 - Administrator - Disabled)
Guest (S-1-5-21-2790885812-1499487206-891857003-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2790885812-1499487206-891857003-1002 - Limited - Enabled)
Jennifer (S-1-5-21-2790885812-1499487206-891857003-1000 - Administrator - Enabled) => C:\Users\Jennifer
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Amazon Links (HKLM-x32\...\{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}) (Version: 2.02 - TOSHIBA Corporation)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.0.4.0 - SlySoft)
Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{A0880F03-8480-482E-1606-BC91669B0882}) (Version: 3.0.732.0 - ATI Technologies, Inc.)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.4.2233 - AVAST Software)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Black River Imaging (HKU\S-1-5-21-2790885812-1499487206-891857003-1000\...\Black River Imaging) (Version:  - Black River Imaging)
Blackhawk Striker 2 (x32 Version: 2.2.0.82 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
ccc-core-static (x32 Version: 2009.0729.2238.38827 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dropbox (HKU\S-1-5-21-2790885812-1499487206-891857003-1000\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Faerie Solitaire (x32 Version: 2.2.0.82 - WildTangent) Hidden
FATE Undiscovered Realms (x32 Version: 2.2.0.82 - WildTangent) Hidden
FlipShare (HKLM-x32\...\{B1C0D829-FE30-059E-E93F-CDC7A48235C0}) (Version: 5.6.35.0 - Flip Video)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Halsoft Virtual Places Chat (HKLM-x32\...\Halsoft Virtual Places Chat) (Version:  - Halsoft.com, Inc)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Label@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Monopoly (x32 Version: 2.2.0.82 - WildTangent) Hidden
Mozilla Firefox 41.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
Mystery P.I. - The Vegas Heist (x32 Version: 2.2.0.82 - WildTangent) Hidden
NetZero Launcher (HKLM-x32\...\{9AEAF9CC-390B-49C0-8F7F-14092BF163B6}) (Version: 2.01 - TOSHIBA Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{ED23E382-E5E3-4E21-B616-01FC59A40916}) (Version: 3.3.9567 - OpenOffice.org)
OverDrive Media Console (HKLM-x32\...\{D4AFC7AD-F637-4EDD-BC76-767E4AF78CE1}) (Version: 3.2.5 - OverDrive, Inc.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoTools 2.6.5 Professional Edition (HKLM-x32\...\{4744A01E-4B17-4643-A1FA-44FF83CB316D}) (Version: 2.6.5 - onOne Software)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Polar Bowler (x32 Version: 2.2.0.82 - WildTangent) Hidden
Quickbooks Financial Center (HKLM-x32\...\{3B843B38-04B1-4CE6-8888-586273E0F289}) (Version: 2.02 - TOSHIBA Corporation)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Realtek Ethernet Controller  Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0008 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30101 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0006 - Realtek)
Skype Launcher (HKLM-x32\...\{DA84ECBF-4B79-47F2-B34C-95C38484C058}) (Version: 2.01 - TOSHIBA Corporation)
Spyder2PRO (HKLM-x32\...\Spyder2PRO) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 13.2.6.1 - Synaptics Incorporated)
TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.0 - TOSHIBA)
TOSHIBA Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.10 - TOSHIBA)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{F64684A0-754B-4637-B7F9-6E8DAA8CD5CD}) (Version: 1.5.05.64 - TOSHIBA Corporation)
TOSHIBA ConfigFree (HKLM-x32\...\{F3529665-D75E-4D6D-98F0-745C78C68E9B}) (Version: 8.0.21 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.1 for x64 - TOSHIBA Corporation)
TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.01.0.07-A - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.1.7.64 - TOSHIBA Corporation)
TOSHIBA Extended Tiles for Windows Mobility Center (HKLM-x32\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version:  - )
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.0.64 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM-x32\...\{D0387727-C89D-4774-B643-B9333EAA09DE}) (Version: 2.00.11 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.2 - TOSHIBA Corporation)
TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.65 - TOSHIBA CORPORATION)
Toshiba Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.38 - Toshiba)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.4.1.64 - TOSHIBA Corporation)
TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.1 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{5BCC94A1-DEF1-4AB4-8046-BC13048E929A}) (Version: 1.5.07.64 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.33 - TOSHIBA)
TOSHIBA Speech System Applications (HKLM-x32\...\{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version: 1.00.2518 - )
TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM-x32\...\{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version:  - )
TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM-x32\...\{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version:  - )
TOSHIBA Supervisor Password (HKLM-x32\...\{A208044D-A88B-4ACF-AE95-E4F213E6EDC0}) (Version: 2.00.09 - TOSHIBA Corporation)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.2.26.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.4 - TOSHIBA Corporation)
ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.3 - Toshiba)
TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Virtual Families (x32 Version: 2.2.0.82 - WildTangent) Hidden
Virtual Villagers - The Secret City (x32 Version: 2.2.0.82 - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.80 - WildTangent)
WildTangent ORB Game Console (x32 Version:  - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2790885812-1499487206-891857003-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
 
==================== Restore Points =========================
 
29-10-2015 19:59:30 Windows Update
31-10-2015 18:02:30 Windows Update
31-10-2015 18:25:14 Restore Operation
31-10-2015 18:52:22 Installed Realtek High Definition Audio Driver
01-11-2015 22:15:57 Removed Adobe Media Player
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
 
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {487DF39A-ECF7-444A-95BC-0CA7E3563E5E} - System32\Tasks\{8971C5F8-8E85-4EC8-A46A-6924E4C7FBBF} => Chrome.exe 
Task: {523BF8AC-221B-415C-AFCE-10CA4E8C7572} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {623E74D8-0EBC-4381-83CA-036FE8D891B6} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16] (Adobe Systems Incorporated)
Task: {63524A19-00C5-4EB5-9BFD-5C1A8718942C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {6359AC1C-627F-4B92-8B24-BA6190782CFC} - System32\Tasks\avastBCLRestartS-1-5-21-2790885812-1499487206-891857003-1000 => Firefox.exe 
Task: {654DD55F-5508-4965-AD7E-C0C9C6456A0F} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2009-07-13] (TOSHIBA CORPORATION)
Task: {835A1FE4-9D76-4994-96BB-85D3420B370F} - System32\Tasks\{29DE8120-9E3D-4DC9-B24F-D5EC43B69DEB} => Chrome.exe 
Task: {92EFC611-0817-4FB7-8E7F-5BC3880BC562} - System32\Tasks\{07C77219-B427-48B8-87CE-A8B1E872CC6B} => Chrome.exe 
Task: {9DB21286-A47E-403D-BA44-C4E7B02F70ED} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {A2EBFC0B-3218-4914-AB13-16DB8A0028EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {A9898A07-F9C3-444A-858C-F729C19C2CDA} - System32\Tasks\AdobeAAMUpdater-1.0-Jennifer-PC-Jennifer => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {AC739587-7BD3-41BC-B2A9-D4968C468043} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {AF519074-5348-4B6B-9602-6BDE20294B1F} - System32\Tasks\{8BB1F361-08CA-493E-892C-E770FB83AF1F} => pcalua.exe -a C:\Users\Jennifer\Downloads\irfanview_plugins_433_setup.exe -d C:\Users\Jennifer\Downloads
Task: {B5946300-09F2-4D69-A788-C885301F53AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe
Task: {BED9568A-7FFE-44B6-B529-CE2ACF590DEA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000Core.job => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2790885812-1499487206-891857003-1000UA.job => C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2010-05-14 11:59 - 2010-05-14 11:59 - 00455944 _____ () C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe
2010-02-03 08:36 - 2010-02-03 08:36 - 00087488 _____ () C:\Program Files (x86)\SlySoft\AnyDVD\ADvdDiscHlp64.exe
2009-09-17 14:41 - 2009-09-17 14:41 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 00103376 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 00123976 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-11-01 12:30 - 2015-11-01 12:30 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110101\algo.dll
2015-11-02 16:27 - 2015-11-02 16:27 - 03014096 _____ () C:\Program Files\AVAST Software\Avast\defs\15110201\algo.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 01581056 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll
2010-05-14 11:49 - 2010-05-14 11:49 - 02519040 _____ () C:\Program Files (x86)\Flip Video\FlipShare\Core.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 00188416 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 00356352 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll
2010-05-14 11:38 - 2010-05-14 11:38 - 06443008 _____ () C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll
2010-05-14 11:41 - 2010-05-14 11:41 - 00708608 _____ () C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll
2015-11-01 18:14 - 2015-11-01 18:14 - 00071168 _____ () c:\users\jennifer\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3uy8v.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00012800 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-06-19 16:12 - 2015-09-23 18:07 - 00779776 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00056320 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-21 15:04 - 2015-09-23 18:07 - 00012288 _____ () C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2011-01-17 15:19 - 2011-04-21 20:17 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2015-10-31 20:03 - 2015-10-31 20:03 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
2015-10-23 19:32 - 2015-10-20 09:08 - 16493384 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Windows:nlsPreferences
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2790885812-1499487206-891857003-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Jennifer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\Services: avast! Antivirus => 2
MSCONFIG\Services: AvastVBoxSvc => 3
MSCONFIG\startupfolder: C:^Users^Jennifer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Jennifer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeBridge => "C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe" -stealth
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AnyDVD => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe
MSCONFIG\startupreg: AvastUI.exe => "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Jennifer\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" UNATTENDED
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{D6A680DC-CD7F-4F65-A2B5-1D77EE1B4630}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{04DE2063-CDF9-46D0-A2B6-57FF03B9C51F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{BA7D41C0-7F2C-4B1E-9E17-B24D900AF785}] => (Allow) svchost.exe
FirewallRules: [{360A97C1-7022-4AF2-8830-B32EB56D7910}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{1CAAC2DA-2FC8-4F31-94F6-F20B7D94F8CA}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{04E73A95-302B-4680-8CD8-F24E2E62443B}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{E4894E97-0E7D-4B8C-91E5-8DB2E07148B1}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Block) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{B6455A4F-8BC3-44E3-8C84-F98CB51A582E}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Block) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{63B4344A-6F21-4496-AA48-4A6BC7990F47}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{D74958C3-9BA7-473E-937F-EE305D86A074}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{F19DC113-991D-40CB-934D-0C2CC7CCE854}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{DF3F7002-0A62-4899-9316-A41DA038AF9C}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{4455B994-F557-4795-B879-869186065D99}] => (Allow) C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{13A2BC17-D86F-4676-BDDC-E488F4A087D9}] => (Allow) C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{6FCC32BB-1134-41EF-91BB-8CECBF4CC01E}] => (Allow) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F5DFA6EC-26A8-4899-BCC1-609D185C5FCA}] => (Allow) C:\Users\Jennifer\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{5EABF6EB-F853-40A8-9C81-8373853F7E03}C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{A4BA9E9B-51D3-4CD9-9D04-1D6817950741}C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jennifer\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{E534E364-FA53-4623-9EEB-2D135D9AD350}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{89114C12-FAD1-4ED6-8BA2-E2ABB3F8FCFD}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{10D8F934-C168-447F-8A8D-68B729938E8F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B0FD4A5-AAC9-4967-93B6-3FFA270E402E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54BD4142-C1F6-4602-83F3-F795AF57639C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8046226B-FFF0-4A6C-9BF2-1BF349F8E6C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9B6F040D-7334-4E8F-A7CB-CFC0584EFB28}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{28BE8F39-B9F0-4521-A7DC-051E917403E5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D2EC093A-923E-43FE-B011-E0DD7B722753}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{61331AA0-5B1E-4E81-8B7D-116BEAEDBDF2}] => (Allow) C:\Program Files\iTunes\iTunes.exe
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 09:12:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (11/01/2015 06:18:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (11/01/2015 06:18:30 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (11/01/2015 05:37:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
Error: (11/01/2015 05:37:10 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
 
Error: (11/01/2015 12:51:33 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
 
 
System errors:
=============
Error: (11/02/2015 04:25:42 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 09:09:51 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 06:20:58 PM) (Source: atapi) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort1.
 
Error: (11/01/2015 06:12:18 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
 
Error: (11/01/2015 06:12:18 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:09:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
Error: (11/01/2015 06:07:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error: 
%%1068
 
 
==================== Memory info =========================== 
 
Processor: AMD Turion™ II Dual-Core Mobile M500
Percentage of memory in use: 57%
Total physical RAM: 3836.17 MB
Available physical RAM: 1644.94 MB
Total Virtual: 7670.54 MB
Available Virtual: 5176.83 MB
 
==================== Drives ================================
 
Drive c: (TI105736W0B) (Fixed) (Total:281.25 GB) (Free:183.13 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive f: () (Removable) (Total:7.39 GB) (Free:7.05 GB) FAT32
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 00F66ECC)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=281.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.4 GB) - (Type=17)
 
========================================================
Disk: 1 (Size: 7.4 GB) (Disk ID: 00000000)
 
Partition: GPT.
 
==================== End of Addition.txt ============================
 
 


#4 Jo*

Jo*

  • Malware Response Team
  • 3,417 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:08:37 AM

Posted 02 November 2015 - 06:19 PM

double post

user gets help at http://www.bleepingcomputer.com/forums/t/595146/i-was-directed-here-from-another-bleepingcomputer-forum-as-malware-is-still-here/

Graduate of the WTT Classroom
Cheers,
Jo
If I have been helping you, and I have not replied to your latest post in 36 hours please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users