Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unknown Virus / Recovering corrupt word docs


  • This topic is locked This topic is locked
3 replies to this topic

#1 yamafan

yamafan

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:17 AM

Posted 27 February 2016 - 05:06 PM

Any help appreciated.   I opened a resume sent to me via pop mail / outlook....I realized fairly quickly that it was a virus but by then my word and excel docs were corrupt.   I saved the files anyways...Have completed a reformat / reinstall of Win 10 64b and have the corrput files on a thumb drive.   I have downloaded and paid for endless word apps that promise to recover corrupr files.....Stellar Phoenix excel repair pulled back some of my excel docs....Their word application did nothing....   All of the word docs have weird names and extensions...I have tried opening and repairing using word but again nothing...Any help is very very much appreciated!    

 

 

 

 

 

 

   

  Log is as per the following: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:27-02-2016 Ran by Mark Bould (administrator) on DESKTOP-EMU0JFG (27-02-2016 15:45:48) Running from C:\Users\Mark Bould\Downloads Loaded Profiles: Mark Bould (Available Profiles: Mark Bould) Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: Edge) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/   ==================== Processes (Whitelisted) =================   (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)   (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe () C:\Windows\System32\nvwmi64.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe (Intel Corporation) C:\Windows\syswow64\IntelCpHeciSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Lenovo Group Limited) C:\Program Files\Lenovo\iMController\Service\Lenovo.Modern.ImController.exe (Lenovo Group Limited) C:\Program Files\Lenovo\InstantOn\InstantOnSrv.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (SupportSoft, Inc.) C:\Program Files (x86)\smartagent\bin\sprtsvc.exe (Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (SupportSoft, Inc.) C:\Program Files (x86)\smartagent\bin\tgsrvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe (Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.8.203.0\McCSPServiceHost.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.201.11370.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Oracle Corporation) C:\Program Files (x86)\LightspeedEVO\jre\bin\javaw.exe (Oracle Corporation) C:\Program Files (x86)\LightspeedEVO\jre\bin\java.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe () C:\Windows\System32\nvwmi64.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe (Lenovo Group Limited) C:\Program Files\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\Supportability\MVT\MvtApp.exe (Microsoft Corporation) C:\Windows\syswow64\SearchProtocolHost.exe (Farbar) C:\Users\Mark Bould\Downloads\FRST64 (2).exe   ==================== Registry (Whitelisted) ===========================   (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)   HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [210176 2015-07-30] (Realtek Semiconductor Corp.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1795120 2016-01-22] (NVIDIA Corporation) HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [555736 2015-06-16] (Lenovo.) HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2171960 2016-01-22] () HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-06] (Intel Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation) HKU\S-1-5-21-1495282399-2212904817-2081605098-1001\...\RunOnce: [Uninstall C:\Users\Mark Bould\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Bould\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64" CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION   ==================== Internet (Whitelisted) ====================   (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)   Tcpip\Parameters: [DhcpNameServer] 71.10.216.1 71.10.216.2 Tcpip\..\Interfaces\{a2649016-a141-4209-8dd0-0ef1a395d927}: [DhcpNameServer] 192.168.0.1 8.8.8.8 Tcpip\..\Interfaces\{cb5a781d-637e-49c2-a6bf-ca69df4229f6}: [DhcpNameServer] 71.10.216.1 71.10.216.2   Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1495282399-2212904817-2081605098-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1495282399-2212904817-2081605098-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE HKU\S-1-5-21-1495282399-2212904817-2081605098-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/ HKU\S-1-5-21-1495282399-2212904817-2081605098-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://mystart.lenovo.com/ SearchScopes: HKLM -> DefaultScope {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms} SearchScopes: HKLM -> {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms} SearchScopes: HKU\S-1-5-21-1495282399-2212904817-2081605098-1001 -> DefaultScope {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms} SearchScopes: HKU\S-1-5-21-1495282399-2212904817-2081605098-1001 -> {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms} SearchScopes: HKU\S-1-5-21-1495282399-2212904817-2081605098-1001 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-04] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation) BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-28] (Oracle Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation) BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-28] (Oracle Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2016-01-08] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2016-01-08] (McAfee, Inc.) StartMenuInternet: IEXPLORE.EXE - iexplore.exe   FireFox: ======== FF ProfilePath: C:\Users\Mark Bould\AppData\Roaming\Mozilla\Firefox\Profiles\yca5ci1u.default FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-01-08] () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-28] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-28] (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-01-08] () FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [2015-11-09] (McAfee, Inc.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-01-22] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-01-22] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-04] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-04] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-02-16] [not signed] StartMenuInternet: FIREFOX.EXE - firefox.exe   ==================== Services (Whitelisted) ========================   (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)   R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) R2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [165104 2015-06-18] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [350312 2015-07-29] (Intel Corporation) R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [36808 2016-01-29] (Lenovo Group Limited) S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-21] (Intel® Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [223008 2015-07-06] (Intel Corporation) R2 Lenovo Instant On; C:\Program Files\Lenovo\InstantOn\InstantOnSrv.exe [3204080 2014-08-28] (Lenovo Group Limited) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-09-04] (Lenovo) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [863448 2016-01-08] (McAfee, Inc.) S3 McAWFwk; C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [338208 2015-03-19] (McAfee, Inc.) R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.8.203.0\McCSPServiceHost.exe [1694152 2015-12-02] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [681680 2016-01-08] (McAfee, Inc.) S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [234192 2015-11-18] (McAfee, Inc.) R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [380896 2016-01-21] (McAfee, Inc.) R3 mfevtp; C:\Windows\system32\mfevtps.exe [275368 2015-11-18] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [453520 2016-01-03] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-07-09] () R2 NVWMI; C:\Windows\system32\nvwmi64.exe [3163072 2016-01-22] () R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [902112 2015-12-14] (Intel Security, Inc.) R2 sprtsvc_smartagent; C:\Program Files (x86)\smartagent\bin\sprtsvc.exe [206120 2011-06-28] (SupportSoft, Inc.) S3 SSSvc; C:\Program Files (x86)\SmartSense\SSSvc.exe [119512 2015-07-22] (Lenovo) S2 SupportSoft RemoteAssist; C:\Program Files (x86)\Common Files\supportsoft\bin\ssrc.exe [329080 2011-06-28] (SupportSoft, Inc.) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255096 2015-11-26] (Synaptics Incorporated) R2 tgsrvc_smartagent; C:\Program Files (x86)\smartagent\bin\tgsrvc.exe [214344 2011-06-28] (SupportSoft, Inc.) R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [77832 2015-12-03] (Synaptics Incorporated) R2 valWbioSyncSvc; C:\Windows\system32\valWbioSyncSvc.exe [48136 2015-12-03] (Synaptics Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-07-09] (Intel® Corporation)   ===================== Drivers (Whitelisted) ==========================   (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)   R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [79248 2015-11-25] (McAfee, Inc.) R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [530928 2015-07-13] (Intel Corporation) R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.) R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [266512 2015-12-03] (Intel Corporation) R1 InstantOn; C:\Program Files\Lenovo\InstantOn\InstantOn.sys [25856 2014-02-03] (Lenovo Group Limited) R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [88256 2015-06-09] (Intel Corporation) R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184096 2015-06-29] (Intel Corporation) R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2015-11-25] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [351144 2015-11-25] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496368 2015-11-25] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [846080 2015-11-25] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [539496 2015-11-20] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109480 2015-11-20] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [245096 2015-11-25] (McAfee, Inc.) R3 Netwtw02; C:\Windows\System32\drivers\Netwtw02.sys [7030040 2015-07-16] (Intel Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [752856 2015-05-28] (Realsil Semiconductor Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3075328 2015-07-30] (Realtek Semiconductor Corp.) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [50808 2015-12-03] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [51320 2015-11-26] (Synaptics Incorporated) R1 SMIDriver; C:\Windows\system32\DRIVERS\smi.sys [28400 2015-12-03] (Windows ® Win 7 DDK provider) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S3 VeriFoneV; \SystemRoot\System32\Drivers\VFIUSBF.sys [X] S3 VfiEnmV; \SystemRoot\System32\drivers\VfiEnmV.sys [X] S3 VfiLFlV; \SystemRoot\System32\drivers\VfiLFlV.sys [X]   ==================== NetSvcs (Whitelisted) ===================   (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)   ==================== One Month Created files and folders ========   (If an entry is included in the fixlist, the file/folder will be moved.)   2016-02-27 15:45 - 2016-02-27 15:46 - 00022820 _____ C:\Users\Mark Bould\Downloads\FRST.txt 2016-02-27 15:45 - 2016-02-27 15:45 - 02371072 _____ (Farbar) C:\Users\Mark Bould\Downloads\FRST64.exe 2016-02-27 15:45 - 2016-02-27 15:45 - 02371072 _____ (Farbar) C:\Users\Mark Bould\Downloads\FRST64 (2).exe 2016-02-27 15:45 - 2016-02-27 15:45 - 02371072 _____ (Farbar) C:\Users\Mark Bould\Downloads\FRST64 (1).exe 2016-02-27 15:45 - 2016-02-27 15:45 - 00000000 ____D C:\FRST 2016-02-27 15:40 - 2016-02-27 15:40 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\McAfee 2016-02-27 15:38 - 2016-02-27 15:38 - 00211312 _____ (McAfee, Inc.) C:\Users\Mark Bould\Downloads\mvt.exe 2016-02-27 15:33 - 2016-01-28 13:03 - 00016812 _____ C:\Users\Mark Bould\Desktop\4ofvyulj.4xp 2016-02-27 15:05 - 2016-02-27 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2016-02-27 14:48 - 2016-02-27 14:48 - 00001249 _____ C:\Users\Mark Bould\Desktop\Word Repair Toolbox.lnk 2016-02-27 14:48 - 2016-02-27 14:48 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Word Repair Toolbox 2016-02-27 14:48 - 2016-02-27 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word Repair Toolbox 2016-02-27 14:48 - 2016-02-27 14:48 - 00000000 ____D C:\Program Files (x86)\Word Repair Toolbox 2016-02-27 14:47 - 2016-02-27 14:47 - 03519952 _____ (Recovery Toolbox, Inc. ) C:\Users\Mark Bould\Downloads\WordRepairToolbox-download2-Install.exe 2016-02-27 10:59 - 2016-02-27 15:44 - 00004020 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse 2016-02-27 10:59 - 2016-02-27 15:04 - 00004208 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse 2016-02-27 10:19 - 2016-02-27 10:19 - 00389767 _____ C:\Users\Mark Bould\Desktop\DOC2.jpeg 2016-02-27 10:19 - 2016-02-27 10:18 - 00537693 _____ C:\Users\Mark Bould\Desktop\DOC1.jpeg 2016-02-27 08:56 - 2016-02-27 10:38 - 00009044 _____ C:\Users\Mark Bould\Desktop\Slidellsvc.xlsx 2016-02-26 17:22 - 2016-02-27 13:58 - 00000000 ____D C:\Users\Mark Bould\Desktop\2016 Sportsman show 2016-02-26 15:57 - 2016-02-26 15:57 - 00012010 _____ C:\Users\Mark Bould\Desktop\RO46784_HARRISON_14384290_1456523822263.pdf 2016-02-26 14:59 - 2016-02-26 14:59 - 00001870 _____ C:\Users\Mark Bould\Downloads\PartInvoiceQuote0_Thorne_1456237708386.pdf 2016-02-26 14:11 - 2016-02-26 14:11 - 00013353 _____ C:\Users\Mark Bould\Desktop\Friendly New Slidell.xlsx 2016-02-26 12:40 - 2016-02-26 12:40 - 00013101 _____ C:\Users\Mark Bould\Desktop\Friendly Powersports.xlsx 2016-02-25 15:32 - 2016-02-25 15:32 - 00071332 _____ C:\Users\Mark Bould\AppData\Local\recently-used.xbel 2016-02-23 14:41 - 2016-02-23 14:41 - 00147968 _____ C:\Users\Mark Bould\Downloads\Friendly Powersports_12_01_2015 to12_31_2015 23_59.xls 2016-02-23 14:32 - 2016-02-23 14:32 - 00001995 _____ C:\Users\Mark Bould\Desktop\PartInvoiceQuote0_Holland_1456259529975.pdf 2016-02-23 14:29 - 2016-02-23 14:29 - 00001996 _____ C:\Users\Mark Bould\Desktop\PartInvoiceQuote0_Holland_1456259321903.pdf 2016-02-23 08:28 - 2016-02-23 08:28 - 00001870 _____ C:\Users\Mark Bould\Desktop\PartInvoiceQuote0_Thorne_1456237708386.pdf 2016-02-20 13:09 - 2016-02-20 13:09 - 00000035 _____ C:\Users\Mark Bould\Desktop\lic.txt 2016-02-20 13:07 - 2013-07-06 09:29 - 667924879 _____ C:\Users\Mark Bould\Desktop\en_office_professional_plus_2007.zip 2016-02-20 11:15 - 2016-02-20 11:15 - 00162816 _____ C:\Users\Mark Bould\Desktop\Write Up.xlsx 2016-02-20 09:38 - 2016-02-20 09:38 - 00108693 _____ C:\Users\Mark Bould\Downloads\16_Spring_Rancher_2.99_APR_500BB_Radio (3).pdf 2016-02-19 16:23 - 2016-02-19 16:23 - 01224992 _____ C:\Users\Mark Bould\Downloads\fh 30.mp3.mo96njy.partial 2016-02-18 10:10 - 2016-02-19 17:14 - 17879415 _____ C:\Users\Mark Bould\Documents\DDAY.xcf 2016-02-18 10:07 - 2016-02-18 10:07 - 00455982 _____ C:\Users\Mark Bould\Downloads\SS_bullet_holes.zip 2016-02-18 09:45 - 2016-02-18 09:45 - 00294312 _____ C:\Users\Mark Bould\Downloads\dark_underground.zip 2016-02-18 09:45 - 2016-02-18 09:45 - 00198034 _____ C:\Users\Mark Bould\Downloads\28_days_later.zip 2016-02-18 09:44 - 2016-02-18 09:44 - 00232189 _____ C:\Users\Mark Bould\Downloads\steelfish.zip 2016-02-18 09:44 - 2016-02-18 09:44 - 00071649 _____ C:\Users\Mark Bould\Downloads\couture.zip 2016-02-18 09:43 - 2016-02-18 09:43 - 00213293 _____ C:\Users\Mark Bould\Downloads\true_lies.zip 2016-02-18 09:43 - 2016-02-18 09:43 - 00053034 _____ C:\Users\Mark Bould\Downloads\batman_forever.zip 2016-02-18 09:43 - 2016-02-18 09:43 - 00034975 _____ C:\Users\Mark Bould\Downloads\photographs.zip 2016-02-18 09:42 - 2016-02-18 09:42 - 00009112 _____ C:\Users\Mark Bould\Downloads\badaboom_bb.zip 2016-02-18 09:40 - 2016-02-18 09:41 - 00283321 _____ C:\Users\Mark Bould\Downloads\d_day_stencil.zip 2016-02-17 16:05 - 2016-02-17 16:05 - 00108693 _____ C:\Users\Mark Bould\Downloads\16_Spring_Rancher_2.99_APR_500BB_Radio (2).pdf 2016-02-17 15:57 - 2016-02-27 10:43 - 00000000 ____D C:\Users\Mark Bould\Desktop\Radio 2016-02-17 15:52 - 2016-02-17 15:52 - 00108552 _____ C:\Users\Mark Bould\Downloads\16_Spring_Foreman_2.99_APR_500BB_Radio.pdf 2016-02-17 12:40 - 2016-02-17 12:41 - 00000000 ____D C:\Users\Mark Bould\Desktop\Bailey 2016-02-16 16:18 - 2016-02-16 16:18 - 00000000 ____D C:\Users\Mark Bould\Desktop\Employment offers 2016-02-16 13:45 - 2016-02-16 13:45 - 00122485 _____ C:\Users\Mark Bould\Desktop\lhead.jpeg 2016-02-16 13:43 - 2016-02-27 10:19 - 00000000 ___RD C:\Users\Mark Bould\Documents\Scanned Documents 2016-02-16 13:43 - 2016-02-16 13:43 - 00000000 ____D C:\Users\Mark Bould\Documents\Fax 2016-02-16 10:32 - 2016-02-16 10:32 - 10945144 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\Mark Bould\Downloads\StellarFileRepairToolKit (2).exe 2016-02-16 09:20 - 2016-02-16 09:20 - 24497816 _____ (Remo Software ) C:\Users\Mark Bould\Downloads\recover-windows (1).exe 2016-02-16 09:19 - 2016-02-16 09:19 - 08223968 _____ ( ) C:\Users\Mark Bould\Downloads\repair-doc.exe 2016-02-16 09:19 - 2016-02-16 09:19 - 08223968 _____ ( ) C:\Users\Mark Bould\Downloads\repair-doc (1).exe 2016-02-16 09:15 - 2009-02-12 15:11 - 00026024 _____ (EldoS Corporation) C:\WINDOWS\system32\Drivers\rsdrvx64.sys 2016-02-16 09:14 - 2016-02-16 09:15 - 24497816 _____ (Remo Software ) C:\Users\Mark Bould\Downloads\recover-windows.exe 2016-02-16 09:04 - 2016-02-16 09:05 - 01020848 _____ (File Repair ) C:\Users\Mark Bould\Downloads\file-repair-setup.exe 2016-02-12 16:07 - 2016-02-16 10:43 - 00000000 ____D C:\ProgramData\Wondershare 2016-02-12 16:07 - 2016-02-16 10:43 - 00000000 ____D C:\Program Files (x86)\Wondershare 2016-02-12 16:07 - 2016-02-12 16:07 - 00805448 _____ C:\Users\Mark Bould\Downloads\data-recovery-bing_setup_full829 (1).exe 2016-02-12 16:07 - 2016-02-12 16:07 - 00000000 ____D C:\Users\Mark Bould\Documents\My Data Files 2016-02-12 16:07 - 2016-02-12 16:07 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Wondershare 2016-02-12 16:06 - 2016-02-12 16:06 - 00805448 _____ C:\Users\Mark Bould\Downloads\data-recovery-bing_setup_full829.exe 2016-02-12 16:06 - 2016-02-12 16:06 - 00000000 ____D C:\Users\Public\Documents\Wondershare 2016-02-12 15:57 - 2016-02-12 15:57 - 09946016 _____ ( ) C:\Users\Mark Bould\Downloads\yodot-doc-repair (3).exe 2016-02-11 16:23 - 2016-02-11 16:23 - 03479688 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\Mark Bould\Downloads\StellarPhoenixExcelRepair (1).exe 2016-02-11 15:27 - 2016-02-11 15:27 - 36178952 _____ (That's Us Technologies, Inc.) C:\Users\Mark Bould\Downloads\rockit-setup-32-2.1.22783.exe 2016-02-11 15:27 - 2016-02-11 15:27 - 00000000 ____D C:\Program Files (x86)\Rockit 2016-02-11 12:26 - 2016-02-11 12:26 - 00128886 _____ C:\Users\Mark Bould\Desktop\365314c993985690c55674138bfdb063x.xcf 2016-02-10 10:13 - 2016-02-10 10:14 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-02-10 10:13 - 2016-02-10 10:13 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-02-10 09:15 - 2016-01-26 23:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-02-10 09:15 - 2016-01-26 23:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-02-10 09:15 - 2016-01-26 23:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-02-10 09:15 - 2016-01-26 22:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-02-10 09:15 - 2016-01-16 00:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-02-10 09:15 - 2016-01-16 00:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-02-10 09:15 - 2016-01-15 23:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-02-10 09:15 - 2016-01-15 23:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-02-10 09:15 - 2016-01-15 23:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-02-10 09:15 - 2016-01-15 23:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-02-10 09:15 - 2016-01-15 23:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-02-10 09:14 - 2016-01-29 00:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-02-10 09:14 - 2016-01-29 00:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-02-10 09:14 - 2016-01-27 00:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-02-10 09:14 - 2016-01-27 00:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-02-10 09:14 - 2016-01-27 00:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-02-10 09:14 - 2016-01-27 00:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-02-10 09:14 - 2016-01-27 00:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-02-10 09:14 - 2016-01-26 23:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2016-02-10 09:14 - 2016-01-26 23:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-02-10 09:14 - 2016-01-26 23:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2016-02-10 09:14 - 2016-01-26 23:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2016-02-10 09:14 - 2016-01-26 23:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-02-10 09:14 - 2016-01-26 23:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-02-10 09:14 - 2016-01-26 23:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2016-02-10 09:14 - 2016-01-26 23:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-02-10 09:14 - 2016-01-26 23:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-02-10 09:14 - 2016-01-26 23:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-02-10 09:14 - 2016-01-26 23:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-02-10 09:14 - 2016-01-26 23:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-02-10 09:14 - 2016-01-26 23:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2016-02-10 09:14 - 2016-01-26 23:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-02-10 09:14 - 2016-01-26 23:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-02-10 09:14 - 2016-01-26 23:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-02-10 09:14 - 2016-01-26 23:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-02-10 09:14 - 2016-01-26 23:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll 2016-02-10 09:14 - 2016-01-26 23:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-02-10 09:14 - 2016-01-26 23:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-02-10 09:14 - 2016-01-26 23:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-02-10 09:14 - 2016-01-26 23:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2016-02-10 09:14 - 2016-01-26 23:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-02-10 09:14 - 2016-01-26 23:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll 2016-02-10 09:14 - 2016-01-26 23:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll 2016-02-10 09:14 - 2016-01-26 23:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-02-10 09:14 - 2016-01-26 23:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-02-10 09:14 - 2016-01-26 23:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-02-10 09:14 - 2016-01-26 23:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-02-10 09:14 - 2016-01-26 23:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-02-10 09:14 - 2016-01-26 23:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2016-02-10 09:14 - 2016-01-26 23:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2016-02-10 09:14 - 2016-01-26 23:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-02-10 09:14 - 2016-01-26 22:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll 2016-02-10 09:14 - 2016-01-26 22:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-02-10 09:14 - 2016-01-26 22:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-02-10 09:14 - 2016-01-26 22:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-02-10 09:14 - 2016-01-26 22:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-02-10 09:14 - 2016-01-26 22:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-02-10 09:14 - 2016-01-26 22:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-02-10 09:14 - 2016-01-26 22:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-02-10 09:14 - 2016-01-26 22:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-02-10 09:14 - 2016-01-26 22:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-02-10 09:14 - 2016-01-26 22:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-02-10 09:14 - 2016-01-26 22:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2016-02-10 09:14 - 2016-01-26 22:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-02-10 09:14 - 2016-01-26 22:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-02-10 09:14 - 2016-01-26 22:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-02-10 09:14 - 2016-01-26 22:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-02-10 09:14 - 2016-01-26 22:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-02-10 09:14 - 2016-01-26 22:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-02-10 09:14 - 2016-01-26 22:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-02-10 09:14 - 2016-01-26 22:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-02-10 09:14 - 2016-01-26 22:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2016-02-10 09:14 - 2016-01-16 00:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2016-02-10 09:14 - 2016-01-16 00:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-02-10 09:14 - 2016-01-16 00:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-02-10 09:14 - 2016-01-16 00:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-02-10 09:14 - 2016-01-16 00:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2016-02-10 09:14 - 2016-01-16 00:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-02-10 09:14 - 2016-01-16 00:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-02-10 09:14 - 2016-01-16 00:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-02-10 09:14 - 2016-01-16 00:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-02-10 09:14 - 2016-01-16 00:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-02-10 09:14 - 2016-01-16 00:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2016-02-10 09:14 - 2016-01-16 00:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-02-10 09:14 - 2016-01-16 00:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2016-02-10 09:14 - 2016-01-16 00:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2016-02-10 09:14 - 2016-01-16 00:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-02-10 09:14 - 2016-01-16 00:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2016-02-10 09:14 - 2016-01-16 00:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-02-10 09:14 - 2016-01-16 00:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-02-10 09:14 - 2016-01-16 00:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-02-10 09:14 - 2016-01-16 00:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2016-02-10 09:14 - 2016-01-15 23:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-02-10 09:14 - 2016-01-15 23:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-02-10 09:14 - 2016-01-15 23:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll 2016-02-10 09:14 - 2016-01-15 23:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll 2016-02-10 09:14 - 2016-01-15 23:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll 2016-02-10 09:14 - 2016-01-15 23:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-02-10 09:14 - 2016-01-15 23:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll 2016-02-10 09:14 - 2016-01-15 23:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-02-10 09:14 - 2016-01-15 23:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll 2016-02-10 09:14 - 2016-01-15 23:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2016-02-10 09:14 - 2016-01-15 23:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe 2016-02-10 09:14 - 2016-01-15 23:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll 2016-02-10 09:14 - 2016-01-15 23:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-02-10 09:14 - 2016-01-15 23:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll 2016-02-10 09:14 - 2016-01-15 23:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2016-02-10 09:14 - 2016-01-15 23:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-02-10 09:14 - 2016-01-15 23:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-02-10 09:14 - 2016-01-15 23:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2016-02-10 09:14 - 2016-01-15 23:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2016-02-10 09:14 - 2016-01-15 23:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-02-10 09:14 - 2016-01-15 23:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll 2016-02-10 09:14 - 2016-01-15 23:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-02-10 09:14 - 2016-01-15 23:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll 2016-02-10 09:14 - 2016-01-15 23:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll 2016-02-10 09:14 - 2016-01-15 23:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-02-10 09:14 - 2016-01-15 23:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll 2016-02-10 09:14 - 2016-01-15 23:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2016-02-10 09:14 - 2016-01-15 23:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2016-02-10 09:14 - 2016-01-15 23:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2016-02-10 09:14 - 2016-01-15 23:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-02-10 09:14 - 2016-01-15 23:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll 2016-02-10 09:14 - 2016-01-15 23:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2016-02-10 09:14 - 2016-01-15 23:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2016-02-10 09:14 - 2016-01-15 23:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-02-10 09:14 - 2016-01-15 23:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2016-02-10 09:14 - 2016-01-15 23:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2016-02-10 09:14 - 2016-01-15 23:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-02-10 09:14 - 2016-01-15 23:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2016-02-10 09:14 - 2016-01-15 23:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-02-10 09:14 - 2016-01-15 23:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-02-10 09:14 - 2016-01-15 23:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe 2016-02-10 09:14 - 2016-01-15 23:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-02-10 09:14 - 2016-01-15 23:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-02-10 09:14 - 2016-01-15 23:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-02-10 09:14 - 2016-01-15 23:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll 2016-02-10 09:14 - 2016-01-15 23:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2016-02-10 09:14 - 2016-01-15 23:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-02-10 09:14 - 2016-01-15 23:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-02-10 09:14 - 2016-01-15 23:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-02-10 09:14 - 2016-01-15 23:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-02-10 09:14 - 2016-01-15 23:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2016-02-10 09:14 - 2016-01-15 23:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll 2016-02-10 09:14 - 2016-01-15 23:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-02-10 09:14 - 2016-01-15 23:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2016-02-10 09:14 - 2016-01-15 23:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-02-10 09:14 - 2016-01-15 23:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll 2016-02-10 09:14 - 2016-01-15 23:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-02-10 09:14 - 2016-01-15 23:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2016-02-10 09:14 - 2016-01-15 23:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2016-02-10 09:14 - 2016-01-15 23:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll 2016-02-10 09:14 - 2016-01-15 23:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2016-02-10 09:14 - 2016-01-15 23:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2016-02-10 09:14 - 2016-01-15 23:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-02-10 09:14 - 2016-01-15 23:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-02-10 09:14 - 2016-01-15 23:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-02-10 09:14 - 2016-01-15 23:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-02-10 09:14 - 2016-01-15 23:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-02-10 09:14 - 2016-01-15 23:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-02-10 09:14 - 2016-01-15 23:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-02-10 09:14 - 2016-01-15 23:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2016-02-10 09:14 - 2016-01-15 23:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2016-02-10 09:14 - 2016-01-15 23:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-02-10 09:14 - 2016-01-15 23:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll 2016-02-10 09:14 - 2016-01-15 23:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-02-10 09:14 - 2016-01-15 23:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-02-10 09:14 - 2016-01-15 23:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-02-10 09:14 - 2016-01-15 23:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-02-10 09:14 - 2016-01-15 23:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-02-10 09:14 - 2016-01-15 23:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-02-10 09:14 - 2016-01-15 23:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-02-10 09:14 - 2016-01-15 23:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2016-02-10 09:14 - 2016-01-04 20:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-02-10 09:14 - 2016-01-04 20:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-02-10 09:14 - 2016-01-04 20:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-02-10 09:14 - 2016-01-04 20:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-02-10 09:14 - 2016-01-04 20:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-02-10 09:14 - 2016-01-04 20:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-02-10 09:14 - 2016-01-04 20:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-02-10 09:14 - 2016-01-04 20:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-02-10 09:14 - 2016-01-04 20:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-02-10 09:14 - 2016-01-04 20:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-02-10 09:14 - 2016-01-04 20:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-02-10 09:14 - 2016-01-04 20:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-02-10 09:14 - 2016-01-04 20:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-02-10 09:14 - 2016-01-04 20:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-02-10 09:14 - 2016-01-04 20:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-02-10 09:14 - 2016-01-04 20:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-02-10 09:14 - 2016-01-04 20:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-02-10 09:14 - 2016-01-04 20:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-02-10 09:14 - 2016-01-04 20:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-02-10 09:14 - 2016-01-04 20:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-02-10 09:14 - 2016-01-04 20:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-02-10 09:14 - 2016-01-04 20:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-02-10 09:14 - 2016-01-04 20:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-02-10 09:14 - 2016-01-04 20:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-02-10 09:14 - 2016-01-04 20:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-02-10 09:14 - 2016-01-04 20:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-02-10 09:14 - 2016-01-04 20:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-02-10 09:14 - 2016-01-04 19:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll 2016-02-10 09:14 - 2016-01-04 19:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-02-10 09:14 - 2016-01-04 19:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2016-02-10 09:14 - 2016-01-04 19:54 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys 2016-02-10 09:14 - 2016-01-04 19:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-02-10 09:14 - 2016-01-04 19:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx 2016-02-10 09:14 - 2016-01-04 19:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-02-10 09:14 - 2016-01-04 19:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll 2016-02-10 09:14 - 2016-01-04 19:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-02-10 09:14 - 2016-01-04 19:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2016-02-10 09:14 - 2016-01-04 19:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-02-10 09:14 - 2016-01-04 19:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-02-10 09:14 - 2016-01-04 19:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-02-10 09:14 - 2016-01-04 19:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2016-02-10 09:14 - 2016-01-04 19:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll 2016-02-10 09:14 - 2016-01-04 19:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-02-10 09:14 - 2016-01-04 19:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-02-10 09:14 - 2016-01-04 19:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-02-10 09:14 - 2016-01-04 19:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-02-10 09:14 - 2016-01-04 19:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-02-10 09:14 - 2016-01-04 19:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-02-10 09:14 - 2016-01-04 19:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-02-10 09:14 - 2016-01-04 19:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2016-02-10 09:14 - 2016-01-04 19:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx 2016-02-10 09:14 - 2016-01-04 19:43 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2016-02-10 09:14 - 2016-01-04 19:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-02-10 09:14 - 2016-01-04 19:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-02-10 09:14 - 2016-01-04 19:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-02-10 09:14 - 2016-01-04 19:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-02-10 09:14 - 2016-01-04 19:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-02-10 09:14 - 2016-01-04 19:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2016-02-10 09:14 - 2016-01-04 19:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-02-10 09:14 - 2016-01-04 19:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll 2016-02-10 09:14 - 2016-01-04 19:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-02-10 09:14 - 2016-01-04 19:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-02-10 09:14 - 2016-01-04 19:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-02-10 09:14 - 2016-01-04 19:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-02-10 09:14 - 2016-01-04 19:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-02-10 09:14 - 2016-01-04 19:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-02-10 09:14 - 2016-01-04 19:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-02-10 09:14 - 2016-01-04 19:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-02-10 09:13 - 2015-12-06 22:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-02-10 09:13 - 2015-12-06 22:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-02-10 09:13 - 2015-12-06 22:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-02-10 09:13 - 2015-12-06 21:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-02-10 09:13 - 2015-12-06 21:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-02-10 09:13 - 2015-12-06 21:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-02-10 09:13 - 2015-12-06 21:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-02-10 09:13 - 2015-11-24 04:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2016-02-10 09:13 - 2015-11-24 03:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll 2016-02-10 09:13 - 2015-11-24 03:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-02-10 09:13 - 2015-11-24 02:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-02-10 09:13 - 2015-11-24 02:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2016-02-10 09:13 - 2015-11-22 04:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-02-10 09:13 - 2015-11-22 04:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-02-10 09:13 - 2015-11-22 04:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll 2016-02-10 09:13 - 2015-11-22 03:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll 2016-02-10 09:13 - 2015-11-22 03:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll 2016-02-10 09:13 - 2015-11-22 03:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll 2016-02-10 09:13 - 2015-11-22 03:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2016-02-10 09:13 - 2015-11-22 03:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll 2016-02-10 09:13 - 2015-11-22 03:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll 2016-02-10 09:13 - 2015-11-22 03:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2016-02-10 09:13 - 2015-11-22 03:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll 2016-02-10 09:13 - 2015-11-22 03:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll 2016-02-10 09:13 - 2015-11-22 03:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-02-10 09:13 - 2015-11-22 03:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-02-10 09:13 - 2015-11-22 03:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll 2016-02-10 09:13 - 2015-11-22 03:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll 2016-02-10 09:13 - 2015-11-22 03:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll 2016-02-10 09:13 - 2015-11-22 03:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll 2016-02-10 09:13 - 2015-11-22 03:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll 2016-02-10 09:13 - 2015-11-22 03:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll 2016-02-10 09:13 - 2015-11-22 03:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2016-02-10 09:13 - 2015-11-22 03:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll 2016-02-10 09:13 - 2015-11-22 03:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll 2016-02-10 09:13 - 2015-11-22 03:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-02-10 09:13 - 2015-11-22 03:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-02-10 09:13 - 2015-11-22 03:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-02-10 09:13 - 2015-11-22 03:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-02-10 09:13 - 2015-11-22 03:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2016-02-10 09:13 - 2015-11-22 03:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll 2016-02-10 09:13 - 2015-11-22 03:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-02-10 09:13 - 2015-11-22 03:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-02-10 09:13 - 2015-11-22 03:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-02-10 09:13 - 2015-11-22 03:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2016-02-10 09:13 - 2015-11-13 00:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-02-10 09:13 - 2015-11-13 00:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll 2016-02-10 09:13 - 2015-11-12 23:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-02-10 09:13 - 2015-11-12 23:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll 2016-02-10 09:13 - 2015-11-12 23:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll 2016-02-10 09:13 - 2015-11-12 23:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-02-10 09:13 - 2015-11-12 23:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe 2016-02-10 09:07 - 2016-02-10 09:07 - 00000000 ____D C:\ProgramData\Intel Security 2016-02-10 09:06 - 2016-02-10 09:06 - 00000000 ____D C:\Program Files\Common Files\Intel Security 2016-02-09 16:15 - 2016-02-09 16:28 - 00403851 _____ C:\Users\Mark Bould\Desktop\template.xcf 2016-02-09 13:43 - 2016-02-09 13:43 - 00071315 _____ C:\Users\Mark Bould\Downloads\FENCE-PERMIT-APPLICATION.pdf 2016-02-09 11:32 - 2016-02-09 11:32 - 00022075 _____ C:\Users\Mark Bould\Downloads\maillist.xls 2016-02-09 10:48 - 2016-02-09 10:49 - 00144155 _____ C:\Users\Mark Bould\Downloads\PowerOfLeads20160209084854.csv 2016-02-09 10:47 - 2016-02-09 10:47 - 00073767 _____ C:\Users\Mark Bould\Downloads\PowerOfLeads20160209084743.csv 2016-02-09 10:40 - 2016-02-09 10:40 - 00072330 _____ C:\Users\Mark Bould\Downloads\PowerOfLeads20160209084039.csv 2016-02-09 10:32 - 2016-02-09 10:32 - 00000449 _____ C:\Users\Mark Bould\Downloads\sample.csv 2016-02-09 10:16 - 2016-02-09 10:16 - 00123585 _____ C:\Users\Mark Bould\Downloads\requests (1).csv 2016-02-09 09:59 - 2016-02-09 09:59 - 00021781 _____ C:\Users\Mark Bould\Downloads\requests.csv 2016-02-09 09:57 - 2016-02-09 09:57 - 00000961 _____ C:\Users\Mark Bould\Downloads\customers (2).csv 2016-02-09 09:49 - 2016-02-09 09:49 - 00415622 _____ C:\Users\Mark Bould\Downloads\allLeads.csv 2016-02-09 08:58 - 2016-02-09 09:00 - 00018085 _____ C:\Users\Mark Bould\Downloads\customers (1).csv 2016-02-09 08:35 - 2016-02-09 08:35 - 00018085 _____ C:\Users\Mark Bould\Downloads\customers.csv 2016-02-06 12:59 - 2016-02-06 12:59 - 09946016 _____ ( ) C:\Users\Mark Bould\Downloads\yodot-doc-repair (2).exe 2016-02-06 12:50 - 2016-02-06 12:52 - 10945144 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\Mark Bould\Downloads\StellarFileRepairToolKit (1).exe 2016-02-06 12:44 - 2016-02-06 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Repair ToolKit 2016-02-06 12:44 - 2016-02-06 12:52 - 00000000 ____D C:\Program Files (x86)\Repair ToolKit 2016-02-06 12:44 - 2016-02-06 12:44 - 10945144 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\Mark Bould\Downloads\StellarFileRepairToolKit.exe 2016-02-06 12:39 - 2016-02-06 12:39 - 09946016 _____ ( ) C:\Users\Mark Bould\Downloads\yodot-doc-repair.exe 2016-02-06 12:39 - 2016-02-06 12:39 - 09946016 _____ ( ) C:\Users\Mark Bould\Downloads\yodot-doc-repair (1).exe 2016-02-06 12:18 - 2016-02-06 12:18 - 07028888 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\Mark Bould\Downloads\StellarPhoenixWordRepair.exe 2016-02-06 12:07 - 2016-02-06 12:07 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_388_Repaired_65_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:07 - 2016-02-06 12:07 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_387_Repaired_64_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_386_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_385_Repaired_197_Repaired_65_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_384_Repaired_196_Repaired_64_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_383_Repaired_195_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_382_Repaired_194_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_381_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 11:45 - 2016-02-06 11:45 - 00010529 _____ C:\Users\Mark Bould\Desktop\Repaired_59_Ranking.xlsx 2016-02-06 10:38 - 2016-02-06 10:38 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_197_Repaired_65_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 10:38 - 2016-02-06 10:38 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_196_Repaired_64_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 10:38 - 2016-02-06 10:38 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_195_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 10:38 - 2016-02-06 10:38 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_194_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 10:13 - 2016-02-06 10:13 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_65_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 10:13 - 2016-02-06 10:13 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_64_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 10:10 - 2016-02-06 10:10 - 00010529 _____ C:\Users\Mark Bould\Desktop\store ranking.xlsx 2016-02-06 10:07 - 2016-02-06 10:07 - 00148480 _____ C:\Users\Mark Bould\Downloads\Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 09:53 - 2016-02-16 10:42 - 00000000 ____D C:\ProgramData\TEMP 2016-02-06 09:53 - 2016-02-06 09:53 - 05280392 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\Mark Bould\Downloads\StellarPhoenixExcelRepair.exe 2016-02-05 17:47 - 2016-02-05 17:47 - 00000000 ____D C:\Users\Mark Bould\AppData\LocalLow\Adobe 2016-02-05 17:47 - 2016-02-05 17:47 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\CEF 2016-02-05 17:45 - 2016-02-05 17:45 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-02-05 17:44 - 2016-02-20 08:26 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-02-05 17:43 - 2016-02-05 17:43 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-02-05 17:42 - 2016-02-05 17:48 - 00000000 ____D C:\ProgramData\Adobe 2016-02-05 17:40 - 2016-02-05 17:47 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Adobe 2016-02-04 17:38 - 2016-02-04 17:38 - 00398325 _____ C:\Users\Mark Bould\Desktop\HONDABANNER16.xcf 2016-02-04 17:12 - 2016-02-12 15:58 - 00009886 _____ C:\Users\Mark Bould\Desktop\Honda.xlsx 2016-02-04 15:25 - 2016-02-25 15:32 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\gtk-2.0 2016-02-04 08:13 - 2016-02-04 08:13 - 00000000 ____D C:\Users\Mark Bould\AppData\LocalLow\Google 2016-02-04 08:12 - 2016-02-04 08:12 - 00002240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk 2016-02-04 08:11 - 2016-02-27 15:16 - 00000938 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-04 08:11 - 2016-02-27 10:44 - 00000934 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-04 08:11 - 2016-02-04 08:12 - 00000000 ____D C:\Program Files (x86)\Google 2016-02-04 08:11 - 2016-02-04 08:11 - 00987728 _____ (Google Inc.) C:\Users\Mark Bould\Downloads\GoogleEarthSetup.exe 2016-02-04 08:11 - 2016-02-04 08:11 - 00003996 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-04 08:11 - 2016-02-04 08:11 - 00003764 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-04 08:11 - 2016-02-04 08:11 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Google 2016-02-03 17:58 - 2016-02-03 16:27 - 00023274 _____ C:\Users\Mark Bould\Desktop\sttammany.pdf 2016-02-03 12:26 - 2016-02-03 12:26 - 02365304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfUpdate_01011.dll 2016-02-03 11:59 - 2016-02-03 11:59 - 00000000 ____D C:\Users\Mark Bould\.thumbnails 2016-02-03 11:52 - 2016-02-25 17:32 - 00000000 ____D C:\Users\Mark Bould\.gimp-2.8 2016-02-03 11:52 - 2016-02-03 11:52 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\gegl-0.2 2016-02-03 11:52 - 2016-02-03 11:52 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\fontconfig 2016-02-03 11:48 - 2016-02-03 11:48 - 00000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-02-03 11:47 - 2016-02-03 11:48 - 00000000 ____D C:\Program Files\GIMP 2 2016-02-03 11:39 - 2016-02-03 11:47 - 96819488 _____ (The GIMP Team ) C:\Users\Mark Bould\Downloads\gimp-2.8.16-setup.exe 2016-02-02 16:21 - 2016-02-17 12:33 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Evolution 2016-02-02 16:20 - 2016-02-27 15:47 - 00000179 _____ C:\Users\Mark Bould\lightspeed.properties 2016-02-02 16:19 - 2016-02-27 11:47 - 00000000 ____D C:\Program Files (x86)\LightspeedEVO 2016-02-02 16:15 - 2015-10-01 08:47 - 00010240 _____ C:\Users\Mark Bould\AppData\Local\Z@!-799ca424-ae1e-439b-a378-c64dfff86b44.tmp 2016-02-02 16:15 - 2015-10-01 08:47 - 00009216 _____ C:\Users\Mark Bould\AppData\Local\Z@S!-562a306c-728c-40d8-b38b-bf0ec394e79d.tmp 2016-02-02 13:20 - 2016-02-02 13:20 - 00148480 _____ C:\Users\Mark Bould\Downloads\Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-02 12:04 - 2016-02-02 12:10 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Mozilla 2016-02-02 12:04 - 2016-02-02 12:04 - 00001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-02-02 12:04 - 2016-02-02 12:04 - 00001227 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-02-02 12:04 - 2016-02-02 12:04 - 00000344 __RSH C:\ProgramData\ntuser.pol 2016-02-02 12:04 - 2016-02-02 12:04 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Mozilla 2016-02-02 12:04 - 2016-02-02 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-02-02 12:04 - 2016-02-02 12:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-02-02 12:03 - 2016-02-27 15:04 - 00000340 _____ C:\WINDOWS\Tasks\UpdaterEX.job 2016-02-02 12:03 - 2016-02-06 12:46 - 00000000 ____D C:\Program Files (x86)\360 2016-02-02 12:03 - 2016-02-02 12:03 - 00242000 _____ C:\Users\Mark Bould\Downloads\Firefox Setup Stub 44.0.exe 2016-02-02 12:03 - 2016-02-02 12:03 - 00002822 _____ C:\WINDOWS\System32\Tasks\UpdaterEX 2016-02-02 12:03 - 2016-02-02 12:03 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\UpdaterEX 2016-02-02 12:02 - 2016-02-02 12:02 - 01062288 _____ (Installer web ) C:\Users\Mark Bould\Downloads\Firefox_Setup.exe 2016-02-02 12:02 - 2016-02-02 12:02 - 00243408 _____ C:\Users\Mark Bould\Downloads\Firefox_Setup_38.0.exe 2016-02-02 08:39 - 2016-02-02 08:39 - 00012821 _____ C:\Users\Mark Bould\Desktop\Copy of 12-19-15 THRU 01-18-16.xlsx 2016-02-01 12:03 - 2016-02-03 11:01 - 00000000 ____D C:\WINDOWS\DatacapControls 2016-02-01 12:03 - 2016-02-01 12:03 - 00000000 ____D C:\ProgramData\{36711BA3-C67B-4C8B-8E14-3AE5D0F25F08} 2016-02-01 12:03 - 2016-02-01 12:03 - 00000000 ____D C:\Program Files\Verifone 2016-02-01 09:03 - 2016-02-02 09:06 - 00002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2016-02-01 09:02 - 2016-02-01 09:02 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2016-01-31 10:11 - 2016-01-31 10:11 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\CDK 2016-01-29 16:04 - 2016-01-29 16:04 - 00000000 ____D C:\Users\Mark Bould\Documents\Custom Office Templates 2016-01-29 14:01 - 2016-01-29 14:01 - 00099885 _____ C:\Users\Mark Bould\Downloads\5B5C173706B0B247892FCB2B9FFDE22D.pdf 2016-01-29 14:00 - 2016-01-29 14:00 - 00072808 _____ C:\Users\Mark Bould\Downloads\F2E6115316B3E74F88F714254E066053.pdf 2016-01-29 13:18 - 2016-01-29 13:18 - 00108693 _____ C:\Users\Mark Bould\Downloads\16_Spring_Rancher_2.99_APR_500BB_Radio (1).pdf 2016-01-29 13:17 - 2016-01-29 13:17 - 00108693 _____ C:\Users\Mark Bould\Downloads\16_Spring_Rancher_2.99_APR_500BB_Radio.pdf 2016-01-29 13:08 - 2016-01-29 13:08 - 00082969 _____ C:\Users\Mark Bould\Downloads\MY13_60_30_ATVFleet_Rancher_Radio_Scripts.pdf 2016-01-29 12:58 - 2016-01-29 12:58 - 00062804 _____ C:\Users\Mark Bould\Downloads\NYSE MTC_ATV_SxS Radio.pdf 2016-01-29 10:53 - 2016-02-10 09:08 - 00003122 _____ C:\WINDOWS\System32\Tasks\McAfeeLogon 2016-01-29 10:53 - 2016-02-10 09:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee 2016-01-29 10:49 - 2016-01-29 10:49 - 00000000 ____D C:\Program Files\Common Files\AV 2016-01-28 18:11 - 2016-01-29 16:25 - 00000000 ____D C:\ProgramData\Lenovo 2016-01-28 18:11 - 2016-01-28 18:11 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2016-01-28 18:11 - 2016-01-28 18:11 - 00000000 ____D C:\WINDOWS\InfusedApps 2016-01-28 18:11 - 2016-01-28 18:11 - 00000000 _____ C:\Recovery.txt 2016-01-28 18:11 - 2016-01-28 16:32 - 00000000 ___DC C:\WINDOWS\Panther 2016-01-28 18:11 - 2015-05-12 10:57 - 00043256 _____ C:\WINDOWS\system32\oemlogo.bmp 2016-01-28 18:10 - 2016-01-28 15:13 - 00000000 ____D C:\Program Files\Synaptics 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\winrm 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\0409 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\Setup 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\DigitalLocker 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\Program Files\Reference Assemblies 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\Program Files\MSBuild 2016-01-28 18:09 - 2016-01-28 18:09 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2016-01-28 18:09 - 2016-01-28 16:45 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-01-28 18:09 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2016-01-28 18:09 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2016-01-28 18:09 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\system32\WCN 2016-01-28 18:09 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\system32\slmgr 2016-01-28 18:09 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\OCR 2016-01-28 18:07 - 2016-02-27 10:45 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-01-28 18:07 - 2016-02-27 10:44 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-01-28 18:07 - 2016-02-26 07:57 - 00000000 ___HD C:\Program Files\WindowsApps 2016-01-28 18:07 - 2016-02-11 14:15 - 00000000 ____D C:\WINDOWS\rescache 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ___SD C:\WINDOWS\system32\F12 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\Provisioning 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-01-28 18:07 - 2016-02-11 14:00 - 00000000 ____D C:\Program Files\Windows Journal 2016-01-28 18:07 - 2016-02-10 09:09 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-01-28 18:07 - 2016-02-06 12:07 - 00000000 ____D C:\WINDOWS\ShellNew 2016-01-28 18:07 - 2016-02-03 13:01 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-01-28 18:07 - 2016-02-03 13:01 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-01-28 18:07 - 2016-02-02 12:04 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2016-01-28 18:07 - 2016-01-29 08:35 - 00000000 ____D C:\WINDOWS\appcompat 2016-01-28 18:07 - 2016-01-28 18:11 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ___SD C:\WINDOWS\system32\dsc 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\setup 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\MUI 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\migwiz 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\system32\Com 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\Program Files\Windows Defender 2016-01-28 18:07 - 2016-01-28 18:09 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 __SHD C:\Program Files\Windows Sidebar 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___SD C:\WINDOWS\system32\Nui 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ___RD C:\WINDOWS\DesktopTileResources 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\Vss 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\tracing 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\TAPI 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SystemResources 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SystemApps 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\winevt 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\ras 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\IME 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\icsxml 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\ias 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\downlevel 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\System 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SKB 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\security 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\schemas 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\SchCache 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\Resources 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\PLA 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\Performance 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\ModemLogs 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\L2Schemas 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\InputMethod 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\Globalization 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\Cursors 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\Branding 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\addins 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\ProgramData\Comms 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files\Windows NT 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files\Common Files\Services 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files (x86)\Windows NT 2016-01-28 18:07 - 2016-01-28 18:07 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2016-01-28 18:07 - 2016-01-28 18:06 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2016-01-28 18:07 - 2016-01-28 18:06 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2016-01-28 18:07 - 2016-01-28 18:06 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2016-01-28 18:07 - 2016-01-28 18:06 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2016-01-28 18:07 - 2016-01-28 18:06 - 00015462 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2016-01-28 18:07 - 2016-01-28 18:06 - 00008798 _____ C:\WINDOWS\SysWOW64\icrav03.rat 2016-01-28 18:07 - 2016-01-28 18:06 - 00008798 _____ C:\WINDOWS\system32\icrav03.rat 2016-01-28 18:07 - 2016-01-28 18:06 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2016-01-28 18:07 - 2016-01-28 18:06 - 00001988 _____ C:\WINDOWS\SysWOW64\ticrf.rat 2016-01-28 18:07 - 2016-01-28 18:06 - 00001988 _____ C:\WINDOWS\system32\ticrf.rat 2016-01-28 18:07 - 2016-01-28 18:06 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2016-01-28 18:07 - 2016-01-28 18:06 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2016-01-28 18:07 - 2016-01-28 18:06 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2016-01-28 18:07 - 2016-01-28 18:06 - 00000389 _____ C:\WINDOWS\system32\AutoWorkplace.exe.config 2016-01-28 18:07 - 2016-01-28 17:38 - 00000000 ____D C:\WINDOWS\Help 2016-01-28 18:07 - 2016-01-28 17:07 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-01-28 18:07 - 2016-01-28 16:51 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2016-01-28 18:07 - 2016-01-28 16:35 - 00000000 ___RD C:\WINDOWS\PrintDialog 2016-01-28 18:07 - 2016-01-28 16:35 - 00000000 ___RD C:\WINDOWS\MiracastView 2016-01-28 18:07 - 2016-01-28 16:22 - 00000000 ____D C:\WINDOWS\Registration 2016-01-28 18:07 - 2016-01-28 15:22 - 00000000 __RSD C:\WINDOWS\Media 2016-01-28 18:07 - 2016-01-28 15:22 - 00000000 __RHD C:\Users\Public\Libraries 2016-01-28 18:07 - 2016-01-28 15:19 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2016-01-28 18:07 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2016-01-28 18:07 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\system32\spool 2016-01-28 18:07 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2016-01-28 18:07 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\IME 2016-01-28 18:07 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\CSC 2016-01-28 18:07 - 2016-01-28 15:16 - 00000000 ____D C:\ProgramData\USOPrivate 2016-01-28 18:07 - 2016-01-28 15:16 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2016-01-28 18:07 - 2016-01-28 15:16 - 00000000 ____D C:\Program Files\Common Files\System 2016-01-28 18:07 - 2016-01-28 15:16 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2016-01-28 18:07 - 2016-01-28 15:14 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-01-28 18:07 - 2016-01-28 15:13 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2016-01-28 18:07 - 2015-10-27 20:09 - 00000000 ____D C:\WINDOWS\Web 2016-01-28 18:06 - 2016-02-27 10:49 - 00000000 ____D C:\WINDOWS\INF 2016-01-28 18:03 - 2016-02-10 10:13 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-01-28 18:01 - 2016-02-27 10:44 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-01-28 18:01 - 2016-02-23 08:15 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-01-28 18:01 - 2016-01-28 18:09 - 00000000 ____D C:\WINDOWS\servicing 2016-01-28 18:01 - 2016-01-28 18:07 - 00000000 ____D C:\WINDOWS\system32\SMI 2016-01-28 18:01 - 2015-10-30 00:33 - 00000164 _____ C:\WINDOWS\system32\config\FP 2016-01-28 17:39 - 2016-01-22 18:47 - 00110016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2016-01-28 17:37 - 2016-01-28 17:37 - 00000000 ____D C:\NVIDIA 2016-01-28 17:37 - 2016-01-22 21:31 - 42983992 _____ C:\WINDOWS\system32\nvcompiler.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 37615040 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 31115712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 24941112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 21202488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 20741880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 19778944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 17632544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 17224664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 17174032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 17116616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 14114944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 03230824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 02543160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 02187712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 01924152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436175.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436175.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00948672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00882232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00786872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00745408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00689600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00632336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00423360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00378784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00377792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00316960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00175368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2016-01-28 17:37 - 2016-01-22 21:31 - 00153208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2016-01-28 17:34 - 2016-02-27 14:55 - 00004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C473B8D3-362E-41C5-8D76-D40BD89DF5F5} 2016-01-28 17:34 - 2016-01-28 17:34 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Sun 2016-01-28 17:34 - 2016-01-28 17:34 - 00000000 ____D C:\Users\Mark Bould\AppData\LocalLow\Sun 2016-01-28 17:34 - 2016-01-28 17:34 - 00000000 ____D C:\Users\Mark Bould\.oracle_jre_usage 2016-01-28 17:34 - 2016-01-28 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-01-28 17:34 - 2016-01-28 17:33 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-01-28 17:33 - 2016-01-28 17:35 - 00000000 ____D C:\ProgramData\Oracle 2016-01-28 17:33 - 2016-01-28 17:33 - 00000000 ____D C:\Program Files (x86)\Java 2016-01-28 17:32 - 2016-01-28 17:32 - 00643168 _____ (Oracle Corporation) C:\Users\Mark Bould\Downloads\JavaSetup8u71.exe 2016-01-28 17:32 - 2016-01-28 17:32 - 00000000 ____D C:\Users\Mark Bould\AppData\LocalLow\Oracle 2016-01-28 17:30 - 2016-01-28 17:30 - 00002243 _____ C:\Users\Public\Desktop\NETePay.lnk 2016-01-28 17:30 - 2016-01-28 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software from Datacap 2016-01-28 17:30 - 2016-01-28 17:30 - 00000000 ____D C:\ProgramData\{24507489-0FF2-4B28-BB9B-CD32968B8F28} 2016-01-28 17:30 - 2016-01-28 17:30 - 00000000 ____D C:\Program Files (x86)\Datacap Systems 2016-01-28 17:25 - 2016-01-28 17:25 - 00002703 _____ C:\Users\Public\Desktop\Emergency SC.lnk 2016-01-28 17:25 - 2016-01-28 17:25 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\ADP Software Install Agent.lnk 2016-01-28 17:25 - 2016-01-28 17:25 - 00002181 _____ C:\Users\Public\Desktop\ADP Software Install Agent.lnk 2016-01-28 17:25 - 2016-01-28 17:25 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\SupportSoft 2016-01-28 17:25 - 2016-01-28 17:25 - 00000000 ____D C:\Users\Mark Bould\.swt 2016-01-28 17:25 - 2016-01-28 17:25 - 00000000 ____D C:\ProgramData\SupportSoft 2016-01-28 17:25 - 2016-01-28 17:25 - 00000000 ____D C:\Program Files (x86)\smartagent 2016-01-28 17:18 - 2016-01-28 17:18 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf 2016-01-28 17:14 - 2016-01-28 17:39 - 00000000 ____D C:\temp 2016-01-28 17:13 - 2016-02-02 16:19 - 00001792 _____ C:\Users\Public\Desktop\Lightspeed EVO.lnk 2016-01-28 17:13 - 2016-01-28 17:13 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\PeerDistRepub 2016-01-28 17:08 - 2016-01-28 17:08 - 00002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk 2016-01-28 17:08 - 2016-01-28 17:08 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2016-01-28 17:08 - 2016-01-28 17:08 - 00002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2016-01-28 17:08 - 2016-01-28 17:08 - 00002462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2016-01-28 17:08 - 2016-01-28 17:08 - 00002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2016-01-28 17:08 - 2016-01-28 17:08 - 00002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2016-01-28 17:08 - 2016-01-28 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools 2016-01-28 17:07 - 2016-01-28 17:07 - 00000000 ____D C:\Program Files\Microsoft Office 15 2016-01-28 17:06 - 2016-01-28 17:06 - 03201216 _____ (Microsoft Corporation) C:\Users\Mark Bould\Downloads\Setup.X86.en-us_O365BusinessRetail_75f9e62b-f0ec-485e-a308-0bba660a4289_TX_PR_.exe 2016-01-28 16:48 - 2016-01-28 16:48 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Comms 2016-01-28 16:46 - 2016-01-29 08:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-01-28 16:45 - 2016-01-28 16:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Works 2016-01-28 16:45 - 2016-01-28 16:45 - 00000000 ____D C:\WINDOWS\PCHEALTH 2016-01-28 16:45 - 2016-01-28 16:45 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\LSC 2016-01-28 16:45 - 2016-01-28 16:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 2016-01-28 16:44 - 2016-01-28 16:44 - 00000000 ____D C:\Program Files\Microsoft Office 2016-01-28 16:44 - 2016-01-28 16:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8 2016-01-28 16:43 - 2016-01-28 16:46 - 00000000 ____D C:\WINDOWS\system32\appmgmt 2016-01-28 16:43 - 2016-01-28 16:43 - 00000000 __RHD C:\MSOCache 2016-01-28 16:43 - 2016-01-28 16:43 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Lenovo 2016-01-28 16:43 - 2016-01-28 16:43 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Microsoft Help 2016-01-28 16:41 - 2016-02-26 07:56 - 00001896 _____ C:\Users\Mark Bould\AppData\Roaming\Microsoft\Windows\Start Menu\REACHit Drive.lnk 2016-01-28 16:40 - 2016-02-26 07:56 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Downloaded Installations 2016-01-28 16:38 - 2016-01-28 16:39 - 244204216 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Mark Bould\Downloads\AVG_Antivirus_Business_x64_752.exe 2016-01-28 16:37 - 2016-02-11 08:58 - 00002389 _____ C:\Users\Mark Bould\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-01-28 16:37 - 2016-02-11 08:58 - 00000000 ___RD C:\Users\Mark Bould\OneDrive 2016-01-28 16:37 - 2016-01-28 16:37 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Macromedia 2016-01-28 16:36 - 2016-01-28 16:36 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\NVIDIA 2016-01-28 16:36 - 2016-01-28 16:36 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\NetworkTiles 2016-01-28 16:36 - 2016-01-28 16:36 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\MicrosoftEdge 2016-01-28 16:35 - 2016-02-04 07:54 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Lenovo 2016-01-28 16:35 - 2016-01-28 16:35 - 00000000 ____D C:\Users\Mark Bould\REACHit 2016-01-28 16:35 - 2016-01-28 16:35 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Publishers 2016-01-28 16:35 - 2016-01-28 16:35 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\ActiveSync 2016-01-28 16:34 - 2016-02-27 14:05 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\Packages 2016-01-28 16:34 - 2016-02-27 10:44 - 00000000 __SHD C:\Users\Mark Bould\IntelGraphicsProfiles 2016-01-28 16:34 - 2016-02-05 17:47 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Adobe 2016-01-28 16:34 - 2016-01-28 16:34 - 00000000 ____D C:\Users\Mark Bould\AppData\Roaming\Intel 2016-01-28 16:34 - 2016-01-28 16:34 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\VirtualStore 2016-01-28 16:34 - 2016-01-28 16:34 - 00000000 ____D C:\Users\Mark Bould\AppData\Local\TileDataLayer 2016-01-28 16:33 - 2016-02-03 11:59 - 00000000 ____D C:\Users\Mark Bould 2016-01-28 16:33 - 2016-01-28 16:33 - 00000020 ___SH C:\Users\Mark Bould\ntuser.ini 2016-01-28 16:33 - 2016-01-28 16:33 - 00000000 _SHDL C:\Users\Mark Bould\My Documents 2016-01-28 16:33 - 2016-01-28 16:33 - 00000000 _SHDL C:\Users\Mark Bould\Documents\My Videos 2016-01-28 16:33 - 2016-01-28 16:33 - 00000000 _SHDL C:\Users\Mark Bould\Documents\My Pictures 2016-01-28 16:33 - 2016-01-28 16:33 - 00000000 _SHDL C:\Users\Mark Bould\Documents\My Music 2016-01-28 15:59 - 2016-01-28 18:11 - 00000000 ___HD C:\$SysReset 2016-01-28 15:52 - 2016-02-06 11:54 - 00000000 ____D C:\Users\Mark Bould\Desktop\keep 2016-01-28 15:22 - 2016-01-28 15:22 - 00022744 _____ C:\WINDOWS\system32\emptyregdb.dat 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default\My Documents 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default\Documents\My Videos 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default\Documents\My Pictures 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default\Documents\My Music 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default User\Documents\My Videos 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default User\Documents\My Pictures 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default User\Documents\My Music 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\Default User 2016-01-28 15:22 - 2016-01-28 15:22 - 00000000 _SHDL C:\Users\All Users 2016-01-28 15:20 - 2016-01-28 15:20 - 00003342 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask 2016-01-28 15:20 - 2016-01-28 15:20 - 00003250 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_LENOVO_MICPKEY 2016-01-28 15:20 - 2016-01-28 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2016-01-28 15:20 - 2016-01-28 15:20 - 00000000 ____D C:\ProgramData\Brother 2016-01-28 15:20 - 2016-01-28 15:20 - 00000000 ____D C:\Program Files\Dolby Digital Plus 2016-01-28 15:20 - 2015-10-30 01:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2016-01-28 15:19 - 2016-02-27 10:44 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-01-28 15:19 - 2016-01-28 15:19 - 00003220 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_Dolby 2016-01-28 15:19 - 2016-01-28 15:19 - 00003194 _____ C:\WINDOWS\System32\Tasks\RTKCPL 2016-01-28 15:19 - 2016-01-28 15:19 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-01-28 15:16 - 2016-01-28 15:16 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2016-01-28 15:13 - 2016-02-27 10:44 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2016-01-28 15:13 - 2016-02-27 10:44 - 00000000 ____D C:\ProgramData\Synaptics 2016-01-28 15:13 - 2016-02-27 10:44 - 00000000 ____D C:\ProgramData\NVIDIA 2016-01-28 15:13 - 2016-01-28 17:39 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-01-28 15:13 - 2016-01-28 17:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-01-28 15:13 - 2016-01-28 15:19 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2016-01-28 15:13 - 2016-01-28 15:16 - 00000000 ____D C:\Intel 2016-01-28 15:13 - 2016-01-28 15:13 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2016-01-28 15:13 - 2016-01-28 15:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2016-01-28 15:13 - 2016-01-28 15:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf 2016-01-28 15:13 - 2016-01-28 15:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2016-01-28 15:13 - 2016-01-28 15:13 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2016-01-28 15:13 - 2016-01-28 15:13 - 00000000 ____D C:\WINDOWS\system32\DAX2 2016-01-28 15:13 - 2016-01-28 15:13 - 00000000 ____D C:\Program Files\Realtek 2016-01-28 15:13 - 2016-01-22 19:01 - 06366656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 02992064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 02563128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 01263040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-01-28 15:13 - 2016-01-22 19:01 - 00530368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 00123448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-01-28 15:13 - 2016-01-22 19:01 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-01-28 15:13 - 2016-01-21 20:06 - 06125650 _____ C:\WINDOWS\system32\nvcoproc.bin 2016-01-28 15:13 - 2015-07-29 14:32 - 00082432 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2016-01-28 15:12 - 2016-02-27 10:44 - 00346528 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-01-28 15:12 - 2016-01-28 15:16 - 00000000 ____D C:\Program Files\Intel 2016-01-28 15:12 - 2016-01-28 15:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2016-01-28 15:12 - 2016-01-28 15:12 - 00000000 ____D C:\WINDOWS\ServiceProfiles   ==================== One Month Modified files and folders ========   (If an entry is included in the fixlist, the file/folder will be moved.)   2016-02-27 15:39 - 2015-10-27 20:44 - 00000000 ____D C:\ProgramData\McAfee 2016-02-27 15:39 - 2015-10-27 20:44 - 00000000 ____D C:\Program Files (x86)\McAfee 2016-02-27 10:49 - 2015-07-16 09:54 - 00879220 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-02-27 10:44 - 2015-10-27 20:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-02-26 07:56 - 2015-10-27 20:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2016-02-11 14:22 - 2015-07-16 09:49 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-02-10 09:10 - 2015-10-27 20:44 - 00000000 ____D C:\Program Files\Common Files\McAfee 2016-02-03 15:26 - 2015-10-27 20:09 - 00256968 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll 2016-02-02 12:04 - 2015-07-10 05:04 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-01-28 17:39 - 2015-10-27 20:44 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2016-01-28 17:30 - 2015-10-27 20:07 - 00000000 ____D C:\ProgramData\Package Cache 2016-01-28 16:46 - 2015-10-27 20:09 - 00000000 ____D C:\Program Files\Lenovo 2016-01-28 16:46 - 2015-07-10 05:04 - 00000199 _____ C:\WINDOWS\win.ini 2016-01-28 16:43 - 2015-10-27 20:09 - 00000000 ____D C:\WINDOWS\Downloaded Installations 2016-01-28 15:19 - 2015-10-27 20:42 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles 2016-01-28 15:19 - 2015-07-10 03:05 - 00000000 ____D C:\Users\Default.migrated 2016-01-28 15:16 - 2015-10-27 20:48 - 00000000 ____D C:\Program Files (x86)\ThinkPad 2016-01-28 15:16 - 2015-10-27 20:48 - 00000000 ____D C:\Program Files (x86)\SmartSense 2016-01-28 15:16 - 2015-10-27 20:44 - 00000000 ____D C:\Program Files\mcafee.com 2016-01-28 15:16 - 2015-10-27 20:44 - 00000000 ____D C:\Program Files\mcafee 2016-01-28 15:16 - 2015-10-27 20:44 - 00000000 ____D C:\Program Files (x86)\mcafee.com 2016-01-28 15:16 - 2015-10-27 20:42 - 00000000 ____D C:\ProgramData\Intel.sav 2016-01-28 15:16 - 2015-10-27 20:42 - 00000000 ____D C:\Program Files\Common Files\Intel 2016-01-28 15:16 - 2015-10-27 20:42 - 00000000 ____D C:\Program Files (x86)\Cisco 2016-01-28 15:16 - 2015-10-27 20:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-01-28 15:16 - 2015-10-27 20:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2016-01-28 15:16 - 2015-10-27 20:41 - 00000000 ____D C:\ProgramData\Intel 2016-01-28 15:16 - 2015-10-27 20:41 - 00000000 ____D C:\Program Files\DIFX 2016-01-28 15:16 - 2015-10-27 20:41 - 00000000 ____D C:\Program Files (x86)\Realtek 2016-01-28 15:16 - 2015-10-27 20:41 - 00000000 ____D C:\Program Files (x86)\Intel 2016-01-28 15:16 - 2015-10-27 20:40 - 00000000 ____D C:\Program Files\ThinkPad 2016-01-28 15:16 - 2015-10-27 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2016-01-28 15:16 - 2015-10-27 20:07 - 00000000 ____D C:\Program Files (x86)\Lenovo 2016-01-28 15:16 - 2015-10-27 07:51 - 00000000 ____D C:\mfg 2016-01-28 15:16 - 2015-07-16 09:50 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2016-01-28 15:16 - 2015-07-10 06:22 - 00000000 ____D C:\ProgramData\USOShared   ==================== Files in the root of some directories =======   2016-02-25 15:32 - 2016-02-25 15:32 - 0071332 _____ () C:\Users\Mark Bould\AppData\Local\recently-used.xbel 2016-02-02 16:15 - 2015-10-01 08:47 - 0010240 _____ () C:\Users\Mark Bould\AppData\Local\Z@!-799ca424-ae1e-439b-a378-c64dfff86b44.tmp 2016-02-02 16:15 - 2015-10-01 08:47 - 0009216 _____ () C:\Users\Mark Bould\AppData\Local\Z@S!-562a306c-728c-40d8-b38b-bf0ec394e79d.tmp 2015-10-27 20:41 - 2015-10-27 20:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-11-19 18:09 - 2015-11-19 18:09 - 0010314 _____ () C:\ProgramData\regid.2004-01.com.thatsus_A9548AA9-76D0-43EB-824D-C63607DF26DD.swidtag   ==================== Bamital & volsnap =================   (There is no automatic fix for files that do not pass verification.)   C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed              


Edited by yamafan, 27 February 2016 - 05:11 PM.


BC AdBot (Login to Remove)

 


#2 olgun52

olgun52

  • Malware Response Team
  • 3,807 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 PM

Posted 27 February 2016 - 06:09 PM

Hello yamafan and Welcome to the BleepingComputer. :welcome:
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.

Before we move on, please read the following points carefully.

  • Please complete all steps in the specified order.
  • Even if tools don't find malware, I want you to post the logfiles anyway.
  • Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
  • Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
  • Don't install or uninstall software during the cleanup unless you are told to do so.
  • If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
  • I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
  • Please reply to this thread. Do not start a new topic
  • As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
  • Please open as administrator  the computer. How is open as administrator  the computer?
  • Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do  this, please refer to get help here

Thanks
 

Repaired_386_Repaired_33_Friendly Honda-Yamaha
C:\Users\Mark Bould\Downloads\Repaired_385_Repaired_197_Repaired_65_Repaired_33_Friendly Honda-Yamaha_01_02_2016 to02_01_2016 23_59.xls 2016-02-06 12:06 - 2016-02-06 12:06 - 00148480

These are your documents. What are they ?Like many. There are files and folders
 ==================================================================================================
 FRST  Fixlist run:
 Copy the below code to Notepad; Save As fixlist.txt to your Desktop.

start
C:\Users\Mark Bould\AppData\Local\Z@!-799ca424-ae1e-439b-a378-c64dfff86b44.tmp
C:\Users\Mark Bould\AppData\Local\Z@S!-562a306c-728c-40d8-b38b-bf0ec394e79d.tmp
C:\WINDOWS\Tasks\UpdaterEX.job
C:\WINDOWS\System32\Tasks\UpdaterEX
C:\Users\Mark Bould\AppData\Roaming\UpdaterEX
C:\ProgramData\{36711BA3-C67B-4C8B-8E14-3AE5D0F25F08}
C:\ProgramData\{24507489-0FF2-4B28-BB9B-CD32968B8F28}
C:\ProgramData\USOShared
C:\Users\Mark Bould\AppData\Roaming\LSC
C:\Users\Mark Bould\AppData\Local\recently-used.xbel
C:\ProgramData\DP45977C.lfl
SearchScopes: HKLM -> DefaultScope {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms} SearchScopes: HKLM -> {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms} SearchScopes: HKU\S-1-5-21-1495282399-2212904817-2081605098-1001 -> DefaultScope {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1495282399-2212904817-2081605098-1001 -> {7E3A69D0-2110-4683-9F61-76BC48FA2F1D} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-55b0cb43&q={searchTerms}
C:\Users\Mark Bould\Downloads\repair-doc (1).exe
C:\Users\Mark Bould\Downloads\StellarFileRepairToolKit (2).exe
C:\Users\Mark Bould\Downloads\recover-windows (1).exe
C:\Users\Mark Bould\Downloads\data-recovery-bing_setup_full829.exe
 C:\Users\Mark Bould\Downloads\requests (1).csv
C:\Users\Mark Bould\Downloads\customers (2).csv
C:\Users\Mark Bould\Downloads\yodot-doc-repair (2).exe
C:\Users\Mark Bould\Downloads\StellarFileRepairToolKit (1).exe
C:\WINDOWS\System32\Tasks\UpdaterEX
C:\WINDOWS\Tasks\UpdaterEX.job
HKU\S-1-5-21-1495282399-2212904817-2081605098-1001\...\RunOnce: [Uninstall C:\Users\Mark Bould\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Mark Bould\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64" CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Emptytemp:
end

Close Notepad.

NOTE: It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64 and press the Fix button just once and wait.

If the tool needed a restart please make sure you let the system to restart normally and let the tool complete its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Attach it to your reply.

Note: If the tool warns you about an outdated version please download and run the updated version.
========================================================================================
Scan with Zemana AntiMalware Free:

  • Turn off the real time scanner of any existing antivirus and firewall programs while performing scan
  • Please download and install Zemana AntiMalware Free
  • Double-click software shortcut on the desktop and follow the prompts to install the program .
  • If an update is available, click the Update now button.
  • At the end Click Settings > Advanced > ''I have read the warning an wish to proceed anyway'' Click
  • Auto Launch > Untick the box next
  • Scan type > Smart scan (Default)
  • Close all open files, folders and browsers
  • Click scan now ''Run as Administrator'' and a threat Scan will begin.
  • When the scan is complete, Press report and send me report.
  • Please PC restart now.

=================================================================

Scan with Malwarebytes Antimalware:

Please download Malwarebytes Anti-Malware to your desktop.

  • Double-click the downloaded setup file and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:
  • Launch Malwarebytes Anti-Malware
  • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
  • Click Finish.

If the program is already installed:

  • Run Malwarebytes Antimalware
  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.
  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply

==================================================================

 

RogueKiller by Tigzy

  • Download RogueKiller and save it to your desktop
  • Close all running programs
  • Right click on the icon and select Run as Administrator
  • For Windows XP simply double click on the icon
  • The program will conduct a prescan and when finished you wlll see Prescan Finished. Please hit the scan button
  • Click Scan
  • If, during the scan, you receive a request to upload a file to Virustotal please click Yes
  • A report should open and a copy of the report will be placed on your desktop. If not, hit the Report button.
  • If RogueKiller has been blocked, do not hesitate to try a few times more. If it really won't run, rename it winlogon.exe (or winlogon.com) and try again
  • Copy and paste the contents of the report in your reply

 


Edited by olgun52, 27 February 2016 - 07:00 PM.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#3 olgun52

olgun52

  • Malware Response Team
  • 3,807 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 PM

Posted 07 March 2016 - 05:01 PM

Hallo,

 

Are you wit me us ?


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#4 olgun52

olgun52

  • Malware Response Team
  • 3,807 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 PM

Posted 13 March 2016 - 03:04 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users