FARBAR LOG:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by acer (administrator) on ACER_PC (11-03-2016 15:04:23)
Running from C:\Users\acer\Downloads
Loaded Profiles: acer (Available Profiles: acer)
Platform: Windows 8.1 (X64) Language: English (United Kingdom)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcchhost.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\Core\mchost.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\FIRSTRUN.EXE
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulAlert.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13874392 2015-04-07] (Realtek Semiconductor)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1427648 2015-08-05] (COMODO)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [643064 2015-02-09] (McAfee, Inc.)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2015-11-23] ()
HKLM-x32\...\Run: [isa] => C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [330240 2015-02-18] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7137664 2016-03-09] (AVAST Software)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2015-01-31] (Qualcomm®Atheros®)
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-02-29] (SUPERAntiSpyware)
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\RunOnce: [Application Restart #2] => C:\Users\acer\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resourc (the data entry has 581 more characters).
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\...\MountPoints2: {f4b33e2e-0b58-11e5-8260-806e6f6e6963} - "D:\SETUP.EXE"
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-01-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-01-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-01-19] (Acer Incorporated)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-05] (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{34F54AC9-FA0B-4B96-A248-5DB7FBE588A0}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{34F54AC9-FA0B-4B96-A248-5DB7FBE588A0}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{E0AA27FA-CB98-48BF-BDD3-FCD5C02E0284}: [NameServer] 156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{E0AA27FA-CB98-48BF-BDD3-FCD5C02E0284}: [DhcpNameServer] 192.17.128.24
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-332180863-3176859329-4029246278-1001 -> DefaultScope {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKU\S-1-5-21-332180863-3176859329-4029246278-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-05] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-05] (AVAST Software)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\mcieplg.dll [2016-02-25] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-02-27] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-02-27] (McAfee, Inc.)
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-02-27] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-01] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-02-27] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-14] ()
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-12-29]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-03-05]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-03-04] [not signed]
Chrome:
=======
CHR Profile: C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-04]
CHR Extension: (Google Docs) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-04]
CHR Extension: (Google Drive) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-04]
CHR Extension: (YouTube) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-04]
CHR Extension: (Google Sheets) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-04]
CHR Extension: (SiteAdvisor) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2016-03-04]
CHR Extension: (Google Docs Offline) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-04]
CHR Extension: (Chrome Web Store Payments) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-04]
CHR Extension: (Gmail) - C:\Users\acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-04]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-03-04]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-03-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-05]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [323200 2015-01-31] (Windows ® Win 7 DDK provider) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-05] (AVAST Software)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-01-14] (Acer Incorporated)
R2 ChromodoUpdater; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [2291192 2016-03-11] (Comodo)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5542472 2015-09-03] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265792 2015-08-05] (COMODO)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2015-01-28] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-11-19] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344168 2015-04-19] (Intel Corporation)
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [881152 2014-10-03] (Intel® Corporation)
S3 Intel® Security Assist; C:\Program Files (x86)\Intel\Intel® Security Assist\isa.exe [330240 2015-02-18] () [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel® Security Assist\isaHelperService.exe [7680 2015-02-18] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [172320 2014-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [163592 2016-02-25] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-02-27] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [422632 2015-01-22] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-02-27] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [476904 2015-02-03] (Acer Incorporated)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2014-10-08] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2015-02-03] (Acer Incorporated)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [465088 2016-03-04] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [242944 2015-01-07] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2016-03-06] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2016-03-06] (Microsoft Corporation)
S3 AvgAMPS; "C:\Program Files (x86)\AVG\Av\avgamps.exe" [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-05] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4267008 2015-01-11] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2015-01-31] (Qualcomm Atheros)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [21720 2015-11-18] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [828144 2015-11-18] (COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [35056 2015-08-05] (COMODO)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 iagpioe; C:\Windows\System32\drivers\iagpioe.sys [32256 2015-02-28] (Intel® Corporation)
R3 iai2ce; C:\Windows\System32\drivers\iai2ce.sys [83968 2015-02-28] (Intel® Corporation)
S3 iauarte; C:\Windows\System32\drivers\iauarte.sys [101888 2015-02-28] (Intel® Corporation)
R3 igfxLP; C:\Windows\system32\DRIVERS\igdkmd64lp.sys [4516280 2015-04-19] (Intel Corporation)
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [127232 2015-08-05] (COMODO)
R3 iusb3adp; C:\Windows\System32\drivers\iusb3adp.sys [23824 2015-03-27] (Intel)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-11] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [36968 2016-01-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [114976 2014-11-23] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2016-03-06] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2016-03-06] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2016-03-06] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-11 15:04 - 2016-03-11 15:51 - 00024126 _____ C:\Users\acer\Downloads\FRST.txt
2016-03-11 15:01 - 2016-03-11 15:04 - 00000000 ____D C:\FRST
2016-03-11 14:58 - 2016-03-11 14:58 - 02374144 _____ (Farbar) C:\Users\acer\Downloads\FRST64.exe
2016-03-11 10:52 - 2016-03-11 10:52 - 00001042 _____ C:\11thMarch.txt
2016-03-11 09:43 - 2016-03-11 09:43 - 00000000 ____D C:\Program Files (x86)\Comodo
2016-03-11 09:00 - 2016-03-11 09:00 - 01609216 _____ (Malwarebytes) C:\Users\acer\Downloads\JRT (2).exe
2016-03-11 08:44 - 2016-03-11 08:44 - 01524224 _____ C:\Users\acer\Downloads\adwcleaner_5.101.exe
2016-03-11 08:18 - 2016-03-11 08:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-03-10 12:56 - 2016-03-10 12:56 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (4).pdf
2016-03-09 08:51 - 2016-03-09 08:51 - 02487296 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-09 08:50 - 2016-03-09 08:51 - 01482240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-09 08:50 - 2016-02-04 17:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 08:50 - 2016-02-04 17:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-09 08:50 - 2015-12-20 14:56 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2016-03-08 23:01 - 2016-03-08 23:01 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2016-03-08 23:01 - 2016-03-08 23:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00069448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-03-08 23:00 - 2016-03-08 23:00 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-03-08 23:00 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-03-08 23:00 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-03-08 23:00 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-03-08 22:59 - 2016-03-08 23:00 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-03-08 22:59 - 2016-03-08 22:59 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-03-08 22:59 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-03-08 22:59 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-03-08 22:58 - 2016-03-08 22:59 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-03-08 22:58 - 2016-03-08 22:58 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-03-08 22:35 - 2016-03-08 22:35 - 00000000 ____D C:\Users\Public\Documents\Sports Interactive
2016-03-08 22:35 - 2016-03-08 22:35 - 00000000 ____D C:\Users\acer\Documents\Sports Interactive
2016-03-08 22:35 - 2016-03-08 22:35 - 00000000 ____D C:\Users\acer\AppData\Local\Sports Interactive
2016-03-08 22:34 - 2016-03-08 22:34 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-03-08 20:21 - 2016-03-08 20:21 - 01380712 _____ C:\Users\acer\Downloads\SteamSetup.exe
2016-03-08 20:02 - 2016-03-08 20:02 - 00000000 ____D C:\Users\acer\AppData\Local\Steam
2016-03-08 20:02 - 2016-03-08 20:02 - 00000000 ____D C:\Users\acer\AppData\Local\CEF
2016-03-08 19:51 - 2016-03-11 11:58 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-08 19:51 - 2016-03-08 19:51 - 00000979 _____ C:\Users\Public\Desktop\Steam.lnk
2016-03-08 19:51 - 2016-03-08 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-08 11:59 - 2016-03-08 11:59 - 01524224 _____ C:\Users\acer\Downloads\AdwCleaner (2).exe
2016-03-08 11:33 - 2016-03-08 11:33 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (3).pdf
2016-03-08 11:31 - 2016-03-08 11:31 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (2).pdf
2016-03-08 09:39 - 2016-03-11 08:49 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-08 09:29 - 2016-03-08 09:29 - 01524224 _____ C:\Users\acer\Downloads\AdwCleaner (1).exe
2016-03-07 23:51 - 2016-03-07 23:51 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup (1).pdf
2016-03-07 23:43 - 2016-03-07 23:43 - 00076551 _____ C:\Users\acer\Downloads\the_fighter_pullup.pdf
2016-03-07 19:11 - 2016-03-07 19:11 - 02870984 _____ (ESET) C:\Users\acer\Downloads\esetsmartinstaller_enu.exe
2016-03-07 19:11 - 2016-03-07 19:11 - 00000000 ____D C:\Program Files (x86)\ESET
2016-03-07 16:42 - 2016-03-07 12:53 - 00828920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-07 16:42 - 2016-03-07 12:53 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-07 16:34 - 2016-03-07 16:34 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-07 16:07 - 2016-03-07 16:07 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 16:07 - 2016-03-07 16:07 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-07 14:44 - 2016-03-07 14:44 - 00448512 _____ (OldTimer Tools) C:\Users\acer\Downloads\TFC (1).exe
2016-03-07 14:21 - 2016-03-07 14:21 - 00448512 _____ (OldTimer Tools) C:\Users\acer\Downloads\TFC.exe
2016-03-07 13:47 - 2016-03-11 13:53 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-07 13:47 - 2016-03-11 13:53 - 00000000 ____D C:\Windows\system32\MRT
2016-03-07 12:54 - 2016-03-07 12:54 - 00001036 _____ C:\Users\acer\Downloads\mwb.txt
2016-03-07 11:07 - 2016-03-07 11:11 - 00002190 _____ C:\Users\acer\Desktop\Rkill.txt
2016-03-07 11:06 - 2016-03-07 11:06 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\acer\Downloads\rkill.exe
2016-03-07 09:39 - 2016-03-07 09:47 - 00039533 _____ C:\Users\acer\Downloads\MTB.txt
2016-03-07 09:37 - 2016-03-07 09:37 - 00891392 _____ (Farbar) C:\Users\acer\Downloads\MiniToolBox.exe
2016-03-06 23:27 - 2016-03-06 23:37 - 00000000 ____D C:\Users\acer\AppData\Roaming\DropboxOEM
2016-03-06 23:00 - 2015-01-27 03:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2016-03-06 23:00 - 2015-01-24 01:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2016-03-06 22:46 - 2016-03-06 22:46 - 20366336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 14459392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 12859392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02280960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-06 22:46 - 2016-03-06 22:46 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-06 22:46 - 2016-03-06 22:46 - 01552384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 01317888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-06 22:46 - 2016-03-06 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2016-03-06 22:46 - 2016-03-06 22:46 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-06 22:46 - 2016-03-06 22:46 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2016-03-06 22:46 - 2016-03-06 22:46 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-06 22:46 - 2015-07-16 19:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-06 22:45 - 2016-03-06 22:46 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-06 22:45 - 2016-03-06 22:46 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-06 22:45 - 2016-03-06 22:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-03-06 22:45 - 2016-03-06 22:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-03-06 22:45 - 2015-07-16 20:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-06 22:44 - 2016-03-06 22:44 - 00898048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00702976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00443392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\cfgbkend.dll
2016-03-06 22:44 - 2016-03-06 22:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgbkend.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 00723072 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-03-06 22:34 - 2016-03-06 22:34 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-03-06 22:33 - 2016-03-06 22:33 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-03-06 22:33 - 2016-03-06 22:33 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-03-06 22:33 - 2016-03-06 22:33 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2016-03-06 22:33 - 2015-12-02 15:04 - 00670208 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-03-06 22:33 - 2015-11-05 08:59 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-03-06 22:33 - 2015-05-30 19:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-03-06 22:33 - 2015-03-09 02:02 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2016-03-06 22:32 - 2016-03-06 22:32 - 07075328 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 05267968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2016-03-06 22:32 - 2016-03-06 22:32 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-03-06 22:32 - 2016-03-06 22:32 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-03-06 22:32 - 2015-12-29 15:45 - 07783936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-06 22:32 - 2015-09-29 12:24 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-03-06 22:32 - 2015-05-07 15:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2016-03-06 22:32 - 2015-04-10 00:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-06 22:32 - 2015-04-10 00:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01903848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01362944 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-06 22:31 - 2016-03-06 22:31 - 00033472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-06 22:31 - 2015-09-04 19:24 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2016-03-06 22:31 - 2015-09-03 02:18 - 02531400 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 02745184 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 02528784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02450240 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02447136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 02334104 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 02324744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01798480 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01697792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01664000 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01501184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01484888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01411584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01288128 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01210200 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01150232 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01115640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 01037680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00914672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00850680 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00743936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00736256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00735496 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00700360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00629600 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00584656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00559616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-03-06 22:30 - 2016-03-06 22:30 - 00557856 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00498472 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00492736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00463776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00399776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00299080 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-03-06 22:30 - 2016-03-06 22:30 - 00275312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00274280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00250520 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00248432 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00246856 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-03-06 22:30 - 2016-03-06 22:30 - 00244296 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00229272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00203016 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00184912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00183856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00183368 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-03-06 22:30 - 2016-03-06 22:30 - 00116720 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00110544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-03-06 22:30 - 2016-03-06 22:30 - 00099136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-03-06 22:30 - 2016-03-06 22:30 - 00090904 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00090392 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00081032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-03-06 22:30 - 2016-03-06 22:30 - 00076936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-03-06 22:30 - 2015-12-05 05:58 - 01877504 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-03-06 22:28 - 2016-03-06 22:28 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-03-06 22:28 - 2016-03-06 22:28 - 00951296 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-03-06 22:28 - 2016-03-06 22:28 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-03-06 22:28 - 2015-07-22 14:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-03-06 22:28 - 2015-03-20 01:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-03-06 22:27 - 2016-03-06 22:28 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-06 22:27 - 2016-03-06 22:28 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-03-06 22:27 - 2016-03-06 22:28 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-06 22:27 - 2016-03-06 22:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-03-06 22:27 - 2016-03-06 22:28 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-06 22:27 - 2016-03-06 22:28 - 00177496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-06 22:27 - 2016-03-06 22:27 - 22365992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 19794896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 14467072 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 12879360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 02464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 01442304 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00561952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-03-06 22:27 - 2016-03-06 22:27 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00332640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-03-06 22:27 - 2016-03-06 22:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsDatabase.dll
2016-03-06 22:27 - 2016-01-07 18:34 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-06 22:27 - 2015-03-04 01:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2016-03-06 22:27 - 2015-03-04 01:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2016-03-06 22:27 - 2015-03-02 01:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2016-03-06 22:27 - 2015-03-02 01:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2016-03-06 22:24 - 2015-06-27 11:47 - 00118616 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-03-06 22:23 - 2016-03-06 22:23 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-06 22:23 - 2016-03-06 22:23 - 00137968 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00120376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-06 22:23 - 2016-03-06 22:23 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-03-06 22:23 - 2016-03-06 22:23 - 00091416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-03-06 22:23 - 2015-12-03 19:42 - 00106960 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-03-06 22:23 - 2015-12-03 17:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-06 22:23 - 2015-12-03 16:45 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-06 22:22 - 2016-03-06 22:22 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-03-06 22:22 - 2016-03-06 22:22 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-03-06 22:22 - 2016-03-06 22:22 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2016-03-06 22:21 - 2016-03-06 22:21 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-03-06 22:21 - 2016-03-06 22:21 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-03-06 22:21 - 2016-03-06 22:21 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2016-03-06 22:21 - 2016-03-06 22:21 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2016-03-06 22:21 - 2015-03-13 01:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2016-03-06 22:21 - 2015-03-13 00:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 07455064 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-06 22:20 - 2016-03-06 22:20 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 01706496 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00414208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-06 22:20 - 2016-03-06 22:20 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-06 22:20 - 2015-11-22 06:59 - 01659568 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-03-06 22:20 - 2015-11-22 06:59 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-03-06 22:20 - 2015-11-22 06:59 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-03-06 22:20 - 2015-11-22 06:59 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-03-06 22:17 - 2016-03-06 22:17 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2016-03-06 22:17 - 2016-03-06 22:17 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2016-03-06 22:17 - 2016-03-06 22:17 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll
2016-03-06 22:17 - 2015-03-13 02:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2016-03-06 22:16 - 2016-03-06 22:16 - 01091584 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2016-03-06 22:16 - 2016-03-06 22:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2016-03-06 22:14 - 2015-11-09 00:41 - 01540728 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-03-06 22:14 - 2015-11-08 21:23 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-03-06 22:14 - 2015-11-08 21:13 - 01383936 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-03-06 22:14 - 2015-11-08 21:01 - 01753600 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-03-06 22:14 - 2015-11-08 20:52 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-03-06 22:14 - 2015-11-08 20:48 - 01376256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-03-06 22:14 - 2015-11-08 20:42 - 01490944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-03-06 22:13 - 2016-03-06 22:13 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-03-06 22:13 - 2016-03-06 22:13 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 01124384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2016-03-06 22:12 - 2016-03-06 22:12 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2016-03-06 22:12 - 2016-03-06 22:12 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-03-06 22:12 - 2016-03-06 22:12 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-06 22:12 - 2015-10-03 19:41 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2016-03-06 22:11 - 2016-03-06 22:11 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2016-03-06 22:11 - 2016-03-06 22:11 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2016-03-06 22:11 - 2016-03-06 22:11 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2016-03-06 22:11 - 2016-03-06 22:11 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2016-03-06 22:11 - 2016-03-06 22:11 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2016-03-06 22:11 - 2015-08-06 17:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2016-03-06 22:11 - 2015-04-25 02:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-03-06 22:11 - 2015-04-08 22:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-03-06 22:10 - 2016-03-06 22:10 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01488896 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2016-03-06 22:10 - 2016-03-06 22:10 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-03-06 22:10 - 2016-03-06 22:10 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-03-06 22:10 - 2015-06-19 17:07 - 02819072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2016-03-06 22:10 - 2015-02-03 00:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 01546752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00520192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2016-03-06 22:09 - 2016-03-06 22:09 - 00148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2016-03-06 22:09 - 2015-09-02 02:50 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-06 22:09 - 2015-09-02 02:13 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-06 22:09 - 2015-03-06 02:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
2016-03-06 22:08 - 2016-03-06 22:08 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
2016-03-06 22:08 - 2015-12-07 10:56 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-03-06 22:05 - 2015-07-09 17:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-03-06 22:05 - 2015-07-09 17:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-03-06 22:05 - 2015-07-09 16:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-03-06 22:05 - 2015-05-11 16:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-03-06 22:04 - 2016-03-06 22:04 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2016-03-06 22:04 - 2016-03-06 22:04 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2016-03-06 22:04 - 2016-03-06 22:04 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2016-03-06 22:04 - 2015-01-30 01:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2016-03-06 22:04 - 2015-01-30 01:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2016-03-06 22:04 - 2015-01-30 01:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2016-03-06 22:04 - 2015-01-30 01:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2016-03-06 22:04 - 2015-01-30 01:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2016-03-06 22:02 - 2014-12-11 05:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 01265152 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-03-06 21:56 - 2016-03-06 21:56 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 00359936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2016-03-06 21:56 - 2016-03-06 21:56 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2016-03-06 21:54 - 2015-08-03 21:15 - 00074928 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-03-06 21:54 - 2015-08-03 21:15 - 00065600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-03-06 21:54 - 2015-08-01 14:22 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-03-06 21:54 - 2015-07-10 17:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-03-06 21:54 - 2015-07-10 16:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-03-06 21:53 - 2016-03-06 21:53 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-06 21:53 - 2016-03-06 21:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-03-06 21:53 - 2015-10-05 18:28 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2016-03-06 21:53 - 2015-10-05 18:25 - 00572928 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-06 21:53 - 2015-07-10 18:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2016-03-06 21:53 - 2015-07-10 17:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2016-03-06 21:53 - 2015-04-28 13:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2016-03-06 21:53 - 2015-04-28 13:13 - 00513480 _____ C:\Windows\system32\locale.nls
2016-03-06 21:53 - 2015-03-11 01:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-03-06 21:52 - 2015-06-16 05:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-06 21:52 - 2015-06-16 05:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-06 21:52 - 2015-02-07 23:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2016-03-06 21:52 - 2015-02-07 23:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2016-03-06 21:52 - 2015-01-28 01:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-03-06 21:52 - 2015-01-28 01:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-03-06 21:51 - 2016-03-06 21:51 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tzsync.exe
2016-03-06 21:51 - 2016-03-06 21:51 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-03-06 21:51 - 2015-04-23 15:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-03-06 21:51 - 2015-04-23 15:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-03-06 21:51 - 2015-03-04 10:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-03-06 21:51 - 2015-03-04 03:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-03-06 21:50 - 2016-03-06 21:50 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-03-06 21:50 - 2016-03-06 21:50 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-03-06 21:50 - 2015-12-17 16:17 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-03-06 21:50 - 2015-03-06 03:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-03-06 21:49 - 2016-03-06 21:49 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-03-06 21:49 - 2015-07-16 18:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll
2016-03-06 21:49 - 2015-07-10 19:06 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2016-03-06 21:48 - 2015-10-08 16:08 - 01083904 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-03-06 21:48 - 2015-08-10 18:15 - 00845312 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-03-06 21:48 - 2015-08-10 18:06 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-03-06 21:48 - 2015-08-10 17:49 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-03-06 21:48 - 2015-08-10 16:56 - 00272384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-03-06 21:48 - 2015-08-10 16:46 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-03-06 21:48 - 2014-07-24 03:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-03-06 21:48 - 2014-07-24 03:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-03-06 21:47 - 2015-12-08 19:08 - 00685432 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-06 21:47 - 2015-12-08 19:07 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-06 21:46 - 2016-03-06 21:46 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-06 21:46 - 2015-08-22 13:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-06 21:46 - 2015-05-12 13:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-03-06 21:43 - 2016-03-11 09:48 - 00001170 _____ C:\Users\acer\Desktop\JRT.txt
2016-03-06 18:49 - 2016-03-06 18:50 - 01609216 _____ (Malwarebytes) C:\Users\acer\Downloads\JRT (1).exe
2016-03-06 18:30 - 2016-03-06 18:30 - 01609216 _____ (Malwarebytes) C:\Users\acer\Downloads\JRT.exe
2016-03-06 11:51 - 2016-03-06 11:54 - 00000000 ____D C:\AdwCleaner
2016-03-06 11:40 - 2016-03-06 11:50 - 01518592 _____ C:\Users\acer\Downloads\AdwCleaner.exe
2016-03-06 09:48 - 2016-03-06 09:49 - 16563352 _____ (Malwarebytes Corp.) C:\Users\acer\Downloads\mbar-1.09.3.1001 (1).exe
2016-03-05 22:05 - 2016-03-06 18:29 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-03-05 22:04 - 2016-03-06 18:29 - 00000000 ____D C:\Users\acer\Desktop\mbar
2016-03-05 22:03 - 2016-03-05 22:03 - 16563352 _____ (Malwarebytes Corp.) C:\Users\acer\Downloads\mbar-1.09.3.1001.exe
2016-03-05 21:37 - 2016-03-05 21:37 - 00852798 _____ C:\Users\acer\Downloads\SecurityCheck (1).exe
2016-03-05 20:05 - 2016-03-05 20:05 - 00852798 _____ C:\Users\acer\Downloads\SecurityCheck.exe
2016-03-05 19:38 - 2016-03-11 14:52 - 00145408 ___SH C:\Users\acer\Downloads\Thumbs.db
2016-03-05 14:26 - 2016-03-05 14:26 - 00000000 ____D C:\Users\acer\AppData\Local\CrashDumps
2016-03-05 11:09 - 2016-03-05 11:02 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-03-05 11:04 - 2016-03-05 11:04 - 00001948 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-03-05 11:04 - 2016-03-05 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-05 11:03 - 2016-03-08 12:41 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-03-05 11:02 - 2016-03-09 23:12 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-03-05 11:02 - 2016-03-09 23:12 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2016-03-05 11:02 - 2016-03-05 11:03 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2016-03-05 11:02 - 2016-03-05 11:03 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-03-05 11:02 - 2016-03-05 11:02 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-03-05 11:02 - 2016-03-05 11:02 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-03-05 11:02 - 2016-03-05 11:02 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-03-05 11:02 - 2016-03-05 11:01 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-03-05 11:01 - 2016-03-05 11:01 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-03-05 10:39 - 2016-03-05 10:39 - 05207096 _____ (AVAST Software) C:\Users\acer\Downloads\avast_free_antivirus_setup_online.exe
2016-03-05 09:31 - 2016-03-05 09:31 - 02979288 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe
2016-03-05 09:27 - 2016-03-05 09:27 - 00000000 ____D C:\Users\acer\AppData\Local\Acer Aspire R7 Tutorial
2016-03-05 09:12 - 2016-03-05 09:13 - 05066104 _____ (AVAST Software) C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe
2016-03-05 00:56 - 2016-03-05 00:56 - 00001886 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk
2016-03-05 00:56 - 2016-03-05 00:56 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2016-03-05 00:55 - 2016-03-05 00:55 - 00000000 ____D C:\ProgramData\Shared Space
2016-03-05 00:53 - 2016-03-09 16:50 - 00000000 ____D C:\Program Files\COMODO
2016-03-05 00:53 - 2016-03-05 00:53 - 00001142 _____ C:\Users\Public\Desktop\Internet (Chromodo).lnk
2016-03-05 00:44 - 2016-03-05 00:49 - 220699928 _____ (COMODO) C:\Users\acer\Downloads\cfw_installer_6106_53 (1).exe
2016-03-05 00:41 - 2016-03-05 00:41 - 03411920 _____ (Check Point Software Technologies Ltd.) C:\Users\acer\Downloads\zafwSetupWeb_141_048_000.exe
2016-03-04 22:59 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2016-03-04 22:55 - 2016-03-04 22:55 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud
2016-03-04 22:55 - 2016-03-04 22:55 - 00002030 _____ C:\Users\Public\Desktop\Acer Portal.lnk
2016-03-04 22:53 - 2016-03-04 22:53 - 00003344 _____ C:\Windows\System32\Tasks\McAfee Remediation (Prepare)
2016-03-04 22:53 - 2016-03-04 20:56 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-04 22:52 - 2016-03-04 22:52 - 00002291 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-04 22:52 - 2016-03-04 22:52 - 00002279 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-04 22:51 - 2016-03-04 22:51 - 00002001 _____ C:\Users\Public\Desktop\abMedia.lnk
2016-03-04 22:50 - 2016-03-11 14:55 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-04 22:50 - 2016-03-11 09:21 - 00000906 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-04 22:50 - 2016-03-04 22:51 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-04 22:50 - 2016-03-04 22:50 - 00003882 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-04 22:50 - 2016-03-04 22:50 - 00003646 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-04 22:50 - 2016-03-04 22:50 - 00000000 ____D C:\Users\acer\AppData\Local\Deployment
2016-03-04 22:50 - 2016-03-04 22:50 - 00000000 ____D C:\Users\acer\AppData\Local\Apps\2.0
2016-03-04 22:50 - 2016-03-04 17:06 - 00000000 ____D C:\Users\acer\AppData\Local\Google
2016-03-04 22:47 - 2016-03-04 22:47 - 00002005 _____ C:\Users\Public\Desktop\abPhoto.lnk
2016-03-04 22:45 - 2016-03-04 22:45 - 00003338 _____ C:\Windows\System32\Tasks\abDocsDllLoader
2016-03-04 22:45 - 2016-03-04 22:45 - 00001969 _____ C:\Users\Public\Desktop\abDocs.lnk
2016-03-04 22:43 - 2016-03-04 22:43 - 00000000 __SHD C:\Users\acer\AppData\LocalLow\EmieUserList
2016-03-04 22:43 - 2016-03-04 22:43 - 00000000 __SHD C:\Users\acer\AppData\LocalLow\EmieBrowserModeList
2016-03-04 22:42 - 2016-03-04 22:55 - 00003352 _____ C:\Windows\System32\Tasks\BacKGroundAgent
2016-03-04 22:40 - 2016-03-11 13:27 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-332180863-3176859329-4029246278-1001
2016-03-04 22:39 - 2016-03-11 14:42 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{534BAF9E-9FFB-4C65-8C07-33F399B4A5B4}
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 __SHD C:\Users\acer\AppData\Local\EmieUserList
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 __SHD C:\Users\acer\AppData\Local\EmieSiteList
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 __SHD C:\Users\acer\AppData\Local\EmieBrowserModeList
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 ____D C:\Users\acer\AppData\Roaming\Macromedia
2016-03-04 22:39 - 2016-03-04 22:39 - 00000000 ____D C:\Users\acer\AppData\Local\DropboxOEM
2016-03-04 22:38 - 2016-03-04 22:43 - 00000000 __SHD C:\Users\acer\AppData\LocalLow\EmieSiteList
2016-03-04 22:38 - 2016-03-04 22:38 - 00000000 ____D C:\Users\acer\AppData\Local\GWX
2016-03-04 22:37 - 2016-03-11 10:51 - 00000000 ____D C:\Users\acer\OneDrive
2016-03-04 22:36 - 2016-03-04 22:36 - 00000000 ____D C:\Users\Public\Pokki
2016-03-04 22:36 - 2016-03-04 22:36 - 00000000 ____D C:\Users\acer\PicStream
2016-03-04 22:35 - 2016-03-05 19:07 - 00000000 ____D C:\Users\acer\AppData\Local\clear.fi
2016-03-04 22:35 - 2016-03-04 22:35 - 00001276 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio Manager.lnk
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Users\acer\AppData\Roaming\Atheros
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Users\acer\AppData\Local\iGware
2016-03-04 22:35 - 2016-03-04 22:35 - 00000000 ____D C:\Users\acer\AppData\Local\AOP SDK
2016-03-04 22:34 - 2016-03-08 09:13 - 00000000 ____D C:\Users\acer\AppData\Local\Packages
2016-03-04 22:34 - 2016-03-04 22:34 - 00001786 _____ C:\Users\Public\Desktop\Buy Online.lnk
2016-03-04 22:34 - 2016-03-04 22:34 - 00001446 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Windows\oem
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Users\acer\AppData\Roaming\Adobe
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Users\acer\AppData\Local\VirtualStore
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Users\acer\AppData\Local\OEM
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Program Files\Accessory Store
2016-03-04 22:34 - 2016-03-04 22:34 - 00000000 ____D C:\Program Files (x86)\OEM
2016-03-04 22:33 - 2016-03-11 08:16 - 00000000 __SHD C:\Users\acer\IntelGraphicsProfiles
2016-03-04 22:33 - 2016-03-04 22:33 - 00000118 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-03-04 22:30 - 2016-03-10 00:16 - 00000000 ____D C:\Users\acer
2016-03-04 22:30 - 2016-03-07 12:46 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-04 22:30 - 2016-03-07 12:46 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-04 22:30 - 2016-03-04 22:30 - 00000020 ___SH C:\Users\acer\ntuser.ini
2016-03-04 22:30 - 2014-11-21 08:52 - 00000369 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-03-04 22:30 - 2014-11-21 08:52 - 00000369 _____ C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-03-04 22:24 - 2015-11-14 14:50 - 00133248 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2016-03-04 22:24 - 2015-11-14 14:50 - 00114160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2016-03-04 22:24 - 2015-10-20 21:54 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-04 22:24 - 2015-10-20 14:53 - 03705856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-04 22:24 - 2015-10-20 14:36 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-04 22:24 - 2015-10-20 14:35 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-04 22:24 - 2015-10-20 14:34 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-04 22:24 - 2015-10-20 14:34 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-04 22:24 - 2015-10-20 14:34 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-04 22:24 - 2015-10-20 14:33 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-04 22:24 - 2015-10-20 14:14 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-04 22:24 - 2015-10-20 14:13 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-04 22:24 - 2015-10-20 14:13 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-04 22:24 - 2015-10-20 14:13 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-04 22:24 - 2015-08-11 02:47 - 02757072 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-04 22:24 - 2015-08-11 02:47 - 02414096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-04 22:24 - 2015-07-09 18:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-04 22:24 - 2015-06-27 03:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-04 22:24 - 2015-06-27 03:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-04 22:24 - 2015-06-27 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-04 22:24 - 2015-03-14 01:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-04 21:58 - 2016-03-04 21:58 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-04 20:56 - 2016-03-04 20:56 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-03-04 20:52 - 2016-03-04 20:52 - 05066104 _____ (AVAST Software) C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2.exe
2016-03-04 20:40 - 2016-03-04 20:40 - 02924848 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1004 (1).exe
2016-03-04 19:30 - 2016-03-04 19:30 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2016-03-04 19:20 - 2016-03-11 14:13 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-04 19:19 - 2016-03-04 19:19 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-03-04 17:09 - 2016-03-09 16:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2016-03-04 17:09 - 2016-03-04 17:09 - 00000000 ____D C:\Users\acer\AppData\Local\Comodo
2016-03-04 16:59 - 2016-03-06 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-04 16:59 - 2016-03-04 16:59 - 00001118 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-04 16:59 - 2016-03-04 16:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-04 16:59 - 2016-03-04 16:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-04 16:59 - 2016-03-04 16:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-04 16:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-04 16:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-04 16:56 - 2016-03-04 16:56 - 00000000 ____D C:\Users\acer\AppData\Roaming\TuneUp Software
2016-03-04 16:47 - 2016-03-05 14:14 - 00000000 ____D C:\ProgramData\MFAData
2016-03-04 16:47 - 2016-03-04 16:47 - 00000000 ____D C:\Users\acer\AppData\Local\MFAData
2016-03-04 16:45 - 2016-03-05 00:56 - 00000000 ____D C:\ProgramData\Comodo
2016-03-04 16:45 - 2016-03-04 16:46 - 22908888 _____ (Malwarebytes ) C:\Users\acer\Downloads\mbam-setup-2.2.0.1024 (1).exe
2016-03-04 16:44 - 2016-03-10 16:46 - 00000000 ____D C:\Users\acer\Downloads\MP 3
2016-03-04 16:40 - 2016-03-05 10:29 - 00000000 ____D C:\Program Files (x86)\AVG
2016-03-04 16:39 - 2016-03-05 14:14 - 00000000 ____D C:\ProgramData\Avg
2016-03-04 16:38 - 2016-03-04 16:38 - 00001824 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2016-03-04 16:38 - 2016-03-04 16:38 - 00000000 ____D C:\Users\acer\AppData\Roaming\SUPERAntiSpyware.com
2016-03-04 16:38 - 2016-03-04 16:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-03-04 16:37 - 2016-03-05 14:18 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-03-04 16:37 - 2016-03-04 16:37 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-03-04 16:36 - 2016-03-05 10:16 - 00000000 ____D C:\Users\acer\AppData\Local\AvgSetupLog
2016-03-04 16:36 - 2016-03-04 16:37 - 24930888 _____ (SUPERAntiSpyware) C:\Users\acer\Downloads\SUPERAntiSpyware.exe
2016-03-04 16:36 - 2016-03-04 16:37 - 22908888 _____ (Malwarebytes ) C:\Users\acer\Downloads\mbam-setup-2.2.0.1024.exe
2016-03-04 16:36 - 2016-03-04 16:36 - 00000000 ____D C:\Users\acer\AppData\Local\Avg
2016-03-04 16:34 - 2016-03-04 16:35 - 02924848 _____ (AVG Technologies CZ, s.r.o.) C:\Users\acer\Downloads\AVG_Protection_Free_1004.exe
2016-03-04 16:33 - 2016-03-04 16:40 - 220699928 _____ (COMODO) C:\Users\acer\Downloads\cfw_installer_6106_53.exe
2016-03-04 16:29 - 2016-03-05 11:06 - 00000000 ____D C:\Users\acer\AppData\Roaming\AVAST Software
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-11 14:18 - 2014-11-21 08:44 - 01152138 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-11 14:18 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\Inf
2016-03-11 14:07 - 2013-08-22 15:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-11 13:37 - 2013-08-22 15:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-10 08:20 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-09 23:54 - 2013-08-22 14:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-08 12:37 - 2013-08-22 13:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-08 09:10 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\AppCompat
2016-03-07 16:40 - 2013-08-22 14:44 - 00346744 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-07 16:34 - 2014-11-21 15:56 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-03-07 16:34 - 2014-11-21 08:25 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ToastData
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\system32\en-GB
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Program Files\Windows Defender
2016-03-07 16:34 - 2013-08-22 15:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-03-07 16:33 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\WinStore
2016-03-07 16:33 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-06 22:16 - 2014-11-21 08:39 - 02473472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2016-03-05 10:58 - 2015-03-24 13:04 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-05 10:06 - 2013-08-22 15:36 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-03-05 09:13 - 2015-03-24 13:13 - 00000000 ____D C:\ProgramData\McAfee
2016-03-04 22:58 - 2015-03-24 13:13 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-03-04 22:56 - 2015-03-24 13:22 - 00000000 ___HD C:\OEM
2016-03-04 22:55 - 2015-03-24 13:04 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-03-04 22:55 - 2015-03-24 13:04 - 00000000 ____D C:\ProgramData\Acer
2016-03-04 22:55 - 2015-03-24 13:04 - 00000000 ____D C:\Program Files (x86)\Acer
2016-03-04 22:41 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\rescache
2016-03-04 22:35 - 2015-03-24 13:28 - 00000000 ____D C:\Windows\Panther
2016-03-04 22:25 - 2013-08-22 13:36 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-03-04 20:53 - 2015-03-24 13:04 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-04 19:42 - 2015-03-24 13:13 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-03-04 16:30 - 2015-03-24 13:04 - 00000000 ____D C:\ProgramData\OEM
2016-03-04 15:55 - 2013-08-22 13:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
==================== Files in the root of some directories =======
2015-06-05 07:01 - 2015-06-05 07:01 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\acer\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-03-04 22:29
==================== End of FRST.txt ============================
ADDITION:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by acer (2016-03-11 15:54:23)
Running from C:\Users\acer\Downloads
Windows 8.1 (X64) (2016-03-04 22:33:11)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
acer (S-1-5-21-332180863-3176859329-4029246278-1001 - Administrator - Enabled) => C:\Users\acer
Administrator (S-1-5-21-332180863-3176859329-4029246278-500 - Administrator - Disabled)
Guest (S-1-5-21-332180863-3176859329-4029246278-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-332180863-3176859329-4029246278-1003 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Comodo Defense+ (Enabled - Up to date) {493CE176-EB84-BC8D-9707-B3ACF7598648}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
FW: COMODO Firewall (Enabled) {CA6681B7-87D1-B25B-86E8-21EB720D8B8E}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.09.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2001 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.01.2001 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.09.2003.0 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.06.2000.22 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3001 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.09.2002 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8108 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3023 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8111 - Acer Incorporated)
Acer UEIP App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 2.00.3002 - Acer Incorporated)
Acer UEIP Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 2.00.3002 - Acer Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.15.2000.1 - Acer Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
Avast SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 1.0.211.4 - AVAST Software)
Chromodo (HKLM-x32\...\Chromodo) (Version: 48.12.18.238 - Comodo)
COMODO Firewall (HKLM\...\{04833277-EE61-4251-9273-0CF86C0FE710}) (Version: 8.2.0.4792 - COMODO Security Solutions Inc.)
CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5926.02 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.3602.02 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4609.02 - CyberLink Corp.)
Dropbox 15 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 0.9.0 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Foxit PhantomPDF (HKLM-x32\...\{2DF18CA8-86F2-4F3A-A1BF-A2A7D39B9161}) (Version: 7.0.49.127 - Foxit Software Inc.)
Game Explorer Categories - genres (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 12.0.0.6 - WildTangent, Inc.)
Game Explorer Categories - main (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 12.0.0.6 - WildTangent, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.75 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Home Makeover (x32 Version: 3.0.2.59 - WildTangent) Hidden
Hospital Manager (x32 Version: 3.0.2.59 - WildTangent) Hidden
Intel® Chipset Device Software (x32 Version: 10.0.26 - Intel® Corporation) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4189 - Intel Corporation)
Intel® Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1036 - Intel Corporation)
Intel® USB 3.0 Host Controller Adaptation Driver (HKLM\...\{9472AEE5-5D4D-4329-8BD8-B282FD33B8E0}) (Version: 1.0.0.26 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{A5830729-36A3-4900-8135-D8A972914342}) (Version: 1.0.0.516 - Intel Corporation)
Jewel Match 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden
King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1599 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.173 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4641.1005 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.340 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.57 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.39063 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7482 - Realtek Semiconductor Corp.)
Rory's Restaurant (x32 Version: 3.0.2.59 - WildTangent) Hidden
Royal Envoy Double Pack (x32 Version: 3.0.2.59 - WildTangent) Hidden
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1216 - SUPERAntiSpyware.com)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.51 - WildTangent) Hidden
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Driver Package - Intel Corporation (iagpioe) System (02/28/2015 603.9600.1920.60719) (HKLM\...\F7BD032DC4815E48C8FFD310F4793B930D5F4837) (Version: 02/28/2015 603.9600.1920.60719 - Intel Corporation)
Windows Driver Package - Intel Corporation (iai2ce) System (02/28/2015 603.9600.2425.60717) (HKLM\...\358163B8DA80E489A41CAAC6542BF9E6245297EA) (Version: 02/28/2015 603.9600.2425.60717 - Intel Corporation)
Windows Driver Package - Intel Corporation (iauarte) System (02/16/2015 603.9600.2426.59928) (HKLM\...\EBFE7C1B6A8869998B8883D5FAFEA855A69722C8) (Version: 02/16/2015 603.9600.2426.59928 - Intel Corporation)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {06ACB3C9-DCC9-489D-850A-0763DC4A1BD6} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-09] (Acer Incorporated)
Task: {0E11907E-8194-439C-940B-382C1549A589} - System32\Tasks\abDocsDllLoader => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [2015-11-23] ()
Task: {15CD7ADE-D6EF-4FD9-BBCF-A275C5C799F2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-03-11] (Microsoft Corporation)
Task: {2E3B6E39-95ED-44DE-AEA8-28B9A1927B4E} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-04] (AVAST Software)
Task: {2F3607D4-BAC8-4AB9-A5C4-A06609BCAD33} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2016-01-19] (Acer)
Task: {32A03CEC-BFAA-4BF5-9ED7-69593CD084E2} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: {3EDB2A04-B521-4BA6-887C-DEDDE276A3B1} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO)
Task: {43C8B170-A365-44B4-8DEB-68334D2B147E} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2015-02-03] (Acer Incorporated)
Task: {49FE31DA-585F-420E-BD46-3C631A5622D8} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-30] ()
Task: {6CA429B6-FD25-4AC3-9FF0-55C6F8E310AD} - System32\Tasks\avast! SL Update => C:\Program Files\AVAST Software\SecureLine\SLUpdate.exe [2016-03-04] (AVAST Software)
Task: {6E533C18-0709-4655-9D77-26BE0F11F8B2} - System32\Tasks\DropboxOEM => c:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2014-12-12] ()
Task: {714061F0-70BE-4180-8E00-E9EF1BF38A3D} - System32\Tasks\Microsoft\Office\Microsoft Office Touchless Attach Notification => C:\Program Files (x86)\Microsoft Office\Office15\FirstRun.exe [2014-08-23] (Microsoft Corporation)
Task: {72766082-52BD-41D2-B068-24A379EF57E0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {9C569A02-A486-4FDB-B720-94121D4FF34D} - System32\Tasks\Avast SecureLine => C:\Program Files\AVAST Software\SecureLine\SecureLine.exe [2016-03-04] (AVAST Software)
Task: {AD9D0F02-DA70-4CE4-A6D3-1D861E9636CD} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-30] ()
Task: {B98C977C-C8F7-42F6-B2D2-9D16149248FD} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2015-01-28] (Acer Incorporated)
Task: {BC0BAC5B-F1EB-4D90-BFBD-42479BF20032} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2015-08-05] (COMODO)
Task: {C4BCD911-2170-4C67-8612-0158EA087B2A} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2016-01-14] (Acer Incorporated)
Task: {C5D26442-59A4-41FF-8591-B5E256C961D0} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-10-16] (Acer Incorporated)
Task: {C97F653F-0C4C-4A0A-841F-4C161DC9547C} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2015-02-03] (Acer Incorporated)
Task: {DC762D03-D315-45B8-8833-4A474AE9E794} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {E6FDA7F2-0E94-43FD-B78B-7ED8A1B5C167} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2015-11-03] (McAfee, Inc.)
Task: {F5E2AB0E-CC5F-40E2-B75A-D811A1BCF2DB} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-12] (TODO: <Company name>)
Task: {F608657A-FCEA-4710-85F1-F40A6A57DA1A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-05] (AVAST Software)
Task: {F743BA5B-B980-4B35-9D1C-45E72E266CF9} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2015-08-05] (COMODO)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Public\Desktop\Booking.com.lnk -> C:\Program Files\Booking.COM\StartURL.exe () -> hxxp://www.booking.com/index.html?aid=379334
==================== Loaded Modules (Whitelisted) ==============
2015-03-24 13:08 - 2014-10-08 01:27 - 00253776 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-03-04 16:00 - 2016-03-04 15:59 - 00465088 _____ () C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
2016-03-05 11:01 - 2016-03-05 11:01 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-03-05 11:01 - 2016-03-05 11:01 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-09 21:00 - 2016-03-09 21:00 - 02838528 _____ () C:\Program Files\AVAST Software\Avast\defs\16030901\algo.dll
2016-03-05 11:01 - 2016-03-05 11:01 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-03-10 23:54 - 2016-03-10 23:54 - 02838528 _____ () C:\Program Files\AVAST Software\Avast\defs\16031003\algo.dll
2016-03-11 11:55 - 2016-03-11 11:55 - 02839552 _____ () C:\Program Files\AVAST Software\Avast\defs\16031100\algo.dll
2016-03-05 11:01 - 2016-03-05 11:02 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-03-04 22:52 - 2016-03-02 04:47 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libglesv2.dll
2016-03-04 22:52 - 2016-03-02 04:47 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libegl.dll
2016-03-08 19:56 - 2016-02-10 01:17 - 00782336 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-03-08 19:56 - 2016-03-08 22:47 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-03-08 19:56 - 2016-03-08 19:49 - 02547792 _____ () C:\Program Files (x86)\Steam\video.dll
2016-03-08 19:56 - 2015-07-03 16:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-03-08 19:56 - 2015-07-03 16:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-03-08 19:56 - 2016-02-08 23:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-03-08 19:56 - 2016-03-08 19:49 - 00802896 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 20:25 - 2016-02-17 22:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-03-08 19:56 - 2016-02-09 01:33 - 48400672 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-03-08 19:56 - 2016-03-08 22:47 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-03-10 00:12 - 2016-03-08 12:16 - 17541312 _____ () C:\Users\acer\AppData\Local\Google\Chrome\User Data\PepperFlash\21.0.0.182\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Windows\avastSS.scr:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\acmigration.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\actxprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aeinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aepic.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\apphelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\appraiser.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\aswBoot.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\audiosrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\AuthHost.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\authui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\bdesvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\certcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CompatTelRunner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\compstui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d2d1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DCompiler_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dcsx_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_34.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx10_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx10_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx11_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_24.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_25.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_26.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_27.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_28.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_29.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_30.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_31.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_33.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\d3dx9_35.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\d3dx9_36.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_37.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_38.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_39.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_40.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_41.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbgeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dbghelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\devinv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\diagtrack.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dpapisrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\fveapi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\generaltel.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\glcndFilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ie4uinit.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iepeers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\iertutil.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\InkEd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\inseng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\invagent.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\localspl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\lsasrv.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfc42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfc42u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfsvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\microsoft-windows-system-events.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msiexec.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\mtxoci.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\ntoskrnl.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\ntvdm64.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\PCPKsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PhotoMetadataHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\pku2u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\puiobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rdpudd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schedsvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\schtasks.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sdbinst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SHCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\StorageContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\storewuauth.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SysFxUI.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\sysmain.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\SystemSettingsDatabase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\taskeng.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdc.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tdh.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\TsWpfWrp.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\tzsync.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\werdiagcontroller.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WiFiDisplay.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\win32spl.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\winshfhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMADMOD.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMALFXGFXDSP.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMSPDMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\wow64cpu.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\WSShared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\x3daudio1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\X3DAudio1_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_10.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_8.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine2_9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\xactengine3_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xactengine3_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAPOFX1_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_5.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\XAudio2_7.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_2.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\xinput1_3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\actxprxy.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atlthunk.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\atmfd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\authui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\bcryptprimitives.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\catsrvut.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\certcli.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\cfgbkend.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\clfsw32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\COLORCNV.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\comsvcs.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\CPFilters.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\d2d1.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_33.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_37.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DCompiler_47.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dcsx_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_33.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_37.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx10_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx11_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_24.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_25.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_26.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_27.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_28.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_29.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_30.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_31.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_32.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_33.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_34.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_35.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\d3dx9_36.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_37.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_38.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_39.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_40.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_41.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_42.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\D3DX9_43.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\davclnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbgeng.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dbghelp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\devenum.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtmsft.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\dxtrans.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eapp3hst.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\eappgnui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\EncDec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\evr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ExplorerFrame.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\gdi32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\GeofenceMonitorService.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\glcndFilter.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hhctrl.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\hlink.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieapfltr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iedkcs32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ieframe.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iepeers.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\iertutil.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\ieui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcomm.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\inetcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\InkEd.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\jscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\jscript9diag.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\kerberos.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\KernelBase.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ksproxy.ax:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfc42.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfc42u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetcore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfnetsrc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfps.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfsvr.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mfvdsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MFWMAAEC.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP3DMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP43DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MP4SDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\MPG4DECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msctf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msfeeds.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtml.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\MshtmlDac.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mshtmled.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msiexec.exe:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\msmpeg2adec.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msorcl32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msrating.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msv1_0.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml3.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\msxml6.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\mtxoci.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\ncrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ncryptsslp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntdll.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\ntvdm64.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PCPKsp.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PhotoMetadataHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\photowiz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\pku2u.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\PrintConfig.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\puiobj.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qdvd.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\qedit.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\quartz.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\RESAMPLEDMO.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rgb9rast.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\rpcrt4.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\schtasks.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\sechost.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SettingSync.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shacct.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\SHCore.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\shell32.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\StorageContextHandler.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\storagewmi.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\taskeng.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdc.ocx:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tdh.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\tracerpt.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\TsWpfWrp.exe:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\twinui.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\urlmon.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\vbscript.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\VIDRESZR.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\webcheck.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WebClnt.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.Data.Pdf.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Immersive.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\Windows.UI.Xaml.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wininet.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\winshfhc.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMADMOE.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMSPDMOE.DLL:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\WMVDECOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVENCOD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSDECD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVSENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WMVXENCD.DLL:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\wpdshext.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\WSShared.dll:$CmdTcID [64]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\x3daudio1_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\X3DAudio1_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_10.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_8.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine2_9.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xactengine3_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAPOFX1_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_0.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_4.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_5.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_6.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\XAudio2_7.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_1.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_2.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\SysWOW64\xinput1_3.dll:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\afd.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswHwid.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswRdr2.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswRvrt.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\aswStm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\bthport.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\cng.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\hidbth.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\ksecpkg.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mountmgr.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb10.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\mrxsmb20.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\rfcomm.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\tdx.sys:$CmdTcID [130]
AlternateDataStreams: C:\Windows\system32\Drivers\WdBoot.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WdFilter.sys:$CmdTcID [64]
AlternateDataStreams: C:\Windows\system32\Drivers\WdNisDrv.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (2).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner (2).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\AdwCleaner.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\adwcleaner_5.101.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\adwcleaner_5.101.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\avast_free_antivirus_setup_online_cnet2 (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\AVG_Protection_Free_1005.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\esetsmartinstaller_enu.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\esetsmartinstaller_enu.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\FRST64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\FRST64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (2).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\JRT (2).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\JRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\JRT.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001 (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001 (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\mbar-1.09.3.1001.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\MiniToolBox.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\MiniToolBox.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\penguin.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\rkill.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\rkill.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\SecurityCheck.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\SteamSetup.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\SteamSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\TFC (1).exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\TFC (1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\TFC.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\acer\Downloads\TFC.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (2).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (3).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup (4).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\acer\Downloads\the_fighter_pullup.pdf:$CmdZnID [26]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2ce.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 13:25 - 2013-08-22 13:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-332180863-3176859329-4029246278-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\acer01.jpg
DNS Servers: 156.154.70.22 - 156.154.71.22
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{46F80A27-08AE-4727-A72F-DF10C6857612}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector12\PDR10.EXE
FirewallRules: [{BC8007AF-5C72-4407-A098-B0C7B565EDE3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{32944D24-9CCF-45BA-9E86-044B62DC1E46}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{B81E5AA0-EE69-4109-AEAC-8ADCF82566DC}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{A3EAD224-CFDA-46B9-A4AB-0AC2F1AE5F22}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{349B57D7-014D-47C1-9712-355AC3DDFF4B}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{4555ABDD-6CC7-46CE-B664-8E1A95BDB075}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{C267FCB9-4255-4F6C-81F8-D3C37F5A6284}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{74FA046F-378D-4F65-BB00-A5D0B9C7D9B1}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{14798929-6536-476F-BA01-D49EED41336F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{55712EE4-C645-48A9-88BC-7FBC23AD18C2}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{7C5FC920-D4E6-44A5-9094-B57946CCB51F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{AB528CF6-ECF6-4920-944D-613F0B992CD4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{7DEEC866-F1CC-4566-B295-667F520DC4CA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{3328B31A-625C-48C5-9D35-F29B72DA2934}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{4D4CD1BE-9264-4B18-8D0F-1D411EA11799}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{D9C19756-B307-4494-BE22-6BDD0CE750AA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{713688C9-0D62-48A9-A9EF-ADE5C17E2BEB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{ED9520D3-6FBC-4AFD-BB10-CA14F889A5B9}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{E52E0E95-E2D6-498D-92B1-0940D5A0A550}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{69A79439-26FD-4115-8D3D-801CEE0A7574}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1B00F2C0-3EA4-4164-A5D6-03E1DD4B0B20}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1001EE3-8CC5-498D-A18E-6FBAB5C54922}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{1D4E0902-B8CD-444C-9743-D080EED87752}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{5B84DC77-9A21-4E00-AFEB-E3444F3012A5}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{F4EC42EC-0312-479F-999F-6F7FABB4BABF}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{BD738E99-894C-4620-A32A-9D08E0F406A6}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{DF81BDA9-E34E-48D5-B79B-381A01BBB643}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{57C1F0CA-3020-4B9D-8936-B2B28FD8EC32}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{29DA72DF-B432-4173-A28F-7CE1E803BCD3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{5F4FB086-4483-4CE6-B3DC-51A7898FA09C}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F800747B-E368-4615-A1F4-3B1499872AFC}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{6AD166CB-7FFF-4999-A597-29D7A9DA44B2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{A6E41D06-17EB-4F39-B8B3-5CAAA10AF8CA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{2A0B8576-C45F-40E9-91F8-82E5A0110FFD}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{6559A39F-441C-4003-BE64-6DC232B63228}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9882A18F-8A22-4FCA-A817-9FDBEB5CC8AA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{14D20D34-7C75-4EEA-8EDA-1D8CA3620381}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E3F0D9E2-F72B-487B-B213-C85A24D4F6C1}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{653ADC01-280E-4E7E-840B-28E380F83D21}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
==================== Restore Points =========================
04-03-2016 16:49:34 Installed AVG 2016
04-03-2016 16:52:15 Installed AVG
04-03-2016 22:24:43 Windows Modules Installer
06-03-2016 19:12:31 JRT Pre-Junkware Removal
08-03-2016 22:30:02 Installed DirectX
11-03-2016 09:03:40 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/11/2016 02:04:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: MRT.exe, version: 5.34.12400.0, time stamp: 0x56cebba9
Faulting module name: webio.dll, version: 6.3.9600.17415, time stamp: 0x545040e0
Exception code: 0xc0000409
Fault offset: 0x0000000000031035
Faulting process ID: 0x195c
Faulting application start time: 0xMRT.exe0
Faulting application path: MRT.exe1
Faulting module path: MRT.exe2
Report ID: MRT.exe3
Faulting package full name: MRT.exe4
Faulting package-relative application ID: MRT.exe5
Error: (03/11/2016 10:55:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (03/11/2016 08:20:43 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: acc
Start Time: 01d17b6e27502ec1
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: 1d494a9f-e762-11e5-8275-3065ec794018
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2016 11:21:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 26d0
Start Time: 01d17b22d7c053e7
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: cca7c466-e716-11e5-8275-3065ec794018
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2016 10:21:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 23dc
Start Time: 01d17b1a75bf5bb8
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: 6ca81e97-e70e-11e5-8275-3065ec794018
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/10/2016 12:06:13 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: b20
Start Time: 01d17a5f1716d6fb
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: e290c8a5-e653-11e5-8275-3065ec794018
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/09/2016 10:53:53 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 21c4
Start Time: 01d17a55d9ea6981
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: c9ceb4e6-e649-11e5-8274-3065ec794018
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/09/2016 10:23:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 348
Start Time: 01d17a51a44e335b
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Report Id: 99634495-e645-11e5-8274-3065ec794018
Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
Error: (03/09/2016 08:26:41 PM) (Source: Steam Client Service) (EventID: 1) (User: )
Description: Error: Failed to copy new service file to temp location
Error: (03/09/2016 04:50:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: version_logging.exe, version: 4.0.0.0, time stamp: 0x568e22c3
Faulting module name: OLEAUT32.dll, version: 6.3.9600.17560, time stamp: 0x5493b320
Exception code: 0xc0000005
Fault offset: 0x000000000000185d
Faulting process ID: 0xb10
Faulting application start time: 0xversion_logging.exe0
Faulting application path: version_logging.exe1
Faulting module path: version_logging.exe2
Report ID: version_logging.exe3
Faulting package full name: version_logging.exe4
Faulting package-relative application ID: version_logging.exe5
System errors:
=============
Error: (03/11/2016 02:06:16 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2 x64 Edition - March 2016 (KB890830).
Error: (03/11/2016 12:19:43 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:42 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:40 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:40 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:37 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:36 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:34 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/11/2016 12:19:34 AM) (Source: DCOM) (EventID: 10010) (User: ACER_PC)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (03/10/2016 11:51:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect.
CodeIntegrity:
===================================
Date: 2016-03-11 15:01:15.146
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 14:36:00.855
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 14:21:44.477
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 14:14:03.579
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 13:17:48.955
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 13:05:46.629
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 11:50:34.548
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 11:15:24.441
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 11:06:06.929
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-11 10:43:34.653
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel® Celeron® CPU N3050 @ 1.60GHz
Percentage of memory in use: 64%
Total physical RAM: 4010.02 MB
Available physical RAM: 1410.14 MB
Total Virtual: 6570.52 MB
Available Virtual: 2709.28 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:917.05 GB) (Free:864.68 GB) NTFS
Drive d: (FM2016) (CDROM) (Total:1.27 GB) (Free:0 GB) UDF
Drive e: (PHILIPS) (Removable) (Total:3.86 GB) (Free:3.77 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 87DC2A18)
Partition: GPT.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 1.
==================== End of Addition.txt ============================