Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Verification I don't have any malware or virus related problems.


  • This topic is locked This topic is locked
13 replies to this topic

#1 Blockheadmcgrizz

Blockheadmcgrizz

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 25 March 2016 - 01:39 AM

I just registered at BleepingComputer. I don't think the computer I'm using at the moment has any malware or virus related problems, but verification from an experienced user would certainly give me peace of mind. I will post a FRST log below for you guys to review to check if my pc has any problems. If my pc has nothing wrong, that's great! Thanks :)

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Cathy (2016-03-24 23:26:40)
Running from C:\Users\Cathy\Downloads
Windows 8 (X64) (2016-03-01 04:02:31)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1182220091-3181907508-3606138005-500 - Administrator - Disabled)
Cathy (S-1-5-21-1182220091-3181907508-3606138005-1001 - Administrator - Enabled) => C:\Users\Cathy
Guest (S-1-5-21-1182220091-3181907508-3606138005-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Security Suite (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security Suite (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Security Suite (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.5108 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation)
Microsoft Expression Encoder 4 Screen Capture Codec (HKLM-x32\...\{F9EC30D1-F688-4708-9850-CB5120074AAA}) (Version: 4.0.3205.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 45.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 en-US)) (Version: 45.0.1 - Mozilla)
Norton Security Suite (HKLM-x32\...\N360) (Version: 22.6.0.142 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6937 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{0D61A55C-3ADC-409F-BF5B-A1766D1F5944}) (Version: 6.2.9200.29053 - Realtek Semiconductor Corp.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {03D18265-7E9D-4BFF-A3C0-076CD3A62A2F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\First Boot => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe
Task: {053127DD-3A17-4780-86EF-7A8283FC7DC5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {3255BB24-D463-441B-A3B9-E5FCAEE75E3F} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\SymErr.exe [2016-02-10] (Symantec Corporation)
Task: {4F73F5A2-715D-4E0A-BECF-8D6F9A48FBAA} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\SymErr.exe [2016-02-10] (Symantec Corporation)
Task: {5FEAEB47-7690-4B05-A0C4-0EC11BDE32F5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe
Task: {69421AD5-5743-4E92-BD72-92DA10FE4D3F} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-06-06] (Realtek Semiconductor)
Task: {7D8A6DE2-D2D1-4A3E-89DC-71EA04FAA869} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security Suite\Upgrade.exe [2016-02-25] (Symantec Corporation)
Task: {914D0EE6-E52B-4BED-92A8-01B3B1226DED} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\WSCStub.exe [2016-02-25] (Symantec Corporation)
Task: {A122D309-7968-448D-8E05-5A7B3B388B38} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-23] (Adobe Systems Incorporated)
Task: {CC0CE053-A1E5-4BB6-8D29-448717342539} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-03-09] (Microsoft Corporation)
Task: {D5064812-596F-40C7-B8C8-10680ED66EFB} - System32\Tasks\{926EAE37-7EAC-440E-931C-4E48FD1CB1C0} => pcalua.exe -a "c:\Program Files (x86)\Microsoft Expression\Encoder 4\XSetup.exe" -c -x -AppLangId:1033 "-manifest:EncoderManifest.cab" "-source:c:\Program Files (x86)\Microsoft Expression\Encoder 4\Setup\;c:\5c6ded653ea41d40a22f6743c2\Setup"

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2012-12-12 17:38 - 2012-12-12 17:38 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-03-02 04:48 - 2016-03-02 04:48 - 00016384 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\658efb4e1789d48181d0a2758b8f2bab\PSIClient.ni.dll
2013-11-23 05:43 - 2012-06-26 02:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-25 22:26 - 2012-07-25 22:26 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Cathy\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Photo Gallery Wallpaper.jpg
DNS Servers: 75.75.75.75 - 75.75.76.76
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "Heimdal.lnk"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{0491CE60-41EE-437A-839F-32953383DCD2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{629EF6D3-C3C9-4F66-B702-A2ADDCE2ED1B}] => (Allow) LPort=2869
FirewallRules: [{A5FC0A6B-8903-4014-878E-404FABD8F97B}] => (Allow) LPort=1900
FirewallRules: [{A5007DF7-4A9C-48DC-9891-6B0ED54434A3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{56C0B6ED-268F-4648-9C10-C3D69550EDBD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6D08FA60-4B0D-43AE-8451-CFA0AB7F1954}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{52754CF9-6CBE-41B2-8003-D18FC3E15503}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5C320A7A-9B91-45AC-81A4-A5980B27DF6B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{CE5AF190-44C2-42E3-BB7F-77F2BA37B593}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2E700C6A-A761-4904-87B7-58396DCAA3D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{DDF1A44D-1E59-4637-8727-B1AA4FD3E40A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{A8FB2BED-EC9D-4DDD-AE8D-23E5673DEF5F}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TelnetServer-TlntSvr-TCP-In] => (Allow) %systemroot%\system32\tlntsvr.exe
FirewallRules: [TelnetServer-Tlntadmn-RPC-In] => (Allow) %systemroot%\system32\tlntsvr.exe

==================== Restore Points =========================

17-03-2016 14:36:32 Installed Oracle VM VirtualBox 5.0.16
20-03-2016 14:50:50 Windows Update
22-03-2016 00:09:14 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/24/2016 04:11:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1094

Error: (03/24/2016 04:11:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1094

Error: (03/24/2016 04:11:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (03/22/2016 12:01:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MYFIRSTPC)
Description: Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (03/22/2016 12:01:15 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program WWAHost.exe version 6.2.9200.16420 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 13d4

Start Time: 01d1846d21a8832b

Termination Time: 4294967295

Application Path: C:\Windows\System32\WWAHost.exe

Report Id: 6b0fef12-f060-11e5-be88-a01d486ebd2e

Faulting package full name: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: Windows.Store

Error: (03/22/2016 12:00:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MYFIRSTPC)
Description: App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time.

Error: (03/22/2016 12:09:20 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Synaptics TouchPad Driver.

System Error:
The system cannot find the file specified.
.

Error: (03/21/2016 01:22:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.17568 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1718

Start Time: 01d183af6997551d

Termination Time: 0

Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Report Id: abc5e171-efa2-11e5-be85-a01d486ebd2e

Faulting package full name:

Faulting package-relative application ID:

Error: (03/18/2016 05:23:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1110

Error: (03/18/2016 05:23:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1110


System errors:
=============
Error: (03/22/2016 12:01:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The McAfee Validation Trust Protection Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/22/2016 11:51:20 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 1:13:00 AM on ‎3/‎22/‎2016 was unexpected.

Error: (03/21/2016 11:49:07 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Windows\System32\Drivers\TrueSight.sys

Error: (03/21/2016 09:55:07 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070436: HP - Other hardware - HP Wireless Button Driver.

Error: (03/21/2016 07:16:32 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070436: HP - Other hardware - HP Wireless Button Driver.

Error: (03/21/2016 05:00:49 PM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer ADMIN-PC
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{D3544BDA-B7FE-4621-AF66-33E7FB244B51}.
The master browser is stopping or an election is being forced.

Error: (03/21/2016 12:27:43 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070436: HP - Other hardware - HP Wireless Button Driver.

Error: (03/20/2016 06:45:30 PM) (Source: bowser) (EventID: 8003) (User: )
Description: The master browser has received a server announcement from the computer ADMIN-PC
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{D3544BDA-B7FE-4621-AF66-33E7FB244B51}.
The master browser is stopping or an election is being forced.

Error: (03/20/2016 02:52:36 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070436: HP - Other hardware - HP Wireless Button Driver.

Error: (03/19/2016 07:04:26 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070436: HP - Other hardware - HP Wireless Button Driver.


==================== Memory info ===========================

Processor: Intel® Core™ i3-3120M CPU @ 2.50GHz
Percentage of memory in use: 34%
Total physical RAM: 3985.27 MB
Available physical RAM: 2601.77 MB
Total Virtual: 5713.27 MB
Available Virtual: 4387.36 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:675.5 GB) (Free:629.78 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (RECOVERY) (Fixed) (Total:22.03 GB) (Free:2.19 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 1E1F4777)

Partition: GPT.

==================== End of Addition.txt ============================

 

 

 

 

 



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,528 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:08 AM

Posted 25 March 2016 - 08:07 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your addition.txt file is clean.

Please post the FRST.txt file that was also created by the Farbar tool.

I will review it.

#3 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 25 March 2016 - 01:55 PM

I'm pretty sure this is the FRST text file. I did multiple FRST scans in the past just to test out the program, so I have multiple text files. But I think this is the one.

 

 

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Cathy (administrator) on MYFIRSTPC (24-03-2016 23:25:54)
Running from C:\Users\Cathy\Downloads
Loaded Profiles: Cathy (Available Profiles: Cathy)
Platform: Windows 8 (X64) Language: English (United States)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\n360.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\n360.exe
(McAfee Inc.) C:\Program Files\McAfee\Real Protect\RealProtect.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Farbar) C:\Users\Cathy\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKLM\...\RunOnce: [RealProtect] => C:\Program Files\McAfee\Real Protect\RealProtect.exe [1714544 2016-03-22] (McAfee Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine64\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine64\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine64\22.6.0.142\buShell.dll [2016-02-18] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Heimdal.lnk [2016-03-19]
ShortcutTarget: Heimdal.lnk -> C:\Program Files (x86)\Heimdal\Client\HeimdalAgent.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{D3544BDA-B7FE-4621-AF66-33E7FB244B51}: [DhcpNameServer] 75.75.75.75 75.75.76.76

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPNOT13/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPNOT13/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPNOT13/1
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=sk2b&ocid=sk2bdhp&osmkt=en-us
HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {79D53E92-47DE-44B0-AC8B-D95962E9F714} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-1182220091-3181907508-3606138005-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine64\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24] (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24] (Oracle Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
BHO-x32: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1182220091-3181907508-3606138005-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\22.6.0.142\coIEPlg.dll [2016-02-21] (Symantec Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Cathy\AppData\Roaming\Mozilla\Firefox\Profiles\sexx5kn7.default
FF DefaultSearchEngine.US: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-23] ()
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-24] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-24] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Extension: Ghostery - C:\Users\Cathy\AppData\Roaming\Mozilla\Firefox\Profiles\sexx5kn7.default\Extensions\firefox@ghostery.com.xpi [2016-03-24]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-21] [not signed]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFAddon
FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFAddon [2016-03-24]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFAddon

Chrome:
=======
CHR Profile: C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-05]
CHR Extension: (Google Docs) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-03-05]
CHR Extension: (Google Drive) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-05]
CHR Extension: (YouTube) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-05]
CHR Extension: (Norton Security Toolbar) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-03-05]
CHR Extension: (Google Sheets) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-03-05]
CHR Extension: (Google Docs Offline) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-05]
CHR Extension: (Norton Identity Safe) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-03-05]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05]
CHR Extension: (Gmail) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-05]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx [2016-03-02]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx [2016-03-02]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [okmhneofinpilciglijihehjpaegledb] - <no Path/update_url>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [250672 2016-03-22] (McAfee, Inc.)
R2 N360; C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\N360.exe [289080 2016-02-25] (Symantec Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [239176 2013-03-04] (Realtek Semiconductor)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [93184 2012-07-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-06] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2013-06-01] (Microsoft Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\BASHDefs\20160316.006\BHDrvx64.sys [1766640 2016-03-03] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1606000.08E\ccSetx64.sys [173808 2015-07-10] (Symantec Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2013-06-01] (Broadcom Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2016-02-04] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2016-02-04] (Symantec Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-11-12] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\IPSDefs\20160323.001\IDSvia64.sys [767224 2016-03-02] (Symantec Corporation)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [864072 2016-03-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106120 2016-03-22] (McAfee, Inc.)
R3 NAVENG; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\VirusDefs\20160324.021\ENG64.SYS [138488 2016-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security Suite\NortonData\22.5.2.15\Definitions\VirusDefs\20160324.021\EX64.SYS [2148080 2016-02-04] (Symantec Corporation)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [288328 2013-01-23] (Realtek Semiconductor Corp.)
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1606000.08E\SRTSP64.SYS [928504 2016-02-23] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1606000.08E\SRTSPX64.SYS [50936 2015-07-10] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\N360x64\1606000.08E\SYMEFASI64.SYS [1621232 2016-02-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\N360x64\1606000.08E\SymELAM.sys [24192 2015-07-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2016-03-02] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1606000.08E\Ironx64.SYS [295664 2016-02-23] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1606000.08E\SYMNETS.SYS [577768 2016-02-23] (Symantec Corporation)
U3 TrueSight; C:\Windows\System32\Drivers\TrueSight.sys [24688 2016-03-21] ()
S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [127456 2016-03-04] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-06] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
S3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [30544 2015-08-13] (HP)
S3 SmbDrv; \SystemRoot\System32\drivers\Smb_driver_AMDASF.sys [X]
S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-24 23:25 - 2016-03-24 23:26 - 00016495 _____ C:\Users\Cathy\Downloads\FRST.txt
2016-03-24 23:25 - 2016-03-24 23:25 - 02374144 _____ (Farbar) C:\Users\Cathy\Downloads\FRST64(1).exe
2016-03-24 15:43 - 2016-03-24 15:43 - 00000000 ____D C:\Windows\System32\Tasks\Norton 360
2016-03-24 15:42 - 2016-03-24 15:42 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2016-03-24 15:42 - 2016-03-24 15:42 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-22 00:30 - 2016-03-22 00:30 - 06837784 _____ (Piriform Ltd) C:\Users\Cathy\Downloads\ccsetup515.exe
2016-03-22 00:29 - 2016-03-22 00:29 - 00000114 ___RH C:\Users\Cathy\Downloads\Stinger.opt
2016-03-22 00:19 - 2016-03-22 00:19 - 00864072 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mfehidk.sys
2016-03-22 00:19 - 2016-03-22 00:19 - 00250672 _____ (McAfee, Inc.) C:\Windows\system32\mfevtps.exe
2016-03-22 00:19 - 2016-03-22 00:19 - 00106120 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\mferkdet.sys
2016-03-22 00:18 - 2016-03-22 00:20 - 00000847 _____ C:\Users\Cathy\Downloads\Stinger_22032016_001820.html
2016-03-22 00:17 - 2016-03-22 00:29 - 00000000 ____D C:\Program Files\stinger
2016-03-22 00:17 - 2016-03-22 00:17 - 00000000 ____D C:\Program Files\McAfee
2016-03-22 00:15 - 2016-03-22 00:15 - 15577968 _____ (McAfee Inc) C:\Users\Cathy\Downloads\stinger64.exe
2016-03-22 00:08 - 2016-03-22 00:08 - 01610352 _____ (Malwarebytes) C:\Users\Cathy\Downloads\JRT.exe
2016-03-22 00:04 - 2016-03-24 23:25 - 00000000 ____D C:\FRST
2016-03-22 00:04 - 2016-03-22 00:04 - 02374144 _____ (Farbar) C:\Users\Cathy\Downloads\FRST64.exe
2016-03-21 23:49 - 2016-03-21 23:49 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-03-21 23:48 - 2016-03-22 00:02 - 00000000 ____D C:\ProgramData\RogueKiller
2016-03-21 23:47 - 2016-03-21 23:48 - 19655240 _____ C:\Users\Cathy\Downloads\RogueKiller.exe
2016-03-21 12:39 - 2016-03-24 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-21 12:39 - 2016-03-24 21:42 - 00000000 ____D C:\Program Files\Java
2016-03-21 12:39 - 2016-03-24 21:41 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-03-21 12:16 - 2016-03-21 12:16 - 57099360 _____ (Oracle Corporation) C:\Users\Cathy\Downloads\jre-8u73-windows-x64.exe
2016-03-21 11:38 - 2016-03-21 11:38 - 00003450 _____ C:\Windows\System32\Tasks\{926EAE37-7EAC-440E-931C-4E48FD1CB1C0}
2016-03-21 11:09 - 2016-03-21 11:09 - 00000000 ____D C:\Windows\pss
2016-03-21 00:33 - 2016-03-21 00:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-21 00:24 - 2016-03-21 00:24 - 00004768 _____ C:\Users\Cathy\AppData\Local\recently-used.xbel
2016-03-21 00:16 - 2016-03-21 00:16 - 00000000 ____D C:\Users\Cathy\.thumbnails
2016-03-20 16:39 - 2016-03-20 16:39 - 05658151 _____ (Swearware) C:\Users\Cathy\Downloads\ComboFix(1).exe
2016-03-19 17:44 - 2016-03-22 16:06 - 00000000 __RHD C:\Users\Cathy\Desktop\Mcgrizz Stuff
2016-03-19 17:37 - 2016-03-19 17:37 - 00000000 ____D C:\ProgramData\CSIS
2016-03-19 17:36 - 2016-03-19 17:36 - 04177016 _____ (CSIS Security Group) C:\Users\Cathy\Downloads\HeimdalSetup.exe
2016-03-18 21:27 - 2016-03-18 21:28 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-18 21:26 - 2016-03-18 21:26 - 01527296 _____ C:\Users\Cathy\Downloads\AdwCleaner.exe
2016-03-18 21:19 - 2016-03-18 21:19 - 00021054 _____ C:\ComboFix.txt
2016-03-18 21:11 - 2016-03-18 21:19 - 00000000 ____D C:\Qoobox
2016-03-18 21:11 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe
2016-03-18 21:11 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe
2016-03-18 21:11 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-03-18 21:11 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-03-18 21:11 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-03-18 21:11 - 2000-08-30 17:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2016-03-18 21:11 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe
2016-03-18 21:11 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe
2016-03-18 21:11 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe
2016-03-18 21:10 - 2016-03-18 21:17 - 00000000 ____D C:\Windows\erdnt
2016-03-18 21:10 - 2016-03-18 21:10 - 05658396 ____R (Swearware) C:\Users\Cathy\Downloads\ComboFix.exe
2016-03-18 21:07 - 2016-03-18 21:07 - 01107912 _____ (Bleeping Computer, LLC) C:\Users\Cathy\Downloads\rkill64.exe
2016-03-18 21:06 - 2016-03-18 21:06 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\Cathy\Downloads\rkill.exe
2016-03-18 20:21 - 2016-03-18 20:21 - 00000000 ____D C:\Users\Cathy\Downloads\data
2016-03-17 14:39 - 2016-03-17 15:12 - 00000000 ____D C:\Users\Cathy\.VirtualBox
2016-03-17 14:39 - 2016-03-17 14:39 - 00000000 ____D C:\Users\Cathy\VirtualBox VMs
2016-03-15 16:23 - 2016-03-15 16:23 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Macromedia
2016-03-15 16:23 - 2016-03-15 16:23 - 00000000 ____D C:\Users\Cathy\AppData\Local\Macromedia
2016-03-15 16:14 - 2016-03-24 23:14 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-15 16:14 - 2016-03-23 13:14 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-15 16:13 - 2016-03-15 16:14 - 00000000 ____D C:\Users\Cathy\AppData\Local\Adobe
2016-03-14 22:24 - 2016-03-14 22:24 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Autodesk
2016-03-11 18:58 - 2016-03-11 18:58 - 00000000 ____D C:\Program Files\Synaptics
2016-03-11 12:01 - 2014-12-04 18:43 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\tlntsess.exe
2016-03-10 22:42 - 2016-03-10 22:42 - 00000000 ____D C:\Users\Cathy\.swt
2016-03-10 22:05 - 2016-03-10 22:05 - 00001122 _____ C:\Windows\SysWOW64\nativelog.txt
2016-03-10 17:39 - 2016-03-10 17:39 - 00000000 ____D C:\Users\Cathy\Documents\Expression
2016-03-10 17:38 - 2016-03-21 11:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2016-03-10 14:03 - 2016-03-10 14:03 - 00000862 _____ C:\Windows\system32\termcap
2016-03-07 13:42 - 2016-03-21 11:34 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-06 16:04 - 2016-03-21 00:24 - 00000000 ____D C:\Users\Cathy\AppData\Local\gtk-2.0
2016-03-06 15:51 - 2016-03-21 00:25 - 00000000 ____D C:\Users\Cathy\.gimp-2.8
2016-03-06 15:51 - 2016-03-06 15:51 - 00000901 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-03-06 15:51 - 2016-03-06 15:51 - 00000000 ____D C:\Users\Cathy\AppData\Local\gegl-0.2
2016-03-06 15:51 - 2016-03-06 15:51 - 00000000 ____D C:\Users\Cathy\AppData\Local\fontconfig
2016-03-06 15:50 - 2016-03-06 15:51 - 00000000 ____D C:\Program Files\GIMP 2
2016-03-05 21:44 - 2016-03-05 21:44 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Bertware
2016-03-05 01:31 - 2016-03-21 13:23 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-05 01:31 - 2016-03-06 02:00 - 00000000 ____D C:\Users\Cathy\AppData\Local\Google
2016-03-05 00:03 - 2016-03-05 00:03 - 00000000 ____D C:\Users\Cathy\AppData\Local\LogMeIn
2016-03-05 00:03 - 2016-03-05 00:03 - 00000000 ____D C:\ProgramData\LogMeIn
2016-03-05 00:01 - 2016-03-05 00:19 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Notepad++
2016-03-05 00:01 - 2016-03-05 00:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-03-05 00:01 - 2016-03-05 00:01 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-03-04 19:13 - 2016-03-04 19:13 - 00262144 _____ C:\Windows\system32\config\userdiff
2016-03-04 17:29 - 2016-03-04 17:29 - 00205784 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2016-03-04 17:29 - 2016-03-04 17:29 - 00127456 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
2016-03-03 13:19 - 2016-03-16 19:10 - 00129543 _____ C:\Windows\diagwrn.xml
2016-03-03 13:19 - 2016-03-16 19:10 - 00129543 _____ C:\Windows\diagerr.xml
2016-03-02 23:47 - 2016-03-02 23:47 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\WinRAR
2016-03-02 23:47 - 2016-03-02 23:47 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-02 23:47 - 2016-03-02 23:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-02 23:46 - 2016-03-02 23:47 - 00000000 ____D C:\Program Files\WinRAR
2016-03-02 15:24 - 2016-03-24 15:38 - 00003230 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2016-03-02 15:24 - 2016-03-02 15:24 - 00111344 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2016-03-02 15:24 - 2016-03-02 15:24 - 00008214 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2016-03-02 15:24 - 2016-03-02 15:24 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-03-02 15:23 - 2016-03-24 15:38 - 00000000 ____D C:\Windows\system32\Drivers\N360x64
2016-03-02 15:23 - 2016-03-24 15:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Suite
2016-03-02 15:23 - 2016-03-02 15:23 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-03-02 15:23 - 2016-03-02 15:23 - 00000000 ____D C:\Program Files (x86)\Norton Security Suite
2016-03-02 15:22 - 2016-03-21 00:24 - 00050688 ___SH C:\Users\Cathy\Desktop\Thumbs.db
2016-03-02 15:22 - 2016-03-06 17:43 - 00000000 ____D C:\Users\Public\Downloads\Norton
2016-03-02 00:25 - 2016-03-02 00:26 - 00281624 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-02 00:24 - 2016-03-02 00:24 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-03-02 00:24 - 2016-03-02 00:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-02 00:08 - 2015-01-08 23:43 - 00951808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-03-02 00:08 - 2015-01-08 22:03 - 00601088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-03-02 00:03 - 2015-04-30 06:44 - 00478296 _____ C:\Windows\SysWOW64\locale.nls
2016-03-02 00:03 - 2015-04-30 06:44 - 00478296 _____ C:\Windows\system32\locale.nls
2016-03-02 00:03 - 2015-03-11 22:31 - 01688576 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2016-03-02 00:03 - 2015-03-03 23:41 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-03-02 00:03 - 2015-03-03 23:39 - 00632832 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-03-02 00:03 - 2015-03-03 23:39 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-03-02 00:03 - 2015-03-03 21:53 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-03-02 00:03 - 2015-03-03 21:52 - 00676864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-03-02 00:03 - 2014-04-16 11:20 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-03-02 00:03 - 2014-04-16 11:20 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-03-02 00:02 - 2015-09-02 06:49 - 02341376 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-03-02 00:02 - 2015-09-02 06:49 - 01850880 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-03-02 00:02 - 2015-09-02 06:38 - 01744384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-03-02 00:02 - 2015-09-02 06:38 - 01422336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-03-02 00:02 - 2015-03-27 01:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\cryptcatsvc.dll
2016-03-02 00:01 - 2015-03-14 01:07 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-03-02 00:01 - 2015-03-13 23:33 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-03-02 00:00 - 2014-11-25 23:43 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-02 00:00 - 2014-11-25 21:50 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-02 00:00 - 2013-12-04 16:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2016-03-02 00:00 - 2013-12-04 16:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2016-03-02 00:00 - 2013-03-02 01:23 - 00375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2016-03-02 00:00 - 2013-03-01 19:44 - 01011200 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2016-03-02 00:00 - 2012-12-14 21:55 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2016-03-02 00:00 - 2012-10-23 20:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2016-03-02 00:00 - 2012-10-23 19:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2016-03-01 23:59 - 2016-02-20 22:23 - 00046768 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-01 23:59 - 2016-02-20 20:43 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-01 23:59 - 2016-02-20 20:43 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-01 23:59 - 2016-02-20 20:43 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-01 23:59 - 2016-02-20 20:43 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-01 23:59 - 2016-02-20 20:43 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-01 23:59 - 2016-02-05 07:09 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-01 23:59 - 2015-12-09 07:27 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-03-01 23:59 - 2015-03-11 22:31 - 02048000 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2016-03-01 23:59 - 2015-03-11 22:31 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2016-03-01 23:59 - 2015-03-11 20:52 - 01933312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2016-03-01 23:59 - 2013-08-23 00:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-03-01 23:59 - 2013-08-22 18:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-03-01 23:59 - 2013-04-02 16:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2016-03-01 23:59 - 2013-04-02 16:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2016-03-01 23:59 - 2013-03-21 20:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-03-01 23:59 - 2013-03-21 15:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-03-01 23:58 - 2015-09-12 06:29 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-03-01 23:58 - 2015-09-12 06:29 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2016-03-01 23:58 - 2015-09-12 06:29 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\appserverai.dll
2016-03-01 23:58 - 2015-09-12 06:29 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\RDWebAI.dll
2016-03-01 23:58 - 2015-09-12 06:29 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VmHostAI.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-03-01 23:58 - 2015-07-22 15:09 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-01 23:58 - 2015-04-05 22:36 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2016-03-01 23:58 - 2015-04-05 21:08 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2016-03-01 23:57 - 2015-08-10 07:34 - 05331968 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-03-01 23:57 - 2015-08-10 07:34 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-03-01 23:57 - 2015-08-10 07:34 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-03-01 23:57 - 2013-10-31 22:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2016-03-01 23:57 - 2013-10-31 20:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2016-03-01 23:47 - 2016-03-22 01:08 - 00000000 ____D C:\Windows\system32\AutoUpdateLicense
2016-03-01 23:44 - 2015-12-08 20:39 - 00301728 _____ (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-03-01 23:40 - 2014-07-15 15:51 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2016-03-01 18:15 - 2016-03-01 18:15 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\WebApp
2016-03-01 17:42 - 2016-03-01 17:42 - 00000000 ____D C:\Users\Public\CyberLink
2016-03-01 17:42 - 2016-03-01 17:42 - 00000000 ____D C:\Users\Cathy\Documents\CyberLink
2016-03-01 17:42 - 2016-03-01 17:42 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\CyberLink
2016-03-01 17:05 - 2016-03-01 17:05 - 00000000 ____D C:\ProgramData\PCPitstop
2016-03-01 16:36 - 2016-03-22 01:08 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2016-03-01 16:36 - 2016-03-22 01:08 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-01 16:36 - 2016-03-22 01:07 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2016-03-01 16:36 - 2016-03-22 01:07 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-01 16:36 - 2014-07-11 21:41 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2016-03-01 16:36 - 2014-07-11 21:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2016-03-01 16:36 - 2014-07-11 21:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2016-03-01 16:36 - 2014-07-11 21:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2016-03-01 16:36 - 2014-07-11 21:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2016-03-01 16:36 - 2014-07-11 21:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2016-03-01 16:36 - 2014-07-11 21:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2016-03-01 16:36 - 2014-07-11 21:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2016-03-01 16:36 - 2014-07-11 21:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2016-03-01 16:36 - 2014-07-11 21:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2016-03-01 16:36 - 2014-07-11 21:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2016-03-01 16:36 - 2014-07-11 21:15 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2016-03-01 16:36 - 2014-07-08 15:33 - 00181248 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2016-03-01 16:36 - 2014-07-08 15:32 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-01 16:36 - 2014-07-08 15:32 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2016-03-01 16:36 - 2014-07-08 15:30 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-01 16:36 - 2014-07-06 22:52 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2016-03-01 16:36 - 2014-07-06 22:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2016-03-01 16:36 - 2014-07-04 03:52 - 00328000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2016-03-01 16:36 - 2014-06-28 00:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-03-01 16:36 - 2014-06-27 23:56 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-03-01 16:36 - 2014-06-17 16:27 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-03-01 16:36 - 2014-06-17 16:23 - 02238464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-03-01 16:36 - 2014-04-29 15:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe
2016-03-01 16:36 - 2014-04-29 15:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
2016-03-01 16:36 - 2013-06-16 15:41 - 00997632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2016-03-01 16:36 - 2013-06-01 04:34 - 02391280 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-03-01 16:36 - 2013-06-01 03:24 - 02106176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-03-01 16:36 - 2013-06-01 02:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-03-01 16:36 - 2013-06-01 02:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2016-03-01 16:36 - 2013-06-01 02:24 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2016-03-01 16:36 - 2013-06-01 02:23 - 01842176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-03-01 16:36 - 2013-06-01 02:23 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2016-03-01 16:36 - 2013-06-01 02:22 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2016-03-01 16:36 - 2013-06-01 02:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe
2016-03-01 16:36 - 2013-06-01 02:21 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-03-01 16:36 - 2013-06-01 02:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-03-01 16:36 - 2013-06-01 02:20 - 02219520 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-03-01 16:36 - 2013-06-01 02:20 - 01048576 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2016-03-01 16:36 - 2013-06-01 02:20 - 00583168 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2016-03-01 16:36 - 2013-06-01 02:19 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManager.dll
2016-03-01 16:36 - 2013-05-31 20:08 - 00037632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthAvrcpTg.sys
2016-03-01 16:35 - 2014-03-24 16:42 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2016-03-01 16:35 - 2014-03-24 15:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2016-03-01 16:35 - 2014-01-26 20:39 - 01939288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-01 16:35 - 2013-08-02 23:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2016-03-01 16:35 - 2013-08-02 23:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2016-03-01 16:35 - 2013-08-02 23:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2016-03-01 16:35 - 2013-08-02 22:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2016-03-01 16:35 - 2013-08-02 22:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2016-03-01 16:35 - 2013-08-02 22:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2016-03-01 16:35 - 2013-08-01 23:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-03-01 16:35 - 2013-08-01 22:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2016-03-01 16:35 - 2013-07-24 16:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2016-03-01 16:35 - 2013-07-24 16:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2016-03-01 16:35 - 2012-11-19 22:24 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2016-03-01 16:35 - 2012-11-19 22:17 - 01184256 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-03-01 16:35 - 2012-11-19 22:02 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDKURD.DLL
2016-03-01 16:35 - 2012-11-19 21:59 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDKURD.DLL
2016-03-01 16:34 - 2016-03-22 01:08 - 00209712 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2016-03-01 16:34 - 2014-02-03 16:56 - 00332632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-01 16:34 - 2014-02-03 16:56 - 00278872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-03-01 16:34 - 2014-01-30 17:48 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2016-03-01 16:34 - 2014-01-30 17:06 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2016-03-01 16:34 - 2014-01-15 16:42 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-03-01 16:34 - 2014-01-02 16:35 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2016-03-01 16:34 - 2014-01-02 16:32 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2016-03-01 16:34 - 2013-08-29 22:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-03-01 16:34 - 2013-08-29 22:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2016-03-01 16:34 - 2013-08-29 16:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2016-03-01 16:34 - 2013-08-20 23:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2016-03-01 16:34 - 2013-08-09 23:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2016-03-01 16:34 - 2013-07-24 16:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-03-01 16:34 - 2013-07-24 16:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-03-01 16:33 - 2014-07-24 06:50 - 00447296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2016-03-01 16:33 - 2014-07-16 16:28 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2016-03-01 16:33 - 2014-07-16 15:59 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2016-03-01 16:33 - 2014-07-16 15:59 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2016-03-01 16:33 - 2014-07-11 23:45 - 01549824 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2016-03-01 16:33 - 2014-07-11 21:36 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-03-01 16:33 - 2014-07-11 21:34 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-03-01 16:33 - 2013-10-04 23:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-01 16:33 - 2013-08-29 22:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2016-03-01 16:33 - 2013-08-29 22:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2016-03-01 16:33 - 2013-08-29 16:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2016-03-01 16:33 - 2013-08-29 16:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2016-03-01 16:33 - 2013-07-09 01:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2016-03-01 16:33 - 2013-07-08 20:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2016-03-01 16:33 - 2013-07-08 15:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2016-03-01 16:33 - 2013-07-08 15:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2016-03-01 16:33 - 2013-07-08 15:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2016-03-01 16:33 - 2013-07-08 15:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2016-03-01 16:33 - 2013-07-02 17:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2016-03-01 16:33 - 2013-07-02 17:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2016-03-01 16:33 - 2013-07-02 17:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-03-01 16:33 - 2013-07-02 17:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2016-03-01 16:33 - 2013-06-30 15:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2016-03-01 16:33 - 2013-06-30 15:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2016-03-01 16:33 - 2013-06-28 23:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2016-03-01 16:33 - 2013-06-28 23:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2016-03-01 16:33 - 2013-06-25 20:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2016-03-01 16:33 - 2013-06-25 19:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2016-03-01 16:33 - 2013-06-24 15:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-03-01 16:33 - 2013-06-18 22:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2016-03-01 16:33 - 2013-06-18 22:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2016-03-01 16:33 - 2013-06-18 15:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2016-03-01 16:33 - 2013-06-18 15:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2016-03-01 16:33 - 2013-06-11 16:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2016-03-01 16:33 - 2013-06-11 16:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2016-03-01 16:33 - 2013-06-06 01:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-01 16:32 - 2014-03-01 02:47 - 01258496 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-01 16:32 - 2014-01-30 17:48 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-01 16:32 - 2013-10-30 22:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2016-03-01 16:32 - 2013-10-30 22:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2016-03-01 16:32 - 2013-10-30 21:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2016-03-01 16:32 - 2013-10-30 20:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2016-03-01 16:32 - 2013-10-13 13:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-03-01 16:31 - 2014-03-01 02:47 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2016-03-01 16:31 - 2014-03-01 01:07 - 01075200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2016-03-01 16:31 - 2014-02-28 23:59 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-01 16:31 - 2014-02-14 21:15 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2016-03-01 16:31 - 2013-11-25 16:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-03-01 15:00 - 2016-03-01 15:00 - 00000000 ____D C:\ProgramData\TechUtilities64
2016-03-01 14:50 - 2016-03-06 02:11 - 00000000 ____D C:\Users\Cathy\AppData\Local\ElevatedDiagnostics
2016-03-01 04:54 - 2016-01-05 13:16 - 00826328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-01 04:54 - 2016-01-05 13:16 - 00176088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-29 23:47 - 2014-10-08 21:00 - 01519104 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2016-02-29 23:47 - 2014-10-08 21:00 - 01484288 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2016-02-29 23:47 - 2014-10-08 21:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2016-02-29 23:47 - 2014-10-08 20:59 - 01195520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll
2016-02-29 23:47 - 2014-10-08 20:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vsstrace.dll
2016-02-29 23:05 - 2016-03-09 13:55 - 00000000 ____D C:\Windows\system32\MRT
2016-02-29 23:05 - 2016-03-09 13:51 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-29 23:01 - 2015-10-01 06:10 - 00869568 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-02-29 23:01 - 2015-10-01 06:09 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-02-29 22:50 - 2014-06-10 15:44 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2016-02-29 22:50 - 2014-06-10 15:43 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2016-02-29 22:48 - 2016-03-22 01:07 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2016-02-29 22:47 - 2015-12-14 17:01 - 14269440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-29 22:47 - 2015-12-14 17:00 - 19349504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-29 22:47 - 2015-11-16 09:10 - 01821192 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-29 22:47 - 2015-11-16 07:55 - 01410000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-29 22:47 - 2015-11-16 07:28 - 01223168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-02-29 22:47 - 2015-11-16 07:28 - 00384512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2016-02-29 22:47 - 2015-11-16 07:26 - 01637376 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-02-29 22:47 - 2015-11-16 07:26 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-02-29 22:47 - 2015-07-01 06:00 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-02-29 22:47 - 2015-07-01 05:58 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-02-29 22:47 - 2015-07-01 04:42 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2016-02-29 22:47 - 2015-07-01 04:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2016-02-29 22:46 - 2015-12-14 17:01 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-29 22:46 - 2015-12-14 17:01 - 01763328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-29 22:46 - 2015-12-14 17:01 - 01181696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-29 22:46 - 2015-12-14 17:01 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-29 22:46 - 2015-12-14 17:01 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-29 22:46 - 2015-12-14 17:01 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 15422976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 13723648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 03805696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 02793984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 02658304 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 01409536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00949760 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00857600 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00737280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00715776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-02-29 22:46 - 2015-12-14 17:00 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-29 22:46 - 2015-12-14 16:59 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-29 22:46 - 2015-11-07 05:46 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2016-02-29 22:46 - 2015-11-07 05:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2016-02-29 22:46 - 2015-11-07 02:34 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2016-02-29 22:46 - 2015-11-06 22:29 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2016-02-29 22:46 - 2015-09-18 06:32 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-02-29 22:46 - 2015-08-13 03:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-29 22:46 - 2015-08-13 03:44 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-02-29 22:46 - 2015-06-27 06:46 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-29 22:46 - 2015-06-27 06:23 - 00694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-02-29 22:46 - 2015-05-27 19:04 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-29 22:46 - 2015-05-27 19:02 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-29 22:46 - 2015-05-27 19:01 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-29 22:46 - 2015-05-27 19:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2016-02-29 22:46 - 2015-05-27 19:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-29 22:46 - 2015-05-27 19:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-29 22:46 - 2015-05-27 19:01 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-29 22:46 - 2015-05-27 17:44 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-02-29 22:46 - 2015-05-27 17:43 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-29 22:46 - 2015-05-27 17:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2016-02-29 22:46 - 2015-05-27 17:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-02-29 22:46 - 2015-05-27 17:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-02-29 22:46 - 2015-05-27 17:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-02-29 22:46 - 2015-05-27 17:22 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-02-29 22:46 - 2015-05-27 17:20 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-02-29 22:46 - 2015-05-27 17:00 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-29 22:46 - 2015-05-27 16:55 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-02-29 22:45 - 2015-07-13 14:05 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2016-02-29 22:45 - 2015-07-13 14:05 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-29 22:45 - 2014-11-04 23:40 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-02-29 22:45 - 2014-11-04 23:39 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-02-29 22:45 - 2014-10-30 00:20 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-02-29 22:45 - 2014-10-29 22:22 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-02-29 22:45 - 2014-10-29 07:21 - 00499008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-02-29 22:45 - 2014-08-27 23:01 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2016-02-29 22:42 - 2014-11-14 23:06 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-29 22:42 - 2014-11-14 22:13 - 03286016 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-29 22:42 - 2014-11-14 22:13 - 01623552 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-29 22:42 - 2014-11-14 22:13 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-29 22:42 - 2014-11-14 22:13 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-02-29 22:42 - 2014-11-14 22:13 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-29 22:42 - 2014-11-14 22:13 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-29 22:42 - 2014-11-14 22:13 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-29 22:42 - 2014-11-14 22:12 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2016-02-29 22:42 - 2014-11-14 20:54 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-29 22:42 - 2014-11-14 20:53 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-29 22:42 - 2014-11-14 20:53 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-29 22:42 - 2014-11-14 20:53 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-29 22:42 - 2014-09-02 19:48 - 00510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2016-02-29 22:42 - 2014-09-02 19:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2016-02-29 22:41 - 2015-08-01 09:21 - 00073352 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-02-29 22:41 - 2015-08-01 08:22 - 00063992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-02-29 22:41 - 2015-08-01 06:56 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-02-29 22:41 - 2015-08-01 06:56 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-02-29 22:41 - 2015-08-01 06:56 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-02-29 22:41 - 2015-07-06 09:16 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2016-02-29 22:41 - 2015-07-06 07:32 - 00281944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2016-02-29 22:41 - 2014-10-08 20:59 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-02-29 22:41 - 2014-10-08 20:59 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2016-02-29 22:41 - 2014-10-08 20:58 - 00458240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-02-29 22:41 - 2014-09-21 22:38 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2016-02-29 22:41 - 2014-09-21 20:56 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2016-02-29 22:41 - 2014-06-17 16:27 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2016-02-29 22:41 - 2014-06-17 16:24 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2016-02-29 22:41 - 2014-06-12 18:57 - 01453400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-02-29 22:41 - 2014-06-12 18:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-02-29 22:41 - 2013-10-18 22:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2016-02-29 22:41 - 2013-10-18 21:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2016-02-29 22:39 - 2014-12-10 23:51 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2016-02-29 22:39 - 2014-06-04 18:12 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-02-29 22:39 - 2014-06-03 16:12 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-02-29 22:37 - 2015-01-23 23:42 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-02-29 22:37 - 2015-01-23 22:00 - 00243712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2016-02-29 22:34 - 2015-08-05 06:52 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2016-02-29 22:34 - 2015-07-30 06:11 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-29 22:34 - 2015-07-30 06:10 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-29 22:34 - 2015-07-09 14:46 - 05982208 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-02-29 22:34 - 2015-07-09 14:44 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2016-02-29 22:34 - 2015-07-09 13:17 - 05095424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-02-29 22:34 - 2015-07-09 13:16 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2016-02-29 22:34 - 2015-06-17 07:13 - 01150264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-02-29 22:34 - 2015-06-17 06:44 - 01567560 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-29 22:34 - 2015-04-12 22:32 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2016-02-29 22:34 - 2015-02-24 00:58 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-02-29 22:33 - 2015-10-31 01:14 - 02038784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-29 22:33 - 2015-10-31 00:33 - 02308096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-29 22:33 - 2015-08-04 07:42 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-02-29 22:33 - 2015-08-04 06:54 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-02-29 22:33 - 2013-03-02 03:57 - 00077544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2016-02-29 22:33 - 2013-03-02 01:23 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-02-29 22:33 - 2013-03-02 01:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2016-02-29 22:33 - 2013-03-02 01:21 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2016-02-29 22:33 - 2013-03-02 01:21 - 00145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2016-02-29 22:33 - 2013-03-02 01:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevDispItemProvider.dll
2016-02-29 22:33 - 2013-03-01 19:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-02-29 22:33 - 2013-03-01 19:45 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2016-02-29 22:33 - 2013-03-01 19:45 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2016-02-29 22:33 - 2013-03-01 19:45 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerServer.dll
2016-02-29 22:33 - 2013-03-01 19:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2016-02-29 22:33 - 2013-03-01 19:45 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\WSDPrintProxy.DLL
2016-02-29 22:33 - 2013-03-01 19:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-02-29 22:33 - 2013-03-01 19:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2016-02-29 22:33 - 2013-03-01 19:44 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2016-02-29 22:33 - 2013-03-01 19:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\NdisImPlatform.dll
2016-02-29 22:33 - 2013-03-01 19:44 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\DevDispItemProvider.dll
2016-02-29 22:33 - 2013-03-01 19:43 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2016-02-29 22:33 - 2013-03-01 19:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2016-02-29 22:33 - 2013-02-28 21:56 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\monitor.sys
2016-02-29 22:32 - 2014-12-07 23:48 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2016-02-29 22:32 - 2014-12-07 22:04 - 00318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2016-02-29 22:32 - 2014-09-12 23:24 - 02233152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-02-29 22:32 - 2013-07-05 15:02 - 00121984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2016-02-29 22:32 - 2013-07-05 15:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2016-02-29 22:32 - 2013-07-05 15:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2016-02-29 22:32 - 2013-07-01 15:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2016-02-29 22:32 - 2013-06-28 20:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2016-02-29 22:32 - 2013-06-21 22:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2016-02-29 22:32 - 2013-06-21 22:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2016-02-29 22:32 - 2013-05-03 21:48 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2016-02-29 22:31 - 2015-12-04 09:12 - 00793312 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-02-29 22:31 - 2015-12-04 09:12 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-02-29 22:31 - 2015-12-04 09:12 - 00446872 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-02-29 22:31 - 2015-12-04 09:12 - 00253624 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-02-29 22:31 - 2015-12-04 07:55 - 00612528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-02-29 22:31 - 2015-12-04 07:55 - 00463880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-02-29 22:31 - 2015-12-04 07:55 - 00324456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-02-29 22:31 - 2015-12-04 07:52 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 02615808 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 01770496 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 01376256 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 01350656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 01150464 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-02-29 22:31 - 2015-12-04 07:52 - 01100800 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-02-29 22:31 - 2015-12-04 07:52 - 01073664 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 00625152 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-02-29 22:31 - 2015-12-04 07:52 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 02893824 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 01593344 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 01527808 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 01208832 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 01174016 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 01138688 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-02-29 22:31 - 2015-12-04 07:51 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-02-29 22:31 - 2015-12-04 07:51 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-02-29 22:31 - 2015-12-04 07:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-02-29 22:31 - 2015-12-04 07:46 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 02312704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 01468928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 01374208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-02-29 22:31 - 2015-12-04 07:46 - 00904192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-02-29 22:31 - 2015-12-04 07:46 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00722944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-02-29 22:31 - 2015-12-04 07:46 - 00382464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-02-29 22:31 - 2015-12-04 07:46 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL
2016-02-29 22:31 - 2015-12-04 07:46 - 00189440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll
2016-02-29 22:31 - 2015-12-04 07:46 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 02400256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00929792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00571392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00546304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00190464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2016-02-29 22:31 - 2015-12-04 07:45 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL
2016-02-29 22:31 - 2015-12-04 07:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2016-02-29 22:31 - 2015-12-04 07:45 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll
2016-02-29 22:31 - 2015-12-03 12:57 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-02-29 22:31 - 2015-06-09 06:57 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-29 22:31 - 2015-01-23 21:31 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-29 22:31 - 2014-12-18 23:48 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2016-02-29 22:31 - 2014-12-06 00:51 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-02-29 22:31 - 2014-09-02 19:48 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-02-29 22:31 - 2014-09-02 19:22 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-02-29 22:31 - 2014-08-28 21:17 - 02043392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-02-29 22:31 - 2014-08-28 21:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-02-29 22:31 - 2014-08-28 21:04 - 02837504 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-02-29 22:31 - 2014-08-28 21:04 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-02-29 22:31 - 2014-08-27 23:04 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
2016-02-29 22:31 - 2014-08-27 23:04 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2016-02-29 22:31 - 2014-08-27 22:59 - 00616448 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2016-02-29 22:31 - 2014-08-27 22:59 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2016-02-29 22:31 - 2014-08-27 22:59 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2016-02-29 22:31 - 2014-08-27 22:59 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\FXST30.dll
2016-02-29 22:31 - 2014-07-24 06:12 - 00328512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-02-29 22:31 - 2013-09-27 20:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-02-29 22:31 - 2013-04-23 16:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2016-02-29 22:31 - 2013-04-23 16:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-02-29 22:31 - 2013-04-23 15:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2016-02-29 22:31 - 2013-04-23 15:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-02-29 22:31 - 2013-02-02 01:40 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlroamextension.dll
2016-02-29 22:31 - 2013-02-02 01:40 - 00370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2016-02-29 22:31 - 2013-02-02 01:40 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-02-29 22:31 - 2013-02-02 01:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tasklist.exe
2016-02-29 22:31 - 2013-02-02 01:40 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskkill.exe
2016-02-29 22:31 - 2013-02-02 01:38 - 00567808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\duser.dll
2016-02-29 22:31 - 2013-02-02 01:24 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\taskkill.exe
2016-02-29 22:31 - 2013-02-02 01:24 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\tasklist.exe
2016-02-29 22:31 - 2013-02-02 01:23 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2016-02-29 22:31 - 2013-02-02 01:23 - 00543232 _____ (Microsoft Corporation) C:\Windows\system32\wlroamextension.dll
2016-02-29 22:31 - 2013-02-02 01:23 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2016-02-29 22:31 - 2013-02-02 01:23 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-02-29 22:31 - 2013-02-02 01:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2016-02-29 22:31 - 2013-02-02 01:20 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\duser.dll
2016-02-29 22:31 - 2013-02-02 01:20 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\hotspotauth.dll
2016-02-29 22:31 - 2013-02-02 00:25 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2016-02-29 22:30 - 2015-03-04 00:29 - 00361280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-02-29 22:30 - 2015-03-03 23:39 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2016-02-29 22:30 - 2015-03-03 21:52 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2016-02-29 22:30 - 2013-04-08 21:51 - 14267904 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-02-29 22:30 - 2013-04-08 21:51 - 03552768 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2016-02-29 22:30 - 2013-04-08 21:50 - 02107904 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2016-02-29 22:30 - 2013-04-08 14:52 - 11878912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-02-29 22:30 - 2012-11-09 21:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-02-29 22:29 - 2013-05-04 00:58 - 00120736 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2016-02-29 22:29 - 2013-05-03 23:59 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe
2016-02-29 22:29 - 2013-05-03 23:58 - 00470528 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2016-02-29 22:29 - 2013-05-03 23:58 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-02-29 22:29 - 2013-05-03 23:58 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-02-29 22:29 - 2013-05-03 23:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2016-02-29 22:29 - 2013-05-03 23:58 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 01131520 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00501760 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00389120 _____ (Microsoft Corporation) C:\Windows\system32\BCP47Langs.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2016-02-29 22:29 - 2013-05-03 23:57 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2016-02-29 22:29 - 2013-05-03 23:56 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2016-02-29 22:29 - 2013-05-03 21:58 - 00758784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe
2016-02-29 22:29 - 2013-05-03 21:57 - 00303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-02-29 22:29 - 2013-05-03 21:57 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2016-02-29 22:29 - 2013-05-03 21:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2016-02-29 22:29 - 2013-05-03 21:57 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2016-02-29 22:29 - 2013-05-03 21:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
2016-02-29 22:29 - 2013-05-03 21:56 - 00449536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-02-29 22:29 - 2013-05-03 21:56 - 00411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-02-29 22:29 - 2013-05-03 21:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2016-02-29 22:29 - 2013-05-03 21:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2016-02-29 22:29 - 2013-05-03 21:55 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2016-02-29 22:29 - 2013-05-03 21:51 - 00014848 _____ (Microsoft) C:\Windows\system32\rars.rs
2016-02-29 22:29 - 2013-05-03 21:47 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-02-29 22:29 - 2013-05-03 21:10 - 00014848 _____ (Microsoft) C:\Windows\SysWOW64\rars.rs
2016-02-29 22:29 - 2013-04-08 22:33 - 00489576 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-02-29 22:29 - 2013-04-08 22:20 - 00306952 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_10ec.dll
2016-02-29 22:29 - 2013-04-08 22:20 - 00086280 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2016-02-29 22:29 - 2013-04-08 22:18 - 00077960 _____ (Microsoft Corporation) C:\Windows\system32\kdvm.dll
2016-02-29 22:29 - 2013-04-08 21:52 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2016-02-29 22:29 - 2013-04-08 21:52 - 00804352 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2016-02-29 22:29 - 2013-04-08 21:52 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2016-02-29 22:29 - 2013-04-08 21:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2016-02-29 22:29 - 2013-04-08 21:51 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-02-29 22:29 - 2013-04-08 21:51 - 00456704 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-02-29 22:29 - 2013-04-08 21:51 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-29 22:29 - 2013-04-08 21:51 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-02-29 22:29 - 2013-04-08 21:50 - 00745984 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2016-02-29 22:29 - 2013-04-08 21:50 - 00435200 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2016-02-29 22:29 - 2013-04-08 21:50 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\GenuineCenter.dll
2016-02-29 22:29 - 2013-04-08 21:50 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2016-02-29 22:29 - 2013-04-08 21:50 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2016-02-29 22:29 - 2013-04-08 21:50 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 01444864 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\fhengine.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2016-02-29 22:29 - 2013-04-08 21:49 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\fmifs.dll
2016-02-29 22:29 - 2013-04-08 19:34 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2016-02-29 22:29 - 2013-04-08 19:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2016-02-29 22:29 - 2013-04-08 19:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-02-29 22:29 - 2013-04-08 19:31 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2016-02-29 22:29 - 2013-04-08 16:44 - 00123880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-02-29 22:29 - 2013-04-08 16:37 - 00426024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-02-29 22:29 - 2013-04-08 14:52 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2016-02-29 22:29 - 2013-04-08 14:52 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2016-02-29 22:29 - 2013-04-08 14:52 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2016-02-29 22:29 - 2013-04-08 14:51 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 01113600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00659456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00403968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00214528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2016-02-29 22:29 - 2013-04-08 14:51 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2016-02-29 22:29 - 2013-04-04 16:30 - 00503080 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2016-02-29 22:29 - 2013-03-15 15:05 - 00298456 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-02-29 22:29 - 2013-03-15 15:05 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-02-29 22:29 - 2013-03-02 03:39 - 00069864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-02-29 22:29 - 2013-03-01 19:45 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2016-02-29 22:29 - 2013-03-01 19:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2016-02-29 22:29 - 2013-02-02 01:40 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2016-02-29 22:29 - 2013-02-02 01:39 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmproxy.dll
2016-02-29 22:29 - 2013-02-02 01:39 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmsprep.dll
2016-02-29 22:29 - 2013-02-02 01:23 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2016-02-29 22:29 - 2012-11-19 21:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidi2c.sys
2016-02-29 22:28 - 2015-12-08 08:16 - 01303040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-02-29 22:28 - 2015-12-05 11:48 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-02-29 22:28 - 2015-08-04 07:42 - 01229824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-02-29 22:28 - 2015-08-04 07:42 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2016-02-29 22:28 - 2015-08-04 07:42 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncInfo.dll
2016-02-29 22:28 - 2015-08-04 06:54 - 01399808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-02-29 22:28 - 2015-08-04 06:53 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2016-02-29 22:28 - 2015-08-04 06:53 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2016-02-29 22:28 - 2014-07-06 22:53 - 01125376 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-02-29 22:28 - 2014-07-06 22:52 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2016-02-29 22:28 - 2014-07-06 22:52 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2016-02-29 22:28 - 2014-07-06 21:01 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-02-29 22:28 - 2014-07-06 21:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2016-02-29 22:28 - 2013-03-05 23:29 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-02-29 22:26 - 2015-01-29 01:05 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-02-29 22:26 - 2015-01-28 23:19 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-02-29 22:24 - 2015-12-05 15:20 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-02-29 22:24 - 2015-12-05 15:19 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-02-29 22:24 - 2015-12-05 15:19 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2016-02-29 22:24 - 2015-12-05 07:49 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-29 22:24 - 2015-12-05 07:49 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-29 22:24 - 2015-12-05 07:49 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2016-02-29 22:23 - 2015-11-05 02:55 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-02-29 22:23 - 2015-10-10 23:45 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2016-02-29 22:23 - 2015-10-10 23:45 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2016-02-29 22:23 - 2015-05-08 16:39 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-29 22:23 - 2015-05-08 13:05 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-29 22:23 - 2014-12-18 01:51 - 00096576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2016-02-29 22:23 - 2014-12-17 23:52 - 00889344 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2016-02-29 22:23 - 2014-12-17 23:20 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2016-02-29 22:23 - 2014-03-10 17:41 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2016-02-29 22:23 - 2014-03-10 17:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2016-02-29 22:23 - 2014-03-10 17:38 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2016-02-29 22:23 - 2014-03-10 17:38 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-02-29 22:23 - 2014-03-10 17:38 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2016-02-29 22:23 - 2013-10-10 02:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2016-02-29 22:23 - 2013-10-10 02:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2016-02-29 22:23 - 2013-10-10 02:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2016-02-29 22:23 - 2013-10-10 02:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2016-02-29 22:23 - 2013-10-10 02:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2016-02-29 22:23 - 2013-10-10 02:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2016-02-29 22:23 - 2013-10-10 02:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2016-02-29 22:23 - 2013-07-01 18:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2016-02-29 22:23 - 2013-07-01 18:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2016-02-29 22:23 - 2013-06-30 18:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-02-29 22:23 - 2013-06-30 18:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-02-29 22:23 - 2013-06-30 18:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-02-29 22:23 - 2013-06-30 18:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-02-29 22:23 - 2013-06-28 20:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-02-29 22:23 - 2013-06-28 20:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-02-29 22:23 - 2013-06-10 12:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2016-02-29 22:23 - 2013-06-10 12:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2016-02-29 22:23 - 2012-11-19 21:56 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-02-29 22:22 - 2015-12-08 08:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-02-29 22:22 - 2015-12-08 08:16 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-29 22:22 - 2015-12-03 17:55 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-02-29 22:22 - 2015-12-03 14:47 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2016-02-29 22:22 - 2015-09-23 06:10 - 00377552 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-02-29 22:22 - 2015-09-23 06:10 - 00332576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-02-29 22:22 - 2015-09-12 06:09 - 00414559 _____ C:\Windows\system32\ApnDatabase.xml
2016-02-29 22:22 - 2015-09-02 06:48 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-02-29 22:22 - 2015-09-02 06:38 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-02-29 22:22 - 2015-08-28 14:59 - 00304128 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-02-29 22:22 - 2015-08-27 11:41 - 00366592 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-02-29 22:22 - 2015-01-23 23:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2016-02-29 22:22 - 2015-01-23 22:00 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2016-02-29 22:22 - 2014-12-06 00:52 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2016-02-29 22:22 - 2014-12-06 00:52 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2016-02-29 22:22 - 2014-12-06 00:52 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2016-02-29 22:22 - 2014-12-05 23:09 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2016-02-29 22:22 - 2013-07-12 23:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-02-29 22:22 - 2013-07-12 23:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-02-29 22:22 - 2013-07-12 23:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2016-02-29 22:22 - 2013-07-12 23:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2016-02-29 22:22 - 2013-07-12 21:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-02-29 22:22 - 2013-07-12 21:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2016-02-29 22:22 - 2013-07-12 21:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2016-02-29 22:22 - 2013-05-14 19:25 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2016-02-29 22:22 - 2013-05-14 19:25 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2016-02-29 22:22 - 2013-05-14 19:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2016-02-29 22:22 - 2013-05-14 19:24 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2016-02-29 22:22 - 2013-02-11 17:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2016-02-29 22:21 - 2015-07-15 09:09 - 00095064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-02-29 22:21 - 2015-07-15 06:29 - 01333248 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2016-02-29 22:21 - 2015-06-15 08:22 - 02416640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-02-29 22:21 - 2015-06-15 08:22 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-02-29 22:21 - 2015-06-15 08:21 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-02-29 22:21 - 2015-06-15 08:20 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-02-29 22:21 - 2014-10-11 00:44 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-02-29 22:21 - 2014-10-10 22:57 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-02-29 22:21 - 2014-06-12 16:34 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2016-02-29 22:21 - 2014-06-12 16:29 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-02-29 22:21 - 2014-06-05 10:56 - 00112984 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-02-29 22:18 - 2014-12-06 00:53 - 00458240 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-02-29 22:18 - 2014-12-06 00:53 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2016-02-29 22:18 - 2014-12-06 00:51 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2016-02-29 22:18 - 2014-12-05 23:10 - 00355840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-02-29 22:18 - 2014-12-05 23:10 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2016-02-29 22:18 - 2014-12-05 23:09 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2016-02-29 22:18 - 2013-07-08 23:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2016-02-29 22:18 - 2013-07-08 21:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2016-02-29 22:14 - 2015-12-30 16:29 - 06972760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-29 22:14 - 2015-11-16 07:42 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-29 22:14 - 2015-11-16 07:29 - 00961536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-02-29 22:14 - 2015-11-16 07:29 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2016-02-29 22:14 - 2015-11-16 07:29 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-29 22:14 - 2015-11-16 07:29 - 00178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-02-29 22:14 - 2015-11-16 07:29 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-02-29 22:14 - 2015-11-16 07:28 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-29 22:14 - 2015-11-16 07:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-02-29 22:14 - 2015-11-16 07:27 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-02-29 22:14 - 2015-11-16 07:26 - 01282560 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 01043968 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-29 22:14 - 2015-11-16 07:26 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-29 22:14 - 2015-10-13 06:16 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-02-29 22:14 - 2015-10-13 06:16 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2016-02-29 22:14 - 2015-09-23 06:10 - 00570256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-02-29 22:14 - 2015-09-22 10:53 - 01405408 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-02-29 22:14 - 2015-09-22 10:53 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-02-29 22:14 - 2015-07-09 14:47 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2016-02-29 22:14 - 2015-07-09 14:47 - 00243712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2016-02-29 22:14 - 2015-07-09 13:18 - 00233984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2016-02-29 22:14 - 2015-06-25 11:29 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-29 22:14 - 2015-06-25 11:27 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-29 22:14 - 2015-05-01 23:28 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-29 22:14 - 2015-01-15 02:38 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-29 22:14 - 2015-01-15 02:09 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-02-29 22:14 - 2015-01-06 21:25 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-29 22:14 - 2014-11-08 04:22 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2016-02-29 22:14 - 2014-11-07 23:57 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2016-02-29 22:14 - 2014-10-10 22:41 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-29 22:14 - 2014-10-10 22:05 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-02-29 22:14 - 2014-04-11 23:58 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2016-02-29 22:14 - 2014-03-10 17:39 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-29 22:14 - 2014-03-10 17:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-29 22:14 - 2014-03-09 18:27 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-02-29 22:14 - 2013-11-19 17:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2016-02-29 22:14 - 2013-11-19 16:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2016-02-29 22:14 - 2013-05-24 15:09 - 01217352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-02-29 22:14 - 2013-05-24 15:09 - 01093904 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-02-29 22:13 - 2015-11-07 05:46 - 01341952 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-02-29 22:13 - 2015-11-07 05:44 - 01840640 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-02-29 22:13 - 2015-11-07 05:44 - 01280000 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-02-29 22:13 - 2015-11-07 02:32 - 01412608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-02-29 22:13 - 2015-11-07 00:52 - 04063232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-29 22:13 - 2015-11-06 22:53 - 01126912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-02-29 22:13 - 2015-11-06 22:52 - 01680384 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-02-29 22:13 - 2015-11-06 22:46 - 01426944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-02-29 22:13 - 2015-08-01 07:50 - 17562112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-29 22:13 - 2015-08-01 06:56 - 19778048 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-29 22:13 - 2014-12-18 21:35 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-29 22:13 - 2014-06-02 15:33 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-29 22:13 - 2013-03-02 02:59 - 00411880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-02-29 22:12 - 2015-04-24 20:41 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-02-29 22:12 - 2015-04-24 16:13 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2016-02-29 22:12 - 2014-10-23 05:47 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2016-02-29 22:12 - 2014-10-23 04:04 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2016-02-29 21:51 - 2013-08-15 22:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-29 21:51 - 2013-08-15 22:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-29 21:51 - 2013-08-15 15:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-02-29 21:39 - 2016-03-24 21:42 - 00000000 ____D C:\Users\Cathy\.oracle_jre_usage
2016-02-29 21:39 - 2016-03-05 21:55 - 00000000 ____D C:\ProgramData\Oracle
2016-02-29 21:39 - 2016-02-29 21:39 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Sun
2016-02-29 21:39 - 2016-02-29 21:39 - 00000000 ____D C:\Users\Cathy\AppData\LocalLow\Sun
2016-02-29 21:38 - 2016-02-29 21:38 - 00000000 ____D C:\Users\Cathy\AppData\LocalLow\Oracle
2016-02-29 21:34 - 2016-03-24 23:00 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\.minecraft
2016-02-29 21:34 - 2016-02-29 21:34 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\java
2016-02-29 21:33 - 2016-02-29 21:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2016-02-29 21:33 - 2016-02-29 21:33 - 00000000 ____D C:\Program Files (x86)\Minecraft
2016-02-29 21:30 - 2016-02-29 21:42 - 00000000 ____D C:\Users\Cathy\AppData\Local\Mozilla
2016-02-29 21:30 - 2016-02-29 21:30 - 00001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-29 21:30 - 2016-02-29 21:30 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Mozilla
2016-02-29 21:19 - 2016-03-11 18:08 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\hpqLog
2016-02-29 21:11 - 2016-03-19 18:01 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1182220091-3181907508-3606138005-1001
2016-02-29 21:09 - 2016-02-29 21:09 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\WildTangent
2016-02-29 21:08 - 2016-02-29 21:08 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-02-29 21:05 - 2016-03-24 12:54 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{51FF8B0B-C703-4A75-A9F2-FDD3E3AE40C4}
2016-02-29 21:05 - 2016-02-29 21:05 - 00001441 _____ C:\Users\Cathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-29 21:05 - 2016-02-29 21:05 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shopping and Services
2016-02-29 21:05 - 2016-02-29 21:05 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Adobe
2016-02-29 21:03 - 2016-02-29 21:41 - 00000000 ____D C:\Users\Cathy\AppData\Local\VirtualStore
2016-02-29 21:03 - 2016-02-29 21:03 - 00000000 ____D C:\Users\Cathy\AppData\Roaming\Synaptics
2016-02-29 21:03 - 2016-02-29 21:03 - 00000000 ____D C:\Users\Cathy\AppData\Local\Power2Go8
2016-02-29 21:02 - 2016-03-21 12:58 - 00000000 ____D C:\Users\Cathy\AppData\Local\Packages
2016-02-29 21:02 - 2016-03-21 00:16 - 00000000 ____D C:\Users\Cathy
2016-02-29 21:02 - 2016-02-29 21:02 - 00000020 ___SH C:\Users\Cathy\ntuser.ini
2016-02-29 21:02 - 2016-02-29 21:02 - 00000000 _SHDL C:\Users\Cathy\My Documents
2016-02-29 21:02 - 2016-02-29 21:02 - 00000000 _SHDL C:\Users\Cathy\Documents\My Videos
2016-02-29 21:02 - 2016-02-29 21:02 - 00000000 _SHDL C:\Users\Cathy\Documents\My Pictures
2016-02-29 21:02 - 2016-02-29 21:02 - 00000000 _SHDL C:\Users\Cathy\Documents\My Music
2016-02-29 21:02 - 2013-06-01 11:30 - 00002100 _____ C:\Users\Cathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2016-02-29 21:02 - 2013-06-01 11:22 - 00000000 ___HD C:\Users\Cathy\Documents\hp.system.package.metadata
2016-02-29 21:02 - 2013-06-01 11:22 - 00000000 ___HD C:\Users\Cathy\Documents\hp.applications.package.appdata
2016-02-29 20:03 - 2016-02-29 20:03 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-29 19:57 - 2016-02-29 19:57 - 00000000 _____ C:\Recovery.txt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-24 22:29 - 2012-07-26 00:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-24 22:28 - 2012-07-26 01:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2016-03-24 15:44 - 2012-07-26 00:28 - 00942994 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-24 15:44 - 2012-07-25 22:37 - 00000000 ____D C:\Windows\Inf
2016-03-24 15:38 - 2012-07-25 22:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-03-24 15:21 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\system32\NDF
2016-03-22 12:00 - 2012-07-26 01:12 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-22 12:00 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\AUInstallAgent
2016-03-22 01:21 - 2012-07-26 00:59 - 00000000 ____D C:\Windows\CbsTemp
2016-03-22 01:11 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-03-22 01:10 - 2013-06-01 11:04 - 00166912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2016-03-22 01:10 - 2013-06-01 11:04 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2016-03-22 01:10 - 2012-07-25 19:06 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2016-03-22 01:09 - 2013-06-01 11:25 - 00058088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-03-22 01:09 - 2013-06-01 11:04 - 02367528 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2016-03-22 01:09 - 2013-06-01 11:04 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2016-03-22 01:09 - 2013-06-01 11:04 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2016-03-22 01:09 - 2013-06-01 11:04 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2016-03-22 01:09 - 2012-07-25 19:13 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2016-03-22 01:09 - 2012-07-25 19:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2016-03-22 01:09 - 2012-07-25 19:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2016-03-22 01:08 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\WinStore
2016-03-22 00:48 - 2013-11-23 05:41 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-22 00:46 - 2012-07-25 22:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-22 00:44 - 2013-11-23 05:42 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-03-21 11:42 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-03-20 18:24 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\LiveKernelReports
2016-03-18 21:17 - 2012-07-25 22:26 - 00000215 _____ C:\Windows\system.ini
2016-03-16 23:52 - 2014-11-21 15:09 - 00000000 ____D C:\$Windows.~BT
2016-03-16 19:07 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\Registration
2016-03-11 18:21 - 2013-11-23 06:09 - 00000000 ____D C:\ProgramData\Norton
2016-03-11 18:08 - 2013-06-01 11:22 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2016-03-07 14:15 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\rescache
2016-03-02 01:13 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\AppCompat
2016-03-02 00:24 - 2012-07-26 01:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-03-02 00:24 - 2012-07-25 22:38 - 00000000 ____D C:\Windows\system32\oobe
2016-03-02 00:24 - 2012-07-25 22:38 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2016-03-02 00:09 - 2013-11-23 05:46 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-03-01 23:47 - 2012-07-26 01:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2016-03-01 18:14 - 2013-11-23 05:58 - 00000000 ____D C:\ProgramData\CyberLink
2016-03-01 17:05 - 2012-07-26 01:12 - 00000000 ___SD C:\Windows\Downloaded Program Files
2016-03-01 14:57 - 2012-08-03 16:21 - 00000000 ____D C:\Windows\Panther
2016-03-01 04:55 - 2012-07-25 22:37 - 00000000 ____D C:\Windows\servicing
2016-03-01 04:50 - 2012-07-26 01:12 - 00000000 ____D C:\Program Files\Windows Defender
2016-03-01 04:50 - 2012-07-26 01:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-03-01 04:49 - 2012-07-26 01:12 - 00000000 ___RD C:\Windows\ToastData
2016-03-01 04:48 - 2012-07-26 01:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-03-01 04:48 - 2012-07-26 01:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-03-01 04:48 - 2012-07-25 22:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-03-01 04:48 - 2012-07-25 22:38 - 00000000 ____D C:\Windows\system32\Dism
2016-02-29 22:52 - 2012-07-26 00:52 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-29 21:27 - 2013-11-23 06:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2016-02-29 21:25 - 2013-06-01 11:40 - 00000000 ____D C:\ProgramData\WildTangent
2016-02-29 21:25 - 2013-06-01 11:40 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2016-02-29 21:23 - 2013-06-01 11:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2016-02-29 21:23 - 2012-07-26 01:12 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-29 21:18 - 2013-11-23 05:56 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-02-29 21:18 - 2013-06-01 11:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-29 21:18 - 2013-06-01 11:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2016-02-29 21:16 - 2013-01-14 12:16 - 00000000 ____D C:\Program Files\Hewlett-Packard
2016-02-29 21:14 - 2013-11-23 05:56 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2016-02-29 21:05 - 2013-11-23 05:55 - 00000000 ___RD C:\Program Files\Online Services
2016-02-29 21:05 - 2013-06-01 11:34 - 00000000 ___RD C:\Program Files (x86)\Online Services
2016-02-29 21:05 - 2013-06-01 11:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2016-02-29 21:04 - 2012-08-03 17:02 - 00000000 ____D C:\SYSTEM.SAV
2016-02-29 19:56 - 2012-07-26 01:13 - 00262144 _____ C:\Windows\system32\config\BCD-Template

==================== Files in the root of some directories =======

2016-03-21 00:24 - 2016-03-21 00:24 - 0004768 _____ () C:\Users\Cathy\AppData\Local\recently-used.xbel

Some files in TEMP:
====================
C:\Users\Cathy\AppData\Local\temp\jre-8u77-windows-au.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-22 12:45

==================== End of FRST.txt ============================



#4 nasdaq

nasdaq

  • Malware Response Team
  • 39,528 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:08 AM

Posted 26 March 2016 - 07:49 AM

Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.

Please copy the entire contents of the code box below to the a new file.
 
Start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShortcutTarget: Heimdal.lnk -> C:\Program Files (x86)\Heimdal\Client\HeimdalAgent.exe (No File)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO-x32: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
CHR Extension: (Norton Security Toolbar) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-03-05]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx [2016-03-02]
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx [2016-03-02]
CHR HKLM-x32\...\Chrome\Extension: [okmhneofinpilciglijihehjpaegledb] - <no Path/update_url>
S3 SmbDrv; \SystemRoot\System32\drivers\Smb_driver_AMDASF.sys [X]
S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X]


End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===


I suspect that you removed McAfee and installed Norton.
I suggest that your remove McAfee completely using their removal tool

Download and run the McAfee Consumer Product Removal (MCPR) tool: from this site.

https://service.mcafee.com/webcenter/portal/cp/home/articleview;jsessionid=u_ey7sZM3Rf_D5STUm25yGUgwIwAob6v1WpurjyZYiW1c7q4OBb6!-862850888!72870702?articleId=TS101331&_afrLoop=653338359177848#!%40%40%3F_afrLoop%3D653338359177848%26articleId%3DTS101331%26centerWidth%3D100%25%26leftWidth%3D0%25%26rightWidth%3D0%25%26showFooter%3Dfalse%26showHeader%3Dfalse%26_adf.ctrl-state%3Dc5gdcfmhg_4

Restart the computer normally if not executed at the end of the removal.
===

You are running Window 8 for which the Microsoft support had ended.
I suggest you upgrade to 8.1 which is still supported.
Follow the instructions on this page.
http://windows.microsoft.com/en-ca/windows-8/install-latest-update-windows-8-1

---

When the upgrade is completed and you have restarted the computer run the Windows Security updates and get all the important updates suggested.

Please let me know what problem persists with this computer.

#5 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 26 March 2016 - 06:40 PM

Sorry it took me so long to reply, my internet went down for a while. I will run Mcafee removal tool after this post. I have tried to upgrade to windows 8.1 in the past but it always gets stuck at a certain percentage and I am forced to turn my computer off while upgrading. Anyways, here is the Fixlog. Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 Ran by Cathy (2016-03-26 16:33:08) Run:1 Running from C:\Users\Cathy\Downloads Loaded Profiles: Cathy (Available Profiles: Cathy) Boot Mode: Normal ============================================== fixlist content: ***************** Start CreateRestorePoint: EmptyTemp: CloseProcesses: ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShortcutTarget: Heimdal.lnk -> C:\Program Files (x86)\Heimdal\Client\HeimdalAgent.exe (No File) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION BHO-x32: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File CHR Extension: (Norton Security Toolbar) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-03-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx [2016-03-02] CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx [2016-03-02] CHR HKLM-x32\...\Chrome\Extension: [okmhneofinpilciglijihehjpaegledb] - S3 SmbDrv; \SystemRoot\System32\drivers\Smb_driver_AMDASF.sys [X] S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X] End ***************** Restore point was successfully created. Processes closed successfully. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1" => key removed successfully HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2" => key removed successfully HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3" => key removed successfully HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found. C:\Program Files (x86)\Heimdal\Client\HeimdalAgent.exe => not found. "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully "HKU\S-1-5-21-1182220091-3181907508-3606138005-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" => key removed successfully HKCR\Wow6432Node\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} => key not found. C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe => moved successfully C:\Users\Cathy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda => moved successfully "HKLM\SOFTWARE\Google\Chrome\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe" => key removed successfully Could not move "C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx" => Scheduled to move on reboot. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe" => key removed successfully Could not move "C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx" => Scheduled to move on reboot. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\okmhneofinpilciglijihehjpaegledb" => key removed successfully SmbDrv => service removed successfully SmbDrvI => service removed successfully EmptyTemp: => 24.5 MB temporary data Removed. Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-03-26 16:35:28) "C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx" => Could not move "C:\Program Files (x86)\Norton Security Suite\Engine\22.6.0.142\Exts\Chrome.crx" => Could not move ==== End of Fixlog 16:35:29 ====

#6 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 26 March 2016 - 06:43 PM

I don't think I have Mcafee. You might be just seeing Mcafee stingray which i previously used. I will delete the executable from my downloads folder.



#7 nasdaq

nasdaq

  • Malware Response Team
  • 39,528 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:08 AM

Posted 27 March 2016 - 07:23 AM

Read the information under this section.
Troubleshoot problems installing the update
http://windows.microsoft.com/en-ca/windows-8/install-latest-update-windows-8-1

Try to install Windows 8.1 and find out which error you encounter.

Let me know.

p.s.
Make sure you run the Run the Windows 8.1 Update troubleshooter to fix the problem.
Link on the page.

#8 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 28 March 2016 - 03:34 PM

UPDATE: I managed to install windows 8.1...I will install all important updates soon.



#9 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 28 March 2016 - 03:36 PM

Oh and one question, should I get windows 10?



#10 nasdaq

nasdaq

  • Malware Response Team
  • 39,528 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:08 AM

Posted 29 March 2016 - 07:29 AM

Once you have installed all the 8.1 updates use the system for one week.

If all is well the you can decide if you want to update it.

One thing is sure Windows 10 will be supported longer than Windows 8.
That's the only thing that will help you decide if you want it.

#11 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 30 March 2016 - 02:32 PM

Oh, well I already upgraded to windows 10. I've had windows 10 before, I was just asking you to see what you thought. I didn't think there would be anything I should do before then, all was probably going to go well anyways though...When I originally wrote this post I didn't really notice any problems, but since I just registered on this site, I thought that I might as well post a log and see how it turns out. Right now everything seems to be running smoothly. Is there anything more you would like me to do?



#12 nasdaq

nasdaq

  • Malware Response Team
  • 39,528 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:08 AM

Posted 31 March 2016 - 08:17 AM

If all is well.

To learn more about how to protect yourself while on the internet read this little guide best security practices keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/

#13 Blockheadmcgrizz

Blockheadmcgrizz
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:08 AM

Posted 31 March 2016 - 09:17 PM

OK thank You!



#14 nasdaq

nasdaq

  • Malware Response Team
  • 39,528 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:08 AM

Posted 06 April 2016 - 08:27 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users